This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft
File: 280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft (raw, json)
Hash identifier: +rrokBK0nMsP7m1Li6mxtUNbUlsduwL1MDQlov6PwKY=
Subject key identifier: 98:6C:9B:6D:51:DC:1D:C7:C1:7C:96:DB:3D:AC:B5:B6:65:9A:0D:A1
Authority key identifier: 28:0C:60:6B:42:E3:E2:9D:27:F6:E5:AD:C0:ED:5E:13:09:3C:25:E8
Certificate issuer: /CN=280C606B42E3E29D27F6E5ADC0ED5E13093C25E8
Certificate serial: 21C23266C74F9FFF846532588A0D245F04AA48C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft
Manifest number: 013E
Signing time: Sat 06 Dec 2025 15:50:16 +0000
Manifest this update: Sat 06 Dec 2025 15:45:16 +0000
Manifest next update: Thu 11 Dec 2025 17:28:16 +0000
Files and hashes: 1: 323830333a316239303a3a2f33322d3438203d3e20323733303434.roa (hash: lFF+DjACeCDUFHfZ+y6xFpQFjs8slqARJDIP/QmLICM=)
2: 280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.crl (hash: 0q9EGWR5u6ZeqMmeiv3t7ToAAsMHLqWWaQp0tOnt0bc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.crl
rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 03:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c2:32:66:c7:4f:9f:ff:84:65:32:58:8a:0d:24:5f:04:aa:48:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280C606B42E3E29D27F6E5ADC0ED5E13093C25E8
Validity
Not Before: Dec 6 15:45:16 2025 GMT
Not After : Dec 11 17:28:16 2025 GMT
Subject: CN=986C9B6D51DC1DC7C17C96DB3DACB5B6659A0DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:8c:a3:c2:68:00:95:2a:44:96:1f:bc:79:
e5:a5:51:1d:a6:09:a2:46:8d:18:87:a4:3a:ea:fc:
5f:c6:91:2a:b8:9a:1b:fe:7e:1a:eb:c8:3e:20:25:
6b:27:fc:bb:da:84:df:ac:7a:35:6e:45:ff:84:fd:
56:bd:1c:93:fd:e4:7e:cb:1a:30:33:02:09:b9:0a:
26:59:94:c7:92:75:ef:33:24:22:ca:d7:4c:23:52:
0f:41:49:20:99:ac:aa:0d:fe:fe:56:88:21:8a:37:
0f:5d:ae:13:53:7f:08:ee:12:da:94:c4:3e:48:f4:
78:8d:50:e2:87:15:ea:0b:01:cb:05:ef:08:de:5c:
ab:5b:c6:58:61:6a:39:57:67:29:89:27:b0:f2:3e:
f2:1a:d6:36:de:ed:24:28:d2:e8:27:33:55:1a:b6:
02:ee:ee:39:f6:fb:4d:0a:dd:30:cd:bd:f6:df:83:
d2:7d:62:d1:a7:22:9d:7c:9f:06:26:dd:75:79:1d:
98:cf:02:80:c8:9d:1a:19:1b:d2:1d:77:03:b2:1d:
7d:ae:4d:47:95:a6:98:07:b4:a9:93:fb:41:74:d6:
57:e6:bf:a2:0a:3c:32:50:70:2a:ea:80:c3:3a:3a:
5e:fb:98:01:06:88:5d:28:41:e4:d5:bc:01:88:1a:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6C:9B:6D:51:DC:1D:C7:C1:7C:96:DB:3D:AC:B5:B6:65:9A:0D:A1
X509v3 Authority Key Identifier:
keyid:28:0C:60:6B:42:E3:E2:9D:27:F6:E5:AD:C0:ED:5E:13:09:3C:25:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:80:21:25:7d:76:b0:c5:bd:7c:59:d2:f0:2e:6f:21:79:7b:
ec:64:a3:9c:b7:a5:08:45:a1:14:d9:a0:ec:1a:5a:94:41:07:
25:a9:1f:7b:05:e4:f2:97:c4:fa:19:74:0f:7e:66:e0:a4:e9:
b9:ca:50:75:1f:58:28:94:c7:3a:2e:46:6e:ca:47:9c:1a:7a:
6a:d1:c8:b4:a0:98:cf:0a:e0:78:37:58:86:8d:27:0d:1b:92:
d7:7d:f3:36:37:7c:6a:7d:98:90:4d:94:8d:d7:a1:cc:0d:09:
96:ba:7c:38:e0:19:da:9f:82:0c:24:80:0e:26:e8:b7:e4:57:
02:79:15:24:83:a8:ac:66:22:02:d9:26:30:d5:dd:af:3c:9f:
cc:15:b2:19:1b:6a:8e:67:51:09:46:e5:b2:08:48:35:b7:70:
89:11:55:f9:5b:29:5a:6f:9b:30:aa:20:88:55:c9:72:e1:9d:
bc:d9:2a:11:aa:c0:74:28:25:7a:a4:4f:0e:99:3e:f0:6a:f1:
10:8b:ce:26:6f:ee:f6:7b:79:98:96:84:2f:f3:48:96:fb:f9:
98:64:5b:3a:75:9c:71:38:37:dc:06:b7:12:ca:10:84:e9:09:
95:bc:92:03:71:31:ba:1e:8f:1b:ea:70:aa:74:08:8f:b2:e3:
9d:76:be:73
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIcIyZsdPn/+EZTJYig0kXwSqSMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgwQzYwNkI0MkUzRTI5RDI3RjZFNUFEQzBFRDVFMTMw
OTNDMjVFODAeFw0yNTEyMDYxNTQ1MTZaFw0yNTEyMTExNzI4MTZaMDMxMTAvBgNV
BAMTKDk4NkM5QjZENTFEQzFEQzdDMTdDOTZEQjNEQUNCNUI2NjU5QTBEQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QIyjwmgAlSpElh+8eeWlUR2m
CaJGjRiHpDrq/F/GkSq4mhv+fhrryD4gJWsn/LvahN+sejVuRf+E/Va9HJP95H7L
GjAzAgm5CiZZlMeSde8zJCLK10wjUg9BSSCZrKoN/v5WiCGKNw9drhNTfwjuEtqU
xD5I9HiNUOKHFeoLAcsF7wjeXKtbxlhhajlXZymJJ7DyPvIa1jbe7SQo0ugnM1Ua
tgLu7jn2+00K3TDNvfbfg9J9YtGnIp18nwYm3XV5HZjPAoDInRoZG9IddwOyHX2u
TUeVppgHtKmT+0F01lfmv6IKPDJQcCrqgMM6Ol77mAEGiF0oQeTVvAGIGpIfAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUmGybbVHcHcfBfJbbPay1tmWaDaEwHwYDVR0j
BBgwFoAUKAxga0Lj4p0n9uWtwO1eEwk8JegwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMjFCQzlBNDVBMzBEMDE1QUIyODc1N0M0NjA3OTlGQUY3
RjZBMzlFODFGQTU2NkY2NzA0RTU3NjE0NEVENTBFLzAvMjgwQzYwNkI0MkUzRTI5
RDI3RjZFNUFEQzBFRDVFMTMwOTNDMjVFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yODBDNjA2QjQyRTNFMjlEMjdG
NkU1QURDMEVENUUxMzA5M0MyNUU4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjIxQkM5QTQ1QTMwRDAxNUFCMjg3NTdDNDYwNzk5RkFGN0Y2QTM5RTgx
RkE1NjZGNjcwNEU1NzYxNDRFRDUwRS8wLzI4MEM2MDZCNDJFM0UyOUQyN0Y2RTVB
REMwRUQ1RTEzMDkzQzI1RTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6gCElfXawxb18WdLwLm8heXvs
ZKOct6UIRaEU2aDsGlqUQQclqR97BeTyl8T6GXQPfmbgpOm5ylB1H1golMc6LkZu
ykecGnpq0ci0oJjPCuB4N1iGjScNG5LXffM2N3xqfZiQTZSN16HMDQmWunw44Bna
n4IMJIAOJui35FcCeRUkg6isZiIC2SYw1d2vPJ/MFbIZG2qOZ1EJRuWyCEg1t3CJ
EVX5Wylab5swqiCIVcly4Z282SoRqsB0KCV6pE8OmT7wavEQi84mb+72e3mYloQv
80iW+/mYZFs6dZxxODfcBrcSyhCE6QmVvJIDcTG6Ho8b6nCqdAiPsuOddr5z
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:34:44 2025 by rpki-client