This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
File: 2D420DA52C4FED64C64081F978E8485CD8161A81.mft (raw, json)
Hash identifier: 5Roa8/FKzNZoSRzK/5ImbJhpRYInyOgWu31Yw8dC4V4=
Subject key identifier: BC:A9:27:58:B7:5A:CA:CF:B1:23:56:3D:38:73:1C:96:24:D5:3F:C2
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Certificate issuer: /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial: 480C42DB68AA422BB627CE5162372E6737F0CA13
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
Manifest number: 013D
Signing time: Sun 07 Dec 2025 02:31:14 +0000
Manifest this update: Sun 07 Dec 2025 02:26:14 +0000
Manifest next update: Thu 11 Dec 2025 20:31:14 +0000
Files and hashes: 1: 3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa (hash: rZzDnwa0MPMnAUQI/T5MjhsAO3J26Ue6xAm2FQO/eiA=)
2: 3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa (hash: /Z7LPAsuTjZ5cwTBvnVpQcKSEa9rH/diyzx0Hq8W+6o=)
3: 323830333a633036303a3a2f33322d3332203d3e203631343531.roa (hash: y+kZpxvB2vqV6FoA3lmooqJCJtir3RHk1ikwbeAOmdU=)
4: 34352e3137332e302e302f32322d3234203d3e203631343531.roa (hash: GGuVym2kL4T0FmdZd9rq4sGSSWcGiS/epeSrSrFw9qw=)
5: 2D420DA52C4FED64C64081F978E8485CD8161A81.crl (hash: O2tuDrvqagwa00RqinJ1LXFcWP0rq+DSDZgrMhLA/3w=)
6: 3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa (hash: 1oYXiRs6rlIee7gSCsds1xIN8M3Wto/5rLLuEM7RJ/4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 03:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:0c:42:db:68:aa:42:2b:b6:27:ce:51:62:37:2e:67:37:f0:ca:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Validity
Not Before: Dec 7 02:26:14 2025 GMT
Not After : Dec 11 20:31:14 2025 GMT
Subject: CN=BCA92758B75ACACFB123563D38731C9624D53FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:9d:f7:96:b1:22:4c:7e:05:84:76:67:a5:
d2:ff:a2:d4:c1:ff:d2:23:40:83:4e:dd:fe:4e:a4:
a5:56:66:75:3d:4a:ca:82:e1:ed:53:29:6e:de:b5:
a9:9a:16:80:fa:75:8c:98:98:fe:9f:09:aa:ee:75:
94:82:2a:2b:f1:63:91:c6:f7:6c:b8:bd:9a:fa:3b:
ba:3b:0e:25:5f:77:0c:3e:52:51:b1:d7:c4:56:46:
bb:7c:8c:3f:35:2e:15:34:a0:ed:67:e7:71:24:aa:
f7:c0:3e:08:7b:8f:e5:eb:f0:fb:9f:60:40:84:90:
d1:9e:a6:26:8b:3b:52:c5:61:e9:63:f1:22:27:7b:
f2:2c:c4:37:0e:a8:80:90:10:58:2b:98:e1:2d:64:
04:be:29:ad:d3:7e:e0:18:be:49:0b:70:45:29:d4:
1c:88:b6:8e:96:26:7c:75:d8:86:36:db:d4:d5:2c:
f7:45:fd:58:84:43:5b:39:dc:1d:97:79:da:6e:22:
f4:82:92:54:f9:9d:42:4a:9f:71:de:c0:50:33:c2:
a1:0c:d6:ec:6f:e7:88:f5:8c:c4:2c:93:80:af:e1:
4a:a6:34:ad:ab:c9:27:12:eb:22:19:9f:7b:a4:77:
43:f5:8c:c1:66:33:8c:41:5d:3f:9a:31:9c:f8:83:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A9:27:58:B7:5A:CA:CF:B1:23:56:3D:38:73:1C:96:24:D5:3F:C2
X509v3 Authority Key Identifier:
keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a3:c2:47:07:c2:67:18:c0:bc:90:40:26:c9:f4:99:48:f4:
23:5d:4c:99:7c:4f:d6:43:f7:ce:ee:66:a0:6b:d8:9d:d0:5f:
74:9c:46:ad:ae:18:6a:9a:3c:fd:31:56:99:45:22:2a:ee:4f:
e3:5b:bf:cc:86:28:3a:22:65:b3:94:91:74:48:97:3f:be:bf:
d2:22:10:91:c8:d7:2a:ea:5d:d0:25:c3:77:34:6e:f4:df:73:
55:e6:fb:6c:cc:4f:d4:15:b2:0c:3e:e3:97:61:38:6a:21:b2:
51:93:83:59:cd:06:f2:14:c9:fb:d7:3a:06:02:f8:87:42:d0:
5e:da:eb:6f:61:95:b4:a0:73:99:b0:f5:e5:d7:cd:50:84:55:
d0:7c:71:e1:37:d8:73:8a:b4:02:9d:c1:fe:be:15:91:29:cd:
43:d1:bc:34:e3:3d:f6:5d:c2:3f:b2:42:44:16:2b:b2:01:ae:
9f:d6:d9:b6:e8:42:33:18:f3:2c:9e:02:a7:b8:b9:da:93:ba:
25:a7:8f:d1:9d:6f:1a:93:96:1f:51:a2:11:af:20:c5:f1:b4:
0e:31:a4:09:64:7e:ec:a3:58:aa:6d:5e:f0:0d:ed:4e:5b:e7:
c7:6e:51:dd:4e:13:88:3e:ee:ad:d8:3b:c7:4f:f4:2b:ee:1e:
91:b2:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:30:26 2025 by rpki-client