This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
File: 4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft (raw, json)
Hash identifier: u+V0UWwXYA+SoDqqJ1VLm3MB4DfrSI0zAtDLJjBsfAM=
Subject key identifier: 61:2A:F1:73:D1:38:07:85:C8:E4:76:3F:F1:EA:76:D8:32:0E:F3:96
Authority key identifier: 4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
Certificate issuer: /CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Certificate serial: 7A5E8CAC2A1B003AD324049041F5629F6A2F338D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
Manifest number: 0147
Signing time: Sat 06 Dec 2025 04:13:40 +0000
Manifest this update: Sat 06 Dec 2025 04:08:40 +0000
Manifest next update: Wed 10 Dec 2025 10:35:40 +0000
Files and hashes: 1: 323830333a356239303a3a2f33322d3438203d3e20323733303438.roa (hash: vbmhuabCX3kIp1FpRu5OFaEVu9ZZo5hsFff0qsFsrQQ=)
2: 4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl (hash: JQ44ZZFtxVbiKV8ipxYhz6itmfi4bIT7/FTi5gi5sGE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl
rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 10:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:5e:8c:ac:2a:1b:00:3a:d3:24:04:90:41:f5:62:9f:6a:2f:33:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Validity
Not Before: Dec 6 04:08:40 2025 GMT
Not After : Dec 10 10:35:40 2025 GMT
Subject: CN=612AF173D1380785C8E4763FF1EA76D8320EF396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:8e:eb:5f:06:dc:8a:05:e7:4b:f1:a7:a2:
52:ce:08:b3:b5:b6:67:26:10:66:2c:59:0b:98:4e:
3c:db:71:ec:88:93:8c:66:ab:17:2b:ce:47:b6:18:
30:73:63:b7:6b:c6:34:10:6a:cb:97:4d:78:89:79:
1c:c1:2c:ff:8e:ac:5a:8a:f4:e4:06:4f:85:59:08:
a3:a3:16:0f:4b:f8:4d:87:74:76:69:fa:75:83:0d:
22:16:22:ee:cd:f5:33:40:96:96:f9:c9:31:d4:e3:
a9:a4:b9:79:e0:55:c3:69:4c:47:79:6c:e9:5a:fe:
48:40:d2:3e:8a:39:0f:e9:f1:e8:c6:b2:2d:f3:0b:
11:7f:af:5f:26:3b:a0:fb:02:78:e3:39:4e:f2:62:
76:0e:74:00:70:9e:be:ec:cd:d4:50:6a:51:39:30:
23:9e:2a:1d:00:31:14:53:20:fa:72:9f:3e:8e:8c:
d6:04:13:b0:c7:27:63:b8:46:67:0b:6e:7d:ce:c7:
3e:b4:14:52:0f:a2:c1:7c:83:b8:91:13:78:75:ae:
26:b5:3c:94:e4:6e:7c:a3:be:77:b9:3b:50:f5:a8:
9d:1c:26:36:72:36:c0:9d:dd:d0:1d:74:84:d3:71:
97:e0:fd:ee:f2:8c:c8:41:37:ed:5f:d0:9e:f5:a9:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2A:F1:73:D1:38:07:85:C8:E4:76:3F:F1:EA:76:D8:32:0E:F3:96
X509v3 Authority Key Identifier:
keyid:4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a5:43:91:d1:ff:bd:29:11:97:af:cc:77:9c:ac:b6:00:5f:
35:88:ca:62:f6:48:3f:14:48:eb:ec:4a:cb:cb:d0:ba:3a:8c:
18:3c:8e:1b:55:bd:e9:d3:e9:b2:94:a2:cd:c1:8b:45:62:4d:
5f:fc:3e:f4:0c:56:8f:06:17:fc:d7:f0:6d:b4:be:48:7c:6b:
14:54:cc:4d:6d:37:01:03:46:2e:b6:74:f6:b8:a4:11:de:74:
6b:af:f8:7e:cd:dd:5c:c7:31:76:48:35:ce:a7:fe:1d:48:df:
a6:18:60:16:95:83:9e:41:99:6c:74:b9:76:cd:50:75:86:d6:
97:72:77:a0:48:c9:12:8a:46:ec:c4:a3:16:90:e3:de:8d:87:
d1:4f:b8:50:5d:70:da:07:60:7f:a9:3f:54:2a:69:53:52:6e:
b0:bb:a6:0b:c6:fd:5d:ce:42:8e:1d:a3:c9:ee:56:5c:08:d4:
1c:6c:07:5a:cf:c6:57:02:b1:92:ca:a7:4f:21:b6:0c:91:77:
7e:b7:5c:d6:25:51:61:9d:cf:8a:b6:a1:ba:42:42:7d:74:b3:
78:c4:ba:e3:23:74:bb:eb:ae:df:92:0e:4d:f9:cc:e6:d4:92:
b1:75:ba:96:41:d5:aa:15:1c:39:cf:ec:a7:d1:d8:c7:84:5f:
1a:3c:25:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:25:25 2025 by rpki-client