This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
File: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft (raw, json)
Hash identifier: R7jMXRVryYvkWk0/Yk7IbkvacOpSJp9z9kwDmv8CLbU=
Subject key identifier: B7:77:A1:EA:9C:57:12:31:6C:2F:E6:E1:16:0A:9C:92:4A:62:3F:E7
Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8
Certificate issuer: /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
Certificate serial: 76DFD94207DD5AC8A9659FD96A1AFC4C95259B7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
Manifest number: 0156
Signing time: Thu 15 Jan 2026 13:04:06 +0000
Manifest this update: Thu 15 Jan 2026 12:59:06 +0000
Manifest next update: Tue 20 Jan 2026 11:41:06 +0000
Files and hashes: 1: 323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa (hash: FZCojbBJ25VJmrSI0Yf+rfkLP/OViCaX28gQ9vWyt7Q=)
2: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl (hash: yK/wtI8VTSg7WKgQ5K3QPzkpue3DYwa1fsKO5ChuM3E=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl
rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Jan 2026 11:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:df:d9:42:07:dd:5a:c8:a9:65:9f:d9:6a:1a:fc:4c:95:25:9b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
Validity
Not Before: Jan 15 12:59:06 2026 GMT
Not After : Jan 20 11:41:06 2026 GMT
Subject: CN=B777A1EA9C5712316C2FE6E1160A9C924A623FE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:54:35:27:a4:57:64:20:0d:e8:76:68:85:
3e:8b:a4:37:95:66:54:d0:76:8e:c0:a8:9d:d0:40:
22:c3:c7:1b:d2:b1:34:f1:74:13:25:ac:ca:23:96:
ea:a9:06:d6:00:f0:39:20:70:89:ab:56:5b:94:1b:
68:e5:84:e2:4e:22:1c:7d:df:6a:ba:54:0d:85:83:
c7:2b:89:64:7d:c4:2e:86:89:20:7e:2d:f0:79:2f:
c6:23:db:58:89:13:c8:e0:a0:30:1e:d6:fb:a3:ec:
b3:09:c1:8a:69:3d:e3:39:62:02:f5:0b:03:1e:b2:
ba:41:b1:b0:5b:bc:7d:fa:d1:e1:60:4e:8c:40:bb:
ca:45:01:ee:54:6d:96:b5:7f:31:b6:fb:56:48:23:
11:b1:0e:cd:b3:2c:a1:f7:0b:08:dd:e1:18:26:71:
91:c2:46:f2:89:00:fe:24:64:e0:90:03:11:70:a1:
30:58:73:37:33:a8:47:60:e3:26:74:eb:b0:53:85:
cc:80:4d:74:a5:83:e5:d8:90:e4:ee:28:9c:f8:65:
3f:a2:96:24:5c:c3:5e:c0:84:1c:32:79:99:85:8b:
33:80:06:ab:f8:77:dc:07:1e:73:13:ea:29:8c:97:
36:cb:66:61:fb:41:e4:ee:01:a1:05:a1:d9:e4:cf:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:77:A1:EA:9C:57:12:31:6C:2F:E6:E1:16:0A:9C:92:4A:62:3F:E7
X509v3 Authority Key Identifier:
keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c4:a7:8e:68:44:de:8f:58:f3:12:98:c3:90:ee:07:cc:aa:
6a:46:5f:b0:0e:ca:7e:b8:2f:79:e7:06:5d:6d:c6:f1:80:d1:
