This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft
File: AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft (raw, json)
Hash identifier: goVhelnMLDPCFOoETSUI+jHsgnZ2K73zc95GzRGSFqM=
Subject key identifier: E2:D6:A9:A6:EC:25:B3:ED:C4:D1:6A:05:9B:90:CC:0A:87:1F:26:DD
Authority key identifier: AA:FB:3D:DE:DB:02:82:CB:7B:21:DA:68:34:EF:3E:E2:E7:C7:FB:B8
Certificate issuer: /CN=AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8
Certificate serial: 24C465A2B9A5ABEE1BD6496A2385C1F8BA3A306B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft
Manifest number: 59
Signing time: Mon 24 Nov 2025 02:12:57 +0000
Manifest this update: Mon 24 Nov 2025 02:07:57 +0000
Manifest next update: Sat 29 Nov 2025 20:34:57 +0000
Files and hashes: 1: 323830363a3430383a3a2f33322d3438203d3e20323730313238.roa (hash: ev/GuEw1oq5XclTZ5QMKbvKRlGBnDQiCGbBPgmlLYuA=)
2: AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.crl (hash: OJHn2/9n4M3NaVm23pbMPXeFwDWEYnzwd7l0hwRUGi8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.crl
rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 29 Nov 2025 20:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c4:65:a2:b9:a5:ab:ee:1b:d6:49:6a:23:85:c1:f8:ba:3a:30:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8
Validity
Not Before: Nov 24 02:07:57 2025 GMT
Not After : Nov 29 20:34:57 2025 GMT
Subject: CN=E2D6A9A6EC25B3EDC4D16A059B90CC0A871F26DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:cf:e2:a1:32:6e:bb:f8:65:b2:38:4f:3a:
87:f4:b9:8a:af:d7:46:ff:5d:06:91:11:3d:51:2e:
47:39:bb:58:7c:ee:e6:17:65:e2:f3:29:85:b4:1a:
f5:bc:34:f2:fd:a1:5e:c3:74:85:91:a4:3a:d1:2a:
ec:5a:93:f8:f0:05:33:62:cb:06:06:f4:b8:96:c7:
ba:59:72:a7:f1:9c:97:4f:14:11:8d:e3:8c:8c:be:
46:81:9a:e9:43:97:36:17:15:e1:07:a5:2f:60:28:
e5:b9:5e:60:36:23:6a:35:d6:58:b2:3b:2e:8e:47:
3e:f8:84:35:0e:95:83:38:d6:8c:ed:93:41:24:a9:
31:1c:00:8b:cd:04:61:ea:34:9d:d3:c1:f0:2f:b1:
cb:25:bd:78:94:b8:d4:53:98:a9:2f:3d:49:f2:51:
00:bb:5d:63:a0:38:cb:33:d9:73:e0:52:2e:c1:f0:
5c:ad:e1:dd:22:cf:44:6a:e9:81:3b:e4:1d:cd:e7:
12:a9:e7:9c:89:53:3e:d4:98:a4:81:a9:d9:d4:ae:
d4:f2:b2:9b:b7:95:e1:d5:59:9b:fb:35:24:52:50:
7d:dd:da:42:2a:ec:f5:a9:8f:13:9d:b8:7e:72:dd:
6b:b0:86:2c:08:b8:81:b6:bd:e6:83:a3:b4:03:45:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D6:A9:A6:EC:25:B3:ED:C4:D1:6A:05:9B:90:CC:0A:87:1F:26:DD
X509v3 Authority Key Identifier:
keyid:AA:FB:3D:DE:DB:02:82:CB:7B:21:DA:68:34:EF:3E:E2:E7:C7:FB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b3:42:66:d5:c7:e2:5a:88:fd:21:04:08:0b:36:27:19:6d:
b4:b9:4a:94:e3:53:79:06:47:e6:86:cd:4f:76:e6:bc:fc:2d:
40:33:7a:0e:8d:a0:c7:72:20:18:cd:0b:0a:a8:8e:81:0b:ea:
08:ac:9a:45:ff:d0:cf:35:c9:17:73:bf:e2:99:b9:ef:78:29:
26:80:9a:98:9a:13:5f:c6:a7:42:80:db:ff:a9:aa:45:7b:f4:
a3:8c:98:fc:b7:2b:c2:b5:9b:c2:ec:41:95:7a:ae:79:9a:97:
d4:51:42:86:c3:33:da:2f:b3:a4:2c:48:65:16:f2:93:33:e9:
5b:ea:fb:12:77:e4:ac:1d:42:40:02:30:71:1a:f8:eb:e6:51:
36:3b:d3:11:a2:c9:93:cf:cb:41:ed:a2:c4:50:d5:02:c5:00:
dd:9a:fa:70:e0:91:2d:fb:25:15:ce:26:84:ce:b5:62:26:e5:
d3:a9:05:e2:c6:be:e3:33:81:09:8b:9f:b3:ec:85:14:12:e7:
9f:92:43:3b:fb:40:ec:d4:b7:00:45:23:c4:26:e7:26:8e:21:
c4:50:c8:ef:bf:97:ac:8a:3e:71:63:bd:71:df:75:55:dd:14:
f5:01:ac:68:eb:af:37:3b:6c:6c:3a:fd:1f:a4:8d:1f:60:97:
ac:21:20:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 20:37:53 2025 by rpki-client