This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft File: 3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft (raw, json) Hash identifier: ikpwZPfKfHiIDfc56kGP8L3wOzmMu/mxrtps2/p3Hss= Subject key identifier: 6C:39:5E:F4:5A:CE:7B:A4:AC:4B:AD:62:48:3C:51:8D:09:F2:5C:79 Authority key identifier: 3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC Certificate issuer: /CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC Certificate serial: 241D0968F922F9AA33645A5ECDD9E7A26EB5AA6C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft Manifest number: D6 Signing time: Sat 06 Dec 2025 04:44:04 +0000 Manifest this update: Sat 06 Dec 2025 04:39:04 +0000 Manifest next update: Fri 12 Dec 2025 01:32:04 +0000 Files and hashes: 1: 34352e3233392e36382e302f32322d3234203d3e203238353339.roa (hash: 8kOSy7psnwS+4E07XuLnZTaVph82N+7l1Tj7KFEaARg=) 2: 3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl (hash: rKO56DUUZtK6Bb3rq40teS53on8C5DoN/H3HBDqecP8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 03:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1d:09:68:f9:22:f9:aa:33:64:5a:5e:cd:d9:e7:a2:6e:b5:aa:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC Validity Not Before: Dec 6 04:39:04 2025 GMT Not After : Dec 12 01:32:04 2025 GMT Subject: CN=6C395EF45ACE7BA4AC4BAD62483C518D09F25C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:68:a0:16:93:c0:81:db:0d:21:b2:82:d2:f0: 7d:68:b2:0a:d5:c7:11:2a:e2:59:b3:36:2a:9a:a2: 62:d7:bf:ac:76:fd:77:37:4f:03:71:23:5d:1b:ac: 05:d7:c6:9c:63:fb:cc:4a:10:96:78:eb:6c:93:5c: 7a:d9:75:49:0b:c6:22:5c:fd:4d:22:11:07:61:15: 3a:29:cd:63:b4:e7:4e:c0:f0:af:e1:7a:65:75:d8: 39:e9:39:74:fa:82:ba:cf:51:8a:af:a0:93:b6:c7: 3b:3b:24:5d:f3:7e:19:1b:29:5c:94:ec:7d:2b:2e: bb:25:c1:22:ad:d5:26:ca:3f:05:39:33:1a:36:1b: 1b:4d:6f:ae:eb:bc:a4:29:5e:76:74:d6:f7:b1:42: 89:62:93:68:c2:ef:77:dc:a7:7f:f5:7d:dd:d6:f2: ac:6d:e6:cd:2e:fd:08:10:93:55:54:a9:47:43:5b: 6a:ef:b6:99:7d:2a:02:88:42:0f:b0:14:9b:cc:d3: d7:c5:ce:b4:98:83:2d:19:b6:c2:fa:aa:10:e4:79: 6e:2a:48:70:8f:43:32:34:bb:67:eb:6c:8d:0c:7f: d6:62:af:f8:fa:2b:77:6a:fb:bd:f8:fc:c0:e6:8e: a9:00:69:d5:ca:34:95:17:b7:c8:8b:65:00:49:4b: f1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:39:5E:F4:5A:CE:7B:A4:AC:4B:AD:62:48:3C:51:8D:09:F2:5C:79 X509v3 Authority Key Identifier: keyid:3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:06:e8:73:1b:13:5c:3c:fa:2a:97:87:2c:ac:c7:b3:39:46: ef:f7:56:22:e7:3a:b0:c2:78:5e:8f:2f:71:24:59:8c:55:44: 