This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
File: 2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft (raw, json)
Hash identifier: fapI6cWJo2SxYERBdHpKMqH+cNk1jbMJbqhwTmrFIV0=
Subject key identifier: 0D:CE:F3:69:46:EF:2A:F5:18:ED:92:43:D2:B7:57:86:0F:56:52:C9
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Certificate issuer: /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial: 29655711AC3ECDD9ABD0912EA0F02BCBAF0D0119
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
Manifest number: 0158
Signing time: Tue 23 Dec 2025 18:56:09 +0000
Manifest this update: Tue 23 Dec 2025 18:51:09 +0000
Manifest next update: Sun 28 Dec 2025 07:46:09 +0000
Files and hashes: 1: 3230302e3131322e3231392e302f32342d3234203d3e20323733313233.roa (hash: dOYBAOwtay0NCA36DX2g39bfQp5POLUEYHZjMTJFwAE=)
2: 3230302e3131322e3232322e302f32332d3234203d3e203233303331.roa (hash: DlpZImvClDrjwcVIosF1eODZjsa0BwjH/+72jvzIaJg=)
3: 3230302e3131322e3232332e302f32342d3234203d3e20323636393034.roa (hash: ZO70/RqUyCZziRSssUArdylxT/ysjeCBjEIQfxRtfVQ=)
4: 3230302e3131322e3231382e302f32342d3234203d3e20323733303638.roa (hash: Qweg8TZmHNjVgCL3NJKFUKOMuQ5O7aHgtuhAfUBheR4=)
5: 323830333a366130303a3a2f33322d3332203d3e203532333737.roa (hash: qcvHroSQOjx92YDTWKDrmckMiOiRmVZeZZ8ucrebQlg=)
6: 3230302e3131322e3232312e302f32342d3234203d3e20323636393034.roa (hash: l7HHafmpQAspzhIE9eWLldutcDznPVN72k9pDlJ3A4Q=)
7: 3230302e3131322e3232302e302f32342d3234203d3e203233303331.roa (hash: ng5BLuGf1ZA0GWPOn21xjmjFpun6T9TRT8LCZwJcglY=)
8: 3230302e3131322e3231362e302f32342d3234203d3e203532333737.roa (hash: sXkmCTsqU0gnUIzkA55IcXo6KCGXzQVcf2KKvVSeKYs=)
9: 2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl (hash: o/dpNiZfqkKwrc54PIBQfRpqmRC5IxahPv34OnhOrq8=)
10: 3230302e3131322e3232322e302f32342d3234203d3e20323733393531.roa (hash: Oe6e1Iq6Pd3HxmtCBr+pzNfMr/4r8M0bDp02uZEZq+M=)
11: 3230302e3131322e3231382e302f32342d3234203d3e203233303331.roa (hash: bfweLxWVa0FoJmwbE+U3fvhdmybU+PVmaGWnft4p1iU=)
12: 3230302e3131322e3231372e302f32342d3234203d3e203233303331.roa (hash: tazc6m45jtEiGWAIsT4EZTaz+W8HNwb7+JURH+PGRFk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Dec 2025 07:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:65:57:11:ac:3e:cd:d9:ab:d0:91:2e:a0:f0:2b:cb:af:0d:01:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Validity
Not Before: Dec 23 18:51:09 2025 GMT
Not After : Dec 28 07:46:09 2025 GMT
Subject: CN=0DCEF36946EF2AF518ED9243D2B757860F5652C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:b6:75:d3:aa:c8:a6:fe:bb:95:17:e0:70:
05:97:32:2d:92:bd:26:3f:04:ea:b5:62:59:74:3d:
8b:86:e8:30:4e:7c:e7:33:71:bc:e7:46:4e:be:c7:
e3:bd:db:19:45:bd:6d:34:bd:c6:17:68:b1:cf:27:
5b:06:f7:8d:75:fc:03:d5:37:7b:93:9a:d8:41:bf:
1d:13:7c:22:bd:af:c0:a7:3d:d9:6e:8c:a9:e1:c3:
69:83:2d:f1:3f:c2:87:dd:95:b4:f7:3e:2c:45:e3:
4f:4e:4c:2e:eb:1f:bc:a3:c8:dc:35:dd:71:14:f2:
aa:30:0b:31:d0:0b:ea:8a:8c:70:dc:15:94:97:09:
77:46:5f:6f:3e:46:5b:9b:de:42:6a:23:42:b3:aa:
d5:7f:82:72:d9:95:e9:4b:52:67:3d:1d:a5:8b:7b:
