This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
File: 991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft (raw, json)
Hash identifier: bEhh0GHFhQIDyWtRMno7NP2jqJa9Ba6Bw94Lvkgt12M=
Subject key identifier: E9:59:EC:03:DD:1B:CE:12:F0:9F:A1:31:C6:D7:12:48:FD:0B:92:E7
Authority key identifier: 99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E
Certificate issuer: /CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
Certificate serial: 6D9E08D802055D92F26C0F83D7D44E71454F72C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
Manifest number: 013A
Signing time: Thu 20 Nov 2025 08:57:18 +0000
Manifest this update: Thu 20 Nov 2025 08:52:18 +0000
Manifest next update: Tue 25 Nov 2025 04:38:18 +0000
Files and hashes: 1: 3137392e302e32322e36342f32362d3236203d3e203635313035.roa (hash: R6mtpzoUA60V397hZKWJBQadz8Qws4PYXH9aRFRMeKs=)
2: 323830313a31373a383030303a3a2f34382d3438203d3e203532343730.roa (hash: xPYVqeDjnmrZgF0SZSLtYMqwOiEa2rOuiwcFmIM8KbI=)
3: 3137392e302e32302e302f32342d3235203d3e203635313035.roa (hash: FietV4nbBzl7X/sLCaoYfKb5JaXsEimaJMWPWhtL+mA=)
4: 991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl (hash: gcr6CrBad868DQiGkq6IHkIDeDToEZ3CLs0t/WFUsiY=)
5: 3137392e302e32312e3132382f32362d3236203d3e203635313034.roa (hash: 7e7SjP+DzRspvItk28lOzGdL+gXXXte2TT99PaBgJ3w=)
6: 3137392e302e32302e302f32322d3330203d3e203532343730.roa (hash: 8rUcU657m71mniNtmrWC6Tz2lvD/AWBUWeAsHChNH+0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl
rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Nov 2025 04:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9e:08:d8:02:05:5d:92:f2:6c:0f:83:d7:d4:4e:71:45:4f:72:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
Validity
Not Before: Nov 20 08:52:18 2025 GMT
Not After : Nov 25 04:38:18 2025 GMT
Subject: CN=E959EC03DD1BCE12F09FA131C6D71248FD0B92E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:5b:22:22:f8:1c:a4:cd:52:c7:2d:e3:8a:
59:1e:48:82:6d:13:33:72:f7:f4:61:a9:27:2c:d3:
58:71:f8:16:a1:d7:31:3a:f3:e4:53:4b:94:ef:14:
fe:12:a4:5a:ba:27:f1:f7:2d:3f:a5:99:28:ec:9e:
11:fe:f0:d7:07:1b:58:b7:83:2a:4d:5c:39:48:b0:
95:e1:9e:70:8c:08:35:49:77:7a:59:09:27:90:7b:
bf:14:bf:e9:a2:26:a3:a0:0b:98:53:7b:42:15:b8:
2a:ce:88:8e:69:62:e4:6c:a9:82:d7:e6:f3:aa:c5:
ea:ce:0e:d4:5c:67:45:df:e2:58:25:7a:1d:e7:dc:
3b:15:09:66:a0:0d:d7:cf:cd:0c:73:ae:70:a7:16:
bb:e5:f2:aa:ea:70:34:56:06:26:85:1e:42:12:91:
e3:78:1b:dd:db:23:e7:73:5e:e8:26:c5:c8:43:ff:
39:66:aa:18:7e:0e:d5:89:f3:34:37:43:66:e2:35:
64:dd:b4:5d:9c:c7:3e:b9:b9:d1:b2:b8:29:13:c8:
a2:6f:ae:1b:49:c9:06:92:26:17:a3:88:43:2f:f7:
5e:a2:70:37:86:50:61:57:0a:d1:09:a5:4d:d9:e3:
ce:71:e1:f3:63:c9:87:83:be:e9:d8:cb:5f:71:07:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:59:EC:03:DD:1B:CE:12:F0:9F:A1:31:C6:D7:12:48:FD:0B:92:E7
X509v3 Authority Key Identifier:
keyid:99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:53:5a:db:9d:07:df:75:64:62:23:1e:8f:d7:87:b5:6a:d6:
d0:68:88:c2:d2:d8:a2:ce:0f:2f:9b:09:3f:a6:2e:bf:27:0e:
84:77:95:4b:e1:3e:f7:39:a9:8c:d5:31:9a:8b:a3:75:2f:66:
a7:3f:9a:fa:b5:00:1c:4e:b9:6e:01:f5:11:c1:13:fe:0b:09:
1f:72:49:04:ec:d8:60:02:0d:78:6e:f6:a8:54:4b:f5:6c:33:
7d:a3:d6:eb:7e:38:f3:44:49:1b:63:69:de:2c:5d:bc:75:d6:
b6:70:84:59:30:d8:64:f0:4d:7c:de:4e:25:34:8e:c2:87:c6:
c1:79:95:5b:02:50:87:82:05:39:c1:f6:f6:2a:63:f7:7c:5e:
7d:79:fb:05:18:aa:79:70:38:29:8a:33:ba:19:e9:97:32:a4:
e2:51:9f:f9:66:4e:df:9c:d4:27:a9:5c:3b:49:b4:f3:17:65:
1c:55:c9:5c:43:65:58:69:b6:ac:fe:bc:b9:be:bb:a6:de:b0:
eb:d2:0b:20:e1:26:1c:f6:d4:db:ef:50:98:b5:be:64:0a:51:
55:8f:d6:22:a3:91:2c:01:c6:fa:b6:b8:05:78:2f:65:bc:70:
48:79:5e:22:e0:1f:42:c5:97:41:05:d6:23:64:cc:a1:f8:78:
e6:47:ca:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 18:45:15 2025 by rpki-client