31:de:93:36:cf:41:a1:f4:66:f9:72:35:94:6e:c5:4c:85:28:
d1:2e:0d:87:0a:18:1c:fc:ae:aa:ae:c7:8c:2d:d7:b8:aa:58:
bf:c2:aa:11:48:5a:5c:53:f1:c5:f9:03:4d:4d:4b:ce:48:1e:
66:94:86:7b:72:9a:8b:d9:01:fa:62:44:f9:38:8e:1b:95:77:
ac:a7:55:6a:53:49:99:7b:50:3d:15:12:59:d1:49:ed:85:30:
6a:60:d3:8d:c2:82:57:d9:73:59:df:5a:74:40:64:77:7c:6d:
38:c9:5e:93:96:38:4b:76:10:86:16:de:76:a1:6b:9d:e4:f9:
54:87:5d:b8:e2:1a:2b:12:3a:b4:39:0e:a5:6f:87:3a:63:98:
5f:bf:3b:9c:97:9c:d4:6b:5c:dc:fa:b0:95:32:e1:53:b0:87:
19:73:1d:f8:88:8a:17:3d:7a:42:eb:78:fb:32:90:a5:2e:4e:
2c:98:a5:e5:78:c2:c8:ee:db:55:47:78:99:87:f9:5a:be:1e:
7e:92:bc:65:b5:86:ef:6a:93:d2:21:f1:f2:29:c8:cf:b1:6a:
f0:7f:0a:79
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUdt/ZQgfdWsipZZ/Zahr8TJUlm34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZCOERGMUYwQkU2MDlGQjZGOTgwMDNFQjk2QzlDREU3
MkI1M0FGODAeFw0yNjAxMTUxMjU5MDZaFw0yNjAxMjAxMTQxMDZaMDMxMTAvBgNV
BAMTKEI3NzdBMUVBOUM1NzEyMzE2QzJGRTZFMTE2MEE5QzkyNEE2MjNGRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC8FQ1J6RXZCAN6HZohT6LpDeV
ZlTQdo7AqJ3QQCLDxxvSsTTxdBMlrMojluqpBtYA8DkgcImrVluUG2jlhOJOIhx9
32q6VA2Fg8criWR9xC6GiSB+LfB5L8Yj21iJE8jgoDAe1vuj7LMJwYppPeM5YgL1
CwMesrpBsbBbvH360eFgToxAu8pFAe5UbZa1fzG2+1ZIIxGxDs2zLKH3Cwjd4Rgm
cZHCRvKJAP4kZOCQAxFwoTBYczczqEdg4yZ067BThcyATXSlg+XYkOTuKJz4ZT+i
liRcw17AhBwyeZmFizOABqv4d9wHHnMT6imMlzbLZmH7QeTuAaEFodnkz2YHAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUt3eh6pxXEjFsL+bhFgqckkpiP+cwHwYDVR0j
BBgwFoAU37jfHwvmCftvmAA+uWyc3nK1OvgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzEzNDREQzk5NzdBRjIxQjJGM0NERjY1NTYyODI5NTk2
OEY5OTA3OUI1QTlGMzlBQkNEMDRBNzk0OUQ5RDMxLzAvREZCOERGMUYwQkU2MDlG
QjZGOTgwMDNFQjk2QzlDREU3MkI1M0FGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERkI4REYxRjBCRTYwOUZCNkY5
ODAwM0VCOTZDOUNERTcyQjUzQUY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjcxMzQ0REM5OTc3QUYyMUIyRjNDREY2NTU2MjgyOTU5NjhGOTkwNzlC
NUE5RjM5QUJDRDA0QTc5NDlEOUQzMS8wL0RGQjhERjFGMEJFNjA5RkI2Rjk4MDAz
RUI5NkM5Q0RFNzJCNTNBRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWxKeOaETej1jzEpjDkO4HzKpq
Rl+wDsp+uC955wZdbcbxgNEx3pM2z0Gh9Gb5cjWUbsVMhSjRLg2HChgc/K6qrseM
Lde4qli/wqoRSFpcU/HF+QNNTUvOSB5mlIZ7cpqL2QH6YkT5OI4blXesp1VqU0mZ
e1A9FRJZ0UnthTBqYNONwoJX2XNZ31p0QGR3fG04yV6TljhLdhCGFt52oWud5PlU
h1244horEjq0OQ6lb4c6Y5hfvzucl5zUa1zc+rCVMuFTsIcZcx34iIoXPXpC63j7
MpClLk4smKXleMLI7ttVR3iZh/lavh5+krxltYbvapPSIfHyKcjPsWrwfwp5
-----END CERTIFICATE-----
Generated at Thu Jan 15 14:48:28 2026 by rpki-client