This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
File: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft (raw, json)
Hash identifier: a7gqoRvvn3IXekID0a9c4M3zg0x4sPRPMQzigkkGFi0=
Subject key identifier: 82:64:07:AC:1D:64:17:F3:AC:3C:8C:D4:9B:B1:80:49:DF:94:BF:E4
Authority key identifier: CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C
Certificate issuer: /CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C
Certificate serial: 5616E010BD6EA14A5DE2B26FFD0B84C75A8E9BC2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
Manifest number: 0136
Signing time: Sun 23 Nov 2025 19:49:29 +0000
Manifest this update: Sun 23 Nov 2025 19:44:29 +0000
Manifest next update: Sat 29 Nov 2025 01:36:29 +0000
Files and hashes: 1: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl (hash: 8+ghrFfsGuM85rb1xhQfzJEJTpA6x/d4ncHrYBQX0bM=)
2: 3136342e3136332e3132302e302f32332d3234203d3e20323635383334.roa (hash: ITajnx8AoEh3NK9eg3wJYTD8jN+mIdo7dvHMiOnMIP8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl
rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 29 Nov 2025 01:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:16:e0:10:bd:6e:a1:4a:5d:e2:b2:6f:fd:0b:84:c7:5a:8e:9b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C
Validity
Not Before: Nov 23 19:44:29 2025 GMT
Not After : Nov 29 01:36:29 2025 GMT
Subject: CN=826407AC1D6417F3AC3C8CD49BB18049DF94BFE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:e8:02:9e:91:09:04:27:9e:28:4c:42:7c:
36:52:cb:c6:21:b9:33:b7:1e:ab:93:bb:62:c7:0a:
0e:27:42:84:b6:f3:fb:6f:54:36:0f:65:11:e1:84:
d6:8b:18:99:cd:af:79:ff:94:a9:11:3e:7d:71:ed:
3c:0d:a2:e0:a6:ed:f8:f3:fb:73:7c:2e:14:22:14:
2c:81:ac:1b:0b:61:a9:c3:b6:54:f1:88:ca:1e:15:
36:20:5c:a7:67:a9:18:0d:c9:c2:e1:c1:eb:c9:6d:
b0:53:4a:27:da:dd:df:c6:7d:48:11:ca:c3:63:26:
e7:68:ad:0c:f6:e4:f6:b8:14:07:e4:58:a7:37:a4:
d6:c5:34:ac:08:ee:fb:7e:19:45:0c:b3:c6:f0:48:
0b:a3:3c:2b:a8:20:01:b8:9f:db:c9:82:de:21:42:
72:06:c0:2f:dd:63:e0:5e:bf:5b:d8:e5:ad:1a:7b:
38:7e:74:8b:15:71:21:aa:e9:5a:e3:53:dc:7d:4b:
66:a1:31:af:50:62:fa:83:23:83:27:ee:41:fe:64:
11:19:44:47:d8:00:e9:f8:7f:fc:6c:31:4b:c3:32:
ce:be:84:1f:38:cc:03:62:09:9c:d5:25:f8:21:76:
4a:12:39:64:99:ae:e1:a5:ac:84:18:0e:47:c6:f9:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:64:07:AC:1D:64:17:F3:AC:3C:8C:D4:9B:B1:80:49:DF:94:BF:E4
X509v3 Authority Key Identifier:
keyid:CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:99:f1:ab:d2:36:2d:dd:bd:19:ac:39:88:0d:f8:a0:92:2b:
