This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
File: DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft (raw, json)
Hash identifier: w6O0n6TBYZHZB3iP5mewi+sYzOMx4ZZSipzso7Atq9g=
Subject key identifier: A2:8E:00:32:C7:8E:5A:86:DC:81:4D:8B:A2:0D:19:3A:8E:EC:60:9D
Authority key identifier: DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA
Certificate issuer: /CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
Certificate serial: 205EC4CCC8B1411C142CDCCB6088D80CC18C3E62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
Manifest number: D3
Signing time: Thu 04 Dec 2025 14:47:27 +0000
Manifest this update: Thu 04 Dec 2025 14:42:27 +0000
Manifest next update: Wed 10 Dec 2025 10:40:27 +0000
Files and hashes: 1: 323830313a3132363a3a2f34342d3434203d3e20323632353839.roa (hash: Z9kwP0FwpAseO/dcyQPuo+zaM5tKIh6jbqLWg2y6Gmo=)
2: DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl (hash: OMWhX/b4NSpGodsBpThWNMWN2+OISYYZ5RD4VqYJ5M8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl
rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 10:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:5e:c4:cc:c8:b1:41:1c:14:2c:dc:cb:60:88:d8:0c:c1:8c:3e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
Validity
Not Before: Dec 4 14:42:27 2025 GMT
Not After : Dec 10 10:40:27 2025 GMT
Subject: CN=A28E0032C78E5A86DC814D8BA20D193A8EEC609D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:4a:bf:0e:0d:2d:a2:34:af:03:96:ce:75:28:
cc:18:5e:84:e5:37:0d:0e:e4:fb:1e:a7:94:18:cf:
d7:94:fa:2f:2e:ca:50:0f:89:44:fc:03:15:1d:1c:
a7:b8:3a:69:0e:38:0d:b8:a2:00:22:3d:e0:76:1e:
31:f9:8e:0e:57:b7:ba:7f:e5:3a:82:ff:c0:3d:e2:
fe:ad:92:a2:58:ed:a4:98:02:bc:e9:66:14:ed:9f:
d4:97:a9:81:40:36:61:3c:cf:ac:d9:62:b9:33:d5:
3b:f6:79:4e:41:05:8d:2a:b7:27:b3:38:99:fe:b0:
a6:8f:4e:60:3a:89:cc:11:1c:26:7d:5b:7d:c9:ac:
f4:b7:3f:c5:81:e5:66:6b:51:72:32:a4:de:55:cf:
e8:ab:ea:35:df:aa:29:eb:74:df:c8:8c:f4:ec:3c:
ba:75:3a:d4:43:d5:92:a4:54:16:1e:c4:0e:90:e3:
72:e9:b6:09:76:79:67:cc:fa:69:52:6b:f1:ec:24:
87:8f:dc:88:d1:ba:a1:07:6d:51:f7:2c:13:37:5e:
d7:95:30:9a:58:40:56:a5:a4:79:08:56:a3:73:ed:
c7:c3:e3:54:89:c9:37:a5:9b:2b:f2:dc:1e:ef:51:
21:a0:d8:46:58:24:cc:73:b0:27:a0:0d:73:df:f9:
37:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8E:00:32:C7:8E:5A:86:DC:81:4D:8B:A2:0D:19:3A:8E:EC:60:9D
X509v3 Authority Key Identifier:
keyid:DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d5:cb:08:77:30:40:21:72:74:31:ba:03:bb:fe:f1:db:1c:
32:e1:54:63:8b:8a:3e:23:76:f1:31:c5:bd:12:9c:0f:ca:7b:
8d:64:e4:5b:6f:25:b7:7b:82:ac:40:72:b5:2b:c6:92:0b:b3:
33:16:e2:92:a2:28:07:43:5d:9b:1c:0a:d3:42:ca:4b:3c:f3:
d0:1b:2c:29:e1:53:b0:4c:a0:6d:91:b1:52:b7:2f:a3:dc:53:
b4:eb:9b:18:3f:31:3e:db:a6:3f:fa:cc:1a:61:ab:d9:64:19:
26:5a:33:99:a0:b8:e3:b9:55:02:71:7f:88:ce:e9:1d:4a:51:
bc:e2:45:39:4c:a2:92:e6:b3:d9:cf:d4:e7:0b:be:26:5a:ad:
d8:d6:e8:42:e2:55:ab:8f:45:5c:f9:ae:b5:88:eb:5f:40:1d:
8c:04:97:41:4c:ba:4f:0e:e7:17:36:85:2e:1b:d9:e1:38:96:
27:f5:1c:98:c8:c0:13:44:ef:8b:99:d3:e5:84:d1:8f:b9:c2:
8b:7a:b1:4e:ae:89:eb:e6:77:7e:70:76:5a:e7:24:42:e6:11:
eb:44:33:7a:7a:80:fb:0e:96:a9:3a:83:d2:15:c9:38:49:40:
25:68:63:a3:93:c5:0b:eb:1d:5e:6b:37:1f:39:05:4b:6f:fd:
b0:ba:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:10:02 2025 by rpki-client