This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft
File: 3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft (raw, json)
Hash identifier: eNX/W0SX6PZeaMRWKifjiLfvmpeQAWyyVAUIN7Z0Kbs=
Subject key identifier: 40:82:66:25:F9:62:40:D4:FB:75:B3:18:C7:7A:94:DA:A9:BA:A7:EB
Authority key identifier: 3E:CA:B9:BE:B1:EA:9E:FB:E8:00:07:81:F7:2B:95:89:FF:DA:21:25
Certificate issuer: /CN=3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125
Certificate serial: 67F51C4FBA749BC87DA80ABB42DFBA2E030C19E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft
Manifest number: 0135
Signing time: Mon 24 Nov 2025 05:15:06 +0000
Manifest this update: Mon 24 Nov 2025 05:10:06 +0000
Manifest next update: Sat 29 Nov 2025 02:50:06 +0000
Files and hashes: 1: 3230302e35392e3138342e302f32312d3234203d3e20323634373738.roa (hash: qpFPLhRvT/6TF+QIX+j3i6nRwbq3qMC5Vv9fZdPq3nA=)
2: 323830333a623530303a3a2f33322d3634203d3e20323634373738.roa (hash: +i698AfVx6DWMMcK5GpNnFiCpIbFYK2iegD/naMoXZ0=)
3: 3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl (hash: jFK8BirVBqrWV04Sib9oe74wG1mVuyZ+CMq0hnCkX0Q=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl
rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 29 Nov 2025 02:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f5:1c:4f:ba:74:9b:c8:7d:a8:0a:bb:42:df:ba:2e:03:0c:19:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125
Validity
Not Before: Nov 24 05:10:06 2025 GMT
Not After : Nov 29 02:50:06 2025 GMT
Subject: CN=40826625F96240D4FB75B318C77A94DAA9BAA7EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:7e:a6:4a:7c:7c:c4:b4:32:50:c3:99:96:
93:00:56:52:9a:53:79:cc:59:d3:e8:90:7c:a7:61:
6a:3d:33:ba:0f:3f:23:8d:7d:e1:14:02:fd:56:57:
46:1c:b8:16:ca:c0:98:37:55:29:c3:fe:26:6a:2a:
7d:e8:50:b7:33:db:4f:c6:14:45:8f:c1:29:76:d0:
62:46:66:eb:83:c0:49:01:d8:2b:b3:5a:e4:39:03:
23:6e:23:65:9c:22:91:ab:d0:d7:78:13:c3:27:c0:
cd:fc:de:08:ac:43:56:ad:76:c1:b5:47:82:7a:5f:
b3:9c:b5:24:c4:08:af:2e:ac:91:a9:f2:17:0a:5c:
a0:69:22:bb:d5:be:33:5d:53:7c:c9:ac:b2:42:3f:
04:8a:71:3e:9b:64:5b:98:cc:29:9a:04:18:84:09:
a6:34:f8:ce:09:de:04:03:f3:ac:3b:df:b2:fa:46:
42:7b:73:c4:58:6e:2f:77:72:3a:14:11:7d:0d:3b:
62:ab:af:b8:4e:72:ea:ce:a7:31:06:48:77:62:7e:
09:19:45:fc:57:5a:a1:a2:93:07:fc:a3:52:ac:45:
24:d9:f7:64:1c:c2:35:be:58:89:8f:3e:74:13:3a:
71:17:d6:30:14:3f:3e:db:40:5e:f9:42:54:cc:b9:
ee:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:82:66:25:F9:62:40:D4:FB:75:B3:18:C7:7A:94:DA:A9:BA:A7:EB
X509v3 Authority Key Identifier:
keyid:3E:CA:B9:BE:B1:EA:9E:FB:E8:00:07:81:F7:2B:95:89:FF:DA:21:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2c:f1:5e:3f:9d:04:7b:52:aa:f0:49:19:dc:7c:6d:34:a8:
