This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.mft
File: 25A5E547724139941D5CA03B2E00CE6680B60029.mft (raw, json)
Hash identifier: EnyqpApEV0iI4deC1uabZnYJP/fPRLt6MQODJbfgnhQ=
Subject key identifier: 78:5A:7D:10:0C:FA:B8:62:EC:1F:1C:FE:37:88:5D:F2:81:A2:80:B9
Authority key identifier: 25:A5:E5:47:72:41:39:94:1D:5C:A0:3B:2E:00:CE:66:80:B6:00:29
Certificate issuer: /CN=25A5E547724139941D5CA03B2E00CE6680B60029
Certificate serial: 3FD814FC9F63B787ECA7B8DC95594BB1B5360E71
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25A5E547724139941D5CA03B2E00CE6680B60029.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.mft
Manifest number: 1D
Signing time: Fri 05 Dec 2025 11:14:12 +0000
Manifest this update: Fri 05 Dec 2025 11:09:12 +0000
Manifest next update: Wed 10 Dec 2025 08:58:12 +0000
Files and hashes: 1: 25A5E547724139941D5CA03B2E00CE6680B60029.crl (hash: FnJa6gcellmAiGp5HtvXwYIFOmgu3gpSNOwpZPBG3Ug=)
2: 323830363a3431343a3a2f33322d3332203d3e20323732333633.roa (hash: f8o4QB/ecm14UTXx9jiQ5vydq/QRNDIcEs4Q6vibaR4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.crl
rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25A5E547724139941D5CA03B2E00CE6680B60029.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 08:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d8:14:fc:9f:63:b7:87:ec:a7:b8:dc:95:59:4b:b1:b5:36:0e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25A5E547724139941D5CA03B2E00CE6680B60029
Validity
Not Before: Dec 5 11:09:12 2025 GMT
Not After : Dec 10 08:58:12 2025 GMT
Subject: CN=785A7D100CFAB862EC1F1CFE37885DF281A280B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:66:cc:5b:f6:8b:71:8e:f0:4f:5b:b9:7f:
0a:90:ef:6d:0d:f4:42:af:32:ae:25:af:4a:de:5f:
44:05:d2:f9:dd:cb:6c:d9:d2:34:0d:0a:b9:9d:24:
b9:dc:c0:69:c8:27:55:2f:c8:82:b2:c0:0f:6e:a1:
a0:82:e4:d0:a1:9f:12:16:e4:77:dc:a4:6d:71:cb:
7e:6a:8a:17:5b:ed:28:f2:ed:22:90:42:ed:b3:ce:
2e:a6:d7:8e:48:77:c5:c6:25:18:0c:93:28:f8:11:
e3:b7:50:d9:b1:12:ac:25:de:14:00:b2:6d:3c:78:
da:0c:a6:b2:79:0d:b6:61:7c:74:c3:c3:73:24:f3:
34:2f:6f:6b:90:36:1f:48:b8:f7:d5:ee:02:24:b4:
45:d4:85:56:0b:d5:2b:5e:4a:db:69:82:16:8e:99:
5d:c4:01:39:69:7b:f7:15:9f:ee:41:97:00:32:ca:
86:44:38:45:5f:8a:dc:ef:0b:3d:f1:2a:f1:e0:bb:
2a:95:70:bc:62:bb:85:ad:c0:9e:bf:a4:28:94:1c:
8b:a4:e6:ad:2f:d9:e3:12:42:22:43:34:66:e8:9e:
28:49:51:9a:00:52:b6:cd:10:5b:48:3f:95:23:04:
f7:ea:9a:5b:8a:69:7e:19:4a:a6:23:32:e8:11:e0:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:7D:10:0C:FA:B8:62:EC:1F:1C:FE:37:88:5D:F2:81:A2:80:B9
X509v3 Authority Key Identifier:
keyid:25:A5:E5:47:72:41:39:94:1D:5C:A0:3B:2E:00:CE:66:80:B6:00:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25A5E547724139941D5CA03B2E00CE6680B60029.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:45:07:a6:1e:ca:37:2d:91:81:21:ef:ea:43:23:b6:99:67:
f9:78:61:6c:19:04:78:0a:c4:21:5a:94:3f:8d:aa:46:0e:86:
3d:2b:02:95:55:79:f0:95:9e:63:19:8f:91:ff:12:e4:70:0f:
8b:ef:be:d8:d3:d3:dd:be:4f:58:5d:ea:cf:88:a8:63:45:72:
95:b3:9f:2b:52:47:4b:32:bc:d3:4d:89:d6:9f:0e:22:82:1d:
4c:e5:96:58:f6:74:9b:06:a5:21:3f:02:e9:0a:e3:d8:ea:70:
35:40:89:45:c3:e3:04:ae:da:f4:d2:9a:a7:25:3f:c9:e2:8a:
37:cc:df:75:b0:ed:5f:c8:04:13:28:36:03:c1:25:19:64:c8:
33:c7:08:77:75:2a:d3:9c:e7:a9:d7:94:fd:99:3e:99:bd:b6:
00:5f:aa:4b:d8:d7:5d:b7:91:e7:5c:37:c0:95:fd:47:d1:a7:
12:53:06:98:f5:45:3c:ca:61:89:68:cf:02:02:dd:9e:1f:7c:
68:52:5c:49:e3:28:01:b0:b7:44:85:3b:b7:9a:3b:c5:ed:2a:
49:e9:56:81:16:1c:01:2a:5b:97:d9:4b:a9:c7:30:d6:ee:8a:
8f:3d:a3:16:ad:b3:e3:8a:a7:3f:af:87:06:ee:85:c6:f6:61:
09:4c:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:08:39 2025 by rpki-client