This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
File: 921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft (raw, json)
Hash identifier: ffvK0lCGu74mdLqk0hfzOia6AtXSsy1cyYIjTljp3YQ=
Subject key identifier: 3A:9C:92:9D:8A:C7:D6:D0:83:B2:AE:DC:BF:EB:FE:F2:D4:FD:DF:F3
Authority key identifier: 92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37
Certificate issuer: /CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437
Certificate serial: 4A05E960A6790D1D1EABAC4B621658A62ADB5A14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
Manifest number: F3
Signing time: Wed 28 Jan 2026 16:47:21 +0000
Manifest this update: Wed 28 Jan 2026 16:42:21 +0000
Manifest next update: Mon 02 Feb 2026 12:57:21 +0000
Files and hashes: 1: 921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl (hash: zFI6RukhT8qfidO+IuPSYz2S0e3Qn6om1Pih2wFFSz0=)
2: 3230302e33362e3135392e302f32342d3234203d3e20323731383739.roa (hash: a+WL1Tzck2mH2oJapuBeuDDD68+EX/IRs+ee+XJh0fo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl
rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:05:e9:60:a6:79:0d:1d:1e:ab:ac:4b:62:16:58:a6:2a:db:5a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437
Validity
Not Before: Jan 28 16:42:21 2026 GMT
Not After : Feb 2 12:57:21 2026 GMT
Subject: CN=3A9C929D8AC7D6D083B2AEDCBFEBFEF2D4FDDFF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:a2:89:67:05:26:b6:67:2d:6b:dd:73:fe:
ea:d1:83:a5:7d:95:f7:f9:93:a9:04:17:66:8e:08:
b9:5f:4c:62:08:76:e8:45:56:6e:5a:a2:5a:db:60:
c9:3f:3b:53:bb:0c:17:e0:18:46:d4:66:e7:0e:38:
07:64:9f:c5:e5:63:02:88:5c:a3:2b:81:0d:49:c7:
19:72:ed:91:4d:6a:39:c4:66:67:b8:eb:06:d4:96:
fa:01:d9:26:cd:55:27:d6:08:55:e8:c5:6b:d0:8f:
85:e6:3b:af:6e:10:0d:21:dc:9b:05:ab:cb:e1:d7:
33:f7:52:8f:8f:a4:e1:94:42:f7:56:09:d3:b7:02:
ce:39:60:cb:46:5c:19:f9:cd:7d:96:b0:08:f0:86:
ad:f0:ff:c9:2b:2f:b5:8c:80:dd:5e:94:d1:8e:c7:
37:fb:41:0d:70:47:93:ae:a6:aa:e7:2d:32:10:c5:
52:01:a0:a2:17:55:c8:08:12:00:1e:da:81:8e:3c:
36:3f:27:70:59:77:ee:d8:88:8e:2d:22:c0:46:92:
c7:ee:25:75:23:b8:42:d6:1b:8a:8c:8f:3d:36:98:
67:9a:3f:09:0e:49:5d:c8:65:63:bb:06:3a:56:af:
ad:33:72:1f:22:76:12:43:48:de:2f:b3:1f:88:b1:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9C:92:9D:8A:C7:D6:D0:83:B2:AE:DC:BF:EB:FE:F2:D4:FD:DF:F3
X509v3 Authority Key Identifier:
keyid:92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:62:8a:f0:27:0b:ca:9b:2e:48:bd:9c:8d:11:54:08:0c:9b:
d3:1a:7c:5c:d3:ed:2b:3f:6a:76:6f:87:15:77:3e:db:27:46:
13:01:0e:d1:c0:ce:a6:70:ff:c4:9b:2b:d7:2e:98:bf:9c:bb:
85:4b:ae:f2:ee:f0:52:66:5f:b3:2e:04:17:cf:1b:34:35:23:
90:e8:ba:c8:e0:b9:62:50:7a:43:5f:28:99:d0:9e:05:a2:d3:
2f:7f:75:ba:2f:ae:03:bd:26:8b:bf:bf:dc:bb:60:74:03:36:
5c:33:3e:c3:95:09:43:dc:dc:ea:ef:cf:fc:69:bb:4d:53:4a:
c2:01:f5:3f:a9:f7:c7:64:82:1d:05:72:b0:f0:b9:20:89:5b:
be:ca:50:f1:1d:a4:9d:c0:9e:8d:19:50:2b:fb:de:ca:c4:4f:
51:b3:be:73:2a:53:91:70:20:fa:53:ae:9c:01:96:bb:eb:cb:
dd:62:53:8b:2c:4d:49:0e:88:e0:79:a1:15:24:d5:3f:f4:52:
fb:4e:81:01:1e:e3:d7:ba:55:1c:d2:2a:d2:bd:35:44:a7:68:
df:7f:f1:7e:97:4f:4d:b4:9d:30:25:ae:88:97:b1:48:32:38:
91:d6:e3:0c:b2:ff:03:63:9e:e6:90:21:9a:72:cd:5c:24:42:
08:89:49:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 03:45:41 2026 by rpki-client