This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.mft
File: 5145CDCB2E8521E02DC6523594019C25D7A03E0C.mft (raw, json)
Hash identifier: k6E6NZ9rkrLsZR5IBYqVy+CASOWhitaOD6csP0nmw2Q=
Subject key identifier: EB:F0:9B:24:A7:35:98:D5:79:BB:0C:61:D2:7B:85:9E:F9:23:49:C2
Authority key identifier: 51:45:CD:CB:2E:85:21:E0:2D:C6:52:35:94:01:9C:25:D7:A0:3E:0C
Certificate issuer: /CN=5145CDCB2E8521E02DC6523594019C25D7A03E0C
Certificate serial: 6B58E128A3C418011829D0D6AA69D6C51E2DC93B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.mft
Manifest number: 0129
Signing time: Mon 08 Dec 2025 22:52:53 +0000
Manifest this update: Mon 08 Dec 2025 22:47:53 +0000
Manifest next update: Sun 14 Dec 2025 16:22:53 +0000
Files and hashes: 1: 323830333a376239303a3a2f33322d3634203d3e20323733303531.roa (hash: frlusXVIpK/ay3Y84OPNDBfdnCw2XVBe2c4BUZGcA7I=)
2: 5145CDCB2E8521E02DC6523594019C25D7A03E0C.crl (hash: FcAsAt+TMVTW66hex/m2y9g/Zb8PTor8EvKkNUyBPnw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.crl
rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Dec 2025 04:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:58:e1:28:a3:c4:18:01:18:29:d0:d6:aa:69:d6:c5:1e:2d:c9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5145CDCB2E8521E02DC6523594019C25D7A03E0C
Validity
Not Before: Dec 8 22:47:53 2025 GMT
Not After : Dec 14 16:22:53 2025 GMT
Subject: CN=EBF09B24A73598D579BB0C61D27B859EF92349C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:a1:27:90:bc:2f:53:54:bc:d6:14:7f:6f:
7d:28:ae:e3:0c:6e:bc:9f:62:5c:72:0f:12:a9:4c:
09:7a:78:e3:af:b7:03:f6:08:14:23:77:9e:e4:90:
4e:cb:4c:16:fc:2a:86:c1:e0:91:00:d4:53:f0:d3:
62:81:c0:ce:2d:28:d3:7b:37:0a:57:41:31:0e:18:
d0:26:f7:3d:9c:f2:c4:61:7d:ae:04:33:a1:af:d9:
f4:c9:89:1c:53:a7:50:6f:1f:66:3a:53:9b:93:c6:
5d:0b:9f:d5:f9:49:b6:fe:b3:dd:49:17:ab:d2:c8:
ed:66:f9:d1:e0:3d:89:54:a1:a6:40:1b:ce:ac:39:
41:2d:fd:fe:86:c8:f9:28:6c:fa:01:0d:fb:b0:0a:
74:93:17:c6:a6:ae:2b:58:e0:10:c2:73:4f:ed:0b:
30:51:a2:04:51:db:26:b6:44:a7:9c:71:1a:7a:f3:
a6:42:28:b3:80:5c:b4:9d:c1:63:f3:4a:3a:5d:f3:
5c:18:ee:38:f0:70:10:71:4e:b8:c2:62:6e:4d:13:
5d:8e:ad:4d:9c:8d:c9:3a:c4:f0:e8:3e:c8:a6:5a:
1f:da:4d:4a:06:d8:ef:29:34:44:34:ec:d8:d4:c9:
07:64:2e:2c:3c:69:ac:ea:30:54:bd:fd:b6:bf:bd:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F0:9B:24:A7:35:98:D5:79:BB:0C:61:D2:7B:85:9E:F9:23:49:C2
X509v3 Authority Key Identifier:
keyid:51:45:CD:CB:2E:85:21:E0:2D:C6:52:35:94:01:9C:25:D7:A0:3E:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6c:25:ea:d9:c0:20:53:56:65:b7:15:99:1f:a8:c4:39:6e:
27:e2:11:f2:30:4c:a1:1e:84:c3:dc:5d:14:47:20:02:d4:f6:
97:54:5c:60:45:3c:2c:6b:02:ae:0a:a7:6b:fb:a5:85:2d:4b:
c3:1a:bb:0a:4e:2e:10:21:18:92:c4:c3:f9:c0:56:07:5c:df:
7b:56:c0:7d:ee:3b:b5:aa:ed:f9:31:83:f4:d1:0e:2b:20:96:
b4:a7:09:64:59:27:36:92:80:d5:f5:a3:d8:81:9c:b6:8f:03:
a1:fc:aa:76:78:a2:60:2b:f1:26:d7:5a:2f:80:b2:db:b1:bb:
ca:f5:92:49:f0:c6:49:d4:2c:80:95:33:b4:d1:a1:c8:62:f0:
32:ac:6a:c1:0c:67:ea:21:de:75:a0:79:09:fd:53:0f:fa:ba:
29:0c:45:75:0b:b1:f3:d2:67:7c:ca:fa:24:62:74:65:61:e2:
a4:86:73:6c:8e:76:7b:a4:fb:10:7a:fe:ff:5e:52:2d:76:a3:
2d:9b:68:f9:4b:2a:75:a0:40:5b:a4:4c:5a:fc:a8:ec:92:0c:
4f:3d:7c:d3:50:9d:a6:ad:11:fd:00:0b:8c:41:c6:32:c8:4c:
db:2e:5e:cc:73:e8:67:59:65:2e:d7:4a:6e:55:cc:f0:a3:0f:
78:2f:83:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 11:06:10 2025 by rpki-client