This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft File: 5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft (raw, json) Hash identifier: gc0p7eTkhoTyThwzv18IXdxN5dj2zvAjyM6TVWKwRpI= Subject key identifier: EB:FD:8F:94:F4:BF:A5:9E:65:84:09:D6:2A:F4:8D:E5:A9:CE:B6:28 Authority key identifier: 5A:E0:C2:D0:4B:B5:BA:4F:90:E7:D5:91:C0:E7:59:62:4F:79:F7:D1 Certificate issuer: /CN=5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1 Certificate serial: 2801BE1162E0C72DED2FF5A37C8E88DB9FAE7481 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft Manifest number: 0147 Signing time: Mon 08 Dec 2025 01:24:59 +0000 Manifest this update: Mon 08 Dec 2025 01:19:59 +0000 Manifest next update: Sat 13 Dec 2025 21:16:59 +0000 Files and hashes: 1: 3138372e37332e3137362e302f32322d3234203d3e20323639393930.roa (hash: BaIX0qhp18j+XpTnYKfSF67GStiAmWNI+M78CfluqlY=) 2: 5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl (hash: dfngv3BqgzIOfm97xAqFndDJ/D1eDhSVzMQ2LTNuf5o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 13 Dec 2025 21:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:01:be:11:62:e0:c7:2d:ed:2f:f5:a3:7c:8e:88:db:9f:ae:74:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1 Validity Not Before: Dec 8 01:19:59 2025 GMT Not After : Dec 13 21:16:59 2025 GMT Subject: CN=EBFD8F94F4BFA59E658409D62AF48DE5A9CEB628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:65:d8:76:a7:2b:de:8d:07:b2:62:a1:6c:d5: 61:f9:7d:46:ad:5e:7d:e0:be:08:71:59:75:48:31: b1:be:a1:6c:d6:14:7d:76:2d:2e:4a:a5:86:c0:2a: 4a:2b:84:30:36:51:f8:46:88:b8:9f:60:52:70:7f: f9:df:d4:e6:f5:62:19:cb:bf:ce:2a:66:90:3d:d9: 66:69:da:39:ce:ca:46:ed:39:49:21:9e:5c:67:5f: 1c:f2:fc:7c:e0:3f:04:cd:65:cf:9f:67:1f:f3:95: 06:05:f4:3f:29:dd:99:bf:74:52:fb:f7:15:41:e0: 32:fb:6a:e8:25:2c:bb:bd:cb:38:98:d7:80:72:2a: 49:5d:a9:98:20:f4:fb:84:3e:16:62:14:98:bf:be: 95:5d:de:9d:22:e0:66:f7:aa:47:73:9e:2e:ee:15: cd:78:4a:a3:3a:9b:f6:c2:82:8f:17:52:b4:a5:b2: 86:62:2d:3c:1f:94:c0:b6:29:35:11:cb:f3:2f:43: d6:fc:fc:80:37:ca:a2:c1:37:0f:a7:93:84:9d:c1: c4:81:93:b5:84:9d:0f:30:2f:7d:40:bb:27:d2:c4: 95:c5:1e:4e:55:30:73:4c:ee:d1:c4:e9:e8:51:e6: e7:4b:d7:43:d1:c5:ef:91:13:cc:fb:f7:bf:cc:96: a3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FD:8F:94:F4:BF:A5:9E:65:84:09:D6:2A:F4:8D:E5:A9:CE:B6:28 X509v3 Authority Key Identifier: keyid:5A:E0:C2:D0:4B:B5:BA:4F:90:E7:D5:91:C0:E7:59:62:4F:79:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:be:41:13:c3:60:87:88:89:06:53:ea:33:ed:ff:08:bd:29: 