This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
File: 5021716DB872AFEA302E881734C3D03B1DCE1384.mft (raw, json)
Hash identifier: aJKWA8LkhQjKqtXSbS/EA6WjcEgiNHK3PDjYQydmiYI=
Subject key identifier: 1D:7A:A4:27:CF:7F:59:95:5A:4D:37:6D:E5:DE:A8:8D:D1:7A:A7:B5
Authority key identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84
Certificate issuer: /CN=5021716DB872AFEA302E881734C3D03B1DCE1384
Certificate serial: 1E5D46E8BE3DEB8C1070DC83EB918ADA44929480
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
Manifest number: 015A
Signing time: Fri 23 Jan 2026 20:10:50 +0000
Manifest this update: Fri 23 Jan 2026 20:05:50 +0000
Manifest next update: Thu 29 Jan 2026 11:53:50 +0000
Files and hashes: 1: 323830333a613339303a3a2f33322d3438203d3e20323733303135.roa (hash: Fu/SZhrr6Jw7DbYo5CUKcfKCtKHHVYuJggcFFClGvTs=)
2: 5021716DB872AFEA302E881734C3D03B1DCE1384.crl (hash: jeyeP1acWd6fdrAyEbKgxjhALNX9yb/RepeaXoU6wlA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl
rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 11:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:5d:46:e8:be:3d:eb:8c:10:70:dc:83:eb:91:8a:da:44:92:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5021716DB872AFEA302E881734C3D03B1DCE1384
Validity
Not Before: Jan 23 20:05:50 2026 GMT
Not After : Jan 29 11:53:50 2026 GMT
Subject: CN=1D7AA427CF7F59955A4D376DE5DEA88DD17AA7B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:4f:8e:dd:5e:90:71:5f:b9:cd:85:20:6b:
d6:ad:4f:b5:f9:72:01:74:66:30:9d:e3:62:62:eb:
79:f6:79:81:48:ef:c9:28:87:5b:ce:f7:58:64:21:
9c:c7:2f:48:65:12:1e:6c:0f:1d:68:e8:ca:92:2f:
64:64:25:fd:b9:94:6b:a9:aa:3c:e4:cc:23:bd:e0:
3f:45:ab:90:23:fc:11:79:37:14:49:8e:56:fc:cf:
77:0c:42:05:44:a8:91:00:e4:e4:bc:2d:e7:96:ce:
ef:f5:a3:ac:27:9c:a0:eb:ba:38:1d:b4:d5:72:31:
a9:56:00:62:6c:a3:1b:7a:e5:28:d1:fa:55:6d:15:
ae:98:e5:45:0d:00:a3:bf:ae:56:89:89:84:e8:75:
b3:bc:4f:19:5f:7e:3f:17:21:a6:a1:26:30:55:d1:
81:e4:9b:35:44:9b:f6:17:ff:b9:93:58:12:00:65:
c5:d2:24:0f:be:1d:cb:ba:0c:16:1b:9c:c5:9d:bc:
45:b8:02:a2:85:10:9c:f0:19:4e:b6:7c:43:99:47:
9b:0a:61:6f:d9:f8:76:ef:45:80:68:4f:62:08:af:
48:7e:ce:11:9b:bd:11:1d:a7:b5:d0:a0:9b:81:26:
f1:c9:95:6b:06:7b:36:a2:c0:29:13:5e:d8:06:81:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7A:A4:27:CF:7F:59:95:5A:4D:37:6D:E5:DE:A8:8D:D1:7A:A7:B5
X509v3 Authority Key Identifier:
keyid:50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c5:8c:55:67:d9:bf:c2:fb:a7:20:98:52:8c:d6:23:72:db:
70:ce:9b:41:7f:48:0b:99:28:16:19:c7:1b:05:64:59:c6:54:
87:25:65:10:1c:62:cf:fe:91:24:55:51:b2:69:0e:40:12:c8:
e0:70:47:78:87:8a:2d:59:41:c8:e2:18:fb:2f:bb:28:70:36:
3a:c4:00:9f:3e:fa:a7:34:85:fc:9b:d1:0c:a1:35:73:75:db:
9e:d2:cd:3c:c8:10:c3:bc:e3:ef:30:68:16:23:dd:69:e6:63:
a1:9e:45:9f:ed:c2:21:82:15:ea:87:29:ae:97:e9:ee:71:0f:
c8:d0:8b:36:cc:51:9e:bb:26:db:2a:5f:d7:ba:1b:21:d8:52:
e3:39:76:96:20:49:63:26:2e:30:e7:0a:59:5a:69:5a:df:93:
ca:ca:69:c3:53:86:3e:2a:b8:67:42:7b:6c:ec:3f:04:69:1d:
a4:68:de:dc:be:2e:55:00:47:a7:87:ce:24:dd:c2:47:f7:43:
05:2a:48:36:db:91:66:3e:a3:29:75:56:96:31:e3:e1:1f:e1:
ad:d7:fc:71:13:78:ff:65:ca:a2:37:96:73:7a:ad:9a:4b:fb:
a3:c1:47:f4:2d:f7:2a:bb:04:71:bf:3e:2c:af:df:a2:ae:51:
97:a5:0e:60
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUHl1G6L4964wQcNyD65GK2kSSlIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAyMTcxNkRCODcyQUZFQTMwMkU4ODE3MzRDM0QwM0Ix
RENFMTM4NDAeFw0yNjAxMjMyMDA1NTBaFw0yNjAxMjkxMTUzNTBaMDMxMTAvBgNV
BAMTKDFEN0FBNDI3Q0Y3RjU5OTU1QTREMzc2REU1REVBODhERDE3QUE3QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3k+O3V6QcV+5zYUga9atT7X5
cgF0ZjCd42Ji63n2eYFI78koh1vO91hkIZzHL0hlEh5sDx1o6MqSL2RkJf25lGup
qjzkzCO94D9Fq5Aj/BF5NxRJjlb8z3cMQgVEqJEA5OS8LeeWzu/1o6wnnKDrujgd
tNVyMalWAGJsoxt65SjR+lVtFa6Y5UUNAKO/rlaJiYTodbO8Txlffj8XIaahJjBV
0YHkmzVEm/YX/7mTWBIAZcXSJA++Hcu6DBYbnMWdvEW4AqKFEJzwGU62fEOZR5sK
YW/Z+HbvRYBoT2IIr0h+zhGbvREdp7XQoJuBJvHJlWsGezaiwCkTXtgGganFAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUHXqkJ89/WZVaTTdt5d6ojdF6p7UwHwYDVR0j
BBgwFoAUUCFxbbhyr+owLogXNMPQOx3OE4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Mjk3QjcwNzhGQjFCNTIxMDA2RDc1MUEzMkEyQUMzNUY2
MTQ2MTc1MjI0ODRGODg3RTVFNzdBMkNGQzc1MjU3LzAvNTAyMTcxNkRCODcyQUZF
QTMwMkU4ODE3MzRDM0QwM0IxRENFMTM4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MDIxNzE2REI4NzJBRkVBMzAy
RTg4MTczNEMzRDAzQjFEQ0UxMzg0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTI5N0I3MDc4RkIxQjUyMTAwNkQ3NTFBMzJBMkFDMzVGNjE0NjE3NTIy
NDg0Rjg4N0U1RTc3QTJDRkM3NTI1Ny8wLzUwMjE3MTZEQjg3MkFGRUEzMDJFODgx
NzM0QzNEMDNCMURDRTEzODQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtxYxVZ9m/wvunIJhSjNYjcttw
zptBf0gLmSgWGccbBWRZxlSHJWUQHGLP/pEkVVGyaQ5AEsjgcEd4h4otWUHI4hj7
L7socDY6xACfPvqnNIX8m9EMoTVzddue0s08yBDDvOPvMGgWI91p5mOhnkWf7cIh
ghXqhymul+nucQ/I0Is2zFGeuybbKl/Xuhsh2FLjOXaWIEljJi4w5wpZWmla35PK
ymnDU4Y+KrhnQnts7D8EaR2kaN7cvi5VAEenh84k3cJH90MFKkg225FmPqMpdVaW
MePhH+Gt1/xxE3j/ZcqiN5Zzeq2aS/ujwUf0LfcquwRxvz4sr9+irlGXpQ5g
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:58 2026 by rpki-client