7b:8b:dc:35:c1:58:ec:a1:77:21:ac:2a:c0:45:44:
4e:16:e0:b9:6c:02:e5:fd:6f:f4:00:23:0b:50:8e:
45:8f:73:5d:55:70:f5:83:64:b2:48:3d:f9:c4:6c:
ed:f6:3c:07:c0:90:7c:61:64:60:9f:9b:12:31:47:
7c:f5:4c:68:c5:d8:4d:c2:dc:53:20:e5:01:c4:ce:
22:94:84:91:64:6d:e1:2b:ac:af:7f:04:14:31:aa:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:F3:69:46:EF:2A:F5:18:ED:92:43:D2:B7:57:86:0F:56:52:C9
X509v3 Authority Key Identifier:
keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e6:08:a5:33:03:28:46:08:92:30:5a:fd:c1:c5:54:65:98:
c5:32:70:25:bd:8a:2a:46:79:2e:49:b7:6c:f1:5f:a9:15:c9:
c1:c6:53:72:ed:49:cf:e1:62:49:89:c1:22:8d:a4:e5:87:e8:
bd:77:a3:66:99:24:50:ed:61:99:94:22:4b:51:65:fe:f0:c7:
60:c5:1a:3d:aa:5b:dd:17:6a:4b:fb:b1:3e:c2:cb:cb:8d:0d:
2b:a3:09:f0:fd:c9:50:f1:fa:2b:a7:cc:cd:3d:a7:a8:2b:7a:
41:e6:4a:50:0f:97:dc:7a:09:d2:ad:34:cf:bf:3e:9d:2b:47:
cc:56:1e:5b:e3:87:ff:02:8c:07:6c:49:12:bc:2b:0d:20:cf:
18:57:5b:e7:32:67:95:26:75:d0:85:c3:3f:62:f9:a6:7c:99:
c7:40:bc:56:b8:cd:13:f3:bb:c6:59:37:8e:7b:e4:50:43:22:
d1:e4:24:54:09:40:0f:68:5a:7d:fd:c3:fe:9c:49:a0:86:91:
6d:2b:a1:a3:48:5a:ba:0d:d2:6e:48:7e:21:85:a3:2b:7d:f9:
81:39:c2:a3:41:e8:60:b0:bf:5b:8a:b8:7d:54:57:8c:e6:e9:
f0:84:58:95:ea:8e:2e:3f:64:df:f1:b3:f9:61:ec:cb:ed:dd:
bf:d5:e5:5a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUKWVXEaw+zdmr0JEuoPAry68NARkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJGMkVBNzAwNjRDNTkzRjI1NjcwRDY1QkQyQzE0MjVF
QUU0MjRBMTAeFw0yNTEyMjMxODUxMDlaFw0yNTEyMjgwNzQ2MDlaMDMxMTAvBgNV
BAMTKDBEQ0VGMzY5NDZFRjJBRjUxOEVEOTI0M0QyQjc1Nzg2MEY1NjUyQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TLZ106rIpv67lRfgcAWXMi2S
vSY/BOq1Yll0PYuG6DBOfOczcbznRk6+x+O92xlFvW00vcYXaLHPJ1sG9411/APV
N3uTmthBvx0TfCK9r8CnPdlujKnhw2mDLfE/wofdlbT3PixF409OTC7rH7yjyNw1
3XEU8qowCzHQC+qKjHDcFZSXCXdGX28+Rlub3kJqI0KzqtV/gnLZlelLUmc9HaWL
e3uL3DXBWOyhdyGsKsBFRE4W4LlsAuX9b/QAIwtQjkWPc11VcPWDZLJIPfnEbO32
PAfAkHxhZGCfmxIxR3z1TGjF2E3C3FMg5QHEziKUhJFkbeErrK9/BBQxqiDNAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUDc7zaUbvKvUY7ZJD0rdXhg9WUskwHwYDVR0j
BBgwFoAUK/LqcAZMWT8lZw1lvSwUJerkJKEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTdCRUFGMkRBMTYyMjY2OEQ3M0JEQzU5MEQ2NjQxRDg0
MkQ4NUQ3QUI3OTdFNjU1MzQyOTM2RDhDOUMyNTEyLzAvMkJGMkVBNzAwNjRDNTkz
RjI1NjcwRDY1QkQyQzE0MjVFQUU0MjRBMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQkYyRUE3MDA2NEM1OTNGMjU2
NzBENjVCRDJDMTQyNUVBRTQyNEExLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDE3QkVBRjJEQTE2MjI2NjhENzNCREM1OTBENjY0MUQ4NDJEODVEN0FC
Nzk3RTY1NTM0MjkzNkQ4QzlDMjUxMi8wLzJCRjJFQTcwMDY0QzU5M0YyNTY3MEQ2
NUJEMkMxNDI1RUFFNDI0QTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAx5gilMwMoRgiSMFr9wcVUZZjF
MnAlvYoqRnkuSbds8V+pFcnBxlNy7UnP4WJJicEijaTlh+i9d6NmmSRQ7WGZlCJL
UWX+8MdgxRo9qlvdF2pL+7E+wsvLjQ0rownw/clQ8forp8zNPaeoK3pB5kpQD5fc
egnSrTTPvz6dK0fMVh5b44f/AowHbEkSvCsNIM8YV1vnMmeVJnXQhcM/YvmmfJnH
QLxWuM0T87vGWTeOe+RQQyLR5CRUCUAPaFp9/cP+nEmghpFtK6GjSFq6DdJuSH4h
haMrffmBOcKjQehgsL9birh9VFeM5unwhFiV6o4uP2Tf8bP5YezL7d2/1eVa
-----END CERTIFICATE-----
Generated at Thu Dec 25 04:59:39 2025 by rpki-client