This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
File: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft (raw, json)
Hash identifier: RS+1ozJUvcxQD19pkVU7OzgPrpdNyjRkaEhX6V+CFeQ=
Subject key identifier: 88:98:4E:0E:EF:A5:78:5F:96:F3:8D:4D:9F:F4:0A:A0:7E:AA:2E:5A
Authority key identifier: 9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF
Certificate issuer: /CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
Certificate serial: 5DB226777B20EE7A0D41CA1E2CDE65432A448122
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
Manifest number: 0139
Signing time: Sat 06 Dec 2025 10:12:14 +0000
Manifest this update: Sat 06 Dec 2025 10:07:14 +0000
Manifest next update: Fri 12 Dec 2025 02:18:14 +0000
Files and hashes: 1: 34352e3233322e3132302e302f32322d3234203d3e203237373335.roa (hash: qFQcyt6mjuuWxr31xcmCwMXo3qzlGX+FFhSurKpopCQ=)
2: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl (hash: j7kQ7AytdhrgN7LZdqggJQkI8OLvYO43UJcBtROQaAk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl
rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 12:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b2:26:77:7b:20:ee:7a:0d:41:ca:1e:2c:de:65:43:2a:44:81:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
Validity
Not Before: Dec 6 10:07:14 2025 GMT
Not After : Dec 12 02:18:14 2025 GMT
Subject: CN=88984E0EEFA5785F96F38D4D9FF40AA07EAA2E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:69:32:06:fb:35:25:05:ed:c7:ff:c0:7f:
ad:c9:b3:3d:61:05:0c:cc:dc:52:44:69:4f:45:37:
41:a2:14:47:b6:50:f8:b5:f8:a5:0e:1f:87:7f:d5:
99:1a:ea:c7:44:51:ec:f5:a5:14:a5:ef:34:92:5e:
5a:6d:73:c9:d5:92:e2:17:19:ef:7f:4a:f2:7d:c7:
95:08:0f:f4:89:41:ae:c4:60:9a:bc:95:57:31:cc:
2a:e6:c3:9f:2b:46:1b:9b:e1:24:6a:e8:47:48:e6:
ed:72:9b:7d:2f:07:99:13:7b:d6:ff:fe:5c:60:c4:
78:78:6b:fe:8b:fa:ac:5f:2f:74:7a:ea:2b:a1:10:
14:50:65:d6:f4:23:57:b0:8b:49:c5:21:fa:31:d2:
0c:e1:be:1a:35:3d:06:74:47:e8:cc:55:74:6e:34:
d7:98:06:cb:f9:d3:38:a5:30:af:ab:c5:49:e3:cd:
ed:28:23:10:7e:0b:92:a4:11:32:09:21:aa:0e:36:
82:0d:24:a2:25:a9:eb:b0:04:8a:4c:c3:be:47:0e:
4d:44:e3:6c:af:fe:a2:39:b1:b0:0a:80:42:18:19:
02:15:45:43:ad:15:8b:a6:06:54:cc:96:b8:f1:3d:
bb:de:58:70:b9:df:49:7a:d9:05:d7:d7:a0:36:31:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:4E:0E:EF:A5:78:5F:96:F3:8D:4D:9F:F4:0A:A0:7E:AA:2E:5A
X509v3 Authority Key Identifier:
keyid:9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bd:40:94:c7:be:46:fe:92:75:72:9b:aa:52:b0:6b:42:21:
80:f2:eb:b6:ea:55:86:0d:3d:5e:a9:04:df:1d:94:f6:1d:69:
e4:75:63:76:a5:ff:18:98:bf:d3:7d:c8:7b:f0:03:78:a0:75:
ac:77:1b:32:84:bc:8f:7d:b7:cc:24:78:45:b3:d0:60:67:00:
32:29:b7:0a:7d:67:84:b5:b3:fd:0f:ab:9f:a6:c3:08:1b:bd:
a1:b4:a5:88:78:d7:34:2c:29:05:7e:a2:96:46:67:1f:d1:d2:
a9:57:67:44:b1:d5:df:30:78:17:37:82:7a:72:e2:08:e0:b9:
ce:0a:1b:3d:e7:2e:2b:e1:6f:6b:ef:6d:5f:df:61:26:d2:9d:
5e:a5:d3:40:71:26:5f:f8:30:4b:d8:0a:1d:d8:5e:81:c7:3b:
3c:7d:06:9b:d5:b7:66:cf:91:74:b9:4f:83:19:b7:de:24:80:
7f:20:c8:58:72:4b:04:6c:b8:21:79:89:dd:c1:eb:2a:e8:dd:
b2:34:c6:be:c0:a5:8f:33:f7:73:55:da:d8:c7:27:45:9f:75:
c7:2e:07:a4:fa:bb:f4:88:a4:dc:d0:dd:44:5b:38:f7:04:7a:
30:11:4d:f0:a4:43:e1:3c:ac:f4:15:11:72:ae:c5:1d:43:00:
3f:4c:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:13:48 2025 by rpki-client