This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.mft File: D24B0252516038C8F5AED640DCC6496F35757027.mft (raw, json) Hash identifier: DbQabAMmgXl/OBSjWK98Pz+IpLElo8knYyLh3Kew/8A= Subject key identifier: FA:F2:79:C6:EF:E8:C5:3F:47:2B:BD:AD:F2:54:6F:7D:AF:09:37:D2 Authority key identifier: D2:4B:02:52:51:60:38:C8:F5:AE:D6:40:DC:C6:49:6F:35:75:70:27 Certificate issuer: /CN=D24B0252516038C8F5AED640DCC6496F35757027 Certificate serial: 3A1FEEB8EC67127695C38C23631197C0EDC8082A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24B0252516038C8F5AED640DCC6496F35757027.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.mft Manifest number: 0140 Signing time: Tue 09 Dec 2025 15:33:18 +0000 Manifest this update: Tue 09 Dec 2025 15:28:18 +0000 Manifest next update: Sun 14 Dec 2025 12:42:18 +0000 Files and hashes: 1: 34352e3233362e3138342e302f32322d3234203d3e20323636383033.roa (hash: ATAWUsSLPcROc9ASTCDN+2eTL8OrROLIikDWEMZye/g=) 2: D24B0252516038C8F5AED640DCC6496F35757027.crl (hash: BKooeDJVuUr/tmMKUJd0cBk09fQ77fSNPr58mpeDXGI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.crl rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24B0252516038C8F5AED640DCC6496F35757027.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 14 Dec 2025 12:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1f:ee:b8:ec:67:12:76:95:c3:8c:23:63:11:97:c0:ed:c8:08:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D24B0252516038C8F5AED640DCC6496F35757027 Validity Not Before: Dec 9 15:28:18 2025 GMT Not After : Dec 14 12:42:18 2025 GMT Subject: CN=FAF279C6EFE8C53F472BBDADF2546F7DAF0937D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:f4:a7:7c:76:e8:3c:67:aa:a7:d8:30:0c: 8e:94:ca:ad:11:a0:74:44:6d:35:47:ce:83:1b:b3: 33:1c:28:e3:6c:13:35:22:05:f3:f2:11:85:67:7b: a7:6f:32:15:d8:a1:dc:f5:7e:88:6d:c0:d3:76:de: 0a:ac:55:77:eb:c6:d6:ca:87:fc:e3:9c:7f:5c:95: 6d:81:0d:32:7d:20:32:3c:2b:5b:3d:60:38:a2:28: c8:06:51:b1:78:9c:ab:a3:0a:41:65:65:13:57:92: 11:84:e9:c5:5b:7a:83:8a:44:f7:4a:6c:03:d1:99: fc:4b:35:50:dc:28:f5:b9:20:d4:d3:18:50:fe:7a: 16:10:93:5a:43:a9:71:af:6c:00:e9:8f:eb:12:e4: da:b8:a3:64:96:8c:36:44:45:ea:99:88:fb:9d:ee: fa:03:d8:90:bc:e6:25:c9:ac:3d:1f:f3:f3:4f:ab: d1:e8:4b:9c:5a:70:af:c9:c1:fc:92:2f:ae:de:62: ff:c5:90:31:f2:0b:93:d0:ea:e9:cc:57:90:20:f2: e5:c7:e1:11:b9:3a:e3:df:00:73:22:4c:a4:5a:07: a1:b5:f7:85:2a:0f:1b:91:92:f0:7a:9a:9f:04:de: 4d:71:51:c5:39:3b:5b:ca:8d:aa:18:40:22:3f:8e: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F2:79:C6:EF:E8:C5:3F:47:2B:BD:AD:F2:54:6F:7D:AF:09:37:D2 X509v3 Authority Key Identifier: keyid:D2:4B:02:52:51:60:38:C8:F5:AE:D6:40:DC:C6:49:6F:35:75:70:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24B0252516038C8F5AED640DCC6496F35757027.