This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft
File: C3E7368D35E3633A3376945DE03867D2B31CDD87.mft (raw, json)
Hash identifier: dP4HTaSw2H7bsdZoFAvn42GZrUAujUxBhv3ojl2FrIo=
Subject key identifier: 23:5D:CD:2B:37:3C:37:28:DC:19:BB:B5:11:93:7D:B7:7B:3C:2C:00
Authority key identifier: C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87
Certificate issuer: /CN=C3E7368D35E3633A3376945DE03867D2B31CDD87
Certificate serial: 1AB044CA938640C9D9BECFB7AAA91A6B0F6B4517
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft
Manifest number: 0138
Signing time: Sun 23 Nov 2025 18:28:45 +0000
Manifest this update: Sun 23 Nov 2025 18:23:45 +0000
Manifest next update: Fri 28 Nov 2025 20:24:45 +0000
Files and hashes: 1: 3230302e31302e3232382e302f32322d3234203d3e203237373333.roa (hash: eOgJnQGTilVJetJyXOU9BecTvjysBQu1UH/B1713kU8=)
2: 323030313a313332303a3a2f33322d3438203d3e203237373333.roa (hash: JUOxFDO809fHz2UDcdbSGk60DXAGM1owWub4x5h/wmk=)
3: C3E7368D35E3633A3376945DE03867D2B31CDD87.crl (hash: kx7eW8wVxiGtDOw1okl7cp96aCBj1aCAHCq/NlKDkdE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl
rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 28 Nov 2025 20:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b0:44:ca:93:86:40:c9:d9:be:cf:b7:aa:a9:1a:6b:0f:6b:45:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3E7368D35E3633A3376945DE03867D2B31CDD87
Validity
Not Before: Nov 23 18:23:45 2025 GMT
Not After : Nov 28 20:24:45 2025 GMT
Subject: CN=235DCD2B373C3728DC19BBB511937DB77B3C2C00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f7:14:9c:1f:c7:bb:09:ed:78:46:03:d1:c0:
2d:fe:a3:61:53:4b:68:07:8f:b1:34:d6:26:87:d8:
8c:32:00:12:56:22:90:7f:2a:9f:22:f3:df:f7:0b:
90:34:d7:a8:17:07:ec:e7:b8:15:4a:42:dc:f8:3a:
96:0d:12:11:83:b0:15:34:14:5f:2b:71:5c:49:a6:
c8:9a:df:22:ca:bb:02:aa:40:66:c2:8a:90:63:67:
a4:43:39:b6:54:e5:01:08:87:8e:f9:27:f4:84:e7:
ca:9a:d0:c0:41:e1:99:89:e0:0d:0a:ae:7d:94:18:
8f:c6:16:94:02:42:7f:3b:18:b7:bd:57:9f:ef:7d:
42:a6:73:0e:3f:25:09:ec:64:ba:e7:6a:ae:16:f8:
e1:b8:d9:26:0b:9b:dd:8d:8d:dc:26:fc:c1:88:9e:
3d:19:3d:62:b7:3e:50:bf:4b:a0:04:5f:a9:97:73:
bf:f7:e4:d8:67:25:eb:9b:bb:14:38:d4:2d:87:ff:
17:1b:36:cb:38:30:cf:4f:c0:d2:72:a8:c5:3f:00:
b5:71:49:98:89:b1:2d:19:e3:d1:86:f0:ce:74:bc:
6e:c0:1f:28:92:76:39:8c:77:21:47:69:ac:5b:7e:
37:34:b9:02:6d:82:f4:3d:98:d7:34:32:e3:29:fe:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5D:CD:2B:37:3C:37:28:DC:19:BB:B5:11:93:7D:B7:7B:3C:2C:00
X509v3 Authority Key Identifier:
keyid:C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:55:64:78:01:79:85:45:8e:78:ca:e7:ef:af:ff:07:25:4f:
11:61:81:89:98:3b:92:cd:58:a3:9e:be:60:68:33:b4:c6:36:
d9:e4:38:96:ea:d7:2a:6b:f7:d2:38:4e:b6:ad:17:02:c6:84:
78:61:8a:bc:21:54:0e:4b:9f:61:11:df:72:5f:3d:c5:ad:ef:
6e:ba:fd:81:01:ef:b6:40:6b:85:68:fa:4f:25:0c:ff:5b:2b:
b9:73:d9:04:e5:0b:13:ca:5a:77:2b:5a:ab:4b:1a:60:65:b2:
96:e8:f5:c5:db:47:ee:4b:b0:5a:fc:a7:d7:3a:01:1d:e4:0e:
77:90:64:64:d0:84:95:c2:34:eb:a1:85:ff:36:61:53:c5:ea:
88:20:a3:1a:48:ca:24:09:e1:3d:8a:39:b3:b6:fa:9b:97:9d:
e7:7f:d3:a4:b4:d6:59:ec:d3:d9:2f:26:cc:49:e1:71:43:08:
9f:05:03:57:d2:c6:93:92:8c:c4:17:c1:ba:a4:1c:03:26:de:
4d:15:df:00:c6:b8:66:34:db:ba:b2:0f:87:b3:93:7d:cc:47:
26:d7:07:00:b5:16:52:92:97:7f:fe:78:17:71:20:48:11:9c:
4f:82:5e:31:2d:9a:c1:7c:19:53:78:40:5b:2b:4c:28:42:18:
ac:3d:8a:9d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGrBEypOGQMnZvs+3qqkaaw9rRRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNFNzM2OEQzNUUzNjMzQTMzNzY5NDVERTAzODY3RDJC
MzFDREQ4NzAeFw0yNTExMjMxODIzNDVaFw0yNTExMjgyMDI0NDVaMDMxMTAvBgNV
BAMTKDIzNURDRDJCMzczQzM3MjhEQzE5QkJCNTExOTM3REI3N0IzQzJDMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy9xScH8e7Ce14RgPRwC3+o2FT
S2gHj7E01iaH2IwyABJWIpB/Kp8i89/3C5A016gXB+znuBVKQtz4OpYNEhGDsBU0
FF8rcVxJpsia3yLKuwKqQGbCipBjZ6RDObZU5QEIh475J/SE58qa0MBB4ZmJ4A0K
rn2UGI/GFpQCQn87GLe9V5/vfUKmcw4/JQnsZLrnaq4W+OG42SYLm92Njdwm/MGI
nj0ZPWK3PlC/S6AEX6mXc7/35NhnJeubuxQ41C2H/xcbNss4MM9PwNJyqMU/ALVx
SZiJsS0Z49GG8M50vG7AHyiSdjmMdyFHaaxbfjc0uQJtgvQ9mNc0MuMp/om7AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUI13NKzc8NyjcGbu1EZN9t3s8LAAwHwYDVR0j
BBgwFoAUw+c2jTXjYzozdpRd4Dhn0rMc3YcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RDg5REE1NTFFNzMzMUI1M0I2ODgyMjgxODZEMTREREJB
NDk4RkUzNzlCN0QzRUYzNzgxRTZBMzBFM0FERjUwLzAvQzNFNzM2OEQzNUUzNjMz
QTMzNzY5NDVERTAzODY3RDJCMzFDREQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DM0U3MzY4RDM1RTM2MzNBMzM3
Njk0NURFMDM4NjdEMkIzMUNERDg3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Q4OURBNTUxRTczMzFCNTNCNjg4MjI4MTg2RDE0RERCQTQ5OEZFMzc5
QjdEM0VGMzc4MUU2QTMwRTNBREY1MC8wL0MzRTczNjhEMzVFMzYzM0EzMzc2OTQ1
REUwMzg2N0QyQjMxQ0REODcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxVWR4AXmFRY54yufvr/8HJU8R
YYGJmDuSzVijnr5gaDO0xjbZ5DiW6tcqa/fSOE62rRcCxoR4YYq8IVQOS59hEd9y
Xz3Fre9uuv2BAe+2QGuFaPpPJQz/Wyu5c9kE5QsTylp3K1qrSxpgZbKW6PXF20fu
S7Ba/KfXOgEd5A53kGRk0ISVwjTroYX/NmFTxeqIIKMaSMokCeE9ijmztvqbl53n
f9OktNZZ7NPZLybMSeFxQwifBQNX0saTkozEF8G6pBwDJt5NFd8AxrhmNNu6sg+H
s5N9zEcm1wcAtRZSkpd//ngXcSBIEZxPgl4xLZrBfBlTeEBbK0woQhisPYqd
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:45:45 2025 by rpki-client