This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft File: 336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft (raw, json) Hash identifier: /EnDlPpmRJ7VXX9W8HoWr1ktvdgrb08wG9JzwivTmIU= Subject key identifier: B9:DB:D5:9D:63:E3:28:C0:45:B8:61:DD:BE:26:CD:35:6D:D7:67:4B Authority key identifier: 33:6D:FC:57:AB:D9:32:C2:AB:D3:7A:88:DA:1E:1B:BC:DD:EC:40:7A Certificate issuer: /CN=336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A Certificate serial: 20C7DA12718EDB5AA797534EB0E2505011131A17 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft Manifest number: 0148 Signing time: Sun 14 Dec 2025 18:05:18 +0000 Manifest this update: Sun 14 Dec 2025 18:00:18 +0000 Manifest next update: Sat 20 Dec 2025 16:48:18 +0000 Files and hashes: 1: 336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.crl (hash: jaDCKy97QE8h82RmU9tGRaPypvLNTt63i8IHDYJlt0E=) 2: 3230302e38352e3138342e302f32312d3234203d3e203238303337.roa (hash: QnTgwo3Rj5x845w23Fgpr67Im+ZaDHhuxy4e4+qFsGY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.crl rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 16:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c7:da:12:71:8e:db:5a:a7:97:53:4e:b0:e2:50:50:11:13:1a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A Validity Not Before: Dec 14 18:00:18 2025 GMT Not After : Dec 20 16:48:18 2025 GMT Subject: CN=B9DBD59D63E328C045B861DDBE26CD356DD7674B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:7d:c2:cd:a1:33:9e:6d:56:74:b2:b4:19: 6b:6a:5e:3a:fa:f1:30:b3:a9:5e:a4:f5:7e:b1:65: d6:97:6c:39:3a:66:98:45:d8:e3:03:54:e0:e1:37: 1a:58:59:bb:d0:64:ea:91:92:ee:5d:9f:ca:05:88: c2:29:07:f7:83:11:49:64:83:c4:8a:42:70:34:12: 53:73:d5:92:7f:c8:fc:95:3c:7d:ee:3a:4b:5a:41: fc:9d:83:b0:82:76:13:e4:f5:d9:f5:35:cf:7f:e9: f6:57:f1:d2:aa:6e:89:1e:13:92:95:ea:1f:39:89: fd:d6:24:0e:c0:78:6f:ab:cd:cb:d6:77:e7:85:da: 07:40:a6:74:9a:88:18:3a:3d:6c:58:19:4a:a5:66: 40:be:62:88:28:75:82:dd:24:5e:94:91:29:83:3a: f4:80:87:57:d5:ac:d4:ba:41:c8:66:88:8d:30:28: 5f:e0:59:11:8c:6d:84:0f:84:c7:11:a0:a3:bd:4b: 0a:d9:fa:aa:68:bb:65:f8:9f:37:27:1a:58:7b:95: 29:58:03:f1:f4:8a:bc:58:d4:e7:4d:70:38:42:ac: 66:5a:06:fb:50:ad:df:1e:9a:01:4e:58:5f:60:ed: 2a:25:55:1b:63:25:96:ad:37:83:91:c6:00:65:8e: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DB:D5:9D:63:E3:28:C0:45:B8:61:DD:BE:26:CD:35:6D:D7:67:4B X509v3 Authority Key Identifier: keyid:33:6D:FC:57:AB:D9:32:C2:AB:D3:7A:88:DA:1E:1B:BC:DD:EC:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:76:e0:6f:9c:1a:96:96:db:00:95:6f:46:ab:92:14:52:99: