This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
File: C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft (raw, json)
Hash identifier: /vnNkPvx20ZgtCl69nHXvK6/ZSX+m3/qKyd6rVnF5vk=
Subject key identifier: 18:F7:6A:D8:CB:04:1B:6A:D3:15:5F:78:56:79:19:00:21:72:09:A2
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Certificate issuer: /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial: 4140671A7C2B58581AB4EEAC8E16B005E34A28C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
Manifest number: 0149
Signing time: Tue 23 Dec 2025 04:22:27 +0000
Manifest this update: Tue 23 Dec 2025 04:17:27 +0000
Manifest next update: Sat 27 Dec 2025 18:48:27 +0000
Files and hashes: 1: C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl (hash: g7KXeldunv/QLhL01iCQOZ8pmO4nLQMLxwcSUD84Np8=)
2: 323830333a396632303a3a2f33322d3332203d3e20323636373830.roa (hash: lGf/40HehSbEHBpChK1MHo9fvFYVZWszKBTsZ5CAIRI=)
3: 34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa (hash: lEURVICemMAmm2uVPiaZ8QRu10QhkFKhSIbDc9IXzyk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 27 Dec 2025 18:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:40:67:1a:7c:2b:58:58:1a:b4:ee:ac:8e:16:b0:05:e3:4a:28:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Validity
Not Before: Dec 23 04:17:27 2025 GMT
Not After : Dec 27 18:48:27 2025 GMT
Subject: CN=18F76AD8CB041B6AD3155F7856791900217209A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:3d:6a:af:aa:e3:6f:8d:c0:76:d3:28:a4:
cd:ea:b8:6d:fa:e8:99:15:7d:9c:45:dd:7f:0d:27:
5e:ec:a5:c0:49:2f:36:77:b9:62:81:7c:9c:e4:19:
50:42:c1:b5:1e:59:78:19:97:f2:79:11:36:96:ef:
56:87:8c:14:57:f0:21:65:b2:24:17:3d:15:51:dc:
10:7f:fa:d7:44:43:38:87:a7:cf:d9:8a:9d:b6:90:
57:87:53:56:a5:40:55:46:8a:32:fd:15:79:21:b7:
c2:f6:d2:7d:3f:84:30:64:4c:57:b8:e1:cc:3d:4e:
c6:0b:35:82:4a:07:a2:05:b2:cd:2d:67:e2:1a:1b:
64:85:56:57:90:d3:1a:de:f7:20:d5:58:dd:f0:05:
07:20:40:d4:6b:56:a5:61:00:14:c2:d1:18:f0:f2:
1f:e7:3c:96:d8:05:d8:03:9b:d6:9d:a9:4e:59:c3:
c9:5c:e7:18:0c:d2:bf:91:73:ac:da:c7:8c:eb:af:
68:88:6c:94:0b:f4:89:7d:bc:27:97:4e:e9:f3:b2:
90:ec:d8:5d:51:7e:ca:85:5a:82:01:fd:a6:5e:6a:
11:f4:3a:cf:43:23:fe:10:53:ea:a9:db:c7:0e:50:
87:38:2c:be:17:a8:03:8c:75:44:10:9c:ec:e1:37:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F7:6A:D8:CB:04:1B:6A:D3:15:5F:78:56:79:19:00:21:72:09:A2
X509v3 Authority Key Identifier:
keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:38:9b:ff:6a:b5:28:93:49:e5:49:f1:6c:bd:90:50:a1:a9:
97:cf:eb:6c:0b:1c:87:31:6e:9b:64:09:e1:bb:ab:53:8e:d3:
ab:22:69:d4:4b:e0:04:78:d0:b5:73:7f:f1:9e:a0:14:78:7a:
12:30:8c:40:68:0b:0a:3f:11:82:8a:a3:e2:88:b5:62:7b:05:
76:df:18:3b:ad:dc:39:26:bd:6e:0e:08:34:14:6e:2d:3d:e9:
fe:81:8e:c9:0a:5d:a8:63:d3:df:bb:11:37:e7:e0:b0:12:ae:
17:18:60:22:39:7c:3d:b2:42:0b:87:31:96:37:5b:03:97:54:
34:f1:13:f5:d6:18:91:01:0d:ea:2b:2c:6c:42:79:da:d4:23:
fe:0d:7b:f0:ef:3e:4d:d8:ab:ec:a4:ec:88:aa:41:49:f8:96:
a7:65:72:5c:72:8b:b7:ba:4f:35:17:98:21:ac:5b:1a:11:4f:
93:44:e3:7f:72:2b:f2:88:ae:1d:f0:9b:59:eb:65:17:8a:61:
20:3e:08:41:9a:ae:5d:4b:43:d4:74:c8:77:4a:a9:fe:74:2c:
10:80:d0:5f:d6:9d:cb:4c:20:9f:78:19:a5:4b:c5:58:47:ab:
3f:53:ac:fd:3c:36:c0:26:29:82:5d:15:8d:1d:34:08:1c:f1:
2c:b5:77:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:49:58 2025 by rpki-client