This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
File: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json)
Hash identifier: TiVoLHu0PPR+T6WaR4dYr7U0vgVkWOVppnmFinhk3ck=
Subject key identifier: 44:CC:BE:DF:08:F1:56:0B:12:F9:51:2D:36:56:61:41:68:08:AA:59
Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
Certificate issuer: /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Certificate serial: 55B945B11D1A24BD1A2398DA28D824E8F1BF4FD9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
Manifest number: 0139
Signing time: Sat 06 Dec 2025 04:33:56 +0000
Manifest this update: Sat 06 Dec 2025 04:28:56 +0000
Manifest next update: Thu 11 Dec 2025 03:22:56 +0000
Files and hashes: 1: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: tXjcYI8hRfu1WwL15IQ444ES/G6onR2p2SXyxKwtEJQ=)
2: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: oO7wKo0+SVqOjkWZN+0gQ07+aVmVbN4/1cQXmOBOt+E=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 03:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b9:45:b1:1d:1a:24:bd:1a:23:98:da:28:d8:24:e8:f1:bf:4f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Validity
Not Before: Dec 6 04:28:56 2025 GMT
Not After : Dec 11 03:22:56 2025 GMT
Subject: CN=44CCBEDF08F1560B12F9512D365661416808AA59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:90:09:54:35:7e:26:3a:13:5b:c6:2b:2a:
76:89:36:1f:82:a7:54:b3:f5:a3:cd:dc:d7:23:63:
0b:bc:58:ba:57:23:b9:60:ad:4d:7e:da:db:96:b5:
d0:0d:a2:84:01:16:1f:74:c4:6d:b2:15:d0:e9:55:
f5:38:c4:90:47:da:bc:78:ec:f2:6e:b4:52:e5:a3:
ae:ad:94:14:f0:ad:5d:ce:18:4e:8d:31:2c:61:3e:
d9:7e:7c:05:6f:de:7e:a0:c1:ba:e8:8d:d2:88:1f:
ec:22:3c:50:4f:0f:f6:d4:7f:f3:1c:49:56:79:10:
8d:97:b1:3e:3d:e5:31:50:08:7e:27:59:9b:f9:e0:
1d:21:55:b3:0f:aa:95:5f:e6:c7:4a:16:25:6c:3e:
58:2e:55:e0:9a:6d:7a:d4:f2:8b:e8:0c:d7:fc:3a:
7a:06:34:66:45:35:ae:2e:03:e7:0b:91:f1:17:23:
38:99:39:8d:32:01:1b:75:19:67:3e:54:30:cb:38:
bf:a4:0c:70:39:83:dc:0c:41:4d:bc:fd:bb:9f:da:
b0:81:96:dd:10:0f:e1:39:82:19:00:2b:7e:1e:c3:
35:69:c5:29:e1:57:8f:79:7a:5a:80:d3:15:b9:61:
b3:28:52:73:f9:4a:51:6f:72:24:fa:98:2a:eb:96:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CC:BE:DF:08:F1:56:0B:12:F9:51:2D:36:56:61:41:68:08:AA:59
X509v3 Authority Key Identifier:
keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:72:d3:fa:77:7f:48:a3:2c:c0:ec:a8:de:38:8f:a4:2a:ca:
ba:d4:fe:7b:92:8a:43:0b:0f:72:6d:51:ff:8b:ae:65:e2:27:
74:51:91:e6:7b:0a:dc:6c:a3:8e:80:fd:5a:33:be:4f:09:14:
