This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft
File: 3FA213F071F512993E71744BA485B170F0449C83.mft (raw, json)
Hash identifier: Pl5gJCFPAqYYK/P4zoS0ikXJsb2LLJjoS/7CaeEs7Dk=
Subject key identifier: E7:B4:B4:61:AA:6E:88:3B:D1:3B:33:33:3C:63:04:9E:CD:BC:F6:03
Authority key identifier: 3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83
Certificate issuer: /CN=3FA213F071F512993E71744BA485B170F0449C83
Certificate serial: 1130BC2C57C5D7BC0022B3F58ABEEA16E72C7572
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft
Manifest number: 0152
Signing time: Tue 16 Dec 2025 20:55:33 +0000
Manifest this update: Tue 16 Dec 2025 20:50:33 +0000
Manifest next update: Sun 21 Dec 2025 12:46:33 +0000
Files and hashes: 1: 323830313a31653a333030303a3a2f34382d3438203d3e20323637383933.roa (hash: ShfiXTqhIxdLPbviFRl+sr029d2cewB9rQ7+Lw9HY50=)
2: 3FA213F071F512993E71744BA485B170F0449C83.crl (hash: 136ohlelXap+Z9+qSi4HE1UmSa0kCMplCVvrTVL294A=)
3: 34352e36352e3230302e302f32342d3234203d3e20323637383933.roa (hash: 8xhtEDjsw/uXiZVAcUQOCAiyH3Nt1EJHIOOAxF1+/0o=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.crl
rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 04:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:30:bc:2c:57:c5:d7:bc:00:22:b3:f5:8a:be:ea:16:e7:2c:75:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FA213F071F512993E71744BA485B170F0449C83
Validity
Not Before: Dec 16 20:50:33 2025 GMT
Not After : Dec 21 12:46:33 2025 GMT
Subject: CN=E7B4B461AA6E883BD13B33333C63049ECDBCF603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:18:a7:27:bf:b7:79:6b:2f:f7:64:c9:3e:00:
65:29:f5:a3:9b:2a:e8:6c:3d:bd:6a:5c:28:2a:f3:
73:76:0e:d7:19:d8:9a:9f:64:bd:12:0a:fe:56:bb:
e2:3a:e5:1f:18:38:6b:1a:47:4e:05:d5:7a:e5:e2:
ca:87:07:32:49:3c:c2:c2:a7:51:09:f8:64:41:fa:
ad:34:ad:f7:1a:d1:f9:ff:62:f3:d3:d1:d9:9c:0e:
b6:57:3a:b2:3f:51:3d:3d:c4:a9:fa:71:80:e1:1c:
20:ab:bf:f1:7e:8c:ab:ff:83:09:a5:dc:0e:c3:d2:
2e:85:3d:2f:75:f1:be:c4:fc:10:04:de:fb:4c:3a:
01:6e:3a:f4:d8:8a:f6:dd:b5:a4:83:b2:6b:67:d2:
4f:fe:f0:1e:d0:f4:8f:60:a9:dc:a0:8c:57:7f:79:
e6:fa:37:8f:15:7c:db:7a:a2:4a:10:2b:93:8a:20:
a4:4d:8b:20:2f:31:64:97:c8:a2:68:6e:a1:94:6f:
2b:04:95:cb:4a:99:a2:b0:1f:c1:35:23:90:95:fb:
0e:15:92:a6:ac:82:48:f7:ec:5f:8c:b8:0b:8e:0f:
61:a7:30:e2:ba:07:53:c8:21:41:a7:8b:d9:71:c1:
5d:8d:dd:a6:fc:1c:cc:14:1a:3f:57:90:0e:3d:4c:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B4:B4:61:AA:6E:88:3B:D1:3B:33:33:3C:63:04:9E:CD:BC:F6:03
X509v3 Authority Key Identifier:
keyid:3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:39:ae:3a:16:cd:e0:e5:30:a6:c7:be:75:5a:c6:1c:9c:7f:
98:f0:9f:ca:0c:21:8a:93:38:34:fd:ac:1d:07:ce:9f:d2:b1:
9f:41:f9:80:6c:1f:fc:6f:c0:d9:58:5a:28:68:bf:45:05:28:
82:d5:fa:ab:ce:d0:40:87:2d:ac:bc:70:ba:f9:70:3f:7f:a0:
25:52:4e:14:68:0c:5b:bf:98:91:1f:1a:5a:1e:2d:e7:84:9c:
8c:9a:fd:91:b2:d1:02:ff:1f:9f:23:61:66:07:28:62:b4:cd:
b6:6e:0f:8f:28:05:4d:b6:3d:02:a5:e4:e6:a1:bd:25:ab:db:
29:6d:47:28:ad:5e:9c:4c:75:cc:ad:78:07:50:58:52:99:53:
d4:f8:fe:5a:05:e1:1a:4f:9b:62:b0:a6:2f:41:c5:2a:81:7f:
da:65:7f:8b:c4:6e:f4:a5:8c:bd:06:dd:3b:44:f4:d8:21:fa:
80:8f:67:e4:5b:80:83:68:82:7e:b8:45:48:82:f8:fa:0d:47:
47:83:67:56:b5:2b:6d:3c:ae:55:40:a8:72:17:ef:9f:b8:64:
a5:a0:6a:ba:b0:41:46:e1:30:10:0b:3a:0f:96:ca:51:91:52:
f3:92:5a:ec:4b:9d:c0:6e:05:13:b2:4d:57:80:9a:51:e6:10:
02:11:30:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 05:58:47 2025 by rpki-client