This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft
File: 89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft (raw, json)
Hash identifier: 3B90FeICxPbQD8r1HgELXbsqOT+U+tD5PMFO51HwdHM=
Subject key identifier: F4:3A:11:69:D1:AF:F7:61:FA:23:85:93:11:17:F9:1F:3F:80:DF:F3
Authority key identifier: 89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5
Certificate issuer: /CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5
Certificate serial: 2CAFE2D284DD49BCCF00A820A836D56E93E670C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft
Manifest number: 0142
Signing time: Sun 14 Dec 2025 15:54:03 +0000
Manifest this update: Sun 14 Dec 2025 15:49:03 +0000
Manifest next update: Fri 19 Dec 2025 23:44:03 +0000
Files and hashes: 1: 3137392e36302e3230382e302f32322d3234203d3e203532343931.roa (hash: a5MVWgzS9CicCzinp6R7LIQqjYcufxM/b0UY/mQXwKc=)
2: 89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl (hash: fy2gP8ostVXhO0aBG1OQIPt57uTP1qmCpjivqb4Ghhw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl
rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 23:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:af:e2:d2:84:dd:49:bc:cf:00:a8:20:a8:36:d5:6e:93:e6:70:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5
Validity
Not Before: Dec 14 15:49:03 2025 GMT
Not After : Dec 19 23:44:03 2025 GMT
Subject: CN=F43A1169D1AFF761FA2385931117F91F3F80DFF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:89:a5:30:6c:4b:f3:95:00:e5:e5:21:2d:
ed:c1:54:f7:6d:d8:de:c5:24:f9:e1:8b:ba:06:52:
17:60:6a:50:02:43:af:21:ad:c0:dd:0d:84:d9:5e:
12:b7:c7:ed:9a:d5:bb:de:52:81:e9:41:ef:d5:66:
05:0d:df:a5:aa:9d:ad:09:23:99:c1:d9:43:68:12:
1f:79:8d:ca:19:53:1a:23:b1:ad:d5:d9:ff:b2:d2:
16:f6:d8:89:45:6d:06:59:92:2c:cf:45:09:8a:fa:
fb:2f:44:fa:16:74:62:34:c2:28:78:04:d4:66:30:
fb:29:c7:0b:74:c0:19:e2:f2:92:65:fd:3f:ba:d4:
ba:58:c3:bb:2e:a2:01:57:70:b0:60:71:12:f7:59:
31:bc:61:29:28:6a:92:44:a1:ec:42:3d:dc:d3:7a:
2e:bb:bc:c2:9a:23:95:c5:4f:9b:b9:a0:8b:c3:3c:
26:aa:c0:b9:0e:fd:61:30:c5:ec:ff:87:2b:be:49:
2b:e5:a3:79:b4:95:8b:d0:6f:f9:e9:48:7f:5a:a9:
69:49:a6:1a:cb:c6:6f:03:77:fe:af:8a:79:de:bf:
0f:34:4b:82:b4:d0:d1:b1:69:bd:88:69:94:49:d3:
e1:fc:60:2b:02:67:fe:71:87:5b:df:ca:dd:dd:be:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:11:69:D1:AF:F7:61:FA:23:85:93:11:17:F9:1F:3F:80:DF:F3
X509v3 Authority Key Identifier:
keyid:89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f5:9d:78:b6:88:57:b2:ed:11:c4:76:31:05:11:1a:75:15:
67:92:d5:c3:98:cb:15:d3:61:6e:d3:fb:64:74:03:12:f0:61:
be:d2:20:35:9d:59:6b:d4:99:f8:1f:2c:07:bf:84:15:c4:e9:
d3:4b:cb:08:dd:a2:66:07:72:12:95:4f:61:4b:9c:f1:5c:f2:
7e:61:39:0d:6f:5e:0b:b4:39:20:a7:4c:9a:35:cf:66:1a:d1:
c4:9d:be:50:70:69:4d:1f:07:3b:15:73:9b:4f:86:43:24:51:
04:4f:f5:66:20:f5:90:91:60:8a:2e:91:ee:1f:26:ec:e1:4c:
ec:c2:3e:45:f6:40:21:1a:74:0c:a5:18:29:7b:21:92:c0:69:
8f:09:aa:ef:19:27:f2:b9:7e:e0:18:c3:80:b3:fd:da:fa:7d:
ec:c0:2f:a9:5a:50:55:c2:69:7a:5e:1d:ac:0a:fd:ba:fa:cd:
4d:0a:f3:4d:0a:f0:4b:e4:ea:92:01:69:32:a5:e7:41:5f:40:
12:e5:29:7b:13:2e:60:9a:8d:bb:b2:d1:2a:92:74:36:72:a6:
57:8e:1c:b9:e1:cf:44:70:1c:8f:15:5e:7a:fa:51:15:d7:64:
dc:33:9e:dc:cf:37:66:8e:03:24:57:6b:14:26:1c:92:32:b4:
f4:a9:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 20:34:25 2025 by rpki-client