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e2:15:76:a2:e2:9c:8e:4c:5f:e2:69:29:9f:43:43:2e:7a: 9f:4b:07:52:53:ae:6d:50:ce:c3:96:29:c8:81:11:22:8e:34: 07:d1:c6:4f:ad:a2:a6:b0:c9:5b:56:70:72:18:a7:d5:0f:a7: ce:e7:01:29:3e:d4:95:cd:43:34:7d:5f:46:c5:79:ec:db:29: 0e:40:3b:ce:92:40:c8:a5:87:e6:96:87:72:b8:c6:b3:35:3e: cb:f8:f7:dc:fd:ec:13:2a:6d:75:10:d9:72:c0:0e:d0:af:0c: 47:41:fa:c1:e0:33:8f:d5:78:55:04:ec:d5:73:16:91:f1:47: a1:9d:b6:08:e2:e8:dc:da:3c:e5:2b:b4:a1:01:12:88:36:b5: 5d:24:bb:61:95:14:a2:76:2e:cb:23:37:d2:f2:ed:4c:32:3a: b3:ed:89:7b:f7:59:fe:ad:84:dd:d9:58:c9:00:14:82:6b:93: da:9d:39:fc:3d:29:52:36:af:f4:5a:f0:00:e6:0d:bb:d1:0f: fb:3f:aa:6c:21:37:65:54:b1:ac:20:5e:1e:e5:4f:de:0d:94: 82:86:fc:c9:10:60:c1:f0:6d:44:4b:ca:98:ff:b8:cb:e5:9e: d1:dc:fd:a3:9a:4a:29:87:d5:2f:32:56:33:4c:a5:2e:f2:43: 6d:8e:ab:ed -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOh/uuOxnEnaVw4wjYxGXwO3ICCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI0QjAyNTI1MTYwMzhDOEY1QUVENjQwRENDNjQ5NkYz NTc1NzAyNzAeFw0yNTEyMDkxNTI4MThaFw0yNTEyMTQxMjQyMThaMDMxMTAvBgNV BAMTKEZBRjI3OUM2RUZFOEM1M0Y0NzJCQkRBREYyNTQ2RjdEQUYwOTM3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9vSnfHboPGeqp9gwDI6Uyq0R oHREbTVHzoMbszMcKONsEzUiBfPyEYVne6dvMhXYodz1fohtwNN23gqsVXfrxtbK h/zjnH9clW2BDTJ9IDI8K1s9YDiiKMgGUbF4nKujCkFlZRNXkhGE6cVbeoOKRPdK bAPRmfxLNVDcKPW5INTTGFD+ehYQk1pDqXGvbADpj+sS5Nq4o2SWjDZEReqZiPud 7voD2JC85iXJrD0f8/NPq9HoS5xacK/JwfySL67eYv/FkDHyC5PQ6unMV5Ag8uXH 4RG5OuPfAHMiTKRaB6G194UqDxuRkvB6mp8E3k1xUcU5O1vKjaoYQCI/juo5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU+vJ5xu/oxT9HK72t8lRvfa8JN9IwHwYDVR0j BBgwFoAU0ksCUlFgOMj1rtZA3MZJbzV1cCcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QjMxNDZDRTkxMjA1RjNENUM3OEM1MTY5Njc4NzdEMzFD Q0FEM0E0QUY5OEVGNTJCMURDQjYwMTY4RDI1RjdFLzAvRDI0QjAyNTI1MTYwMzhD OEY1QUVENjQwRENDNjQ5NkYzNTc1NzAyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMjRCMDI1MjUxNjAzOEM4RjVB RUQ2NDBEQ0M2NDk2RjM1NzU3MDI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEIzMTQ2Q0U5MTIwNUYzRDVDNzhDNTE2OTY3ODc3RDMxQ0NBRDNBNEFG OThFRjUyQjFEQ0I2MDE2OEQyNUY3RS8wL0QyNEIwMjUyNTE2MDM4QzhGNUFFRDY0 MERDQzY0OTZGMzU3NTcwMjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB84hV2ouKcjkxf4mkpn0NDLnqf SwdSU65tUM7DlinIgREijjQH0cZPraKmsMlbVnByGKfVD6fO5wEpPtSVzUM0fV9G xXns2ykOQDvOkkDIpYfmlodyuMazNT7L+Pfc/ewTKm11ENlywA7QrwxHQfrB4DOP 1XhVBOzVcxaR8UehnbYI4ujc2jzlK7ShARKINrVdJLthlRSidi7LIzfS8u1MMjqz 7Yl791n+rYTd2VjJABSCa5PanTn8PSlSNq/0WvAA5g270Q/7P6psITdlVLGsIF4e 5U/eDZSChvzJEGDB8G1ES8qY/7jL5Z7R3P2jmkoph9UvMlYzTKUu8kNtjqvt -----END CERTIFICATE-----Generated at Wed Dec 10 00:35:46 2025 by rpki-client