This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.mft
File: 17FD7B4CD3B97225C91244D204C973ABA848EF0A.mft (raw, json)
Hash identifier: hr9mDrc+kEKbSQMePifzwhb1pnOU+dP/tdeaJfABpM4=
Subject key identifier: 8F:80:E5:6E:8B:EA:FF:B6:2E:E8:75:EB:03:48:BA:59:51:73:1F:E3
Authority key identifier: 17:FD:7B:4C:D3:B9:72:25:C9:12:44:D2:04:C9:73:AB:A8:48:EF:0A
Certificate issuer: /CN=17FD7B4CD3B97225C91244D204C973ABA848EF0A
Certificate serial: 3DD719C386C3F4F164A2D6124BFE9164A9573439
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.mft
Manifest number: 0140
Signing time: Tue 09 Dec 2025 16:39:03 +0000
Manifest this update: Tue 09 Dec 2025 16:34:03 +0000
Manifest next update: Mon 15 Dec 2025 15:49:03 +0000
Files and hashes: 1: 3137302e38302e3134302e302f32322d3234203d3e20323634383139.roa (hash: KpMAcP2CNoLdq7s4uoeZF1clOT5vRwV/S4GBuzlj2EQ=)
2: 17FD7B4CD3B97225C91244D204C973ABA848EF0A.crl (hash: KViT570XsuSs6oie3hfu3Hv+HCGdr9EwH+48O0eRQIs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.crl
rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Dec 2025 21:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d7:19:c3:86:c3:f4:f1:64:a2:d6:12:4b:fe:91:64:a9:57:34:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17FD7B4CD3B97225C91244D204C973ABA848EF0A
Validity
Not Before: Dec 9 16:34:03 2025 GMT
Not After : Dec 15 15:49:03 2025 GMT
Subject: CN=8F80E56E8BEAFFB62EE875EB0348BA5951731FE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:78:da:3c:dd:92:de:8d:90:02:f1:4d:ef:79:
fe:9e:e4:8f:3d:f2:67:31:00:b1:6e:d7:0b:e5:a9:
ea:d2:4f:b5:66:4d:28:bf:bd:3f:fb:a7:a3:42:37:
0c:76:8a:ed:66:a3:4a:6a:f1:5f:27:af:cb:40:a3:
11:ee:3e:a3:7e:bd:65:c5:02:ea:1d:c5:11:e1:fc:
8a:1c:21:bb:7a:2a:62:88:2b:06:4e:25:cf:13:76:
02:fe:0d:5f:c3:fb:64:27:e7:c4:b9:a8:cf:98:95:
fc:1e:9b:1c:91:d4:88:78:3b:40:0c:4e:a8:3d:3b:
4b:29:24:13:5b:06:b0:a6:3f:af:94:72:dc:ae:73:
39:55:b7:e2:84:e1:de:57:74:5e:9c:39:c6:62:44:
64:bc:2b:59:ae:26:e4:f1:5a:69:d5:b9:d4:c8:24:
28:1b:1d:18:13:87:bd:28:a8:d8:5e:aa:72:2f:05:
9c:4a:85:eb:56:4d:dd:19:ff:fe:01:e8:6e:ca:c0:
e0:2d:a6:68:c4:0b:da:6f:1e:86:8e:83:53:bc:fd:
0d:0e:cd:73:b1:9e:a5:84:8f:4b:9a:3e:10:2b:f0:
d9:3b:96:8c:94:57:78:07:75:1e:8a:ba:af:25:0c:
ba:07:80:a8:17:b4:ab:1c:0d:10:9b:b4:b5:5e:e4:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:80:E5:6E:8B:EA:FF:B6:2E:E8:75:EB:03:48:BA:59:51:73:1F:E3
X509v3 Authority Key Identifier:
keyid:17:FD:7B:4C:D3:B9:72:25:C9:12:44:D2:04:C9:73:AB:A8:48:EF:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f8:71:df:39:82:b8:bd:cf:ac:c0:3e:0f:48:e2:27:7c:87:
