This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
File: C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft (raw, json)
Hash identifier: kVYjcEtczZk4OKECPexeF9ZFUH7knbDrIAeAwIVCCMM=
Subject key identifier: B1:87:22:8F:9B:D0:F4:1B:9B:EF:E2:42:EC:32:01:90:1E:9F:89:F9
Authority key identifier: C2:3C:6D:A8:7C:DE:76:54:CE:5B:5A:DD:EC:74:8B:19:EE:F5:EE:1A
Certificate issuer: /CN=C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A
Certificate serial: 3C87EB2301A2D33029221BCA9D5D45EF8DF1F0B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
Manifest number: 09
Signing time: Thu 04 Dec 2025 07:38:26 +0000
Manifest this update: Thu 04 Dec 2025 07:33:26 +0000
Manifest next update: Wed 10 Dec 2025 06:07:26 +0000
Files and hashes: 1: 323830333a346631303a3a2f33322d3438203d3e20323732313138.roa (hash: cfqpMesVtTCJW/gXILlWyOfzQXanZJn3CLqfjz47nrA=)
2: C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl (hash: JJFuBAREL3t/hUtve7Zr3HkoGt2DTN17JEDR8xuEqE4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl
rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 06:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:87:eb:23:01:a2:d3:30:29:22:1b:ca:9d:5d:45:ef:8d:f1:f0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A
Validity
Not Before: Dec 4 07:33:26 2025 GMT
Not After : Dec 10 06:07:26 2025 GMT
Subject: CN=B187228F9BD0F41B9BEFE242EC3201901E9F89F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:b6:cc:6f:77:ec:70:8a:54:74:2c:44:3e:
05:00:c0:01:aa:77:ab:b6:41:d2:22:d8:66:21:de:
41:e9:49:ec:69:48:d8:39:89:30:5b:55:24:5e:8f:
fa:45:4a:7f:e2:2f:14:cb:2f:ab:94:62:d3:96:32:
11:21:8a:3c:99:bb:14:a3:ca:81:4c:27:4e:bd:19:
43:47:41:c0:e0:a2:b8:22:b5:86:f0:ec:2e:52:e2:
85:9c:8e:37:ec:59:82:1e:19:65:39:96:a6:97:4f:
c5:60:20:d3:9d:3e:e7:c9:a1:9f:7c:03:91:98:08:
0a:57:2a:53:6a:28:f7:eb:f5:0c:3d:00:cc:24:e7:
88:4a:87:13:89:11:88:dc:21:f9:42:95:1e:77:d7:
fd:66:4b:26:99:04:6b:3d:4b:e2:ca:19:71:e7:b5:
f4:33:c1:06:af:35:f4:dc:86:d7:b1:73:01:80:95:
55:55:df:80:64:f1:50:a7:ae:44:e9:bc:15:cf:11:
ce:75:5b:52:92:f8:ad:cd:25:c2:4f:19:6e:f0:12:
a1:1f:12:bb:99:4b:6e:87:52:f1:7c:9f:ad:de:6d:
a6:37:fd:a8:e7:b8:56:43:76:2b:13:45:cb:bd:5f:
10:aa:a6:75:fe:41:86:09:d5:c2:f6:af:ee:b6:01:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:87:22:8F:9B:D0:F4:1B:9B:EF:E2:42:EC:32:01:90:1E:9F:89:F9
X509v3 Authority Key Identifier:
keyid:C2:3C:6D:A8:7C:DE:76:54:CE:5B:5A:DD:EC:74:8B:19:EE:F5:EE:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ad:e4:c5:7b:86:eb:82:9a:c9:f5:6c:d3:15:a6:2e:6b:0d:
d5:ee:b0:88:06:cb:e8:57:1f:d2:df:08:96:7f:c7:4d:b6:be:
36:1e:21:93:f2:f1:32:8a:d1:42:9f:2d:73:db:0a:5e:46:b4:
b2:bb:c8:bc:bf:41:56:e1:04:35:6a:b2:49:d8:73:00:92:ef:
9e:2f:61:5b:92:a0:9e:9e:ef:ff:5a:3d:42:b9:1e:92:86:19:
2e:18:e1:49:03:f2:df:0d:58:13:f6:ad:5c:99:86:ac:37:90:
be:4a:0a:a2:c9:b7:29:d1:37:c2:1f:5d:f9:18:6c:bc:f4:6c:
80:99:05:1a:c9:c5:38:3b:fb:7e:c6:7f:c5:ea:f4:5c:c1:14:
23:26:a6:21:d7:0c:a5:c9:c1:ff:9e:e9:92:15:f6:63:12:a1:
90:54:e8:97:62:d8:1d:c2:7e:ea:7c:c2:35:ff:e7:50:fa:8e:
93:90:b7:3e:e0:c0:d0:06:a5:2b:0c:f9:fe:27:aa:5f:c2:dc:
fe:80:d8:60:23:f8:31:3d:2f:83:28:c0:23:18:70:18:cb:6f:
88:b4:2d:77:5b:77:41:00:07:7a:29:e7:4c:a9:11:ec:86:bf:
7e:fd:c7:27:ae:28:bf:e4:fd:a0:90:36:36:63:2c:47:d8:da:
23:c5:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:21:22 2025 by rpki-client