22:2c:27:07:9e:16:fb:b2:af:26:31:67:7d:cb:46:c1:3b:24: ea:24:f3:51:00:ca:61:2e:5c:83:9f:df:5e:4b:0b:03:17:5c: f3:7a:7f:a3:8d:da:1e:e1:2c:5d:95:24:2f:9a:cf:7c:49:c4: 14:65:e0:88:20:b0:22:ac:83:0e:08:fc:3c:a9:11:d5:03:5f: 96:8e:13:4b:02:54:ac:3c:9f:44:fb:16:09:77:a4:ab:ca:c8: df:94:cc:bf:ab:6c:b2:47:56:89:6a:ad:f0:56:0f:99:a0:12: 82:59:2b:82:b9:b2:47:ed:78:84:2b:f4:26:cc:0c:24:be:bc: 90:94:47:06:50:30:48:6e:55:73:ba:df:c2:df:ce:38:11:46: 48:2d:6f:a6:c2:96:3c:2a:79:5b:87:1d:2c:c7:f6:28:92:75: af:e6:23:7f:6d:7a:c6:91:a6:6a:ee:0b:7a:a1:52:a2:69:90: 74:90:96:39:92:ab:93:e3:39:53:55:e7:9d:1d:df:b9:95:6b: bb:d9:49:32:18:66:57:3a:df:44:f3:1a:b0:83:d0:67:4b:12: 88:30:5e:9e:ed:91:57:e3:ae:08:33:78:f6:2e:93:15:d6:a6: e0:11:9a:c0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKAG+EWLgxy3tL/WjfI6I25+udIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMEMyRDA0QkI1QkE0RjkwRTdENTkxQzBFNzU5NjI0 Rjc5RjdEMTAeFw0yNTEyMDgwMTE5NTlaFw0yNTEyMTMyMTE2NTlaMDMxMTAvBgNV BAMTKEVCRkQ4Rjk0RjRCRkE1OUU2NTg0MDlENjJBRjQ4REU1QTlDRUI2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZdh2pyvejQeyYqFs1WH5fUat Xn3gvghxWXVIMbG+oWzWFH12LS5KpYbAKkorhDA2UfhGiLifYFJwf/nf1Ob1YhnL v84qZpA92WZp2jnOykbtOUkhnlxnXxzy/HzgPwTNZc+fZx/zlQYF9D8p3Zm/dFL7 9xVB4DL7auglLLu9yziY14ByKkldqZgg9PuEPhZiFJi/vpVd3p0i4Gb3qkdzni7u Fc14SqM6m/bCgo8XUrSlsoZiLTwflMC2KTURy/MvQ9b8/IA3yqLBNw+nk4SdwcSB k7WEnQ8wL31AuyfSxJXFHk5VMHNM7tHE6ehR5udL10PRxe+RE8z797/MlqPRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6/2PlPS/pZ5lhAnWKvSN5anOtigwHwYDVR0j BBgwFoAUWuDC0Eu1uk+Q59WRwOdZYk9599EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QUU4MUIxNDVGRDA2MEMxOTA4QTI4RjEwOTAxMTJGRTlE NjE2NzMwNzEwMUM3NDYyMTI3QjE2Mjk5OTdBQUI5LzAvNUFFMEMyRDA0QkI1QkE0 RjkwRTdENTkxQzBFNzU5NjI0Rjc5RjdEMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QUUwQzJEMDRCQjVCQTRGOTBF N0Q1OTFDMEU3NTk2MjRGNzlGN0QxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEFFODFCMTQ1RkQwNjBDMTkwOEEyOEYxMDkwMTEyRkU5RDYxNjczMDcx MDFDNzQ2MjEyN0IxNjI5OTk3QUFCOS8wLzVBRTBDMkQwNEJCNUJBNEY5MEU3RDU5 MUMwRTc1OTYyNEY3OUY3RDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOvkETw2CHiIkGU+oz7f8IvSki LCcHnhb7sq8mMWd9y0bBOyTqJPNRAMphLlyDn99eSwsDF1zzen+jjdoe4SxdlSQv ms98ScQUZeCIILAirIMOCPw8qRHVA1+WjhNLAlSsPJ9E+xYJd6SrysjflMy/q2yy R1aJaq3wVg+ZoBKCWSuCubJH7XiEK/QmzAwkvryQlEcGUDBIblVzut/C3844EUZI LW+mwpY8Knlbhx0sx/YoknWv5iN/bXrGkaZq7gt6oVKiaZB0kJY5kquT4zlTVeed Hd+5lWu72UkyGGZXOt9E8xqwg9BnSxKIMF6e7ZFX464IM3j2LpMV1qbgEZrA -----END CERTIFICATE-----Generated at Tue Dec 9 22:35:01 2025 by rpki-client