This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft
File: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft (raw, json)
Hash identifier: zJ/Seok2zSmYqXwLLxq7CtD2WP/K+Su3W5z+cY8FFHk=
Subject key identifier: 8D:4C:E4:C8:C6:F5:7B:57:97:EB:78:D0:1F:A7:48:6B:BA:57:21:1F
Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53
Certificate issuer: /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
Certificate serial: 0EE1BAF2C797304CC5A76D31A8A9166F88E516B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft
Manifest number: 0148
Signing time: Tue 09 Dec 2025 16:05:00 +0000
Manifest this update: Tue 09 Dec 2025 16:00:00 +0000
Manifest next update: Sun 14 Dec 2025 16:44:00 +0000
Files and hashes: 1: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl (hash: SThpljS/Hrns6MldEZ6MXTiEmxZRzPb3s6LNdwzvnBw=)
2: 323830333a346132303a3a2f33322d3438203d3e20323635383438.roa (hash: lht6e9EhMwJ+EaxrB6aipbBelHpXI2dCPQ9d9c/l7pk=)
3: 34352e3232342e3130342e302f32322d3234203d3e20323635383438.roa (hash: l0LWu22qOaLDlCthMeY/CvKaI4uUOaZIcvupuCI9a04=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl
rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Dec 2025 16:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e1:ba:f2:c7:97:30:4c:c5:a7:6d:31:a8:a9:16:6f:88:e5:16:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
Validity
Not Before: Dec 9 16:00:00 2025 GMT
Not After : Dec 14 16:44:00 2025 GMT
Subject: CN=8D4CE4C8C6F57B5797EB78D01FA7486BBA57211F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:89:4c:0f:9a:8e:bb:d6:da:bf:ce:31:d7:d6:
96:a7:48:a9:74:9e:c2:8c:a9:0d:f7:46:d2:9a:d0:
bd:ce:5f:0f:6d:9f:4b:5e:a3:04:22:11:4a:8d:46:
99:dd:a7:b4:c7:61:0b:33:05:77:04:50:a5:aa:f3:
95:78:a8:c0:df:28:e2:ae:00:19:f9:1f:00:22:d0:
c1:61:46:ef:22:6b:24:53:4e:d3:34:41:f7:41:4d:
0a:fa:8e:52:84:a9:35:e7:a1:12:9e:d7:9f:30:06:
c1:80:bf:1a:35:04:33:3e:0f:05:3f:f1:cb:c2:e8:
2e:36:72:59:b3:35:68:0d:39:4c:80:07:3f:8b:48:
a3:c2:3e:31:0b:05:a7:8b:b2:af:7c:92:7d:69:7b:
ed:29:07:db:b3:41:75:fb:d5:72:3b:4c:d0:dc:bf:
0b:85:fa:ce:fc:0a:dd:16:93:c2:5a:7a:16:c9:62:
da:b4:b9:30:26:8e:af:9e:f0:7e:87:88:fa:da:f9:
21:5b:1d:3b:61:7a:12:ae:31:58:d6:70:b7:6f:c1:
30:67:74:ba:1f:22:7e:67:cd:86:f4:fa:e9:b4:98:
e2:63:9e:be:88:5f:21:b0:50:d8:31:a5:71:16:c0:
ac:0c:4c:d5:d0:1a:0a:e7:85:9d:3c:ec:07:e0:db:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4C:E4:C8:C6:F5:7B:57:97:EB:78:D0:1F:A7:48:6B:BA:57:21:1F
X509v3 Authority Key Identifier:
keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:be:fe:33:81:56:c0:db:7d:14:7f:bd:58:69:49:0c:2f:7e:
37:5f:ef:76:c8:a9:f2:a1:09:34:8b:aa:3d:85:47:7c:bb:97:
54:04:b6:99:61:c9:68:53:80:14:87:4c:d3:51:14:42:e0:c0:
bc:eb:a5:92:92:14:09:95:d7:de:f5:72:a3:35:d0:18:97:ae:
da:b6:da:ca:34:f1:c7:22:b5:dc:e3:3c:cd:9a:a3:10:d5:3e:
69:9d:34:72:84:49:20:9f:43:24:6f:7d:89:9e:74:9a:97:80:
04:07:c0:91:a1:ed:a2:07:40:45:a7:28:fd:13:de:12:cd:20:
45:54:84:ea:bb:88:32:78:9d:89:bb:02:a7:50:6c:54:a1:c4:
a0:e0:17:dd:5b:2f:d7:6b:87:a4:72:3c:1a:84:50:e2:63:e5:
07:25:37:ca:d4:d6:b9:8b:46:a9:9c:ca:fc:60:28:b2:b8:2f:
ba:d3:f7:45:69:91:45:86:ae:eb:ae:1f:7d:60:92:13:9f:2a:
3c:b9:32:23:a1:e4:ac:58:7a:e7:86:18:a9:ac:14:29:d5:ac:
38:45:cb:e3:ca:d1:54:53:b0:6e:af:4f:4a:c5:ec:d0:7b:d1:
a1:d3:b4:3a:ce:28:20:d2:4c:59:28:49:1c:4c:d1:37:04:85:
05:89:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 10:55:33 2025 by rpki-client