ff:04:a1:fc:5e:20:41:18:b0:5b:8b:25:df:6e:58:91:9c:a1:
30:57:09:8c:1a:1c:51:ac:8d:c7:86:08:e4:10:d6:88:fb:74:
8e:64:a4:96:8b:00:40:11:b2:03:6d:c1:5f:e4:9b:a2:b8:80:
d3:06:be:8c:92:51:e4:a0:eb:51:6b:88:b0:9b:19:75:4f:25:
02:e9:3e:5d:0b:36:25:ab:e4:1b:02:54:b1:a0:1d:41:7d:49:
11:f8:33:07:ca:87:25:52:f2:0f:f9:44:f9:3f:a8:3f:88:ba:
35:d0:02:11:b3:01:ea:fb:61:ac:ec:a6:84:fd:12:3a:73:ed:
7f:12:0b:ac:c2:ef:0c:34:7c:96:83:e3:86:0c:a7:9a:0c:b1:
ff:59:a6:8f:be:50:24:18:60:db:34:eb:95:28:1b:75:43:7e:
f4:0e:25:7c:1f:ca:55:54:01:8a:a7:18:e6:25:7b:73:95:74:
1b:63:e0:52:5c:99:e2:aa:8a:4d:f6:e4:a0:e3:2c:e6:94:fb:
af:63:32:8b:6a:a8:bb:86:06:60:f5:44:4f:c0:ce:2d:b8:b6:
b7:ea:00:27:69:c3:de:8a:26:05:7d:d6:ef:3a:18:c1:dc:dd:
cb:a0:ea:17
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUZ/UcT7p0m8h9qAq7Qt+6LgMMGeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VDQUI5QkVCMUVBOUVGQkU4MDAwNzgxRjcyQjk1ODlG
RkRBMjEyNTAeFw0yNTExMjQwNTEwMDZaFw0yNTExMjkwMjUwMDZaMDMxMTAvBgNV
BAMTKDQwODI2NjI1Rjk2MjQwRDRGQjc1QjMxOEM3N0E5NERBQTlCQUE3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcX6mSnx8xLQyUMOZlpMAVlKa
U3nMWdPokHynYWo9M7oPPyONfeEUAv1WV0YcuBbKwJg3VSnD/iZqKn3oULcz20/G
FEWPwSl20GJGZuuDwEkB2CuzWuQ5AyNuI2WcIpGr0Nd4E8MnwM383gisQ1atdsG1
R4J6X7OctSTECK8urJGp8hcKXKBpIrvVvjNdU3zJrLJCPwSKcT6bZFuYzCmaBBiE
CaY0+M4J3gQD86w737L6RkJ7c8RYbi93cjoUEX0NO2Krr7hOcurOpzEGSHdifgkZ
RfxXWqGikwf8o1KsRSTZ92QcwjW+WImPPnQTOnEX1jAUPz7bQF75QlTMue5ZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUQIJmJfliQNT7dbMYx3qU2qm6p+swHwYDVR0j
BBgwFoAUPsq5vrHqnvvoAAeB9yuVif/aISUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GODQzNTdERTIwQzFBMUIzRTZCNkJCRUY1NEQyQUM1RjU1
ODg3NDU2QTk2NDFEM0VGQzUxQUI3QkI4MUE5NjM0LzAvM0VDQUI5QkVCMUVBOUVG
QkU4MDAwNzgxRjcyQjk1ODlGRkRBMjEyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRUNBQjlCRUIxRUE5RUZCRTgw
MDA3ODFGNzJCOTU4OUZGREEyMTI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjg0MzU3REUyMEMxQTFCM0U2QjZCQkVGNTREMkFDNUY1NTg4NzQ1NkE5
NjQxRDNFRkM1MUFCN0JCODFBOTYzNC8wLzNFQ0FCOUJFQjFFQTlFRkJFODAwMDc4
MUY3MkI5NTg5RkZEQTIxMjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7LPFeP50Ee1Kq8EkZ3HxtNKj/
BKH8XiBBGLBbiyXfbliRnKEwVwmMGhxRrI3HhgjkENaI+3SOZKSWiwBAEbIDbcFf
5JuiuIDTBr6MklHkoOtRa4iwmxl1TyUC6T5dCzYlq+QbAlSxoB1BfUkR+DMHyocl
UvIP+UT5P6g/iLo10AIRswHq+2Gs7KaE/RI6c+1/Eguswu8MNHyWg+OGDKeaDLH/
WaaPvlAkGGDbNOuVKBt1Q370DiV8H8pVVAGKpxjmJXtzlXQbY+BSXJniqopN9uSg
4yzmlPuvYzKLaqi7hgZg9URPwM4tuLa36gAnacPeiiYFfdbvOhjB3N3LoOoX
-----END CERTIFICATE-----
Generated at Tue Nov 25 20:40:19 2025 by rpki-client