This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
File: 33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft (raw, json)
Hash identifier: ZCGQVCQs7/rpS/bB+KOlfgBPZdJxD0KCsId38Ogwl0k=
Subject key identifier: AF:F2:97:B8:FE:74:76:33:31:D1:88:5A:52:7E:13:6E:C8:69:A6:29
Authority key identifier: 33:88:7D:46:6E:F0:24:3F:A7:B3:C3:58:00:D7:0E:2D:B5:6A:26:A7
Certificate issuer: /CN=33887D466EF0243FA7B3C35800D70E2DB56A26A7
Certificate serial: 340E12B0175A89F8B3C5FE3B3E7411CEDE1C997C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
Manifest number: 29
Signing time: Tue 09 Dec 2025 15:58:36 +0000
Manifest this update: Tue 09 Dec 2025 15:53:36 +0000
Manifest next update: Sun 14 Dec 2025 08:00:36 +0000
Files and hashes: 1: 33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl (hash: PNJtl7d72tGFVrKy360nEce4NOz0X3HmU4JEHcbQAGU=)
2: 3133312e3139362e37322e302f32322d3234203d3e20323635373534.roa (hash: A3xXzpOaKCo1SvZ7OY8UcWolLdK5MkkAJljb47PcBNM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl
rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Dec 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0e:12:b0:17:5a:89:f8:b3:c5:fe:3b:3e:74:11:ce:de:1c:99:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33887D466EF0243FA7B3C35800D70E2DB56A26A7
Validity
Not Before: Dec 9 15:53:36 2025 GMT
Not After : Dec 14 08:00:36 2025 GMT
Subject: CN=AFF297B8FE74763331D1885A527E136EC869A629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:88:d1:51:e0:57:91:57:e2:21:f6:02:c2:
4d:0b:5a:8c:a1:47:7a:bf:6e:c3:1d:b7:c6:f9:a1:
be:65:3c:92:96:a8:8d:83:aa:96:44:e9:a2:ae:ca:
10:24:e8:dc:20:58:0d:9f:4a:1a:82:04:3f:f2:f5:
b3:0b:ff:82:e9:4b:03:0a:43:28:56:6a:18:af:ef:
53:fb:1c:4a:7f:9f:4c:ae:b8:e3:75:6b:38:86:88:
12:91:96:5c:66:e6:30:9e:16:d5:62:13:1c:20:63:
d4:6e:e2:f0:c5:b6:bd:57:ef:e6:23:d1:38:ff:8c:
a3:24:9d:70:fa:a0:20:d5:68:17:ad:64:8b:79:ac:
c8:ec:86:09:e6:57:e3:1e:55:91:d4:2e:5f:ca:d0:
a6:48:06:53:b8:c5:95:28:08:f5:b1:eb:65:7f:23:
99:b2:53:56:f3:17:3d:81:0a:cb:19:bc:f7:19:27:
4e:e1:c5:66:6d:ad:65:7f:b9:78:b2:23:23:21:12:
7f:8c:33:13:ab:88:f0:d8:80:ab:d7:68:fd:e2:4a:
0f:b3:46:39:24:32:31:1f:e8:c4:b5:1d:17:b6:0e:
40:59:6b:89:ba:96:21:2d:b2:be:fd:aa:b4:85:cd:
4d:d2:75:c2:a5:26:65:0b:e1:aa:c0:af:03:0d:c9:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F2:97:B8:FE:74:76:33:31:D1:88:5A:52:7E:13:6E:C8:69:A6:29
X509v3 Authority Key Identifier:
keyid:33:88:7D:46:6E:F0:24:3F:A7:B3:C3:58:00:D7:0E:2D:B5:6A:26:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7b:1b:96:c7:ab:ee:bf:25:08:b4:2b:89:41:d0:f9:80:02:
