This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft
File: 525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft (raw, json)
Hash identifier: jxyU2/K2+5pYdp39v2JWv+9iKDGp63xBd7p8pMJGo/4=
Subject key identifier: 8A:1B:03:94:DA:D4:8D:0A:61:CF:1E:7B:57:AC:91:38:35:BE:40:9E
Authority key identifier: 52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB
Certificate issuer: /CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB
Certificate serial: 217F0CB94D4B85255C4E976EF6ADEC63712AF404
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft
Manifest number: 0143
Signing time: Sun 07 Dec 2025 01:35:43 +0000
Manifest this update: Sun 07 Dec 2025 01:30:43 +0000
Manifest next update: Thu 11 Dec 2025 15:49:43 +0000
Files and hashes: 1: 34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa (hash: ku7Pegns5rb3/J+L9k67+lDukcl7gRSw3iomKYF8FW4=)
2: 525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl (hash: tArmN7rSMw57632PxcrfKEhFO/ret72dJfKrXoWAvZ0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl
rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 15:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:7f:0c:b9:4d:4b:85:25:5c:4e:97:6e:f6:ad:ec:63:71:2a:f4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB
Validity
Not Before: Dec 7 01:30:43 2025 GMT
Not After : Dec 11 15:49:43 2025 GMT
Subject: CN=8A1B0394DAD48D0A61CF1E7B57AC913835BE409E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:64:54:05:d5:16:a1:f8:07:03:54:8b:4c:
56:84:01:87:c2:2e:bf:cb:f8:5e:a7:3a:ae:4e:99:
58:de:28:85:29:e7:00:31:ef:05:13:c9:b5:ea:3a:
a2:78:4c:ae:cd:47:f0:d7:3f:7c:49:cf:cd:b2:f5:
68:b4:e7:bc:31:5e:39:c0:75:00:5f:4e:f4:08:3b:
30:ad:6d:7f:96:73:a0:c9:1a:e9:c5:51:7d:cc:c9:
48:6e:90:0d:81:c3:d9:08:a1:c5:e9:44:68:a0:e9:
06:a4:37:e6:7f:88:75:89:e3:70:c3:f7:d3:0e:bd:
d5:74:16:3d:78:61:e7:b8:f0:64:51:ec:0d:40:58:
e1:80:63:45:92:b0:39:61:d4:2d:01:ae:0d:21:8f:
36:d9:93:2c:55:27:89:47:d4:bd:c8:8f:43:ee:1a:
f4:a0:ab:c5:cc:e4:16:4f:a5:28:cf:39:41:d1:fc:
61:1c:5c:21:a8:bd:ba:3f:27:e8:e9:4e:4a:8b:aa:
39:f7:6d:a3:06:9f:ff:8d:76:e5:34:04:c1:41:f7:
00:a2:5b:1c:cc:32:7f:c7:db:19:9b:f0:ca:c8:61:
f0:d6:86:cc:08:04:c5:0c:66:1d:94:29:a4:09:00:
0c:56:dd:18:49:b4:85:dd:6b:78:22:81:66:89:7e:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1B:03:94:DA:D4:8D:0A:61:CF:1E:7B:57:AC:91:38:35:BE:40:9E
X509v3 Authority Key Identifier:
keyid:52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e2:05:60:97:72:4b:5e:e2:9d:2c:af:a3:c3:54:94:42:69:
c2:c1:31:bc:98:f4:02:90:51:16:6e:d3:12:01:45:1c:db:35:
c1:c8:49:b7:92:ab:ce:9a:ca:80:5d:5f:3e:62:c2:b7:02:55:
23:bd:ef:82:e3:c0:45:a9:2d:6d:fc:d5:8e:60:03:db:58:c8:
34:bd:3c:4e:b1:e6:5f:80:55:6b:69:1d:f0:c0:75:7d:2d:bd:
22:cb:6e:d3:ce:5b:87:22:40:62:61:98:f3:df:2a:92:73:e3:
ff:52:fb:55:03:ad:e1:09:73:31:de:2b:16:d8:c8:f5:07:d9:
70:4f:82:69:cd:79:1c:ef:8b:f4:31:3f:47:4f:e4:95:98:76:
89:60:4d:40:97:22:d1:4c:15:95:3f:4d:6f:33:b4:71:c4:7f:
0c:ed:b7:0c:6d:f1:68:fe:09:1b:83:92:19:f8:4a:df:19:c5:
d4:fc:ef:a3:e8:97:d4:4c:31:23:c2:f2:bd:b2:d7:f2:bd:10:
b6:cd:f2:d3:ca:b3:a7:74:07:f4:13:9c:60:15:0f:be:7b:30:
13:99:4b:fd:5b:4f:27:5f:23:6c:f1:f8:08:7b:a6:98:53:a5:
25:61:4e:7b:9b:8e:87:f9:24:0d:91:e4:ea:bf:d4:3c:dd:45:
2e:7d:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:39:15 2025 by rpki-client