This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
File: BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft (raw, json)
Hash identifier: pfA0I+yNb9choRhBfZi7KrgNwgAMN99J0ivySAojad4=
Subject key identifier: E7:43:7F:DB:0F:80:2F:CD:39:F0:AF:25:E8:13:12:45:5A:84:29:67
Authority key identifier: BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6
Certificate issuer: /CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6
Certificate serial: 194BC04AA7A9CB26BF452FBF5CECEF884AE4C313
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
Manifest number: F3
Signing time: Wed 28 Jan 2026 07:36:43 +0000
Manifest this update: Wed 28 Jan 2026 07:31:43 +0000
Manifest next update: Sun 01 Feb 2026 17:18:43 +0000
Files and hashes: 1: 323830333a633335303a3a2f33322d3332203d3e20323733383834.roa (hash: QyUtb/5gl6krDSKK04fIDtKnAQYQqWsdxxEP9vtOfXU=)
2: BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl (hash: 3yNTeK7D8v7+EoeErM7r+l4DOe6Kd08LzKaaDkdVFvs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl
rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:4b:c0:4a:a7:a9:cb:26:bf:45:2f:bf:5c:ec:ef:88:4a:e4:c3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6
Validity
Not Before: Jan 28 07:31:43 2026 GMT
Not After : Feb 1 17:18:43 2026 GMT
Subject: CN=E7437FDB0F802FCD39F0AF25E81312455A842967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:c1:1d:f9:e9:48:22:42:fd:0f:a5:90:c7:
5f:b8:2b:9f:cf:c2:b3:c0:e0:e6:4f:1b:8d:0d:1f:
36:ef:dd:75:f7:7d:04:84:21:f2:03:1d:83:f4:00:
79:5f:cc:aa:3f:ae:13:56:b4:21:87:6a:1f:8a:4f:
ec:66:6b:d7:ee:71:d4:de:a3:55:db:b7:df:d4:59:
70:99:22:f7:53:77:22:c4:16:b8:ec:84:61:31:8e:
d9:62:b5:de:eb:74:a0:06:b4:c3:71:0b:49:33:4f:
f0:96:38:92:3c:f3:e9:3b:cb:94:6c:e0:fb:6b:e2:
5d:82:64:c5:31:df:a1:cd:aa:c8:10:9e:f1:32:ed:
57:6e:73:e5:e2:23:18:b7:7a:1e:84:23:93:ac:fd:
87:38:a5:35:c7:b4:7f:69:06:a0:81:07:df:98:78:
b1:8e:9c:9b:ce:80:2b:81:c1:aa:c8:65:50:de:29:
6d:d3:63:47:c0:82:6b:7f:45:74:5b:f1:34:15:12:
a0:5c:cb:9e:0e:67:da:b6:d2:bc:29:e5:f0:7b:ed:
45:b7:3b:73:af:c7:4f:1b:c0:73:76:b1:9b:fc:57:
7d:ff:7d:df:93:f6:6c:c2:0e:b9:b1:0e:3b:fc:93:
e5:3f:c5:c5:5d:69:37:51:52:c5:46:cf:31:0e:56:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:43:7F:DB:0F:80:2F:CD:39:F0:AF:25:E8:13:12:45:5A:84:29:67
X509v3 Authority Key Identifier:
keyid:BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:18:72:d6:b8:9d:e3:eb:1b:98:33:4a:85:cf:60:52:f7:5b:
28:fa:ae:19:8e:92:51:a1:cc:28:e6:bc:0f:31:fe:e9:da:6c:
4a:f3:8e:48:fb:d5:b4:4f:26:79:7b:88:26:36:96:10:e9:5d:
7b:98:7c:0f:6a:71:54:6b:1c:7f:81:9a:f9:d0:69:b4:54:4f:
4c:a5:b9:64:a8:83:ec:5f:c0:f9:8f:e3:3d:b4:16:af:19:05:
a4:1e:30:75:ab:10:49:bc:77:70:79:9d:00:15:a8:69:22:fa:
1f:98:e0:51:fa:e0:6a:17:f0:b5:b1:23:96:51:45:ab:58:61:
bc:f0:8a:2f:e9:77:c4:58:ae:54:90:8d:e4:20:35:6a:8c:42:
1f:d5:6c:1e:af:04:10:82:5b:91:bb:39:c2:4f:ee:b1:04:3c:
08:fc:a7:14:5c:e7:ca:8f:4d:47:2c:44:43:96:ce:a7:ab:f5:
61:c1:e3:ab:30:55:73:43:68:45:3b:19:1b:ef:9d:67:e7:e1:
90:ad:0f:db:e8:d5:d5:36:03:5a:48:5b:07:61:f3:ff:ed:74:
a5:4c:ca:70:14:a2:9a:3b:d5:4d:97:aa:60:01:bb:10:9d:7d:
8d:3d:4d:3b:ea:d3:db:50:d5:2f:40:13:fa:53:f1:0d:56:26:
71:76:f4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 03:40:00 2026 by rpki-client