This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
File: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft (raw, json)
Hash identifier: 8C35myrLVRV97Renrg+8/kiPGWTzfZBFttol2TBQSeI=
Subject key identifier: 9E:8C:7F:CF:0C:AA:A0:E8:57:FC:01:D2:2A:2B:8F:60:A8:99:34:C5
Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8
Certificate issuer: /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
Certificate serial: 6222A5F1702826B93E80647CC8DA0D0727BE4641
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
Manifest number: 0151
Signing time: Sun 04 Jan 2026 18:01:29 +0000
Manifest this update: Sun 04 Jan 2026 17:56:29 +0000
Manifest next update: Sat 10 Jan 2026 09:41:29 +0000
Files and hashes: 1: 323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa (hash: 7UfKWaQAr95bPBridFn/arYQ/3LdRnATvxQ9sAAQ4B4=)
2: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl (hash: Pk4Dekq1x2HLi6MYTvT6YK0EbidJATytxxkmNcUFBfI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl
rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 09:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:22:a5:f1:70:28:26:b9:3e:80:64:7c:c8:da:0d:07:27:be:46:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
Validity
Not Before: Jan 4 17:56:29 2026 GMT
Not After : Jan 10 09:41:29 2026 GMT
Subject: CN=9E8C7FCF0CAAA0E857FC01D22A2B8F60A89934C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:da:0a:0c:74:0b:5d:ba:1a:c4:4f:4b:19:
0a:f4:8a:d9:0e:b5:a8:97:02:66:d9:c7:28:c4:3d:
b4:5a:65:98:7b:be:36:ab:3e:42:44:35:43:01:c0:
9d:db:5a:5e:21:35:0f:73:d9:2d:05:85:c5:82:bd:
41:48:93:87:03:bb:bf:ee:c9:08:01:e7:82:6c:13:
db:49:b6:74:34:b8:a5:39:0b:d4:92:2f:cc:08:87:
63:38:f4:47:d8:88:5f:28:48:d4:11:2b:85:63:c6:
27:76:d4:96:a8:21:a2:5c:ec:bf:23:24:fa:e8:b9:
23:9f:99:4a:5d:09:ff:23:f1:94:89:a2:7c:0d:52:
8f:13:62:a9:84:e4:ff:87:2e:58:2e:00:80:a4:2d:
6f:fd:19:ed:13:dd:a2:7f:74:da:39:29:87:e4:3e:
7d:27:d8:f1:87:a4:9a:23:b0:87:06:bf:fc:7c:cb:
ae:ec:21:3f:38:81:99:83:d2:df:e2:eb:99:16:65:
91:d6:75:8f:6f:ae:41:d2:e3:4f:b0:47:6e:22:42:
c3:c7:06:7e:3b:cd:f9:51:66:e6:97:e8:6c:48:b1:
04:d3:c9:fa:c9:80:81:a1:fe:0d:df:b3:93:2c:0f:
11:23:61:7a:71:7a:93:9f:cb:6a:98:b8:54:71:8c:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8C:7F:CF:0C:AA:A0:E8:57:FC:01:D2:2A:2B:8F:60:A8:99:34:C5
X509v3 Authority Key Identifier:
keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:54:ea:6b:1e:28:e7:2d:27:f9:e1:86:ea:00:fa:40:f2:b9:
40:57:2e:41:05:92:40:f1:f6:a2:c6:22:b5:de:82:2f:ec:f3:
fd:8e:45:c9:74:c9:52:9c:6e:2a:b0:14:79:8b:78:81:f3:e4:
46:66:68:72:ad:fd:54:8c:29:06:48:f1:25:e3:90:32:ad:58:
4d:18:0d:ae:a3:cd:29:57:dd:c5:7c:18:d0:37:61:2e:c5:19:
2c:87:b2:3f:03:de:6c:a1:66:7c:de:5e:28:08:d4:63:4e:56:
11:56:73:66:4b:57:43:ff:01:90:ef:65:fa:b5:8e:ca:05:8f:
8e:f7:7c:27:22:79:d6:7a:0b:61:da:0f:f0:c0:5b:1f:77:10:
0c:53:2b:c5:a1:93:a1:b8:2d:25:f8:d5:a5:df:87:8d:46:5c:
d2:01:9e:bf:54:b4:14:77:52:60:41:ff:64:0b:d3:b1:26:f1:
ab:11:91:9a:a7:54:74:f4:ed:c2:8e:5e:a7:9e:ba:72:a2:9d:
b9:ee:0b:fe:58:d1:91:05:32:71:52:fd:5d:6a:fe:7c:16:80:
2c:df:c8:9b:d2:1b:4d:4a:c0:fd:b0:b8:93:4a:e0:ba:48:bf:
d2:96:20:6d:3c:c5:c0:ee:93:d5:04:bd:69:61:29:56:c0:d9:
bb:36:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 6 04:46:23 2026 by rpki-client