This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E8EA14623F52D6917C02D3BDBB0BEE40F514AAF27FBBA07F06FDA114FD9EEDD4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.mft
File: CAA1328421C6E0F8808B1011ACD27C9E37113886.mft (raw, json)
Hash identifier: Ag9pe7QLGwKKDkn7zTfuL/7aCaDfQZm3gN+b5EgjJQ0=
Subject key identifier: 59:61:3C:4F:22:D1:37:F2:EC:A2:8E:59:61:36:55:27:91:FA:39:E7
Authority key identifier: CA:A1:32:84:21:C6:E0:F8:80:8B:10:11:AC:D2:7C:9E:37:11:38:86
Certificate issuer: /CN=CAA1328421C6E0F8808B1011ACD27C9E37113886
Certificate serial: 2B0E36F9BB2802E3BC6856BAD74635FC84DF9AD4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E8EA14623F52D6917C02D3BDBB0BEE40F514AAF27FBBA07F06FDA114FD9EEDD4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.mft
Manifest number: 0149
Signing time: Mon 15 Dec 2025 10:45:54 +0000
Manifest this update: Mon 15 Dec 2025 10:40:54 +0000
Manifest next update: Sat 20 Dec 2025 12:25:54 +0000
Files and hashes: 1: CAA1328421C6E0F8808B1011ACD27C9E37113886.crl (hash: aMrqRSznhQW4yoXxSkEvAiTNRC2h5iQDOO6UsPOQnUg=)
2: 323830333a386439303a3a2f33322d3438203d3e20323732393838.roa (hash: BmvnU+DAMQPAhF4PEoRukwUCICT5xhHI8zRpFVz4FOI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E8EA14623F52D6917C02D3BDBB0BEE40F514AAF27FBBA07F06FDA114FD9EEDD4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.crl
rsync://repository.lacnic.net/rpki/lacnic/E8EA14623F52D6917C02D3BDBB0BEE40F514AAF27FBBA07F06FDA114FD9EEDD4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 12:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:0e:36:f9:bb:28:02:e3:bc:68:56:ba:d7:46:35:fc:84:df:9a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAA1328421C6E0F8808B1011ACD27C9E37113886
Validity
Not Before: Dec 15 10:40:54 2025 GMT
Not After : Dec 20 12:25:54 2025 GMT
Subject: CN=59613C4F22D137F2ECA28E596136552791FA39E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:18:8d:aa:24:d6:28:8a:ee:ff:c0:a5:db:
64:ab:91:16:76:84:6f:9f:65:43:c9:4f:da:3f:3c:
4e:6d:8c:22:2f:36:7e:15:25:e9:1a:9f:4d:aa:01:
f6:05:5c:4f:f6:84:6c:fb:74:72:c4:72:be:c0:df:
14:c2:ad:16:55:7a:02:fb:0a:ec:7f:33:22:d5:41:
ea:99:52:2a:4d:dc:26:ce:ee:2d:d6:9b:b7:03:b1:
a0:a5:b6:a0:95:81:9c:ba:53:1f:b6:ab:4d:7d:80:
9f:14:1a:a4:7f:b3:24:a6:ef:c8:f3:92:4a:7d:86:
e7:24:37:59:0c:c6:f2:10:17:40:af:91:55:07:fb:
54:c9:ec:51:99:f2:86:bf:4d:1c:0d:28:8f:2e:a1:
24:2c:55:77:47:43:46:1a:16:f7:49:17:ed:2f:eb:
c3:c1:b1:21:5d:8e:7f:92:99:23:a6:9d:91:f4:00:
02:6a:e7:c7:f3:2c:00:fb:25:57:01:35:58:21:6a:
12:c6:a5:0c:6f:a9:4f:80:13:81:c3:6b:61:ba:4d:
76:d7:b5:45:b0:47:d4:95:20:14:08:6a:c0:1a:b3:
b6:1a:8b:05:71:ce:49:a9:80:8b:74:96:f6:78:8e:
d5:bd:6b:2e:eb:0a:c4:92:f7:ed:28:aa:39:0c:23:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:3C:4F:22:D1:37:F2:EC:A2:8E:59:61:36:55:27:91:FA:39:E7
X509v3 Authority Key Identifier:
keyid:CA:A1:32:84:21:C6:E0:F8:80:8B:10:11:AC:D2:7C:9E:37:11:38:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E8EA14623F52D6917C02D3BDBB0BEE40F514AAF27FBBA07F06FDA114FD9EEDD4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E8EA14623F52D6917C02D3BDBB0BEE40F514AAF27FBBA07F06FDA114FD9EEDD4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7f:96:b5:be:ad:e5:27:6e:7f:0c:84:db:82:d9:dc:74:fc:
4d:2d:61:33:e9:ed:54:f7:3d:93:70:0e:f1:4c:22:96:f9:6d:
f7:87:47:80:8b:8e:0b:5a:89:58:3c:8c:21:83:b2:06:ba:ec:
49:de:5c:87:03:6b:fa:d3:26:6b:19:8c:8b:d5:ce:e5:91:14:
02:6b:cd:b2:bb:5f:8f:ab:9a:a2:e8:10:5a:32:a6:2a:99:e6:
51:27:35:b1:b6:56:1e:34:70:70:6b:97:6a:d4:c7:75:f4:49:
d4:a0:a3:31:e8:f3:b7:2a:be:98:0b:43:39:df:14:a3:56:c6:
8c:a8:cb:ea:43:c1:ba:46:18:0c:7e:1a:a6:c1:d7:ce:1f:ac:
c7:53:d6:fd:35:97:64:89:26:1b:12:f2:4f:89:73:f9:05:b0:
2a:bf:f1:b1:86:03:f1:1a:e9:7e:ad:b9:cc:c1:2b:48:e7:27:
47:2d:00:27:b9:78:19:f2:3a:59:a2:30:45:00:b1:11:69:99:
d0:44:67:49:3b:c0:99:4c:59:fd:6d:2a:f1:be:9b:66:30:c4:
d9:ec:41:ed:e0:bf:55:c2:d6:ed:56:26:5e:4b:76:92:ad:d6:
69:54:35:45:c8:5e:37:26:e4:d4:70:db:2e:6d:e4:7e:53:01:
8a:69:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 07:28:46 2025 by rpki-client