a3:0f:53:7d:12:9c:b1:b6:29:38:30:3e:de:87:7f:b9:9a:ae: 3c:59:cf:ef:e6:86:93:a4:7f:85:0b:56:0f:cc:ce:bd:f7:69: ae:eb:9a:2a:5e:66:1f:4c:c5:eb:b4:70:ad:6e:e0:7e:ce:d5: 52:3b:90:78:35:9f:d4:96:82:bb:4a:c9:c7:22:f1:4a:ff:3a: cb:22:3a:98:ba:49:cc:02:26:d3:00:5d:58:a1:27:6f:4d:73: 16:b4:b1:d1:db:8e:f1:03:96:1b:e1:72:c0:4c:bd:a2:bf:81: 85:04:a9:65:8b:f8:a2:e8:63:86:d4:a5:ed:33:06:22:95:9e: 08:c5:e5:07:43:61:8a:9c:3d:e5:bd:a9:bb:bc:15:41:bf:6f: 78:22:66:bb:31:1c:21:f5:1e:1c:af:fc:e3:df:7d:49:cc:f0: 02:53:fd:40:0d:bb:e3:0b:a2:bd:2e:33:51:3f:45:69:07:05: 3e:3e:5a:8a:d9:2b:51:84:f9:96:1b:8b:f3:7b:60:2b:08:26: b4:ee:71:64:9c:7c:6c:ab:db:c4:56:6a:03:d0:c9:e2:bf:82: 6a:92:61:1b:53:de:00:5a:75:b1:74:d0:96:d8:24:6d:6c:39: 3e:34:d8:e5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIMfaEnGO21qnl1NOsOJQUBETGhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2REZDNTdBQkQ5MzJDMkFCRDM3QTg4REExRTFCQkNE REVDNDA3QTAeFw0yNTEyMTQxODAwMThaFw0yNTEyMjAxNjQ4MThaMDMxMTAvBgNV BAMTKEI5REJENTlENjNFMzI4QzA0NUI4NjFEREJFMjZDRDM1NkRENzY3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+H33CzaEznm1WdLK0GWtqXjr6 8TCzqV6k9X6xZdaXbDk6ZphF2OMDVODhNxpYWbvQZOqRku5dn8oFiMIpB/eDEUlk g8SKQnA0ElNz1ZJ/yPyVPH3uOktaQfydg7CCdhPk9dn1Nc9/6fZX8dKqbokeE5KV 6h85if3WJA7AeG+rzcvWd+eF2gdApnSaiBg6PWxYGUqlZkC+YogodYLdJF6UkSmD OvSAh1fVrNS6QchmiI0wKF/gWRGMbYQPhMcRoKO9SwrZ+qpou2X4nzcnGlh7lSlY A/H0irxY1OdNcDhCrGZaBvtQrd8emgFOWF9g7SolVRtjJZatN4ORxgBlji0DAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUudvVnWPjKMBFuGHdvibNNW3XZ0swHwYDVR0j BBgwFoAUM238V6vZMsKr03qI2h4bvN3sQHowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81OUQzQUQ4MTE1NkFBMkRCNzI2QTk1QTQ2QjNFREFGOTdE RTQ2NDExOUM3NTg4RTBDQUJDNjI2NzZBRDFCOUFELzAvMzM2REZDNTdBQkQ5MzJD MkFCRDM3QTg4REExRTFCQkNEREVDNDA3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzZERkM1N0FCRDkzMkMyQUJE MzdBODhEQTFFMUJCQ0RERUM0MDdBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTlEM0FEODExNTZBQTJEQjcyNkE5NUE0NkIzRURBRjk3REU0NjQxMTlD NzU4OEUwQ0FCQzYyNjc2QUQxQjlBRC8wLzMzNkRGQzU3QUJEOTMyQzJBQkQzN0E4 OERBMUUxQkJDRERFQzQwN0EubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFduBvnBqWltsAlW9Gq5IUUpmj D1N9Epyxtik4MD7eh3+5mq48Wc/v5oaTpH+FC1YPzM6992mu65oqXmYfTMXrtHCt buB+ztVSO5B4NZ/UloK7SsnHIvFK/zrLIjqYuknMAibTAF1YoSdvTXMWtLHR247x A5Yb4XLATL2iv4GFBKlli/ii6GOG1KXtMwYilZ4IxeUHQ2GKnD3lvam7vBVBv294 Ima7MRwh9R4cr/zj331JzPACU/1ADbvjC6K9LjNRP0VpBwU+PlqK2StRhPmWG4vz e2ArCCa07nFknHxsq9vEVmoD0Mniv4JqkmEbU94AWnWxdNCW2CRtbDk+NNjl -----END CERTIFICATE-----Generated at Wed Dec 17 05:57:42 2025 by rpki-client