This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft
File: 3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft (raw, json)
Hash identifier: WoZSjhoasJ2+K6HpXLrNXNrcOK2nNLfc98XdLSaSqzg=
Subject key identifier: 77:04:E4:5E:04:A2:57:D3:02:B1:66:22:A7:4B:F2:2D:AA:27:2B:EB
Authority key identifier: 34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70
Certificate issuer: /CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70
Certificate serial: 6A469AA80F51EAA53371E8328DA6A46483FBCEC2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft
Manifest number: 014E
Signing time: Tue 20 Jan 2026 11:32:34 +0000
Manifest this update: Tue 20 Jan 2026 11:27:34 +0000
Manifest next update: Sat 24 Jan 2026 22:35:34 +0000
Files and hashes: 1: 323830333a356439303a3a2f33322d3536203d3e20323733303030.roa (hash: 0OoP3A238IuGlM9478CrBEi+3xgJKgMmBk2U8Rug3mA=)
2: 3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl (hash: ohWwodgylayiEfdogf1yOkvi+kWAGMbWTD3/Arwlk5c=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl
rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 24 Jan 2026 22:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:46:9a:a8:0f:51:ea:a5:33:71:e8:32:8d:a6:a4:64:83:fb:ce:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70
Validity
Not Before: Jan 20 11:27:34 2026 GMT
Not After : Jan 24 22:35:34 2026 GMT
Subject: CN=7704E45E04A257D302B16622A74BF22DAA272BEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:d3:31:d4:d6:cd:70:c1:ec:7e:36:90:e4:
3c:e5:3a:bf:40:5b:c5:7b:e5:fe:61:5f:23:a8:db:
b3:a1:04:cd:88:55:3b:e0:e4:7d:55:2c:ed:ed:3d:
71:a3:87:98:a8:fd:fc:eb:24:a2:1d:85:cc:19:c9:
d9:bf:5d:bc:1c:f5:d6:05:d9:c4:e2:f2:b7:a9:9d:
c1:3f:e1:d0:f7:c8:77:ab:5b:3d:64:cf:23:3e:07:
eb:e3:f2:6e:76:26:fd:cb:4d:8d:3d:a3:33:63:16:
e8:27:f9:0e:6b:10:e9:83:4a:ad:2d:ed:4f:70:8d:
b4:ed:05:17:fe:e0:f7:8e:19:fe:41:98:58:78:dd:
5b:96:31:db:2f:f4:16:23:e7:e4:a2:d7:07:6f:45:
6f:a6:87:3d:37:e9:3f:44:99:75:83:83:1d:13:52:
96:95:61:17:03:e7:1c:96:3b:e4:73:ed:4a:da:49:
c3:c5:90:22:bd:f8:a3:1f:f5:91:67:ac:f6:7d:2b:
b2:d4:bc:45:51:20:eb:28:9e:14:de:0f:14:57:78:
4d:b4:d1:5c:2a:51:b1:d5:1e:3c:1a:e0:5d:e2:da:
c1:22:98:58:01:ff:70:a2:4a:cd:35:84:50:c0:88:
1c:91:f9:13:1e:49:d7:70:cb:66:22:15:a0:bb:9a:
9d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:04:E4:5E:04:A2:57:D3:02:B1:66:22:A7:4B:F2:2D:AA:27:2B:EB
X509v3 Authority Key Identifier:
keyid:34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:44:4c:94:50:c0:c6:55:91:19:37:e8:f0:ed:62:f1:cf:08:
