This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.mft
File: 1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.mft (raw, json)
Hash identifier: whKwbuY56SMcrxvLTfQGFLBCVIw54qcJjnIiTt0f/to=
Subject key identifier: 3B:5B:4A:26:8C:02:AA:22:0E:1F:7D:A5:06:38:94:27:D4:80:31:B3
Authority key identifier: 16:55:01:5D:0C:FF:C0:0B:88:C7:6A:99:B4:6D:C5:A5:67:F0:A0:B0
Certificate issuer: /CN=1655015D0CFFC00B88C76A99B46DC5A567F0A0B0
Certificate serial: 45F057510AE103394D549BC404AF354248FC664E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.mft
Manifest number: 0142
Signing time: Fri 05 Dec 2025 19:18:38 +0000
Manifest this update: Fri 05 Dec 2025 19:13:37 +0000
Manifest next update: Thu 11 Dec 2025 02:17:37 +0000
Files and hashes: 1: 3137302e3234362e3137362e302f32322d3232203d3e20323635363438.roa (hash: y4uUtlG6SSFTuREpjmiP/C8qOweZgXnKYC/hxC7piOQ=)
2: 1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.crl (hash: rJdGHJuN0UOcn15YuFqMwmVa9l0wLa7hhYBpIPbFJuo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.crl
rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 02:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f0:57:51:0a:e1:03:39:4d:54:9b:c4:04:af:35:42:48:fc:66:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1655015D0CFFC00B88C76A99B46DC5A567F0A0B0
Validity
Not Before: Dec 5 19:13:37 2025 GMT
Not After : Dec 11 02:17:37 2025 GMT
Subject: CN=3B5B4A268C02AA220E1F7DA506389427D48031B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:1c:b4:51:63:66:e8:d0:4f:33:63:1d:8a:
a8:72:bf:70:cb:d8:9f:8d:a0:ed:50:a5:81:20:e0:
dc:68:2a:e9:b6:83:07:f4:e7:29:cd:fa:34:ca:df:
e7:01:81:fa:57:15:f4:1c:45:64:a5:82:be:49:90:
68:44:42:ce:65:ef:7a:31:1f:94:5c:33:34:a8:92:
b0:57:54:a6:b3:23:6c:38:b4:24:65:cc:c3:dd:1d:
19:31:12:1b:b9:1d:c9:0d:d2:55:10:75:c2:59:bc:
71:e6:2e:7e:ec:da:e1:49:ea:98:fb:50:0a:3e:c4:
79:0d:f7:d3:72:b2:78:38:5e:0b:89:f6:6f:10:ed:
5a:ef:e5:75:b1:5d:40:9b:31:d8:95:39:69:13:47:
7d:b3:fa:82:d0:76:77:f9:14:f3:33:74:ad:8c:b3:
bf:17:07:5a:d7:9b:db:64:db:7e:fe:31:19:23:ce:
bb:c7:09:1e:c8:48:30:ee:ad:a5:fc:eb:fe:a2:ed:
0c:96:f8:30:26:ab:e2:c8:a9:98:84:c7:5f:34:80:
4b:2b:47:95:d7:05:68:30:25:f5:3d:4e:75:f1:c5:
87:bc:d8:b9:be:29:7b:77:a8:bc:a1:68:4f:ca:0c:
53:50:47:dd:02:a2:f7:12:91:cb:a6:70:f2:f2:2d:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5B:4A:26:8C:02:AA:22:0E:1F:7D:A5:06:38:94:27:D4:80:31:B3
X509v3 Authority Key Identifier:
keyid:16:55:01:5D:0C:FF:C0:0B:88:C7:6A:99:B4:6D:C5:A5:67:F0:A0:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:41:0b:5d:26:2f:45:dd:a5:60:e5:67:df:c3:91:91:38:bb:
87:5d:23:47:78:72:a0:bf:6c:33:e9:b4:45:c9:4f:cd:2b:08:
55:13:78:d6:b3:1a:47:c7:4c:a6:5e:68:d0:dd:97:7c:e8:ca:
a3:01:cb:37:60:0e:29:3d:40:09:c8:c1:f9:68:80:f5:e8:fc:
26:04:66:39:a8:21:30:9a:e1:c3:c8:f6:8a:c0:0f:77:5a:38:
a5:e1:c5:2a:8f:02:73:2e:6b:c7:75:16:24:bb:82:22:51:4c:
c8:b3:18:4c:4a:d2:ec:c8:3b:1a:da:77:08:62:5e:92:8e:25:
60:00:27:0b:99:c0:30:83:b5:eb:e2:67:07:bb:ea:6d:78:03:
47:7a:87:2b:e0:fe:b2:94:83:7f:ee:71:87:fc:ed:92:15:a4:
7c:53:7a:50:fb:29:c9:87:f7:f5:a2:7e:4f:27:b3:af:b2:2b:
0d:96:61:4d:52:a3:e8:d9:17:a9:ba:0b:da:f3:eb:df:78:89:
e9:79:6c:c8:51:10:77:0b:36:b6:e0:9f:6c:40:35:9d:44:28:
17:2b:7a:4f:d6:64:74:e7:5c:c4:5c:59:53:60:0a:ca:42:a2:
2b:38:c3:d6:b9:27:c9:90:07:cc:89:cb:f2:cb:78:d1:ca:b4:
67:63:65:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:44:39 2025 by rpki-client