This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
File: 85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft (raw, json)
Hash identifier: EfQnazWD5HFMMi+e1IWrMhjQCj+DZ48TKarJ1Znte0c=
Subject key identifier: 21:F2:EA:E8:AB:51:66:66:F9:1F:88:EF:D1:E1:2E:2D:1A:E6:49:93
Authority key identifier: 85:F5:51:38:91:F0:2B:DA:EB:3A:B3:30:E2:4A:BE:7E:84:07:0D:A7
Certificate issuer: /CN=85F5513891F02BDAEB3AB330E24ABE7E84070DA7
Certificate serial: 7F2DE9E558359B910CB0BA10E7F9A1492FC2830A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
Manifest number: F5
Signing time: Tue 27 Jan 2026 20:48:39 +0000
Manifest this update: Tue 27 Jan 2026 20:43:39 +0000
Manifest next update: Sun 01 Feb 2026 03:13:39 +0000
Files and hashes: 1: 323830333a373735303a3a2f33322d3438203d3e20323733393337.roa (hash: +rZ4ZSLTeYiCsH1EEN0XfWkFSC8d4JKf9WkHZaQJC7Q=)
2: 85F5513891F02BDAEB3AB330E24ABE7E84070DA7.crl (hash: TNycsx6iqN0n3wKR0x5KgyjjV6FoE48Y1Kt75e539JM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.crl
rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 03:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:2d:e9:e5:58:35:9b:91:0c:b0:ba:10:e7:f9:a1:49:2f:c2:83:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F5513891F02BDAEB3AB330E24ABE7E84070DA7
Validity
Not Before: Jan 27 20:43:39 2026 GMT
Not After : Feb 1 03:13:39 2026 GMT
Subject: CN=21F2EAE8AB516666F91F88EFD1E12E2D1AE64993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:63:c0:fb:5f:21:82:1e:44:75:1a:20:1d:07:
97:45:f3:27:ae:2f:a9:cb:a2:3c:67:2d:c4:2b:18:
a7:ac:0f:d9:20:5b:35:42:c5:2f:83:07:12:ba:39:
02:99:06:cc:d4:c4:60:43:ed:2b:ad:38:24:02:50:
d3:3d:35:6c:8a:4c:67:06:5a:16:2a:5f:cd:b6:e7:
5d:98:1e:47:20:4e:64:ea:61:24:1b:e7:64:31:0a:
f4:c7:77:db:5e:f3:75:12:2f:79:6c:3d:a5:61:b1:
eb:0f:1a:2e:cb:c1:61:d8:45:e6:94:46:ce:0a:95:
fa:e3:00:ea:12:e3:30:97:a4:50:9a:b7:e7:ce:a4:
f1:2c:db:3f:d2:0b:b6:60:b7:e6:ea:d5:ea:1f:b1:
df:f8:fb:9c:07:16:c7:6d:4f:72:16:34:90:ec:47:
11:b3:03:83:a4:ba:54:70:98:5a:0f:9b:c3:28:9b:
f8:46:83:02:d6:74:60:10:8b:34:01:9f:15:31:67:
b2:17:2f:77:72:11:ab:3a:f4:e4:34:61:cc:d8:59:
94:27:3e:3a:25:57:a4:ac:9a:54:df:76:52:61:8d:
0b:01:dc:4e:1c:d3:b7:17:77:50:50:71:1b:b2:31:
12:97:f2:78:f8:cb:67:3c:39:51:3e:c2:ac:d4:63:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F2:EA:E8:AB:51:66:66:F9:1F:88:EF:D1:E1:2E:2D:1A:E6:49:93
X509v3 Authority Key Identifier:
keyid:85:F5:51:38:91:F0:2B:DA:EB:3A:B3:30:E2:4A:BE:7E:84:07:0D:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5f:84:32:cc:cf:70:e4:13:99:96:7c:f6:e5:70:38:9d:c5:
cb:ff:e6:14:75:10:a3:dc:58:10:0e:b4:64:71:98:ae:6b:9a:
e9:e9:1c:47:09:7c:11:9d:b5:0a:6f:30:84:e3:ea:0c:03:a4:
2b:83:0f:5d:76:48:78:d4:16:90:6d:0c:cb:4f:2b:e6:f2:83:
ad:65:9d:5e:fd:fd:1f:0a:c0:de:10:f1:4a:74:36:66:b2:18:
fa:f3:12:3d:72:c5:45:78:e3:97:ba:36:72:d4:c4:5e:91:82:
15:15:ea:d4:70:f9:35:aa:16:db:93:25:c5:2f:1a:c4:5d:2b:
48:95:c1:2f:14:a5:29:fc:7c:be:4b:ac:31:a0:52:52:c3:5e:
29:92:a0:c3:ce:67:31:b9:fc:1a:f8:f2:19:c7:70:f9:fc:88:
c5:08:64:d9:1c:0d:fc:df:c8:33:4b:4b:aa:41:e9:08:fb:7e:
2a:a2:81:81:bc:88:77:48:5c:cf:08:23:a8:d5:bc:04:26:03:
42:4a:96:c3:b8:ed:72:29:bc:c7:66:e1:ca:2e:20:b3:f0:99:
25:2d:e2:e9:10:59:70:60:31:a9:7b:9a:c7:fb:be:27:50:b5:
93:42:ba:e8:1d:d4:5b:5a:cf:c6:f7:69:af:1c:97:fc:77:3c:
82:96:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 18:47:34 2026 by rpki-client