This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft
File: 965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft (raw, json)
Hash identifier: AQ1Fuup4uKpz90bmm05lgQ1bpaGRyJOtoZHNm/zY+d4=
Subject key identifier: D1:FE:B1:9D:0A:B5:7C:2F:0E:D6:0E:0E:04:3D:03:B0:1C:FD:FA:FC
Authority key identifier: 96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D
Certificate issuer: /CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D
Certificate serial: 2334E7C336B03CAFDD22FD17EE25928C1FAFBFFD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft
Manifest number: 0149
Signing time: Fri 09 Jan 2026 06:22:26 +0000
Manifest this update: Fri 09 Jan 2026 06:17:26 +0000
Manifest next update: Wed 14 Jan 2026 21:54:26 +0000
Files and hashes: 1: 3139302e372e3136302e302f32302d3230203d3e203237393038.roa (hash: s953Iau+LEUEMVS5+HKJ/tmf9MsBiJseXOeY6aldEGw=)
2: 965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl (hash: TLOCietS4ckRngBOLarMdsxHUDgxp6HELrdM4itYG50=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl
rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Jan 2026 10:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:34:e7:c3:36:b0:3c:af:dd:22:fd:17:ee:25:92:8c:1f:af:bf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D
Validity
Not Before: Jan 9 06:17:26 2026 GMT
Not After : Jan 14 21:54:26 2026 GMT
Subject: CN=D1FEB19D0AB57C2F0ED60E0E043D03B01CFDFAFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:f8:c1:bd:67:41:ba:a8:96:04:3f:0e:05:
5c:9a:a2:72:ed:49:ae:e4:25:db:19:07:76:62:04:
25:82:de:fa:d1:20:93:50:72:64:b6:c7:43:d6:7e:
f6:78:6e:5e:02:d0:4a:a6:96:44:6f:9d:5d:06:75:
6b:83:ed:0a:3d:da:e2:f1:64:04:e7:6c:5d:20:87:
26:f1:58:b5:ff:25:80:e3:8c:aa:fb:c1:2b:04:0a:
aa:3e:16:4a:e0:29:9c:41:49:67:95:f4:42:af:22:
7a:9e:bb:14:e0:01:a9:55:7a:01:d5:e7:df:61:b7:
0f:61:ae:c0:5e:56:54:0c:3f:62:4a:30:d1:c2:a0:
bf:7c:05:c8:b9:81:1c:07:68:7b:cc:e3:58:1a:2c:
df:e6:2c:28:bd:3e:3f:3c:17:46:75:81:a4:1b:43:
ba:93:90:89:0b:aa:bf:4e:3a:04:0c:dd:ce:ea:a9:
4f:fb:2f:68:96:0a:83:b1:69:ca:0d:9f:0e:f0:8c:
32:c0:92:c7:94:53:b2:2f:4b:63:8d:fa:6b:9e:f2:
03:47:a7:81:e7:97:36:e0:24:39:a3:1c:1f:b9:7b:
ca:b9:9e:45:79:82:a2:83:b0:d7:12:62:6c:bb:6e:
f6:8c:6e:3b:08:32:83:d8:8f:57:a2:c8:75:79:1b:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FE:B1:9D:0A:B5:7C:2F:0E:D6:0E:0E:04:3D:03:B0:1C:FD:FA:FC
X509v3 Authority Key Identifier:
keyid:96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e4:55:1f:9f:15:12:a2:e5:3f:ce:c4:c3:bd:15:80:17:5d:
c7:fc:8a:0d:fc:40:ab:da:90:35:58:0f:a7:58:05:42:11:11:
43:7d:2b:ad:49:c5:a2:43:af:b3:fb:4c:f5:c7:ef:4d:bf:72:
29:bc:7d:e7:b3:4f:9b:81:96:a7:b9:27:78:2c:ae:33:42:20:
2e:6b:bd:99:bb:36:60:57:82:ff:3c:ab:76:e6:38:90:f6:df:
8d:af:89:03:8e:c7:76:73:aa:7d:a3:e7:4b:5e:43:48:00:c4:
cb:ad:42:99:21:ea:da:cb:7e:81:27:82:d9:9f:12:c0:a8:e6:
a5:34:16:de:ed:fc:87:a5:47:5f:f8:98:77:bc:9a:10:24:1e:
12:70:20:f2:36:0c:f5:29:c9:bf:71:34:c4:01:14:d3:93:af:
d5:ac:38:21:98:8c:d4:a0:16:60:2a:d9:d4:0c:20:c5:b7:04:
3e:8e:a4:c6:b1:79:31:4b:51:b9:27:2c:88:27:32:1d:2e:c6:
3a:bd:9e:4d:98:84:b2:ee:27:78:f9:9d:bd:5e:1f:08:3e:2f:
78:87:d7:03:cf:61:5b:c6:73:46:a5:e6:f9:d5:3d:ac:1e:fd:
27:a3:31:0a:01:7f:e6:83:a7:46:90:59:18:a7:63:d8:5c:43:
31:05:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 11:03:28 2026 by rpki-client