This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
File: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft (raw, json)
Hash identifier: hj8qSVIyBEJPOLvbeA4DnKsokjk0pgMlzeLOLuhgNLA=
Subject key identifier: F3:4A:C0:75:78:D9:F0:2C:CF:C6:6A:30:AF:47:9E:6B:1E:B1:79:A3
Authority key identifier: BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7
Certificate issuer: /CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7
Certificate serial: 1893014BCA83EED8B2D5B53C7E3D9F510717BF1A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
Manifest number: 0147
Signing time: Sun 07 Dec 2025 03:52:04 +0000
Manifest this update: Sun 07 Dec 2025 03:47:04 +0000
Manifest next update: Thu 11 Dec 2025 21:38:04 +0000
Files and hashes: 1: 323830333a663539303a3a2f33322d3438203d3e20323732393836.roa (hash: TnOVedbp+yogJRQK4jz8NHuHBn2RuKd+k8b7N8MvRe4=)
2: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl (hash: h8Q8ETWqQJlLQYUxNMcn8rM4R7UeTDmZyIFi32KIF/g=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl
rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 09:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:93:01:4b:ca:83:ee:d8:b2:d5:b5:3c:7e:3d:9f:51:07:17:bf:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7
Validity
Not Before: Dec 7 03:47:04 2025 GMT
Not After : Dec 11 21:38:04 2025 GMT
Subject: CN=F34AC07578D9F02CCFC66A30AF479E6B1EB179A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:9c:a8:3d:c5:72:1e:61:26:9e:1e:4e:6d:
d6:3b:74:d2:35:ac:b0:b5:a2:04:a2:75:f0:05:66:
5f:8a:97:dd:f5:63:40:81:2f:ed:b3:aa:9e:b1:e7:
08:e2:dd:7a:a2:55:24:58:ec:bf:2f:59:5b:27:e3:
df:30:0a:a7:46:59:f0:93:c0:1c:65:9c:4e:71:a3:
0f:39:40:c8:96:ff:37:f7:fc:ef:b0:26:12:32:a7:
7c:cf:ee:eb:fe:67:13:92:6a:4d:47:ee:e1:fc:87:
56:3d:20:e6:94:8c:e0:c8:88:af:09:b8:d0:f1:97:
43:cb:2c:2e:3f:bc:00:cf:cc:8f:72:9e:2b:f5:22:
cc:67:03:c3:b6:6b:47:ff:6b:af:77:c1:7d:92:f2:
f0:4a:96:fd:f4:ef:61:45:ee:69:ea:4c:7a:3d:fb:
94:d7:c7:35:bf:59:b3:52:61:04:6e:47:1f:f6:a6:
c5:7d:f8:e8:79:fd:1b:7a:f8:56:84:79:d5:7a:a5:
90:b0:96:b4:d4:ec:18:e3:ca:4a:13:50:14:d0:b2:
41:f3:f2:ec:43:dd:b3:fb:bf:c8:1c:af:0e:d8:0e:
0e:c8:59:7b:ce:00:e7:7f:c2:84:69:fb:af:2a:a8:
e7:55:92:9a:6f:f9:c7:db:9e:cf:89:c2:92:97:07:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4A:C0:75:78:D9:F0:2C:CF:C6:6A:30:AF:47:9E:6B:1E:B1:79:A3
X509v3 Authority Key Identifier:
keyid:BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:93:28:17:26:03:08:ad:25:eb:53:58:5f:17:c5:ae:7b:68:
52:e1:4a:f4:9d:ea:6f:8a:28:5f:4a:ee:44:b3:76:c1:01:84:
