This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.mft
File: BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.mft (raw, json)
Hash identifier: /uaZrjxMHHUV9rKzfjFQ6M6zQvrR0T6nc3la38Ql3sA=
Subject key identifier: 9A:D7:24:15:9E:C7:52:E6:A0:3C:D2:6A:C8:95:F6:8B:97:A2:1D:C9
Authority key identifier: BD:04:BD:B4:E0:48:6F:1A:4A:8D:25:7A:F7:BB:83:84:F5:61:F3:0C
Certificate issuer: /CN=BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C
Certificate serial: 4F2545C12564795C067770E31CE0925BA29F3A3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.mft
Manifest number: 0144
Signing time: Sat 06 Dec 2025 20:38:00 +0000
Manifest this update: Sat 06 Dec 2025 20:33:00 +0000
Manifest next update: Thu 11 Dec 2025 08:58:00 +0000
Files and hashes: 1: 323830333a623931303a3a2f33322d3432203d3e20323732303133.roa (hash: JEw6AZNjdUZ6QSu9w+ZVneAb84nnJOyw5pmx+GVwqK4=)
2: BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.crl (hash: 88GyfEh5cQOwcRv7XAWm3WQ73ufA7dkqaJEYE3ulKYw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.crl
rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 08:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:25:45:c1:25:64:79:5c:06:77:70:e3:1c:e0:92:5b:a2:9f:3a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C
Validity
Not Before: Dec 6 20:33:00 2025 GMT
Not After : Dec 11 08:58:00 2025 GMT
Subject: CN=9AD724159EC752E6A03CD26AC895F68B97A21DC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:a9:e0:60:fe:7a:20:fa:5d:83:30:d0:bc:
71:4f:24:1e:b4:b5:2b:ad:3a:df:58:fd:06:b8:bc:
bc:39:0a:3b:89:0d:97:e7:84:2c:cd:dc:e0:1c:ca:
0e:ab:b0:d6:af:bb:16:ab:3a:7e:97:dd:1d:11:78:
32:14:b6:be:d5:d2:45:b1:e6:af:d1:ee:81:9b:ad:
23:b8:53:85:49:82:df:9d:43:70:a5:b8:7e:28:e5:
99:10:78:62:a7:38:c7:72:18:51:24:fc:14:6b:3e:
fc:24:dc:ac:e2:8b:b2:df:50:0f:43:8a:26:f4:bb:
fa:7f:d2:51:6a:5a:93:7d:44:f5:ab:46:10:c2:d3:
8f:bd:cc:30:9b:23:af:f3:47:c6:db:b8:24:23:a3:
68:ad:76:44:20:0d:16:6d:63:db:8b:6e:0f:03:8a:
9b:be:c1:c4:55:38:61:a5:7d:00:d2:d6:38:b0:ee:
05:97:47:cc:ad:12:73:aa:ac:03:ed:ea:46:28:18:
29:46:c5:09:0f:3b:4d:bb:48:ee:ce:1e:d2:93:f8:
ba:e3:bb:94:23:4f:52:68:20:89:45:5c:b4:70:1a:
46:0f:23:24:10:05:bb:e3:b2:4b:4a:e5:34:5e:fd:
c1:32:2f:22:3f:87:8b:46:81:9c:30:f8:65:d0:57:
61:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D7:24:15:9E:C7:52:E6:A0:3C:D2:6A:C8:95:F6:8B:97:A2:1D:C9
X509v3 Authority Key Identifier:
keyid:BD:04:BD:B4:E0:48:6F:1A:4A:8D:25:7A:F7:BB:83:84:F5:61:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b2:d8:ae:a0:4b:69:78:82:ff:1d:32:5c:a9:c5:c0:e0:fa:
50:c0:2a:8c:57:e3:92:3b:60:f2:13:5a:fe:f6:e0:af:6f:37:
99:03:25:a6:80:c9:05:cf:63:97:23:6b:a8:03:75:02:b8:af:
73:60:ce:e1:e1:ae:77:72:32:0d:71:6b:08:4f:fd:8b:9c:7d:
54:e7:66:ba:01:e7:c5:fb:db:84:93:41:28:15:25:79:b2:6c:
c4:e5:de:15:cd:01:c2:39:7a:16:37:f4:43:18:eb:4b:61:a3:
59:5a:d3:a4:27:7d:8b:e2:dc:b0:c9:ca:2b:4d:2f:fe:d2:55:
44:f9:bc:5a:bb:fe:74:a2:89:ef:34:2b:d0:17:ee:59:ee:5d:
06:4b:b8:ae:3c:59:8c:97:a3:17:4a:d8:70:fb:91:39:a8:23:
80:fc:b3:37:e4:bb:5c:f6:fe:07:35:85:64:12:fa:d2:3e:57:
25:d4:92:38:49:39:26:b4:dd:d4:f0:e5:f4:8c:80:23:54:a5:
f4:a3:19:87:0e:b3:d7:21:55:f6:b7:a3:ab:25:ef:82:45:51:
48:7a:cf:a5:45:0e:66:a2:62:e7:52:8f:a6:5f:b3:c7:09:3e:
49:f4:21:a1:33:23:62:c2:e6:21:17:06:4b:a2:f4:c9:2b:95:
bf:48:31:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:31:35 2025 by rpki-client