c8:0e:d9:75:16:aa:71:21:7b:49:34:90:cf:0a:95:0a:f2:e7:
d6:e5:34:ca:32:73:fb:68:c1:a6:eb:e9:a7:51:ce:f6:05:a0:
2e:c7:18:09:35:80:25:85:b9:fb:4a:d3:38:c3:9b:f4:f1:57:
14:8f:48:71:b5:6d:df:83:f8:b4:77:c9:7f:af:8c:b5:04:ca:
2d:95:5a:5c:a6:5e:17:9c:0e:df:17:4b:e6:23:3c:80:d9:1f:
72:c5:a8:76:26:57:f9:fc:3c:ca:0b:20:f6:62:b6:18:3c:73:
ed:fc:1a:eb:d7:9e:b0:62:45:80:6a:cc:b6:77:b8:1a:f5:b3:
44:72:60:cb:34:e8:fc:a7:2e:37:ab:4c:5d:b4:27:0e:7d:9e:
ef:d5:2e:72:d9:59:9a:c3:3c:78:67:a9:23:a1:96:a3:56:b7:
63:6f:04:f4:f9:55:b7:65:86:6b:1d:3f:56:4c:74:ee:77:5c:
88:76:7c:63:21:18:e4:48:4b:d9:ad:b3:5f:1e:bd:4b:4d:f6:
bf:5b:b7:72
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUVblFsR0aJL0aI5jaKNgk6PG/T9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI5NkI5NTlDNzI0NUI5Q0JFOEFFMEY3QkQ2QTc1MjEy
Q0NBMTU4OTAeFw0yNTEyMDYwNDI4NTZaFw0yNTEyMTEwMzIyNTZaMDMxMTAvBgNV
BAMTKDQ0Q0NCRURGMDhGMTU2MEIxMkY5NTEyRDM2NTY2MTQxNjgwOEFBNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAN5AJVDV+JjoTW8YrKnaJNh+C
p1Sz9aPN3NcjYwu8WLpXI7lgrU1+2tuWtdANooQBFh90xG2yFdDpVfU4xJBH2rx4
7PJutFLlo66tlBTwrV3OGE6NMSxhPtl+fAVv3n6gwbrojdKIH+wiPFBPD/bUf/Mc
SVZ5EI2XsT495TFQCH4nWZv54B0hVbMPqpVf5sdKFiVsPlguVeCabXrU8ovoDNf8
OnoGNGZFNa4uA+cLkfEXIziZOY0yARt1GWc+VDDLOL+kDHA5g9wMQU28/buf2rCB
lt0QD+E5ghkAK34ewzVpxSnhV495elqA0xW5YbMoUnP5SlFvciT6mCrrlifPAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQURMy+3wjxVgsS+VEtNlZhQWgIqlkwHwYDVR0j
BBgwFoAUK5a5WcckW5y+iuD3vWp1ISzKFYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOEMzRUE3OTZERTJBOERDODRCOTg5Q0RGQTQ2RkVBMEVF
MTBDRkI4QUE3MTRGMjBGNDNEMUNCMDEwRDRBMkFELzAvMkI5NkI5NTlDNzI0NUI5
Q0JFOEFFMEY3QkQ2QTc1MjEyQ0NBMTU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjk2Qjk1OUM3MjQ1QjlDQkU4
QUUwRjdCRDZBNzUyMTJDQ0ExNTg5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDhDM0VBNzk2REUyQThEQzg0Qjk4OUNERkE0NkZFQTBFRTEwQ0ZCOEFB
NzE0RjIwRjQzRDFDQjAxMEQ0QTJBRC8wLzJCOTZCOTU5QzcyNDVCOUNCRThBRTBG
N0JENkE3NTIxMkNDQTE1ODkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXctP6d39IoyzA7KjeOI+kKsq6
1P57kopDCw9ybVH/i65l4id0UZHmewrcbKOOgP1aM75PCRTIDtl1FqpxIXtJNJDP
CpUK8ufW5TTKMnP7aMGm6+mnUc72BaAuxxgJNYAlhbn7StM4w5v08VcUj0hxtW3f
g/i0d8l/r4y1BMotlVpcpl4XnA7fF0vmIzyA2R9yxah2Jlf5/DzKCyD2YrYYPHPt
/Brr156wYkWAasy2d7ga9bNEcmDLNOj8py43q0xdtCcOfZ7v1S5y2Vmawzx4Z6kj
oZajVrdjbwT0+VW3ZYZrHT9WTHTud1yIdnxjIRjkSEvZrbNfHr1LTfa/W7dy
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:10:03 2025 by rpki-client