This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json)
Hash identifier: oVuQWKv7evjn/lxBEnBzlxtECY/ZzAHsUZ+j78qm8x8=
Subject key identifier: 67:56:4F:0D:1A:71:81:7C:63:CA:6E:77:42:3F:B3:3C:DC:9D:97:BB
Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Certificate serial: 5A10AF9DB731FAD73E8C92F69EDCBF2BE2208D4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
Manifest number: 0137
Signing time: Tue 25 Nov 2025 23:08:27 +0000
Manifest this update: Tue 25 Nov 2025 23:03:27 +0000
Manifest next update: Mon 01 Dec 2025 13:05:27 +0000
Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: yn6Nu655v9mUSksEI4cIktvdx/yTjs2oRj5bZMAfrfk=)
2: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: q3UcSnqiR2Q0jU0/H5eFgmF/VjftHqegzAVA0L+yJ00=)
3: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: ItjXaKOwb+QHZwLhWYBWCIH0VcsHfuLK9e+dIUcT39E=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 30 Nov 2025 12:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:10:af:9d:b7:31:fa:d7:3e:8c:92:f6:9e:dc:bf:2b:e2:20:8d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Validity
Not Before: Nov 25 23:03:27 2025 GMT
Not After : Dec 1 13:05:27 2025 GMT
Subject: CN=67564F0D1A71817C63CA6E77423FB33CDC9D97BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:33:68:1f:c7:94:2e:db:18:98:f4:34:29:
28:15:3a:5f:cc:ba:5e:6c:e9:25:67:f1:dd:1c:00:
eb:57:3d:3a:9c:ff:4b:14:c5:18:91:c6:a2:36:1c:
6e:90:18:4f:6e:b0:f9:0d:ab:df:2d:12:c6:63:3c:
03:ad:85:6a:f6:23:d4:30:3f:4c:89:92:da:3b:74:
d1:d4:00:94:53:8c:b2:7f:df:02:6f:11:ba:f4:b5:
c6:65:b5:f8:77:b8:b8:1c:bf:48:03:09:67:3b:97:
09:1d:12:78:3b:be:bb:26:ea:66:17:70:35:fc:e9:
db:90:d1:f8:b4:29:9e:ea:fb:70:08:f8:71:0d:85:
8e:87:f3:d2:09:4c:58:de:24:37:13:fb:ce:84:77:
cc:cd:29:9b:cc:83:cf:50:eb:56:43:a8:6f:9f:ca:
4d:f1:d6:8e:39:de:24:cf:f7:f9:ce:e1:b8:b0:ca:
cb:9c:21:d5:e8:32:ea:c7:68:7a:4a:23:fc:5c:4f:
22:b5:50:c0:c6:a0:6b:59:f4:6e:6a:0d:07:48:ad:
23:56:6b:d8:5f:45:47:bc:ee:90:19:a6:f9:4d:c7:
3d:91:ff:22:50:49:b8:98:9b:a1:c1:c1:1b:36:db:
d1:0c:d7:1d:71:6b:64:63:07:c1:c7:d5:d2:90:38:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:56:4F:0D:1A:71:81:7C:63:CA:6E:77:42:3F:B3:3C:DC:9D:97:BB
X509v3 Authority Key Identifier:
keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:11:c9:12:f9:68:b5:2f:ac:67:a1:7b:ad:57:47:e0:ba:38:
f2:12:7d:ed:d6:df:a7:4e:2d:bf:25:d7:9e:98:47:b8:61:3f:
ed:82:bb:e7:2a:19:e2:9d:ec:15:c8:37:0b:7d:bb:22:18:34:
72:e2:dc:4f:8a:44:95:22:52:da:36:f2:e3:86:64:73:43:c9:
a4:60:37:e1:5f:5f:7b:f8:f3:73:db:ce:8c:99:97:d5:14:a7:
bf:93:0a:82:2a:ae:66:21:ed:93:30:e3:df:57:74:ab:fd:c2:
1d:44:7d:4f:20:5b:7f:03:4f:c9:f5:c1:12:85:d0:0c:8e:28:
b4:6b:ac:50:a2:d0:34:28:dc:36:1f:be:4f:fd:0f:45:0d:46:
36:6e:6f:d5:74:48:13:04:df:ff:d8:c9:33:f2:c4:e0:9f:43:
21:25:cc:8b:eb:d8:c7:42:95:a4:21:84:ce:61:1c:0e:8b:07:
1b:ca:31:9e:2e:a6:4f:15:a3:99:a6:32:ba:18:79:bc:07:8a:
b2:57:4f:2c:b2:bc:e4:40:5e:b8:70:91:b3:f2:60:3b:14:48:
64:a1:26:44:bb:01:8f:b8:0b:87:26:42:66:6a:96:fc:60:ce:
23:4f:61:24:a5:be:3b:1a:db:56:c4:f7:22:a5:cb:6b:5c:63:
83:9d:30:b7
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUWhCvnbcx+tc+jJL2nty/K+IgjUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG
OEE3NzdBQTAeFw0yNTExMjUyMzAzMjdaFw0yNTEyMDExMzA1MjdaMDMxMTAvBgNV
BAMTKDY3NTY0RjBEMUE3MTgxN0M2M0NBNkU3NzQyM0ZCMzNDREM5RDk3QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjQzNoH8eULtsYmPQ0KSgVOl/M
ul5s6SVn8d0cAOtXPTqc/0sUxRiRxqI2HG6QGE9usPkNq98tEsZjPAOthWr2I9Qw
P0yJkto7dNHUAJRTjLJ/3wJvEbr0tcZltfh3uLgcv0gDCWc7lwkdEng7vrsm6mYX
cDX86duQ0fi0KZ7q+3AI+HENhY6H89IJTFjeJDcT+86Ed8zNKZvMg89Q61ZDqG+f
yk3x1o453iTP9/nO4biwysucIdXoMurHaHpKI/xcTyK1UMDGoGtZ9G5qDQdIrSNW
a9hfRUe87pAZpvlNxz2R/yJQSbiYm6HBwRs229EM1x1xa2RjB8HH1dKQOIz/AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUZ1ZPDRpxgXxjym53Qj+zPNydl7swHwYDVR0j
BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD
RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC
RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3
NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw
N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wL0REQUY4OUQ0ODA3QzRGQkQyOTc0Q0FD
Mjc2QzM3Qzk1RjhBNzc3QUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQEckS+Wi1L6xnoXutV0fgujjy
En3t1t+nTi2/JdeemEe4YT/tgrvnKhninewVyDcLfbsiGDRy4txPikSVIlLaNvLj
hmRzQ8mkYDfhX197+PNz286MmZfVFKe/kwqCKq5mIe2TMOPfV3Sr/cIdRH1PIFt/
A0/J9cEShdAMjii0a6xQotA0KNw2H75P/Q9FDUY2bm/VdEgTBN//2Mkz8sTgn0Mh
JcyL69jHQpWkIYTOYRwOiwcbyjGeLqZPFaOZpjK6GHm8B4qyV08ssrzkQF64cJGz
8mA7FEhkoSZEuwGPuAuHJkJmapb8YM4jT2Ekpb47GttWxPcipctrXGODnTC3
-----END CERTIFICATE-----
Generated at Wed Nov 26 07:37:12 2025 by rpki-client