This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
File: 85E8329CBFB72C73936DE19616620415214EDD8A.mft (raw, json)
Hash identifier: Po9KNyUnZN+33Rn9FX35Q5v89WzjedHDgGbIR1mAC5A=
Subject key identifier: 45:42:51:AE:70:34:B1:DF:CB:56:65:6E:69:1B:57:4F:4B:43:81:5E
Authority key identifier: 85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A
Certificate issuer: /CN=85E8329CBFB72C73936DE19616620415214EDD8A
Certificate serial: 0B2D7A923E82DC13F8B66F2321C71094B79C106F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
Manifest number: 9F
Signing time: Fri 05 Dec 2025 11:39:22 +0000
Manifest this update: Fri 05 Dec 2025 11:34:22 +0000
Manifest next update: Thu 11 Dec 2025 09:56:22 +0000
Files and hashes: 1: 85E8329CBFB72C73936DE19616620415214EDD8A.crl (hash: HGbX2sWk3OyfwscElewmVisi+wuGWoJu/IXlKQ5rUXM=)
2: 323830333a3261303a3a2f33322d3332203d3e203135383330.roa (hash: FinVDUnkz/2J0I+Wwphci+vFr8uTAAULrMYfWm5GuWU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.crl
rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 03:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:2d:7a:92:3e:82:dc:13:f8:b6:6f:23:21:c7:10:94:b7:9c:10:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85E8329CBFB72C73936DE19616620415214EDD8A
Validity
Not Before: Dec 5 11:34:22 2025 GMT
Not After : Dec 11 09:56:22 2025 GMT
Subject: CN=454251AE7034B1DFCB56656E691B574F4B43815E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:16:a1:f0:5c:00:90:df:d2:55:c5:97:6c:
4b:68:08:16:56:63:b5:66:d5:ec:8f:eb:e9:ff:5b:
8a:db:2f:6e:39:96:fa:c7:bf:8d:da:cf:21:df:de:
85:20:27:37:61:ca:a4:a2:b8:0c:d1:f7:bf:f7:a9:
89:70:d3:36:be:27:3f:b5:02:ba:e4:fd:a8:f3:da:
2b:fb:d6:e1:f1:57:37:c5:81:05:1b:d0:ac:b5:94:
1a:f4:3c:ff:dc:e2:eb:2f:5e:1b:b5:e5:5d:e1:69:
7c:52:a7:72:d3:3e:dc:94:ce:d8:96:82:12:22:2d:
4d:13:e0:0e:5f:05:a5:36:35:03:04:86:e0:60:0f:
f6:3b:91:b2:4b:9c:f6:3f:53:49:68:78:05:65:36:
a2:75:d0:40:03:49:f3:d8:16:69:86:30:a6:78:45:
d4:4e:68:77:cf:9d:ee:3b:49:20:f0:02:85:17:01:
c7:7a:81:93:a5:14:18:c0:69:57:d6:3b:45:af:1e:
25:ac:ea:4b:86:da:ce:fd:93:ae:c7:e8:1d:7a:cf:
cb:61:63:91:d4:e9:65:25:9b:8b:9a:ca:6d:75:cb:
28:79:49:c7:36:94:db:51:13:fb:c2:98:97:1b:fc:
d9:65:48:c2:fa:fe:84:06:a2:31:2c:ad:3b:8f:5f:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:42:51:AE:70:34:B1:DF:CB:56:65:6E:69:1B:57:4F:4B:43:81:5E
X509v3 Authority Key Identifier:
keyid:85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:50:3a:63:2f:41:c6:34:4b:35:2f:42:c4:ec:49:da:bf:d3:
b1:63:ad:ba:dd:2b:8c:a9:ee:d3:c4:4d:c9:27:52:b3:d1:39:
60:62:25:4c:ff:2f:05:d3:e4:ee:2b:92:1a:75:11:5c:fe:94:
ff:57:e0:b6:af:a2:b1:0c:69:45:14:d1:54:fb:e0:f6:cc:5f:
66:c7:fa:b8:45:c0:36:47:f7:2f:19:13:19:72:af:1d:94:1b:
d6:92:72:6d:fc:95:7e:e2:35:c1:22:09:9e:e4:f7:d8:44:62:
19:e4:ab:be:b5:b9:60:93:ec:b5:92:a0:f0:ec:79:21:d0:89:
0f:ab:34:4f:2f:4a:03:8e:01:8b:58:22:1c:ab:95:23:e6:70:
e6:a8:67:df:df:f2:7a:0a:1b:04:ac:6f:d6:f6:eb:42:ee:df:
db:2f:31:a7:15:d2:75:87:97:81:74:d8:65:70:e8:78:87:aa:
30:18:b4:34:91:a6:21:b0:d9:23:8a:23:e9:79:e8:08:f4:b3:
22:d7:2b:f4:5b:01:2b:4b:7d:50:f7:65:28:3f:c8:70:de:9a:
8d:34:7d:f5:cf:9d:63:f8:27:e8:e2:4b:6c:6e:4b:e6:15:a7:
4b:39:ec:e7:35:af:c7:53:8b:6d:c0:84:f3:2d:4e:ed:a6:4b:
da:35:70:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:39:32 2025 by rpki-client