This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft
File: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft (raw, json)
Hash identifier: f1wORLOTFLMvwaSHK9LNBKxcqh8GU4BrFm/pjls5g1g=
Subject key identifier: 89:29:7B:8A:D9:3B:91:5B:37:9F:0D:9D:D8:F6:A5:9E:5C:BF:2F:E4
Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB
Certificate issuer: /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB
Certificate serial: 011025132044BCD330FAF17D346BD2B70B4913A0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft
Manifest number: 0142
Signing time: Sat 06 Dec 2025 14:14:22 +0000
Manifest this update: Sat 06 Dec 2025 14:09:22 +0000
Manifest next update: Thu 11 Dec 2025 14:31:22 +0000
Files and hashes: 1: 323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa (hash: Vc/Evbtc4Ei/5ZokRHixlnyDU63F54JdlowpFPJdT9k=)
2: 323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (hash: Mu1aiZbTuKob4P/uHzlI5H1bWCj0RfxIyLfLzn5wSP0=)
3: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl (hash: qbtjDWiNmOOH7oZ+9DvDE4Zzl6pg3ZA3U8GghTokMe0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl
rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 14:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:10:25:13:20:44:bc:d3:30:fa:f1:7d:34:6b:d2:b7:0b:49:13:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB
Validity
Not Before: Dec 6 14:09:22 2025 GMT
Not After : Dec 11 14:31:22 2025 GMT
Subject: CN=89297B8AD93B915B379F0D9DD8F6A59E5CBF2FE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:33:e7:bb:45:00:72:b3:23:61:3c:5f:10:
0e:1d:dd:2b:00:d6:9b:72:04:37:36:8d:3c:6a:62:
ad:62:29:88:7f:35:e4:88:c6:ad:3f:06:c3:cf:1f:
1e:24:8c:5a:83:d4:51:d1:92:7a:d1:ac:6b:0f:3b:
6b:a2:e0:b7:b1:37:5d:c3:4f:09:ca:c6:2c:ec:81:
2b:ab:1c:fe:da:1a:de:6a:83:c1:64:e9:66:43:e4:
56:1f:42:92:35:6e:5e:0d:09:11:26:4f:f6:0a:fd:
3a:01:51:ad:3d:d9:f3:d3:46:36:24:5c:18:e9:82:
18:6a:98:bd:78:8b:41:66:df:a3:cd:8c:44:32:8a:
ad:8d:02:a4:b7:be:9f:2c:54:ab:63:56:87:24:d1:
48:75:40:af:52:fa:69:82:27:18:d8:6e:45:51:1f:
cf:ea:fb:f4:d0:ef:26:58:68:70:b1:1e:e4:88:59:
4f:3c:10:25:65:45:6b:43:f7:83:f8:80:6f:12:d9:
30:69:fc:92:77:72:51:2e:35:50:82:82:4a:a2:8a:
46:5f:b3:06:2b:69:0e:a8:7e:7f:67:a7:c0:1c:7c:
b8:0c:fe:87:51:ab:d0:02:ef:3f:95:f1:79:8d:be:
4b:d5:8d:9e:f5:4c:d7:67:98:60:b0:f1:c2:ae:3a:
0b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:29:7B:8A:D9:3B:91:5B:37:9F:0D:9D:D8:F6:A5:9E:5C:BF:2F:E4
X509v3 Authority Key Identifier:
keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2f:5e:88:e2:a9:4b:12:6d:a1:0d:52:03:60:44:04:58:09:
5e:af:e7:a1:7d:7d:eb:1b:8a:92:1b:5d:e3:c1:72:09:f4:88:
68:89:8f:cc:5c:86:88:64:54:29:ae:99:8e:3c:7c:b6:bc:b3:
2d:c1:b8:b7:f3:9b:b0:ad:cf:13:3b:51:2c:b8:11:3d:8f:ac:
83:02:b6:ae:09:7f:00:f8:da:e5:14:61:14:e1:af:f7:2b:30:
9f:57:31:30:5a:5d:36:a5:aa:b7:2a:c3:7c:b8:76:c0:08:f7:
a9:ab:a4:e3:3c:33:70:8a:ba:c8:1f:f6:f2:da:82:73:df:c7:
3d:a1:dd:48:66:c6:4c:5e:90:6f:88:b7:e2:88:81:dc:11:95:
d1:eb:2a:36:8c:6c:6e:b5:f5:a8:69:c8:ef:1d:9f:98:58:5c:
e1:e7:e5:2e:a4:46:b6:05:cf:37:5c:0d:9a:ca:15:02:54:d4:
04:42:4d:09:a4:cc:c0:1b:51:af:33:97:f3:b1:3b:f9:9b:a6:
f9:8c:8f:af:33:cd:26:9b:cc:d1:8b:df:e0:24:83:3b:18:f5:
32:bc:1c:44:58:fa:8f:30:5c:76:46:8f:25:d1:03:6f:67:f8:
41:1c:20:06:ff:28:ca:75:17:e7:df:06:4a:7e:21:45:03:02:
4c:b2:4f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:19:51 2025 by rpki-client