46:85:fd:a3:99:c1:cc:ce:4c:16:b6:16:16:42:ca:21:3e:55:
e4:21:84:8d:77:80:f4:6c:d7:58:36:48:71:57:66:b4:8c:62:
8e:ad:90:3c:68:7f:e1:4e:5e:a6:d5:79:63:75:f3:14:5c:29:
35:10:1d:b5:d4:30:8e:57:71:40:d0:85:7f:fb:9b:49:a5:05:
77:97:8f:77:13:dc:16:c2:cb:d0:63:9a:54:27:49:13:6a:f8:
07:a9:ab:d4:88:bf:d2:9f:a2:da:b3:13:f2:c6:51:f5:ff:1d:
fc:ab:09:a3:1a:8e:1e:fb:c3:f9:30:9c:ae:5b:3a:88:c0:77:
89:19:56:f5:52:4c:39:ad:dd:1e:d1:d7:a7:6c:d7:97:5e:e3:
d4:d5:66:c0:67:aa:71:97:e1:f6:54:fb:11:2f:27:9c:22:c3:
4a:95:fd:f5:60:0c:c7:2f:c5:80:95:4b:f3:91:e8:ea:02:fe:
f2:af:de:d7:68:41:77:96:3f:2c:ea:42:3e:c8:fc:4b:7d:f3:
cf:ff:48:96:62:05:20:c3:23:f8:68:82:76:4c:f5:42:58:ed:
96:9b:ae:98:f8:bd:35:a0:27:82:bb:55:c3:b2:b3:59:2d:70:
d1:e9:32:da
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUNA4SsBdaifizxf47PnQRzt4cmXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM4ODdENDY2RUYwMjQzRkE3QjNDMzU4MDBENzBFMkRC
NTZBMjZBNzAeFw0yNTEyMDkxNTUzMzZaFw0yNTEyMTQwODAwMzZaMDMxMTAvBgNV
BAMTKEFGRjI5N0I4RkU3NDc2MzMzMUQxODg1QTUyN0UxMzZFQzg2OUE2MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB94jRUeBXkVfiIfYCwk0LWoyh
R3q/bsMdt8b5ob5lPJKWqI2DqpZE6aKuyhAk6NwgWA2fShqCBD/y9bML/4LpSwMK
QyhWahiv71P7HEp/n0yuuON1aziGiBKRllxm5jCeFtViExwgY9Ru4vDFtr1X7+Yj
0Tj/jKMknXD6oCDVaBetZIt5rMjshgnmV+MeVZHULl/K0KZIBlO4xZUoCPWx62V/
I5myU1bzFz2BCssZvPcZJ07hxWZtrWV/uXiyIyMhEn+MMxOriPDYgKvXaP3iSg+z
RjkkMjEf6MS1HRe2DkBZa4m6liEtsr79qrSFzU3SdcKlJmUL4arArwMNydBzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUr/KXuP50djMx0YhaUn4TbshppikwHwYDVR0j
BBgwFoAUM4h9Rm7wJD+ns8NYANcOLbVqJqcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMTE2MzQ2MDM5NjUzMTFCM0RGMDA2RjU0NEQ3MkIwMjU2
RjMwNEFFRjc2QjM1NjA0RTQyOEFBQzkwQzlEQzQ3LzAvMzM4ODdENDY2RUYwMjQz
RkE3QjNDMzU4MDBENzBFMkRCNTZBMjZBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzg4N0Q0NjZFRjAyNDNGQTdC
M0MzNTgwMEQ3MEUyREI1NkEyNkE3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjExNjM0NjAzOTY1MzExQjNERjAwNkY1NDRENzJCMDI1NkYzMDRBRUY3
NkIzNTYwNEU0MjhBQUM5MEM5REM0Ny8wLzMzODg3RDQ2NkVGMDI0M0ZBN0IzQzM1
ODAwRDcwRTJEQjU2QTI2QTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACexuWx6vuvyUItCuJQdD5gAJG
hf2jmcHMzkwWthYWQsohPlXkIYSNd4D0bNdYNkhxV2a0jGKOrZA8aH/hTl6m1Xlj
dfMUXCk1EB211DCOV3FA0IV/+5tJpQV3l493E9wWwsvQY5pUJ0kTavgHqavUiL/S
n6LasxPyxlH1/x38qwmjGo4e+8P5MJyuWzqIwHeJGVb1Ukw5rd0e0denbNeXXuPU
1WbAZ6pxl+H2VPsRLyecIsNKlf31YAzHL8WAlUvzkejqAv7yr97XaEF3lj8s6kI+
yPxLffPP/0iWYgUgwyP4aIJ2TPVCWO2Wm66Y+L01oCeCu1XDsrNZLXDR6TLa
-----END CERTIFICATE-----
Generated at Tue Dec 9 22:16:45 2025 by rpki-client