This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
File: 21B4A6594D293307A54FC67EA972CF9E807930DF.mft (raw, json)
Hash identifier: DlJ9p8ZGyEA4FEszg6MAEYrR5YdDyswfJPP1/fS8bD4=
Subject key identifier: 8E:19:7C:D8:A2:7B:3F:D0:E3:7A:34:62:1C:66:64:BD:40:D7:3B:1F
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Certificate issuer: /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial: 3EE97943589F914E00853D1B0D8C23848513EE6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
Manifest number: 0149
Signing time: Tue 16 Dec 2025 21:56:12 +0000
Manifest this update: Tue 16 Dec 2025 21:51:12 +0000
Manifest next update: Sun 21 Dec 2025 11:12:12 +0000
Files and hashes: 1: 21B4A6594D293307A54FC67EA972CF9E807930DF.crl (hash: Qbvu3mq2+CL5F2CdT4wVNFjCeLh1bxdjbeuvwgrt1M8=)
2: 3230302e35382e36342e302f31392d3234203d3e203237383339.roa (hash: /azlzrfLwX7iYF9S/2/9bgQOjnUMSDw5X7xHaYvXE08=)
3: 3133322e3235312e3232342e302f31392d3234203d3e203237383339.roa (hash: MoqnHwGgCYJp9jh32L59Q+jNXFm2w5MKOh+RWT9k4ZE=)
4: 3139302e3130372e33322e302f31392d3234203d3e203237383339.roa (hash: YdkIp31gRlK47KbfA9pYJ/GX9I/AQt6G45MdmWUFAhs=)
5: 3230312e3135302e3136302e302f31392d3234203d3e203237383339.roa (hash: dECGKGEMe4fsL58Z6fgHY9Fs1yFrmz3X59egXrUOjAA=)
6: 3139302e3130362e3234302e302f32302d3234203d3e203237383339.roa (hash: DGnmTtxw6+vTN/FRnmus3B4gzPh2/oDStj8la9G9E4Q=)
7: 323830333a393430303a3a2f33322d3439203d3e203237383339.roa (hash: A29ATOWGjGhQj7v77AX470EZdFoQTQuw6LsAxiyx/2s=)
8: 3138312e3131342e36342e302f31392d3234203d3e203237383339.roa (hash: qDpU8XBaEbcRRE0Dh2E/EuLVyq1AyGhromujxba8fNE=)
9: 3139302e31312e36342e302f31392d3234203d3e203237383339.roa (hash: oRzyUJlCpMARsgfXtug3ieo0i6o+G7AvZIisrUnaBos=)
10: 3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa (hash: eIkbCaCPHqA2aBmNNJzfBk5Sbqe6RZK/+95ZWTLl5sA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 04:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:e9:79:43:58:9f:91:4e:00:85:3d:1b:0d:8c:23:84:85:13:ee:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Validity
Not Before: Dec 16 21:51:12 2025 GMT
Not After : Dec 21 11:12:12 2025 GMT
Subject: CN=8E197CD8A27B3FD0E37A34621C6664BD40D73B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:1e:60:3f:b3:db:51:c2:80:0f:aa:9d:8b:
35:00:c0:55:5e:82:9a:a9:0a:2b:67:9d:b1:78:8c:
1f:3f:7b:a7:d4:e5:9a:a0:12:2f:34:b7:a1:c0:7b:
bc:09:45:36:bb:09:1c:ff:b2:4d:5f:96:0c:7e:24:
7a:cc:07:36:8b:4b:84:f7:3a:18:5c:32:d0:2c:66:
bb:aa:54:9a:ec:d9:5a:a0:c2:44:66:f2:5a:41:29:
94:13:30:e9:2d:82:e0:6f:eb:a6:e8:2e:76:df:45:
f7:2b:f1:3b:7b:ab:a7:f8:93:83:3a:5e:71:da:53:
5b:0a:c1:8e:60:58:f4:fd:4c:70:a4:9d:f8:69:af:
4b:d0:b5:29:48:f9:45:4f:8b:d3:a9:04:14:56:a0:
06:ed:ad:72:c0:67:38:7c:fd:5c:f1:74:94:80:53:
ce:e7:3c:9e:6e:d4:dc:bd:10:83:e0:cb:d6:b7:6f:
12:bd:29:2c:9a:b9:00:90:c4:97:96:c1:6c:a9:86:
e8:b9:f4:4b:e6:83:52:a3:7e:a1:bb:e9:97:28:d0:
eb:e3:a4:48:04:22:cb:f7:31:0c:1b:86:52:0f:86:
e3:93:c1:b7:1b:94:90:45:de:95:b1:8b:fd:3e:e9:
4c:7d:f3:a9:81:ff:3e:65:15:da:dd:d0:d8:21:e3:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:19:7C:D8:A2:7B:3F:D0:E3:7A:34:62:1C:66:64:BD:40:D7:3B:1F
X509v3 Authority Key Identifier:
keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:68:92:e2:d3:84:36:6d:02:31:bb:d3:60:83:01:a8:1e:af:
ac:31:2c:ae:2e:3f:de:e1:79:db:66:fb:db:79:a3:a0:f8:60:
f2:a0:08:32:0e:f4:13:01:89:60:3e:0a:1e:36:c5:91:30:9a:
3e:87:bf:60:ce:b8:6e:73:9d:6a:94:b1:46:b4:0f:69:29:9a:
2e:5d:72:53:1f:c0:0e:a7:b1:1e:6f:df:2c:15:90:a6:12:23:
0d:8a:25:95:24:1f:cd:d1:41:26:e2:70:e7:2a:91:18:03:49:
b4:2c:9c:c6:4c:12:b6:8f:54:5e:e5:6e:3e:e6:92:b8:5e:5c:
cc:e4:ea:b5:18:5f:22:68:b2:c7:4d:2e:18:82:94:e3:40:b9:
2e:6e:2e:65:63:7a:c9:5e:a5:1b:f1:ea:5a:a8:54:b2:81:58:
1c:b8:30:59:75:a5:45:35:86:a3:b3:64:26:b3:6e:bd:53:6a:
e8:70:0c:a6:50:0b:13:72:77:fb:81:ca:0d:d8:3e:71:2e:b3:
3f:33:ac:54:fc:26:ea:0f:e3:48:31:2b:e8:de:0e:12:c7:82:
2e:bf:eb:05:44:43:e1:4e:eb:c5:d0:f5:9c:d2:58:66:5d:64:
8c:51:45:cf:42:08:2b:32:31:35:0a:d7:3c:6d:2a:4f:78:ec:
ba:31:f8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 05:56:42 2025 by rpki-client