This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.mft
File: 25A5E547724139941D5CA03B2E00CE6680B60029.mft (raw, json)
Hash identifier: fEH7pqTv6QdmFlSToTwZvcRO8ZMtVmE78mwck1RVeSE=
Subject key identifier: A4:E7:20:67:4C:E0:1A:BC:71:05:E1:63:B8:5F:51:2D:BF:0F:A4:9E
Authority key identifier: 25:A5:E5:47:72:41:39:94:1D:5C:A0:3B:2E:00:CE:66:80:B6:00:29
Certificate issuer: /CN=25A5E547724139941D5CA03B2E00CE6680B60029
Certificate serial: 3D31A763168E91D6963B23B749070016C9B1B685
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25A5E547724139941D5CA03B2E00CE6680B60029.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.mft
Manifest number: 37
Signing time: Fri 23 Jan 2026 19:35:29 +0000
Manifest this update: Fri 23 Jan 2026 19:30:29 +0000
Manifest next update: Wed 28 Jan 2026 07:20:29 +0000
Files and hashes: 1: 323830363a3431343a3a2f33322d3332203d3e20323732333633.roa (hash: f8o4QB/ecm14UTXx9jiQ5vydq/QRNDIcEs4Q6vibaR4=)
2: 25A5E547724139941D5CA03B2E00CE6680B60029.crl (hash: l1WxpY6Jh9gM8d1HkoMuOb6rczD5VT4UV526XROKloA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.crl
rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25A5E547724139941D5CA03B2E00CE6680B60029.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 07:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:31:a7:63:16:8e:91:d6:96:3b:23:b7:49:07:00:16:c9:b1:b6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25A5E547724139941D5CA03B2E00CE6680B60029
Validity
Not Before: Jan 23 19:30:29 2026 GMT
Not After : Jan 28 07:20:29 2026 GMT
Subject: CN=A4E720674CE01ABC7105E163B85F512DBF0FA49E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:16:83:3c:18:49:ce:0d:c2:d1:28:00:19:
46:be:a2:12:89:8b:59:9a:39:05:01:8c:ca:de:67:
8e:c8:67:d6:7e:de:aa:85:e1:15:a4:c6:74:68:dd:
e6:d2:71:97:f4:7a:b0:cd:e6:9f:92:42:bc:4a:5f:
e2:1b:72:c7:bb:ff:ae:d1:5e:2c:19:ea:0b:d5:6f:
84:4e:f1:54:e2:83:d4:c1:04:07:b2:62:ae:8b:20:
e5:ab:c4:32:18:a8:67:d8:79:6e:07:43:9f:7b:f8:
08:e3:d1:b2:46:d7:9d:a2:cd:69:7d:15:e5:38:fd:
91:4a:21:14:fb:5f:2c:2b:1b:05:66:ca:4c:26:8b:
84:0a:98:7d:92:28:0c:e6:18:59:2d:82:ae:f0:7a:
64:15:ed:6d:de:88:08:11:c2:0b:15:f0:08:bd:2c:
88:71:cc:a7:e4:5c:67:cc:8c:45:10:8b:73:73:89:
58:b0:c0:2a:5d:a9:3c:44:40:1b:6a:8b:a9:51:08:
e8:0e:3e:f6:3f:a3:98:a3:4b:d5:0f:a2:3c:82:7e:
a7:e5:4d:76:b0:37:5d:e4:7d:dc:fb:d5:0e:9a:4d:
cf:bb:d3:ce:d0:7a:0c:77:ed:de:9b:08:9d:c3:78:
df:a1:24:dc:b2:13:24:2b:f9:68:07:73:08:74:57:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:20:67:4C:E0:1A:BC:71:05:E1:63:B8:5F:51:2D:BF:0F:A4:9E
X509v3 Authority Key Identifier:
keyid:25:A5:E5:47:72:41:39:94:1D:5C:A0:3B:2E:00:CE:66:80:B6:00:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25A5E547724139941D5CA03B2E00CE6680B60029.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0257B2F8EB896208B8676F19B0C0A1F97E6BF9CEABA1B24DF1C74738DE29B089/0/25A5E547724139941D5CA03B2E00CE6680B60029.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d8:a7:91:4c:32:1c:f8:3e:60:ac:9d:a0:5a:0d:60:52:2a:
23:d3:b3:f6:d7:15:9c:5e:19:72:5e:d9:9d:fa:d2:c7:98:4c:
de:ef:c5:89:e2:81:11:9c:0c:34:61:79:5a:65:67:a1:cb:c2:
c5:70:26:5d:16:24:42:7e:93:b4:12:60:1f:30:7d:0c:e2:24:
72:27:37:f7:ba:de:c6:f6:85:52:31:f7:fa:b3:65:26:bc:26:
a8:5c:b5:49:ee:f0:a9:14:98:14:ea:12:61:56:82:f1:db:52:
03:7d:70:56:e3:a3:05:2e:2d:cf:f5:64:42:1b:de:2f:51:a2:
83:c6:33:90:67:9d:a0:3d:d7:cf:ea:bb:aa:9d:ec:84:bf:6d:
ac:f2:b3:77:c8:a7:a9:7e:5d:b7:5e:fd:77:bb:ab:db:be:d9:
61:52:c9:07:7d:38:d8:65:14:bc:58:68:52:65:b1:23:00:9d:
8a:0e:99:d9:19:f8:7c:34:02:25:0f:b6:79:b9:cf:0d:0b:33:
74:cc:85:c9:2d:26:34:e5:9a:ad:25:5f:4e:67:c6:40:2a:d4:
51:b3:c8:1c:96:71:9e:1c:e6:a6:da:07:c3:94:d9:5d:38:d5:
d7:c4:86:4f:91:9f:78:d3:92:b6:13:20:3c:1a:8d:bf:b7:bb:
7b:28:f9:30
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPTGnYxaOkdaWOyO3SQcAFsmxtoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVBNUU1NDc3MjQxMzk5NDFENUNBMDNCMkUwMENFNjY4
MEI2MDAyOTAeFw0yNjAxMjMxOTMwMjlaFw0yNjAxMjgwNzIwMjlaMDMxMTAvBgNV
BAMTKEE0RTcyMDY3NENFMDFBQkM3MTA1RTE2M0I4NUY1MTJEQkYwRkE0OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uBaDPBhJzg3C0SgAGUa+ohKJ
i1maOQUBjMreZ47IZ9Z+3qqF4RWkxnRo3ebScZf0erDN5p+SQrxKX+Ibcse7/67R
XiwZ6gvVb4RO8VTig9TBBAeyYq6LIOWrxDIYqGfYeW4HQ597+Ajj0bJG152izWl9
FeU4/ZFKIRT7XywrGwVmykwmi4QKmH2SKAzmGFktgq7wemQV7W3eiAgRwgsV8Ai9
LIhxzKfkXGfMjEUQi3NziViwwCpdqTxEQBtqi6lRCOgOPvY/o5ijS9UPojyCfqfl
TXawN13kfdz71Q6aTc+7087Qegx37d6bCJ3DeN+hJNyyEyQr+WgHcwh0VzxJAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUpOcgZ0zgGrxxBeFjuF9RLb8PpJ4wHwYDVR0j
BBgwFoAUJaXlR3JBOZQdXKA7LgDOZoC2ACkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMjU3QjJGOEVCODk2MjA4Qjg2NzZGMTlCMEMwQTFGOTdF
NkJGOUNFQUJBMUIyNERGMUM3NDczOERFMjlCMDg5LzAvMjVBNUU1NDc3MjQxMzk5
NDFENUNBMDNCMkUwMENFNjY4MEI2MDAyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUE1RTU0NzcyNDEzOTk0MUQ1
Q0EwM0IyRTAwQ0U2NjgwQjYwMDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDI1N0IyRjhFQjg5NjIwOEI4Njc2RjE5QjBDMEExRjk3RTZCRjlDRUFC
QTFCMjRERjFDNzQ3MzhERTI5QjA4OS8wLzI1QTVFNTQ3NzI0MTM5OTQxRDVDQTAz
QjJFMDBDRTY2ODBCNjAwMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZ2KeRTDIc+D5grJ2gWg1gUioj
07P21xWcXhlyXtmd+tLHmEze78WJ4oERnAw0YXlaZWehy8LFcCZdFiRCfpO0EmAf
MH0M4iRyJzf3ut7G9oVSMff6s2UmvCaoXLVJ7vCpFJgU6hJhVoLx21IDfXBW46MF
Li3P9WRCG94vUaKDxjOQZ52gPdfP6ruqneyEv22s8rN3yKepfl23Xv13u6vbvtlh
UskHfTjYZRS8WGhSZbEjAJ2KDpnZGfh8NAIlD7Z5uc8NCzN0zIXJLSY05ZqtJV9O
Z8ZAKtRRs8gclnGeHOam2gfDlNldONXXxIZPkZ9405K2EyA8Go2/t7t7KPkw
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:24:45 2026 by rpki-client