dd:62:02:f9:a6:b0:a7:b5:d4:a2:68:e3:d6:f1:30:56:79:c6:
f8:88:86:bd:39:10:bc:fd:5f:77:c5:be:46:a8:a7:ea:f3:79:
74:29:d6:d8:61:b5:79:09:26:00:58:e8:36:d9:c5:f6:69:b6:
eb:09:25:b8:3c:dd:b6:78:e5:4d:2d:36:54:17:92:c7:f1:5f:
45:bd:8e:30:75:05:46:bb:d2:c9:98:44:07:4e:73:71:07:4e:
41:18:18:2f:0e:e9:6d:e9:49:71:1e:92:68:4e:70:e2:ac:24:
de:93:41:e9:dc:0a:61:5d:21:be:33:69:83:f0:91:88:72:e0:
ea:66:d3:91:0f:aa:68:b1:b6:10:1a:ac:0d:aa:af:84:2f:be:
39:28:c2:c4:27:b7:cc:21:b8:26:77:43:c2:05:9d:c2:0c:19:
2e:cd:d7:80:f6:c4:f8:73:9e:80:cf:26:6c:f3:66:91:3d:68:
43:39:eb:9b:ec:f4:a9:8d:fc:49:05:21:4b:e6:f4:99:14:d8:
e3:32:17:5c:67:4f:30:c3:26:79:bf:ee:44:3e:a5:21:b8:e2:
3b:b4:9a:64
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGJMBS8qD7tiy1bU8fj2fUQcXvxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ5RDM5OEJBQ0UzOTBDMjZBMzJDRDRDNzc1OEFBMUZB
OUUzN0NDNzAeFw0yNTEyMDcwMzQ3MDRaFw0yNTEyMTEyMTM4MDRaMDMxMTAvBgNV
BAMTKEYzNEFDMDc1NzhEOUYwMkNDRkM2NkEzMEFGNDc5RTZCMUVCMTc5QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBpyoPcVyHmEmnh5ObdY7dNI1
rLC1ogSidfAFZl+Kl931Y0CBL+2zqp6x5wji3XqiVSRY7L8vWVsn498wCqdGWfCT
wBxlnE5xow85QMiW/zf3/O+wJhIyp3zP7uv+ZxOSak1H7uH8h1Y9IOaUjODIiK8J
uNDxl0PLLC4/vADPzI9yniv1IsxnA8O2a0f/a693wX2S8vBKlv3072FF7mnqTHo9
+5TXxzW/WbNSYQRuRx/2psV9+Oh5/Rt6+FaEedV6pZCwlrTU7BjjykoTUBTQskHz
8uxD3bP7v8gcrw7YDg7IWXvOAOd/woRp+68qqOdVkppv+cfbns+JwpKXB6NdAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU80rAdXjZ8CzPxmowr0eeax6xeaMwHwYDVR0j
BBgwFoAUvZ05i6zjkMJqMs1Md1iqH6njfMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzdFQUQ3NjcyQzJCMUE1RTNEM0Y2OURGQ0I5NjRDODY2
RUQ0Q0E3QzlCMkZGN0RCMTMxRjc2RDY4QzRCQzA0LzAvQkQ5RDM5OEJBQ0UzOTBD
MjZBMzJDRDRDNzc1OEFBMUZBOUUzN0NDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDlEMzk4QkFDRTM5MEMyNkEz
MkNENEM3NzU4QUExRkE5RTM3Q0M3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjc3RUFENzY3MkMyQjFBNUUzRDNGNjlERkNCOTY0Qzg2NkVENENBN0M5
QjJGRjdEQjEzMUY3NkQ2OEM0QkMwNC8wL0JEOUQzOThCQUNFMzkwQzI2QTMyQ0Q0
Qzc3NThBQTFGQTlFMzdDQzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbkygXJgMIrSXrU1hfF8Wue2hS
4Ur0nepviihfSu5Es3bBAYTdYgL5prCntdSiaOPW8TBWecb4iIa9ORC8/V93xb5G
qKfq83l0KdbYYbV5CSYAWOg22cX2abbrCSW4PN22eOVNLTZUF5LH8V9FvY4wdQVG
u9LJmEQHTnNxB05BGBgvDult6UlxHpJoTnDirCTek0Hp3AphXSG+M2mD8JGIcuDq
ZtORD6posbYQGqwNqq+EL745KMLEJ7fMIbgmd0PCBZ3CDBkuzdeA9sT4c56AzyZs
82aRPWhDOeub7PSpjfxJBSFL5vSZFNjjMhdcZ08wwyZ5v+5EPqUhuOI7tJpk
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:31:36 2025 by rpki-client