This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft
File: 621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft (raw, json)
Hash identifier: VujKJ7AvTci9kf215f/P5H1r0rXPLnx956a6MRbZVTU=
Subject key identifier: 9C:59:40:E9:56:78:7D:D7:F0:6D:02:9D:9F:24:24:7D:88:D2:E3:00
Authority key identifier: 62:1B:61:96:7B:5E:DE:ED:D5:BD:F8:BD:FD:1E:FE:F9:70:FC:27:47
Certificate issuer: /CN=621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747
Certificate serial: 69AEC2FEFF0EAFEB708EB00EDA4AE1FFB50316D6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft
Manifest number: 02
Signing time: Fri 05 Dec 2025 20:10:00 +0000
Manifest this update: Fri 05 Dec 2025 20:05:00 +0000
Manifest next update: Thu 11 Dec 2025 04:29:00 +0000
Files and hashes: 1: 323830333a643835303a3a2f33322d3438203d3e20323733313138.roa (hash: Vk5dQOyxye3KHA3x3MvKS5O63/jL9KItFEHccy/7IAQ=)
2: 621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.crl (hash: 6AYR+Fzbp1ZMzpTmMV7Dp8abHnIkFHPj8prSeIQxt1c=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.crl
rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 04:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ae:c2:fe:ff:0e:af:eb:70:8e:b0:0e:da:4a:e1:ff:b5:03:16:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747
Validity
Not Before: Dec 5 20:05:00 2025 GMT
Not After : Dec 11 04:29:00 2025 GMT
Subject: CN=9C5940E956787DD7F06D029D9F24247D88D2E300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a6:c3:5e:e4:06:3f:77:ee:be:db:6a:53:65:
31:a2:d8:72:4e:65:4f:a5:0f:8a:6e:f5:7c:bb:e8:
88:cd:36:68:03:3f:aa:1c:d9:9f:ee:42:16:f5:25:
83:c3:9e:60:c5:66:4a:62:a6:2e:05:a5:54:16:85:
b0:1d:bc:9b:c8:e1:ec:2c:fb:8f:e1:fe:8d:fa:81:
c2:76:0e:2d:f0:24:85:7b:85:40:6b:af:dc:90:8b:
be:32:12:1b:65:20:bb:3b:b6:0c:fb:87:ca:b9:d0:
94:cf:49:2b:e1:58:6e:c2:cd:0a:df:e2:45:a7:a9:
e5:83:ba:75:fd:2e:d7:82:dc:cc:33:77:d1:27:b7:
4c:58:5a:42:e1:fe:87:6b:6b:5d:2b:66:a8:d6:f5:
a9:1d:a8:d9:84:4e:f4:f3:02:ea:56:89:4c:bd:c6:
1f:da:3d:29:8c:de:7a:fa:ff:92:be:ff:97:00:b6:
98:03:60:5b:52:7c:9d:5e:2d:6c:38:10:eb:eb:5f:
28:c3:ef:97:37:c5:c1:ec:22:92:a1:3a:69:d4:7a:
57:45:0e:12:04:ee:b1:21:b6:e7:73:21:a6:21:e8:
01:2a:ff:f7:c1:df:82:99:cd:5a:e1:24:35:ad:74:
f8:52:fb:0d:74:82:c3:7b:67:77:cd:88:74:68:e0:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:59:40:E9:56:78:7D:D7:F0:6D:02:9D:9F:24:24:7D:88:D2:E3:00
X509v3 Authority Key Identifier:
keyid:62:1B:61:96:7B:5E:DE:ED:D5:BD:F8:BD:FD:1E:FE:F9:70:FC:27:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f0:4c:9b:ea:04:6a:02:e1:ba:3b:5f:56:b5:59:7d:16:51:
18:18:6d:50:78:7a:3b:bb:a6:00:76:14:73:07:9e:af:28:4b:
5e:4b:d6:2d:4f:84:be:2f:5f:d9:79:7a:dd:be:b6:eb:52:ff:
0e:5e:eb:2a:c1:8a:31:47:1f:d6:ae:60:95:d2:f6:0c:db:67:
70:9f:89:ee:42:bf:ea:18:e2:68:a3:08:b4:8f:0e:34:41:5e:
77:80:36:78:65:49:a1:a5:af:ec:42:bd:07:e9:51:43:de:51:
37:55:4a:78:35:23:dd:d5:cf:04:66:fe:31:9f:b8:70:26:51:
77:7c:ba:4e:5a:2d:b3:2d:6d:ee:5d:69:02:72:ba:66:e7:3f:
a6:bd:36:e2:2f:3f:b8:00:f4:1a:6f:90:41:c7:84:52:5a:1f:
b0:bd:7c:03:02:a0:51:11:a3:4e:f0:2d:14:18:3c:f0:e9:47:
f6:86:d3:6d:ff:6a:9c:4b:7c:fb:2c:06:af:a0:d9:f4:36:01:
9c:ca:d1:84:a0:47:3b:7e:78:5b:6c:48:25:fa:b3:8a:43:09:
ee:81:27:25:6d:74:84:43:e7:4d:90:fb:84:08:40:3a:9a:d0:
a8:cd:50:79:31:1d:28:66:78:7b:fa:9a:d4:33:92:cb:37:3d:
69:11:bc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:53:41 2025 by rpki-client