40:0a:72:4a:75:48:3b:3b:3e:b8:4b:2a:a5:90:78:1f:c9:3c: ac:54:6c:11:e7:de:f3:ab:a7:ba:f5:a4:fe:53:d5:b3:c5:c6: 8d:f2:fe:de:92:f5:e7:e5:53:29:13:d6:d6:86:7b:31:2a:72: dd:b3:c9:83:a4:6e:db:ca:82:23:cd:68:3b:08:0d:22:99:b2: da:bd:13:c8:08:be:b2:20:d3:47:4b:41:0a:6a:ad:92:b1:31: 8f:dc:88:73:93:dd:67:a1:48:be:7a:45:86:59:77:03:f4:b9: b5:00:8c:75:08:28:62:87:d6:3c:0e:53:bf:42:dc:12:19:13: 3b:0f:a3:8a:e9:2f:8f:66:37:f9:a5:19:ed:a2:96:73:71:b3: e2:48:0d:f7:6f:9a:cf:dd:25:8e:81:8b:5b:78:29:9f:26:84: 14:cd:ee:4b:42:08:06:1d:e7:79:ce:6f:5c:f7:12:12:d3:04: 63:0e:bc:88:5a:7b:f1:32:6f:3b:4a:a5:93:6d:34:dc:3e:97: b1:72:b2:99:c8:e8:5c:78:de:19:82:22:af:c0:a7:17:05:99: c3:1b:bd:1d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJB0JaPki+aozZFpezdnnom61qmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4RDhDM0ZGMEMyM0M3RTExRTg5NkNCRkY4QjRFQzYy REVBNkRBQzAeFw0yNTEyMDYwNDM5MDRaFw0yNTEyMTIwMTMyMDRaMDMxMTAvBgNV BAMTKDZDMzk1RUY0NUFDRTdCQTRBQzRCQUQ2MjQ4M0M1MThEMDlGMjVDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaKAWk8CB2w0hsoLS8H1osgrV xxEq4lmzNiqaomLXv6x2/Xc3TwNxI10brAXXxpxj+8xKEJZ462yTXHrZdUkLxiJc /U0iEQdhFTopzWO0507A8K/hemV12DnpOXT6grrPUYqvoJO2xzs7JF3zfhkbKVyU 7H0rLrslwSKt1SbKPwU5Mxo2GxtNb67rvKQpXnZ01vexQolik2jC73fcp3/1fd3W 8qxt5s0u/QgQk1VUqUdDW2rvtpl9KgKIQg+wFJvM09fFzrSYgy0ZtsL6qhDkeW4q SHCPQzI0u2frbI0Mf9Zir/j6K3dq+734/MDmjqkAadXKNJUXt8iLZQBJS/FNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUbDle9FrOe6SsS61iSDxRjQnyXHkwHwYDVR0j BBgwFoAUO42MP/DCPH4R6JbL/4tOxi3qbawwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRjZCQUI0MTJBOTBCQTUzQTBGQzFGM0M1NEIyQjE1NDBG QzJEMTBERTgyMkExOEZERTVFQjA4NkZBOUE4QTg5LzAvM0I4RDhDM0ZGMEMyM0M3 RTExRTg5NkNCRkY4QjRFQzYyREVBNkRBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQjhEOEMzRkYwQzIzQzdFMTFF ODk2Q0JGRjhCNEVDNjJERUE2REFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEY2QkFCNDEyQTkwQkE1M0EwRkMxRjNDNTRCMkIxNTQwRkMyRDEwREU4 MjJBMThGREU1RUIwODZGQTlBOEE4OS8wLzNCOEQ4QzNGRjBDMjNDN0UxMUU4OTZD QkZGOEI0RUM2MkRFQTZEQUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADBuhzGxNcPPoql4csrMezOUbv 91Yi5zqwwnhejy9xJFmMVURACnJKdUg7Oz64SyqlkHgfyTysVGwR597zq6e69aT+ U9WzxcaN8v7ekvXn5VMpE9bWhnsxKnLds8mDpG7byoIjzWg7CA0imbLavRPICL6y INNHS0EKaq2SsTGP3Ihzk91noUi+ekWGWXcD9Lm1AIx1CChih9Y8DlO/QtwSGRM7 D6OK6S+PZjf5pRntopZzcbPiSA33b5rP3SWOgYtbeCmfJoQUze5LQggGHed5zm9c 9xIS0wRjDryIWnvxMm87SqWTbTTcPpexcrKZyOhceN4ZgiKvwKcXBZnDG70d -----END CERTIFICATE-----Generated at Sun Dec 7 04:20:59 2025 by rpki-client