This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft
File: 2522843848570F9C59A0A97D0D85367C510D573A.mft (raw, json)
Hash identifier: afvabcl3Q+D7ATrLWrkLnHNlIUpbi5JQ776UKEGTfLw=
Subject key identifier: 70:F9:43:0E:23:28:AD:39:AE:D0:AA:F0:AB:E1:BB:D2:71:69:49:A6
Authority key identifier: 25:22:84:38:48:57:0F:9C:59:A0:A9:7D:0D:85:36:7C:51:0D:57:3A
Certificate issuer: /CN=2522843848570F9C59A0A97D0D85367C510D573A
Certificate serial: 30922D10B47ED9864DE313BEBCC910EF0FBEC7FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft
Manifest number: 61
Signing time: Sat 06 Dec 2025 00:26:30 +0000
Manifest this update: Sat 06 Dec 2025 00:21:30 +0000
Manifest next update: Thu 11 Dec 2025 10:12:30 +0000
Files and hashes: 1: 323830333a656435303a313a3a2f34382d3438203d3e20323733383639.roa (hash: z/6l6Pa6GCWSCcWLKaIxaItlBQBm+5gINkKFBzQwXPg=)
2: 2522843848570F9C59A0A97D0D85367C510D573A.crl (hash: 1527/lVC+rFb3Un+k4B/Yj+2oHPOgvYg96lOrOFXjns=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.crl
rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 10:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:92:2d:10:b4:7e:d9:86:4d:e3:13:be:bc:c9:10:ef:0f:be:c7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2522843848570F9C59A0A97D0D85367C510D573A
Validity
Not Before: Dec 6 00:21:30 2025 GMT
Not After : Dec 11 10:12:30 2025 GMT
Subject: CN=70F9430E2328AD39AED0AAF0ABE1BBD2716949A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:61:2a:ed:bc:1e:6a:2e:b0:e7:c9:d7:63:
06:0d:aa:8f:e8:cf:04:16:a7:0e:fe:b1:68:78:ab:
96:8e:74:06:51:fc:cd:8c:98:b0:79:ac:bb:2f:93:
ec:d9:7b:98:d1:10:e6:c0:be:a9:c9:03:d7:dc:91:
ee:71:d2:37:58:e1:ce:55:42:ef:68:2f:6d:c2:03:
ad:0b:4a:95:69:0c:64:ae:20:3d:40:13:87:f3:7e:
c0:a1:15:39:1c:a6:d3:af:be:79:87:86:17:6d:1a:
77:47:21:3f:cb:52:ef:c4:07:db:66:96:03:7b:05:
9d:82:9c:eb:93:18:7a:4a:6d:b6:35:7a:a6:3e:29:
67:fc:cf:89:a0:5b:a6:d1:b7:34:97:3d:e1:53:16:
09:3b:72:77:79:69:42:f7:f5:c3:fa:f1:7a:42:36:
09:02:24:54:8a:ca:6e:3c:29:18:4d:ff:91:b3:02:
1b:46:1a:4b:90:89:9c:f5:82:ea:b9:9e:9d:7a:80:
c5:14:cf:ee:84:a1:8d:7c:32:8b:f0:cd:fe:d8:2c:
0c:29:d5:83:5d:e9:a4:d9:58:6d:62:30:eb:43:dc:
8b:80:85:16:0e:7f:9c:24:4c:d4:07:72:fd:66:ca:
a1:e4:78:6c:7b:bd:72:e5:f2:e0:24:ba:86:99:48:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F9:43:0E:23:28:AD:39:AE:D0:AA:F0:AB:E1:BB:D2:71:69:49:A6
X509v3 Authority Key Identifier:
keyid:25:22:84:38:48:57:0F:9C:59:A0:A9:7D:0D:85:36:7C:51:0D:57:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cd:19:01:22:61:b2:19:be:e2:18:32:33:34:9c:32:a4:5a:
fd:87:8e:c7:8a:43:9a:c6:ec:96:c8:86:f4:ba:e1:1c:9a:94:
3d:d3:ab:4f:a5:e3:43:04:29:a0:40:2f:d9:7c:be:65:44:68:
f5:34:d7:e0:7f:7d:c8:89:d3:95:e0:00:d5:b0:81:73:e9:a6:
9d:ce:31:4e:9d:a5:a3:4b:b6:50:20:19:5b:2b:c1:8a:f5:bb:
0a:c7:35:d1:c5:61:a9:d1:28:21:ee:48:6a:ce:5a:9f:3d:e7:
16:03:6b:6d:b0:79:18:30:e8:e4:1c:64:79:bb:5a:db:ab:76:
21:b5:77:10:17:5d:d4:65:dc:bb:6f:a5:c7:00:8e:2e:b5:0b:
5a:de:b8:3d:d4:e0:95:a7:f9:c3:00:d6:b5:87:53:eb:61:c3:
f6:66:e2:41:4a:fd:96:7d:17:d3:dc:cf:d7:a2:59:e4:0f:4d:
6d:8b:68:ef:9b:10:e4:92:4a:33:9f:8d:4d:f2:7b:21:57:c7:
c4:dc:e7:c0:8f:5d:b4:bf:50:ed:a7:10:82:86:bc:e1:0d:25:
60:66:d3:f7:f5:6b:6f:2a:5c:d1:74:d5:ec:84:9b:4f:7e:1e:
e0:5d:1d:a3:26:d7:dd:f9:8d:da:37:e5:9c:a3:fc:f7:f2:86:
eb:84:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:51:31 2025 by rpki-client