This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
File: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft (raw, json)
Hash identifier: Xj+TVIKtOBY7WNx46unNCK6T8dx6C1N1ou1c32ATh74=
Subject key identifier: 9D:2F:A4:1B:C4:6F:B6:DA:64:93:E2:68:00:0B:B6:73:83:6F:41:2C
Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6
Certificate issuer: /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
Certificate serial: 4DD392EC2E0E0368D261DA413D03B262D9A34058
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
Manifest number: 014A
Signing time: Sat 20 Dec 2025 16:59:26 +0000
Manifest this update: Sat 20 Dec 2025 16:54:26 +0000
Manifest next update: Fri 26 Dec 2025 15:55:26 +0000
Files and hashes: 1: 3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa (hash: p81G8oXFk080ghN5GKWtKTcT6PUTiGK+bopJQcZbhrE=)
2: 3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa (hash: 36MFiYsj/rbrvvVvLeus9cYnV2iKLxGfalFiHHn+w8M=)
3: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl (hash: eROvOPchLEh3T1xK5oSFXzwSRilXWOiZwbbVHfuYn4s=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl
rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 26 Dec 2025 15:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d3:92:ec:2e:0e:03:68:d2:61:da:41:3d:03:b2:62:d9:a3:40:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
Validity
Not Before: Dec 20 16:54:26 2025 GMT
Not After : Dec 26 15:55:26 2025 GMT
Subject: CN=9D2FA41BC46FB6DA6493E268000BB673836F412C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:f9:19:e4:4d:3c:a6:b9:94:44:b2:c5:b9:
85:6a:29:6d:99:dd:ca:21:ab:47:80:03:9b:e8:65:
db:3a:dd:9c:27:b9:b9:fb:59:f8:e9:e9:51:7d:1d:
12:a2:29:15:33:cf:46:c6:1f:42:16:9a:57:90:f6:
26:70:21:c8:ae:fd:04:86:cd:3c:81:79:ab:d4:eb:
22:b7:5b:f9:f6:7b:c9:91:eb:4a:ac:5b:9a:b2:8b:
f2:3c:43:71:77:f6:16:ff:1d:06:34:d4:55:51:71:
37:78:f4:86:a0:ef:fe:b7:28:1b:66:90:b3:34:e6:
ec:1c:43:33:07:b0:00:35:00:ae:55:37:52:47:25:
1a:63:ab:c8:34:e4:6a:7f:03:ad:0d:79:82:c5:65:
3f:ee:0c:24:e8:ee:bc:b3:ee:da:4f:17:a9:b3:48:
5d:d1:0a:5f:6b:5c:26:e0:46:02:f7:8a:36:28:dd:
e6:1e:5b:5e:f3:56:67:3d:e9:f4:1c:85:88:9f:c8:
b5:6b:ad:24:c6:8f:7f:d2:85:81:b5:91:43:65:c4:
75:89:17:fc:e7:34:f9:a2:5e:22:51:a6:08:6b:08:
98:c7:c8:25:4e:24:7f:7d:d0:5a:9c:41:7c:e5:00:
34:ad:33:45:39:d5:62:9a:3c:6d:fd:1b:56:5d:d0:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2F:A4:1B:C4:6F:B6:DA:64:93:E2:68:00:0B:B6:73:83:6F:41:2C
X509v3 Authority Key Identifier:
keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a9:09:18:99:44:a9:b1:b4:9a:7d:d2:71:ca:99:6e:2a:09:
28:a4:d8:f2:cd:31:bf:3b:c9:e9:8e:10:b1:b2:4c:8d:8c:f0:
37:eb:4b:77:f9:53:23:c0:55:60:b8:5c:5d:d2:a2:ec:b8:cd:
68:58:dc:60:7c:e1:91:33:99:8a:3f:6d:d5:72:be:16:1b:e2:
65:6d:95:b0:20:1f:b8:91:5e:0a:99:9d:38:bf:2b:f8:09:3e:
9e:e3:a7:3f:31:60:1e:40:cb:e2:99:34:35:db:97:19:35:70:
ab:8a:94:13:1f:f4:49:d6:5d:f1:8a:0a:a2:6e:de:ac:bf:a5:
23:93:66:ad:72:60:2d:72:86:cc:37:65:19:4d:f5:a7:0b:43:
83:e7:23:28:f2:71:b9:fd:ed:b8:64:10:58:3b:28:af:e2:73:
73:e9:a4:20:fd:c0:2d:b0:c3:01:b6:91:96:6e:1a:95:04:e8:
65:f1:b6:54:76:fa:aa:74:1c:2b:d2:34:13:24:83:42:e0:69:
d6:ea:ba:2c:76:c2:2f:71:63:a8:22:ec:32:ce:14:c6:9c:c6:
74:bb:52:4f:a0:63:9f:33:e9:a1:a9:9b:dd:72:bd:4a:d9:7e:
28:b4:7a:89:61:30:d6:f7:d2:53:03:d7:88:47:c0:f2:0a:51:
be:62:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 13:39:16 2025 by rpki-client