e3:01:e9:8e:94:ea:52:7c:19:9a:ae:94:46:f0:8c:cc:26:34:
d4:43:c4:74:18:0c:62:e7:96:b2:0f:d6:ad:2b:f1:55:81:56:
6e:f4:68:9d:b9:ab:57:ed:71:e6:df:4d:88:a0:ca:ab:6d:c1:
1c:bb:78:73:9c:62:90:0f:d0:10:68:d4:27:bd:bd:db:07:5c:
23:96:27:5c:e6:dd:de:3a:4b:67:b3:fd:16:58:5b:1c:e7:c4:
db:34:13:89:7a:4b:6f:cf:d0:43:70:07:3c:85:72:f3:f5:33:
38:2c:3c:97:c1:6f:20:83:d3:d5:58:6a:b5:09:c3:f6:47:5a:
cb:00:88:63:0f:44:51:18:34:f4:47:e4:8e:19:2f:a4:fb:85:
06:49:80:52:5b:d1:a1:bd:52:00:fa:86:bd:47:a8:9c:18:5c:
6b:04:35:7f:e1:52:b7:2d:e2:d3:90:a7:7c:78:6d:82:85:28:
fd:76:37:e5:62:e4:b4:bd:3f:d2:76:e7:c5:5b:31:32:97:f1:
65:f7:01:ed:0a:8c:fe:63:e7:22:c7:fc:6e:4d:d3:d4:66:09:
b3:1c:5b:ba:49:04:62:48:93:0f:fb:6b:ee:25:61:89:9b:af:
8e:9c:11:fb
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUVhbgEL1uoUpd4rJv/QuEx1qOm8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDMDE5OENENEM2NTZDNEFEQ0VDNzM3MEQ2OUY2MUM0
QUJFREIxQzAeFw0yNTExMjMxOTQ0MjlaFw0yNTExMjkwMTM2MjlaMDMxMTAvBgNV
BAMTKDgyNjQwN0FDMUQ2NDE3RjNBQzNDOENENDlCQjE4MDQ5REY5NEJGRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLgOgCnpEJBCeeKExCfDZSy8Yh
uTO3HquTu2LHCg4nQoS28/tvVDYPZRHhhNaLGJnNr3n/lKkRPn1x7TwNouCm7fjz
+3N8LhQiFCyBrBsLYanDtlTxiMoeFTYgXKdnqRgNycLhwevJbbBTSifa3d/GfUgR
ysNjJudorQz25Pa4FAfkWKc3pNbFNKwI7vt+GUUMs8bwSAujPCuoIAG4n9vJgt4h
QnIGwC/dY+Bev1vY5a0aezh+dIsVcSGq6VrjU9x9S2ahMa9QYvqDI4Mn7kH+ZBEZ
REfYAOn4f/xsMUvDMs6+hB84zANiCZzVJfghdkoSOWSZruGlrIQYDkfG+XxHAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUgmQHrB1kF/OsPIzUm7GASd+Uv+QwHwYDVR0j
BBgwFoAUzcAZjNTGVsStzsc3DWn2HEq+2xwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTU5RTUyMTk1QUI3Nzk0MkQzODE4NzE4ODM4QjU2ODJC
RjBDM0E4NDE4NURFQTU5M0MyNUNCMkVCNTcyM0NFLzAvQ0RDMDE5OENENEM2NTZD
NEFEQ0VDNzM3MEQ2OUY2MUM0QUJFREIxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREMwMTk4Q0Q0QzY1NkM0QURD
RUM3MzcwRDY5RjYxQzRBQkVEQjFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDk1OUU1MjE5NUFCNzc5NDJEMzgxODcxODgzOEI1NjgyQkYwQzNBODQx
ODVERUE1OTNDMjVDQjJFQjU3MjNDRS8wL0NEQzAxOThDRDRDNjU2QzRBRENFQzcz
NzBENjlGNjFDNEFCRURCMUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPmfGr0jYt3b0ZrDmIDfigkivj
AemOlOpSfBmarpRG8IzMJjTUQ8R0GAxi55ayD9atK/FVgVZu9GiduatX7XHm302I
oMqrbcEcu3hznGKQD9AQaNQnvb3bB1wjlidc5t3eOktns/0WWFsc58TbNBOJektv
z9BDcAc8hXLz9TM4LDyXwW8gg9PVWGq1CcP2R1rLAIhjD0RRGDT0R+SOGS+k+4UG
SYBSW9GhvVIA+oa9R6icGFxrBDV/4VK3LeLTkKd8eG2ChSj9djflYuS0vT/SdufF
WzEyl/Fl9wHtCoz+Y+cix/xuTdPUZgmzHFu6SQRiSJMP+2vuJWGJm6+OnBH7
-----END CERTIFICATE-----
Generated at Tue Nov 25 14:17:47 2025 by rpki-client