This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
File: D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft (raw, json)
Hash identifier: iTz6r8R/mjyfRmJpFhNJWeWu9eaedSJTsSfWqXUK9lg=
Subject key identifier: B0:F7:C8:91:B9:04:78:38:01:B6:53:0F:29:70:29:92:E3:6D:ED:04
Authority key identifier: D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F
Certificate issuer: /CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F
Certificate serial: 4826E2ABAA5BC345061165E5DA086222B1A4D44E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
Manifest number: 0158
Signing time: Tue 27 Jan 2026 06:03:58 +0000
Manifest this update: Tue 27 Jan 2026 05:58:58 +0000
Manifest next update: Sun 01 Feb 2026 13:46:58 +0000
Files and hashes: 1: 323830333a633731303a3a2f33322d3438203d3e20323732303937.roa (hash: G0BebRbCMQwz5JmQI45KQq7usDiHpo7rctjcsb/5YS0=)
2: D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl (hash: GJBr0dF5sTjfRLy3c9UZ98Xvapcdsezt9wpr7VgRt0Y=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl
rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 13:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:26:e2:ab:aa:5b:c3:45:06:11:65:e5:da:08:62:22:b1:a4:d4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F
Validity
Not Before: Jan 27 05:58:58 2026 GMT
Not After : Feb 1 13:46:58 2026 GMT
Subject: CN=B0F7C891B904783801B6530F29702992E36DED04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:12:f5:69:eb:2b:11:1b:7a:53:d3:6a:97:
2f:c2:7c:b5:bc:15:4e:3c:62:a6:81:bb:66:e2:53:
78:aa:21:21:95:02:07:26:07:35:21:76:2f:89:fb:
63:a0:22:07:bb:56:f0:f6:98:7d:50:ac:d1:ad:31:
9a:b6:04:1d:03:1a:da:8f:f8:97:fc:9b:2d:13:aa:
98:01:75:27:62:da:32:eb:0c:e2:1b:53:11:56:92:
7f:e3:17:0b:1c:3e:db:33:a5:9f:1c:8d:51:04:ba:
d7:bb:7d:6b:16:a8:d9:96:58:26:34:49:d1:c2:55:
5c:dd:94:29:9b:0f:47:8e:45:1b:f4:4a:fe:d9:3e:
bc:7d:d4:50:4b:cb:18:98:b1:6b:95:24:63:2f:92:
31:95:78:9e:00:ea:5b:5d:bd:44:a9:50:23:a1:e1:
1d:9e:e6:96:5b:4c:10:a0:ac:de:90:5a:06:62:6a:
44:d4:e6:a6:d0:c4:46:66:ec:74:9f:c7:40:a1:6e:
36:47:4d:40:7c:ec:0f:de:88:64:d8:21:a4:95:71:
4d:88:1d:79:d3:60:f0:2d:35:4e:62:53:77:67:59:
2e:e0:77:c6:23:85:55:38:79:be:67:3b:d5:b8:a1:
57:88:d9:06:f6:55:a5:5b:96:54:cc:6e:1e:c9:67:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F7:C8:91:B9:04:78:38:01:B6:53:0F:29:70:29:92:E3:6D:ED:04
X509v3 Authority Key Identifier:
keyid:D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:34:ed:21:c4:ba:df:83:27:c9:da:db:57:7b:87:1c:54:6c:
0e:b6:bc:cb:0f:7c:67:6c:04:0c:9e:a9:31:88:f4:ad:1b:2e:
16:02:68:9d:c3:46:82:9f:72:d4:fa:fe:3f:92:b9:45:8d:dd:
ca:52:ee:42:81:b2:4d:52:f0:a8:40:21:14:02:2b:9d:04:22:
36:e2:6c:04:7f:a5:ee:50:ac:23:28:37:42:98:d2:d7:ad:bd:
cb:ae:9e:9e:80:e9:dc:e5:c0:6d:db:46:a5:ad:a3:2c:34:fc:
ce:3f:83:17:3c:38:79:f4:cb:c0:74:39:7e:3a:c1:84:fd:a6:
68:5a:d0:81:e1:8e:c0:05:31:d1:29:60:ea:b6:fc:69:54:79:
14:3d:b3:54:c9:00:14:46:72:06:c9:b0:86:f7:56:92:e5:b5:
c8:65:17:fc:4a:b1:34:70:ca:5b:02:4c:98:8e:d4:67:4d:f0:
7a:bf:73:99:13:76:55:ca:80:88:5d:91:77:08:77:97:e9:e9:
8b:93:f8:a9:38:ab:27:0b:0b:e6:81:64:98:c5:71:f4:cc:f8:
07:45:26:3f:a6:97:16:22:60:de:68:fd:3a:96:7d:55:ce:9c:
25:0f:46:bc:8c:0a:06:d4:6d:c7:34:e0:55:80:05:ee:68:24:
9b:53:6b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 03:40:01 2026 by rpki-client