This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft
File: 5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft (raw, json)
Hash identifier: qUZAGE+mWmCIa0WUXak90gWYiknaHr0svob2rzuWDO0=
Subject key identifier: CA:53:86:8B:B6:2C:D7:F1:6B:17:F4:ED:DF:53:87:09:EA:57:DD:02
Authority key identifier: 54:58:CA:1B:10:BC:28:3A:21:E9:C9:D3:56:90:38:E8:0F:56:76:E4
Certificate issuer: /CN=5458CA1B10BC283A21E9C9D3569038E80F5676E4
Certificate serial: 0E96E81F71FADB9E8D00786052BF49DA917A2C09
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft
Manifest number: D8
Signing time: Sat 06 Dec 2025 19:52:33 +0000
Manifest this update: Sat 06 Dec 2025 19:47:33 +0000
Manifest next update: Thu 11 Dec 2025 00:37:33 +0000
Files and hashes: 1: 323830363a3431333a3a2f33322d3438203d3e20323732333632.roa (hash: 3gei3c3TJdAEt3+8CEVzip+xVBL8sD0wxQZ5kOaWLIc=)
2: 5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl (hash: jg7jVLkGjGs+pE+hrL6WmNu2TY23s1OKVS592WX413Q=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl
rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 00:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:96:e8:1f:71:fa:db:9e:8d:00:78:60:52:bf:49:da:91:7a:2c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5458CA1B10BC283A21E9C9D3569038E80F5676E4
Validity
Not Before: Dec 6 19:47:33 2025 GMT
Not After : Dec 11 00:37:33 2025 GMT
Subject: CN=CA53868BB62CD7F16B17F4EDDF538709EA57DD02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:e4:e5:9d:23:43:03:f9:12:5a:f4:f9:e0:
7d:8b:d8:19:14:08:36:f1:95:e7:89:1f:fd:04:d7:
43:8b:a9:64:b1:c0:dd:f9:4b:d6:07:6d:b8:1c:9b:
f5:b9:e5:a5:e1:32:69:e2:41:00:70:45:67:10:ea:
7a:fd:e1:af:25:2e:e9:f2:23:20:00:18:e7:a5:f7:
29:48:da:68:90:d0:e2:7c:12:43:e9:8d:8f:d2:22:
4a:3b:89:9a:53:ca:f0:f3:5b:14:08:91:a0:54:50:
f4:3a:18:e8:03:9a:db:ea:85:71:e0:46:79:bd:74:
9e:8c:fe:01:ad:40:52:29:53:b7:a3:ec:26:43:1c:
47:4e:de:57:38:9f:33:50:07:c0:0d:d7:db:14:4c:
00:6e:87:04:37:89:25:0e:51:7c:bb:1c:fd:44:7e:
b9:c8:19:64:c3:de:62:d4:fa:eb:7a:a1:6b:12:89:
b6:15:31:b0:1b:f6:5b:8d:de:5f:76:76:9a:93:f8:
21:f9:c3:55:c0:5d:04:a8:0d:48:4e:ed:b1:9e:33:
a4:b9:8a:b2:b7:81:81:ea:4b:da:27:50:99:94:b6:
47:9b:fd:17:13:60:34:32:27:d3:ca:51:d6:ba:ce:
e2:52:bf:bb:1e:c2:79:28:0d:18:85:5d:2f:80:a9:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:53:86:8B:B6:2C:D7:F1:6B:17:F4:ED:DF:53:87:09:EA:57:DD:02
X509v3 Authority Key Identifier:
keyid:54:58:CA:1B:10:BC:28:3A:21:E9:C9:D3:56:90:38:E8:0F:56:76:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b6:44:0e:93:4d:13:b3:cd:5f:6d:ff:ef:75:ab:b0:c0:53:
76:52:15:17:0d:a8:d1:b1:8e:63:c4:83:25:b4:9b:51:f7:83:
d2:f0:7b:89:59:c8:62:cc:fa:4b:23:e5:1a:b7:69:bb:9c:10:
af:3a:6b:1d:42:73:3d:5f:92:59:da:96:04:9e:5a:0f:48:3c:
9c:01:1c:34:25:93:35:8e:fe:86:ae:c3:a6:64:2f:02:5b:f2:
18:bc:74:34:62:94:62:55:d4:e8:a6:43:0a:e7:b7:7b:f0:b7:
3d:e4:20:1d:d1:20:c8:a3:53:e6:2e:46:0c:d6:93:09:88:17:
4b:f4:68:d8:cb:47:ae:46:06:5a:5c:4b:84:30:91:e3:79:9d:
71:5c:49:ea:c7:ea:ba:8f:06:a2:f3:a3:99:a1:ec:3c:e3:bd:
05:a0:f9:6f:39:5d:d0:b1:52:e6:51:99:b8:71:60:ea:28:c2:
39:3e:f7:e0:8d:ad:64:06:cb:f4:e1:34:51:cb:45:fc:ed:be:
35:be:cc:3c:7c:61:94:9c:db:56:f5:6b:ed:bc:5b:9d:1e:1c:
6c:ad:32:b6:25:1e:0b:bc:66:2e:03:0a:68:47:8e:c3:c8:96:
90:a0:66:d4:42:c6:db:df:f6:12:fb:1a:23:24:14:df:01:10:
f3:db:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:33:31 2025 by rpki-client