This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
File: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft (raw, json)
Hash identifier: o3IZ0lgYpIGMQlKwstMky7R7r0kZPfsD/WoaQpgBnc8=
Subject key identifier: 1B:88:1C:75:7D:59:A2:36:CC:1B:3C:44:FC:F7:69:1D:12:CD:62:6F
Authority key identifier: CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C
Certificate issuer: /CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C
Certificate serial: 4FACE8A3C998E405D253F6492C788EE5FFF38050
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
Manifest number: 0145
Signing time: Tue 23 Dec 2025 13:22:53 +0000
Manifest this update: Tue 23 Dec 2025 13:17:53 +0000
Manifest next update: Sun 28 Dec 2025 04:01:53 +0000
Files and hashes: 1: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl (hash: TFA3B2dTK5nh549xI4ZBf8ug8c6qji48H8ZaLPcmDg0=)
2: 3136342e3136332e3132302e302f32332d3234203d3e20323635383334.roa (hash: ITajnx8AoEh3NK9eg3wJYTD8jN+mIdo7dvHMiOnMIP8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl
rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Dec 2025 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ac:e8:a3:c9:98:e4:05:d2:53:f6:49:2c:78:8e:e5:ff:f3:80:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C
Validity
Not Before: Dec 23 13:17:53 2025 GMT
Not After : Dec 28 04:01:53 2025 GMT
Subject: CN=1B881C757D59A236CC1B3C44FCF7691D12CD626F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:0c:29:c5:09:0d:0e:39:24:03:5d:25:bf:
a7:a8:df:7c:fe:37:5d:19:a6:f2:b7:48:c2:e1:cd:
08:72:4d:e3:a2:44:74:d8:ae:58:fd:ec:d6:43:cb:
ee:64:f2:78:41:1f:32:f0:41:c6:07:86:2d:9b:c5:
a4:60:b3:65:52:33:25:3d:f8:d4:09:64:7c:f5:af:
6d:08:2f:56:ae:8c:22:65:21:b6:3e:8a:ef:7c:f5:
95:38:b5:90:74:ef:81:e2:7c:1b:9b:58:cf:a9:21:
10:66:35:cd:a1:c8:c4:40:f9:d5:70:ed:4c:e2:04:
e4:64:f3:a8:ae:30:0b:45:c9:8f:93:fd:52:ca:40:
14:93:20:8d:df:b2:a0:f3:25:33:81:5e:e3:2c:b9:
c4:20:06:2e:cd:d0:15:43:09:fd:4b:ca:90:db:d9:
5d:ff:96:cc:2b:59:d2:91:64:61:d7:5f:a8:34:c6:
7f:3b:db:d6:17:5a:8e:b0:46:f6:28:d0:dc:07:fa:
15:dc:75:6d:ea:2b:20:03:3c:81:8d:bb:32:b4:ef:
2e:0c:b9:c4:74:4b:9c:e8:5d:cb:06:6a:a9:96:ea:
c8:91:73:8e:9d:98:a5:15:f0:e8:bb:8d:ee:6a:de:
3f:c9:14:50:50:a1:f9:25:30:86:95:39:9e:2e:58:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:88:1C:75:7D:59:A2:36:CC:1B:3C:44:FC:F7:69:1D:12:CD:62:6F
X509v3 Authority Key Identifier:
keyid:CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:90:ce:fc:a5:09:82:97:fe:15:15:dd:44:28:e9:88:3a:d9:
da:db:3e:13:fa:74:b6:da:6a:9d:9e:c9:7f:c6:99:b2:4c:36:
76:ed:73:42:01:66:b4:d2:3e:e5:38:59:69:1a:99:59:dd:88:
e7:28:e6:4e:2b:69:32:15:91:25:4d:d8:a2:f7:02:6d:38:fe:
7b:59:39:ca:f7:85:b6:4a:29:5a:6e:b1:3a:13:d1:2d:70:04:
7a:f9:93:a6:94:52:25:65:e0:75:75:f0:c4:16:7f:6f:6a:40:
7a:77:1d:ec:3d:e8:52:fb:bf:a3:80:4e:c4:35:c7:10:40:d1:
05:28:37:eb:76:4b:f3:10:61:f9:47:a0:72:48:4a:d6:21:fc:
46:53:59:2e:6c:6e:41:6d:4e:1e:80:95:bf:7d:73:74:f5:93:
62:41:1a:34:05:c9:91:f6:6e:69:d8:ac:75:1d:e6:22:77:cf:
8d:6b:50:3d:4a:ae:ca:3d:6e:cf:36:ae:f8:9c:66:b1:8f:97:
19:b4:87:d7:0c:81:5c:11:19:44:8a:30:3e:fd:81:22:fc:71:
30:94:a8:23:cb:61:67:e7:0b:9b:3f:d1:bf:4f:aa:bf:ab:d8:
e2:70:73:cf:2d:55:d5:ff:9a:26:49:0d:42:9d:5f:2e:5e:97:
d4:43:72:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:07:47 2025 by rpki-client