f2:52:c3:f4:78:71:50:1c:e5:19:e5:ff:5c:0f:f5:d0:16:43:
c9:02:53:ed:12:39:b4:6d:eb:aa:31:df:3c:66:2a:ab:e6:5a:
67:e7:72:0c:db:c5:76:f2:ed:78:ea:b9:39:aa:ff:09:05:cc:
54:01:17:09:77:6a:05:68:72:98:3a:f1:fa:e5:71:2f:19:16:
5e:ea:1f:7c:ae:3a:9c:2f:9e:ea:c0:26:88:10:4b:49:35:06:
c9:62:88:a7:9f:f4:22:c0:f9:e0:fb:67:44:de:67:cd:01:1a:
17:47:c1:6a:a3:19:5d:56:fa:65:bb:50:e8:83:3a:37:d9:cc:
5c:48:a8:a6:55:50:ad:5d:8a:e4:71:be:29:47:36:47:2d:f8:
e3:82:1c:e4:a9:28:af:b6:16:92:e9:07:06:7f:ef:cc:87:57:
b5:92:6f:e2:1d:c0:35:d1:8a:e1:ae:ec:16:8b:51:c7:1f:47:
d4:dc:fd:be:a0:f2:09:e0:fc:83:0f:d5:e0:b3:36:ec:97:46:
99:f3:b4:34:63:c0:65:19:e8:5c:09:48:b6:54:dd:1f:35:d8:
c3:1c:cd:44:5f:c7:21:73:48:e8:47:bd:6a:18:f3:84:3f:ef:
5d:30:a8:cb
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPdcZw4bD9PFkotYSS/6RZKlXNDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdGRDdCNENEM0I5NzIyNUM5MTI0NEQyMDRDOTczQUJB
ODQ4RUYwQTAeFw0yNTEyMDkxNjM0MDNaFw0yNTEyMTUxNTQ5MDNaMDMxMTAvBgNV
BAMTKDhGODBFNTZFOEJFQUZGQjYyRUU4NzVFQjAzNDhCQTU5NTE3MzFGRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSeNo83ZLejZAC8U3vef6e5I89
8mcxALFu1wvlqerST7VmTSi/vT/7p6NCNwx2iu1mo0pq8V8nr8tAoxHuPqN+vWXF
AuodxRHh/IocIbt6KmKIKwZOJc8TdgL+DV/D+2Qn58S5qM+YlfwemxyR1Ih4O0AM
Tqg9O0spJBNbBrCmP6+UctyuczlVt+KE4d5XdF6cOcZiRGS8K1muJuTxWmnVudTI
JCgbHRgTh70oqNheqnIvBZxKhetWTd0Z//4B6G7KwOAtpmjEC9pvHoaOg1O8/Q0O
zXOxnqWEj0uaPhAr8Nk7loyUV3gHdR6Kuq8lDLoHgKgXtKscDRCbtLVe5HktAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUj4Dlbovq/7Yu6HXrA0i6WVFzH+MwHwYDVR0j
BBgwFoAUF/17TNO5ciXJEkTSBMlzq6hI7wowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QkMyN0U2N0NDNEJENzJEQkQ2OTVFOEI4RkQ0OEVFODM1
MjRCNjdDMDU4Mzc5NDU0RTg3RUE0NzM5RDM0MDVFLzAvMTdGRDdCNENEM0I5NzIy
NUM5MTI0NEQyMDRDOTczQUJBODQ4RUYwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xN0ZEN0I0Q0QzQjk3MjI1Qzkx
MjQ0RDIwNEM5NzNBQkE4NDhFRjBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUJDMjdFNjdDQzRCRDcyREJENjk1RThCOEZENDhFRTgzNTI0QjY3QzA1
ODM3OTQ1NEU4N0VBNDczOUQzNDA1RS8wLzE3RkQ3QjRDRDNCOTcyMjVDOTEyNDRE
MjA0Qzk3M0FCQTg0OEVGMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2+HHfOYK4vc+swD4PSOInfIfy
UsP0eHFQHOUZ5f9cD/XQFkPJAlPtEjm0beuqMd88Ziqr5lpn53IM28V28u146rk5
qv8JBcxUARcJd2oFaHKYOvH65XEvGRZe6h98rjqcL57qwCaIEEtJNQbJYoinn/Qi
wPng+2dE3mfNARoXR8FqoxldVvplu1Dogzo32cxcSKimVVCtXYrkcb4pRzZHLfjj
ghzkqSivthaS6QcGf+/Mh1e1km/iHcA10YrhruwWi1HHH0fU3P2+oPIJ4PyDD9Xg
szbsl0aZ87Q0Y8BlGehcCUi2VN0fNdjDHM1EX8chc0joR71qGPOEP+9dMKjL
-----END CERTIFICATE-----
Generated at Tue Dec 9 22:15:54 2025 by rpki-client