This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft
File: 2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft (raw, json)
Hash identifier: bFSzvp8TyJJvAhTLqAthXQA/X5qSEiTfUadx3oOigIk=
Subject key identifier: D6:9D:F3:0B:D5:3E:39:65:AF:ED:30:32:2D:9B:15:08:05:C2:DF:14
Authority key identifier: 2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78
Certificate issuer: /CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078
Certificate serial: 1BC0ED7BB3318F237F68EA938BAC6380E1EB3781
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft
Manifest number: 014B
Signing time: Mon 15 Dec 2025 23:12:57 +0000
Manifest this update: Mon 15 Dec 2025 23:07:57 +0000
Manifest next update: Sun 21 Dec 2025 17:12:57 +0000
Files and hashes: 1: 2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl (hash: /+hVjqkEe30Os75M54Mfuzjt8nX6/DVIA5yQvxa9Usc=)
2: 323830333a393439303a3a2f33322d3438203d3e20323732383233.roa (hash: 0oKhwsbvlRw+epUBcLEJDUcYeM+rU2io5fVuH6LDEi4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl
rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 04:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c0:ed:7b:b3:31:8f:23:7f:68:ea:93:8b:ac:63:80:e1:eb:37:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078
Validity
Not Before: Dec 15 23:07:57 2025 GMT
Not After : Dec 21 17:12:57 2025 GMT
Subject: CN=D69DF30BD53E3965AFED30322D9B150805C2DF14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:97:51:0e:80:c8:98:76:bf:4c:38:8a:42:
55:5f:a2:9a:ee:3b:1f:8c:49:d5:50:c2:bf:fc:fd:
ec:ad:30:5d:4c:67:cf:43:70:25:25:60:21:8a:bd:
7f:ac:09:37:08:72:99:3b:2b:cf:0c:36:e7:a0:20:
81:8c:fe:41:47:7b:ac:58:d9:67:d2:ae:a7:70:6c:
7d:d7:cd:a6:b0:3b:dc:d0:0e:2c:c3:12:13:a5:af:
f6:af:08:a7:51:dc:1d:9c:43:c5:12:c8:08:05:c3:
2f:16:fb:1a:a8:61:34:c9:37:1e:0e:45:3d:ac:f4:
97:b4:fc:47:f3:22:e5:68:c3:1d:54:34:66:5e:57:
e0:ca:95:ab:cc:8d:09:fc:78:09:c8:d6:99:e3:28:
24:72:7f:91:5f:01:c6:08:e4:9c:dd:1a:2b:a3:9b:
ac:5f:07:d6:52:f2:1d:25:3d:cc:c6:62:ee:6e:3d:
ba:28:bd:ab:87:0b:ab:d0:71:b9:0d:6f:ab:52:d2:
e0:9e:e7:90:fa:1d:a5:b9:0d:35:51:a6:f4:32:86:
f6:4c:5f:a0:e5:18:b2:ca:e2:61:b0:13:5e:38:00:
f4:d4:7f:95:2d:ef:b5:96:98:18:85:88:9c:24:f5:
46:fd:34:3f:0f:ea:80:76:cd:a0:8e:e6:65:a1:db:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9D:F3:0B:D5:3E:39:65:AF:ED:30:32:2D:9B:15:08:05:C2:DF:14
X509v3 Authority Key Identifier:
keyid:2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:35:c2:bb:04:66:03:d2:03:e4:b1:f5:7a:55:9d:48:ab:8c:
42:a7:64:a3:75:b0:cd:f3:d5:f3:eb:bf:15:4d:3a:23:0e:49:
a8:1e:3f:ce:19:0b:b6:4c:5f:71:73:5c:9f:2d:d5:51:d5:21:
ee:eb:dc:2c:e4:89:90:08:ae:78:f8:39:62:e7:8b:0c:44:62:
c6:d3:31:f1:75:be:31:45:51:fe:8d:3b:d5:83:97:18:f0:ae:
70:03:bf:4f:2f:0e:4d:31:0f:1a:05:33:6a:2f:52:47:c1:14:
b5:cd:85:a2:38:b4:1f:db:4d:56:19:c1:02:f7:74:8d:99:d7:
d8:c7:e7:84:aa:c0:8a:93:b3:db:53:9d:04:b1:eb:ea:16:fe:
da:9a:e0:86:8d:8a:2c:90:ba:e8:46:a3:63:fa:fb:9d:c7:d0:
81:41:c3:fe:57:32:28:10:42:7c:88:04:3a:7c:c8:7a:4d:01:
04:f9:e1:b2:05:56:60:10:30:25:2c:4c:0c:38:65:d6:36:37:
5f:c9:7b:ec:3c:e6:9b:0e:8f:29:2a:98:70:7c:1a:ab:98:85:
16:c9:b5:ee:bc:12:fd:ae:9b:31:b3:fc:30:53:24:9c:fb:c9:
3a:2b:26:95:b0:f9:6b:5e:86:30:b0:bc:dd:68:f0:ef:cd:3d:
48:b8:5d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 06:03:04 2025 by rpki-client