This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
File: 25AA12EC2868B90A693EEAD25632B15E24525ED3.mft (raw, json)
Hash identifier: LZmNsMg3VU5QnvGV1yR6Ej9HfRT1uM+2Brki8gKsJ1o=
Subject key identifier: 02:EA:3D:A0:28:DD:00:38:66:A9:17:5C:EE:71:40:1A:9A:A7:49:E1
Authority key identifier: 25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
Certificate issuer: /CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Certificate serial: 01585245B88B605DEF361D9A7E44D11C177A711F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
Manifest number: 0148
Signing time: Sun 14 Dec 2025 07:28:03 +0000
Manifest this update: Sun 14 Dec 2025 07:23:03 +0000
Manifest next update: Sat 20 Dec 2025 07:04:03 +0000
Files and hashes: 1: 3132382e3230312e32302e302f32322d3232203d3e20323635373430.roa (hash: bz11AZFfJ0r+HEGUYsgx+d3pCKTnexmFq2lHu4m96A0=)
2: 3132382e3230312e32302e302f32342d3234203d3e2037303439.roa (hash: RAgkM/z/+RK+WKswD249qEq93ktU1YUh8I7JSw5E9MU=)
3: 3132382e3230312e32332e302f32342d3234203d3e2037303439.roa (hash: VoQydPU5DEPjzB+MLhREvk1La0IFYEloHY8Kn0t5FAQ=)
4: 3132382e3230312e32312e302f32342d3234203d3e20323635373430.roa (hash: qTvdfSriRxHc7wkHNo0IAN/Qx1468+njGOKpm1whrOc=)
5: 3132382e3230312e32322e302f32342d3234203d3e20323635373430.roa (hash: fBb/Sws8vjsc2ypyW8NRLt5+r/8zb+cgyjDIBeclCRI=)
6: 25AA12EC2868B90A693EEAD25632B15E24525ED3.crl (hash: D749ywLajxWP071TuiI8pam5nnCnSJI8mBgw8nnri0U=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl
rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 07:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:58:52:45:b8:8b:60:5d:ef:36:1d:9a:7e:44:d1:1c:17:7a:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Validity
Not Before: Dec 14 07:23:03 2025 GMT
Not After : Dec 20 07:04:03 2025 GMT
Subject: CN=02EA3DA028DD003866A9175CEE71401A9AA749E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:62:b0:4c:d8:e5:64:ca:e1:ef:28:91:1b:f5:
f2:3e:20:d5:b8:b8:d7:f4:80:94:60:94:09:b8:32:
c9:4d:2e:f1:b8:6c:7b:7d:95:e1:ab:e8:80:83:2b:
64:f4:e0:24:25:6b:01:08:80:f0:08:f0:f7:3c:c1:
79:71:e7:0c:53:a3:a8:9a:ba:6f:ce:9a:4a:60:91:
4d:f1:00:c0:06:43:ed:50:13:08:cf:cb:f3:91:12:
cf:d3:f4:b0:c7:b1:c8:b5:86:c9:de:bb:ce:b6:43:
52:64:f0:84:dc:39:3e:6b:59:56:42:be:29:c6:cd:
3f:16:a8:35:ff:12:22:80:00:ce:c6:65:ad:b3:a1:
d0:e5:73:2e:5c:30:70:e2:3c:1c:26:76:83:2b:eb:
27:be:fb:b0:2f:8a:98:2c:00:2b:05:44:c8:29:2d:
d1:61:39:7e:fe:b0:69:01:bf:a7:bc:15:1f:5b:09:
31:0e:df:3a:84:bc:9b:7a:be:3b:e0:65:98:85:6b:
db:0c:6f:56:b8:09:75:a3:37:f6:d3:fa:2f:6b:8e:
53:44:10:cf:d0:30:ee:2b:ec:c8:0b:df:fd:51:0a:
b1:1c:d5:32:7c:bd:25:df:7f:e0:6c:0c:fc:4b:b7:
34:f1:27:c1:06:7c:76:c2:40:36:5c:0e:f2:37:c0:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EA:3D:A0:28:DD:00:38:66:A9:17:5C:EE:71:40:1A:9A:A7:49:E1
X509v3 Authority Key Identifier:
keyid:25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:23:f1:2c:4a:89:4b:58:88:33:51:a7:e0:b6:9d:62:23:56:
ef:c2:ce:12:dd:2d:8c:4f:cd:b3:77:29:0f:63:c3:36:27:30:
9d:75:70:c6:58:01:ef:88:81:ad:9b:a9:b8:86:d7:2b:14:5b:
02:83:f8:e6:ab:b3:3c:54:01:5b:fa:f2:f5:62:c3:74:12:ae:
05:0c:e0:1b:1d:17:cb:9d:7a:95:f2:8a:f3:ad:fa:3c:07:1a:
8a:70:5a:d5:14:98:a2:a3:57:e1:c1:a5:e5:df:44:2f:b6:5b:
e3:08:2f:f3:c4:48:e6:02:b5:47:97:10:5c:a5:7e:b8:60:87:
a7:e0:08:d6:c3:5d:55:4d:77:37:c7:d8:8e:e3:01:eb:b3:07:
1d:1b:d8:a8:e1:d2:30:5e:c5:e1:8d:f9:88:2b:3f:55:af:6d:
fa:d4:aa:f4:0d:c3:81:fb:64:d1:e4:e4:a9:e7:d2:37:af:7c:
5b:96:25:93:7b:1e:7b:6a:00:1b:cb:bf:23:aa:94:83:37:86:
68:1f:fe:37:67:37:d5:aa:37:b4:1d:b7:81:82:93:cd:3a:5d:
bb:75:63:33:16:d0:14:06:95:a1:82:5a:7d:dd:58:a9:f9:9e:
74:7e:5d:25:5b:69:df:e7:a7:53:5f:1f:3f:28:f2:e0:0a:bb:
7d:41:3d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 06:04:27 2025 by rpki-client