This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
File: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft (raw, json)
Hash identifier: a8oJ9KEsVjLC1Ie/NWSf0j6jqAGug74jlCjdNPJkfWg=
Subject key identifier: 3E:56:21:61:9F:B1:69:73:DF:8A:7A:8E:88:6B:A3:D3:2F:FD:BE:35
Authority key identifier: 2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
Certificate issuer: /CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Certificate serial: 29767EA43585B40A89E231FD7D3162FFD3AD3303
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
Manifest number: 0147
Signing time: Tue 09 Dec 2025 01:29:26 +0000
Manifest this update: Tue 09 Dec 2025 01:24:26 +0000
Manifest next update: Sun 14 Dec 2025 13:48:26 +0000
Files and hashes: 1: 34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa (hash: kOKzUPnxKUHR9eP3xpr7gimXHToWS9fXVFHPwQ+5XHY=)
2: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl (hash: cedDAHbFcMzLJrWHD7wv6OUz47Th0nrP+cYrK6hxgh0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Dec 2025 13:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:76:7e:a4:35:85:b4:0a:89:e2:31:fd:7d:31:62:ff:d3:ad:33:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Validity
Not Before: Dec 9 01:24:26 2025 GMT
Not After : Dec 14 13:48:26 2025 GMT
Subject: CN=3E5621619FB16973DF8A7A8E886BA3D32FFDBE35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:87:a6:64:c1:23:fa:82:0e:cb:4f:cf:69:23:
f8:9f:87:c7:1c:24:df:d8:fb:69:ea:11:d6:86:f2:
88:2c:8d:f6:77:39:e6:20:b5:17:bf:82:76:3b:45:
c3:11:90:01:fc:94:6e:73:3b:27:fc:7e:42:74:c2:
bb:c3:8d:72:de:1e:8a:7a:5b:54:0d:c5:a7:c1:cc:
d1:a3:53:13:72:b6:b4:d8:8d:9f:83:c2:f6:a7:27:
66:c4:12:bb:8b:69:36:1a:bd:79:dc:43:40:4d:3e:
00:46:e7:21:0d:a9:2d:1a:83:a6:d7:83:a2:ac:95:
1e:cf:f7:d9:99:13:c9:4b:ae:76:e6:a7:07:4b:9a:
a7:ee:7d:78:0b:a3:dc:53:d1:cb:36:16:dc:ec:0c:
f1:51:d8:a7:68:c8:7a:c3:de:34:ba:20:4e:d7:7f:
6c:63:08:86:b9:14:e3:98:2c:a2:d2:60:23:51:df:
50:50:16:06:3c:39:14:e0:5b:5e:32:31:0b:a1:c1:
e6:d8:fe:52:59:27:df:9a:ca:f7:81:97:13:59:34:
03:2a:67:86:5a:d6:05:94:8d:f0:68:7b:7e:c1:4f:
4b:35:e3:fc:63:75:b1:45:40:60:12:d3:91:32:59:
88:e6:7c:1d:1a:96:da:24:87:7e:7c:da:bc:7c:e0:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:56:21:61:9F:B1:69:73:DF:8A:7A:8E:88:6B:A3:D3:2F:FD:BE:35
X509v3 Authority Key Identifier:
keyid:2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d2:cc:ea:c3:54:4c:87:cd:8a:ed:90:37:75:ed:f3:6d:18:
29:39:73:d5:b5:26:6d:d6:6a:a7:f0:46:fd:bf:78:82:4e:80:
0b:95:f8:fb:76:64:d4:31:16:53:10:5b:2a:5a:f8:11:f0:37:
ca:88:a1:b7:e3:d0:a6:2b:71:a5:1e:2e:8f:b6:97:a6:c8:74:
0f:ac:e9:3f:37:4b:96:e9:e5:e6:50:4a:20:62:4f:ac:92:84:
f0:a8:2e:e3:8d:f3:82:b0:74:5b:4d:7f:1b:b5:fb:30:bd:eb:
32:50:7b:1c:6a:46:ad:67:55:4e:f1:cf:5d:51:e2:ea:fd:79:
ba:0f:8e:a5:20:6f:21:ef:f5:07:1b:db:19:91:3c:d6:7d:5e:
c5:39:05:5d:be:ba:9d:bc:d2:39:18:19:5c:f6:c5:a1:5b:99:
ea:33:64:55:a6:9d:ac:94:ec:bc:74:c5:d9:0f:2e:c6:53:4a:
9b:be:f5:47:0e:2a:6e:38:40:04:52:b5:b5:24:53:95:28:f7:
6a:16:8b:db:17:9a:e0:93:f5:d8:0d:98:7a:0a:18:1e:e5:6f:
bd:ea:2a:06:82:d1:26:6c:43:96:dc:0f:c5:ad:45:b6:fc:be:
c8:05:41:a1:ea:ee:b8:46:5f:66:46:3d:8f:ff:39:7d:dc:38:
ce:8b:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:16:46 2025 by rpki-client