This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.mft
File: 8438E7E6A61CE89232421B53643A3159B330CDFD.mft (raw, json)
Hash identifier: w+jB1L2RxAz61OvQ5quQtgJD8y0RLwJMU8rTkQWdm5Q=
Subject key identifier: FF:BE:56:B4:18:13:E7:03:37:D1:84:F7:15:50:C9:04:09:6C:A2:FA
Authority key identifier: 84:38:E7:E6:A6:1C:E8:92:32:42:1B:53:64:3A:31:59:B3:30:CD:FD
Certificate issuer: /CN=8438E7E6A61CE89232421B53643A3159B330CDFD
Certificate serial: 2768973A9DDF5B4182B899BDE2BE317844C0C3C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8438E7E6A61CE89232421B53643A3159B330CDFD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.mft
Manifest number: 0143
Signing time: Mon 08 Dec 2025 00:09:17 +0000
Manifest this update: Mon 08 Dec 2025 00:04:17 +0000
Manifest next update: Sat 13 Dec 2025 20:16:17 +0000
Files and hashes: 1: 8438E7E6A61CE89232421B53643A3159B330CDFD.crl (hash: 5eyLdhhBV9MbQTt7zwAydRU9aNn53NNsqVeHs8w736M=)
2: 34352e372e3133362e302f32342d3234203d3e20323635353534.roa (hash: T73m9sG2Ce9KWQ8u31wlYEzqvd56xGAGJdbg8cijLAk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.crl
rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8438E7E6A61CE89232421B53643A3159B330CDFD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 13 Dec 2025 20:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:68:97:3a:9d:df:5b:41:82:b8:99:bd:e2:be:31:78:44:c0:c3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8438E7E6A61CE89232421B53643A3159B330CDFD
Validity
Not Before: Dec 8 00:04:17 2025 GMT
Not After : Dec 13 20:16:17 2025 GMT
Subject: CN=FFBE56B41813E70337D184F71550C904096CA2FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:46:c0:8b:1f:5c:97:fe:27:df:f5:ea:a7:
dc:22:3a:75:4c:7a:2e:63:de:cc:70:f1:a9:6c:60:
cd:d6:2e:72:a6:d7:40:1e:bb:0e:e5:90:9f:b8:86:
45:f7:28:dd:ec:69:5c:1d:c9:27:c7:5c:d2:0c:e6:
48:b0:84:85:8e:ab:f4:35:83:bd:8e:84:c6:5e:b7:
90:4a:57:51:46:4a:09:2c:3b:0b:a3:de:fe:fb:19:
27:0b:72:92:62:f4:3b:36:d2:88:02:eb:b2:5b:c4:
b8:6c:2d:23:34:b5:ac:f8:59:ae:67:bd:4b:dd:41:
83:04:bb:a6:a8:58:8c:26:f7:80:86:5d:db:36:98:
a0:ca:0a:40:dd:70:92:7e:ed:bb:f7:0a:02:a8:8a:
f2:07:14:c4:98:ef:1b:70:10:e0:a1:33:1d:f6:78:
7c:ff:5b:5d:1b:b0:c8:98:5a:4d:6b:8f:e1:df:83:
4b:23:1b:d8:6f:81:60:c7:af:e0:27:92:5c:f7:7b:
df:26:83:e1:7e:d8:28:86:cc:b1:ff:7d:8a:a9:dd:
18:48:fa:a5:cf:e9:6f:d4:d2:3a:de:3e:45:31:3c:
01:f7:b0:71:73:71:1a:3b:30:53:15:fa:56:b8:51:
a7:ed:b0:f7:13:5f:90:a3:20:75:b3:d2:7d:ef:bc:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:56:B4:18:13:E7:03:37:D1:84:F7:15:50:C9:04:09:6C:A2:FA
X509v3 Authority Key Identifier:
keyid:84:38:E7:E6:A6:1C:E8:92:32:42:1B:53:64:3A:31:59:B3:30:CD:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8438E7E6A61CE89232421B53643A3159B330CDFD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a6:94:b8:89:8c:9f:07:dc:c2:31:de:40:cc:11:f4:08:f5:
d6:73:11:02:1a:cf:b6:b0:ad:30:e1:58:6a:e4:78:db:86:a1:
36:37:27:58:b2:7d:8a:8a:1a:49:69:05:16:20:5c:8a:07:94:
a4:64:2b:d4:83:59:19:12:9c:a7:70:a3:c6:0b:5a:6b:29:c3:
2e:e6:73:99:a9:e1:13:2c:e5:24:e2:b2:e7:08:53:b9:07:61:
65:e6:a8:3f:4c:91:c2:80:82:81:33:a9:63:30:cb:77:cd:06:
d8:d8:ef:6e:56:dd:a0:ba:7d:c7:09:17:35:6a:38:39:49:0b:
b6:1e:f4:05:04:0f:c6:9d:f2:70:04:fa:e7:6a:88:df:e0:61:
fe:59:01:3f:f8:7a:0e:41:8f:9c:cd:4e:8b:c0:b0:b0:bb:09:
be:b7:5b:29:f9:dd:58:35:f2:59:b7:b9:d2:d3:8d:83:09:2a:
57:de:4a:84:ac:ed:6c:d9:f4:52:35:b9:09:4b:5e:55:4f:a8:
e5:10:a6:d1:6b:32:a5:fc:02:d1:da:af:62:91:03:72:94:d1:
fb:51:34:d9:13:e7:ac:bc:81:0c:05:36:ce:ee:74:89:ce:13:
82:76:46:53:f6:2d:b2:dd:71:c8:cc:a6:d8:71:7c:ae:e4:70:
7c:ab:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 00:37:50 2025 by rpki-client