80:b7:4a:dd:68:a2:4c:da:04:93:f6:42:ea:7c:46:47:46:e2:
cd:1a:ed:1f:61:0d:e5:ef:00:9d:4d:a3:86:87:bc:6a:68:eb:
b6:a6:2b:a7:ea:0d:12:68:ee:36:da:b0:11:a3:97:8f:a9:aa:
bc:20:03:d8:5f:2d:e2:18:86:b4:42:83:d5:01:9e:3a:74:32:
99:25:12:ad:83:a0:62:4c:69:77:f5:01:f4:5b:11:bd:f8:16:
30:e2:94:e6:d9:84:a5:bf:a9:b2:33:63:e5:a4:0f:34:5a:7c:
a4:a5:6e:b6:7d:97:b7:18:c2:28:93:2d:e5:22:30:9a:e7:4c:
ae:06:9b:1f:ad:d2:bd:e2:40:44:ac:fd:87:f5:f2:e9:a3:9a:
a3:bd:23:e8:5b:e0:ef:52:4e:c3:d0:b9:06:be:88:db:5d:81:
55:6c:b8:2a:10:5d:75:66:5b:90:84:16:bf:d4:89:25:44:51:
d1:79:db:8a:0f:26:29:9a:08:4b:b8:1c:f8:04:e2:42:21:42:
39:9d:cf:5d:11:b3:83:be:ce:c1:b1:dd:ab:db:52:38:56:b2:
b1:9b:d2:37:22:c2:96:22:ed:d4:79:c3:53:e1:63:34:9b:38:
7a:50:4d:7b
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUakaaqA9R6qUzcegyjaakZIP7zsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQzMkM1MEZFQkI2RkI1N0Q4QUM0RUQ0QzA1REYyMEM4
OUZFNkQ3MDAeFw0yNjAxMjAxMTI3MzRaFw0yNjAxMjQyMjM1MzRaMDMxMTAvBgNV
BAMTKDc3MDRFNDVFMDRBMjU3RDMwMkIxNjYyMkE3NEJGMjJEQUEyNzJCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAatMx1NbNcMHsfjaQ5DzlOr9A
W8V75f5hXyOo27OhBM2IVTvg5H1VLO3tPXGjh5io/fzrJKIdhcwZydm/Xbwc9dYF
2cTi8repncE/4dD3yHerWz1kzyM+B+vj8m52Jv3LTY09ozNjFugn+Q5rEOmDSq0t
7U9wjbTtBRf+4PeOGf5BmFh43VuWMdsv9BYj5+Si1wdvRW+mhz036T9EmXWDgx0T
UpaVYRcD5xyWO+Rz7UraScPFkCK9+KMf9ZFnrPZ9K7LUvEVRIOsonhTeDxRXeE20
0VwqUbHVHjwa4F3i2sEimFgB/3CiSs01hFDAiByR+RMeSddwy2YiFaC7mp3LAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUdwTkXgSiV9MCsWYip0vyLaonK+swHwYDVR0j
BBgwFoAUNDLFD+u2+1fYrE7UwF3yDIn+bXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDVCRDY2NDkyNEZBNTdENTNDNTIzMEVDRkU0N0ZENDgz
RkQyMEI5QjQ4QjcxRkJCN0E3Mzk1MzFFREQ4OEZCLzAvMzQzMkM1MEZFQkI2RkI1
N0Q4QUM0RUQ0QzA1REYyMEM4OUZFNkQ3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDMyQzUwRkVCQjZGQjU3RDhB
QzRFRDRDMDVERjIwQzg5RkU2RDcwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUQ1QkQ2NjQ5MjRGQTU3RDUzQzUyMzBFQ0ZFNDdGRDQ4M0ZEMjBCOUI0
OEI3MUZCQjdBNzM5NTMxRUREODhGQi8wLzM0MzJDNTBGRUJCNkZCNTdEOEFDNEVE
NEMwNURGMjBDODlGRTZENzAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCoREyUUMDGVZEZN+jw7WLxzwiA
t0rdaKJM2gST9kLqfEZHRuLNGu0fYQ3l7wCdTaOGh7xqaOu2piun6g0SaO422rAR
o5ePqaq8IAPYXy3iGIa0QoPVAZ46dDKZJRKtg6BiTGl39QH0WxG9+BYw4pTm2YSl
v6myM2PlpA80WnykpW62fZe3GMIoky3lIjCa50yuBpsfrdK94kBErP2H9fLpo5qj
vSPoW+DvUk7D0LkGvojbXYFVbLgqEF11ZluQhBa/1IklRFHReduKDyYpmghLuBz4
BOJCIUI5nc9dEbODvs7Bsd2r21I4VrKxm9I3IsKWIu3UecNT4WM0mzh6UE17
-----END CERTIFICATE-----
Generated at Wed Jan 21 10:33:36 2026 by rpki-client