This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft
File: BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft (raw, json)
Hash identifier: xhVb+ELaMwqj72KgZpdcX0VhMfg43PAZlIlGvxGsRlY=
Subject key identifier: 51:7B:55:FC:3A:4A:E3:81:3F:29:CB:47:C8:03:5A:A0:31:9A:FE:C9
Authority key identifier: BD:46:A9:8D:09:6A:D8:AE:77:F8:6D:CA:2F:11:E0:BD:0A:B0:F2:E7
Certificate issuer: /CN=BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7
Certificate serial: 09D1F6970054B41EA32CFB07DECD301F4F9680F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft
Manifest number: 0143
Signing time: Fri 05 Dec 2025 07:11:58 +0000
Manifest this update: Fri 05 Dec 2025 07:06:58 +0000
Manifest next update: Thu 11 Dec 2025 01:39:58 +0000
Files and hashes: 1: BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.crl (hash: B9eCO7YnO244w2gpRfL9z0IaGfx8ZWlLRm2Lg6pDuuw=)
2: 34352e3137322e3231382e302f32342d3234203d3e20323637383130.roa (hash: uoo514WR/dUkEa5zgU3sdbbRN+Z9srwGiyXQAMxyJ7U=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.crl
rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 01:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d1:f6:97:00:54:b4:1e:a3:2c:fb:07:de:cd:30:1f:4f:96:80:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7
Validity
Not Before: Dec 5 07:06:58 2025 GMT
Not After : Dec 11 01:39:58 2025 GMT
Subject: CN=517B55FC3A4AE3813F29CB47C8035AA0319AFEC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:26:88:71:7c:00:76:ce:d9:88:12:6d:e0:
b4:e0:14:3f:74:98:62:7e:b8:a8:af:1f:79:e2:0c:
fe:50:82:ab:d5:da:46:f0:08:d1:26:32:0c:73:4e:
31:32:28:2b:77:f5:6e:21:fd:de:54:6e:02:6a:a7:
00:78:7c:0e:ba:9f:56:f9:02:20:47:b4:b8:8c:12:
33:1e:f8:d5:68:6d:bf:03:1f:04:36:23:4b:c5:7c:
9b:71:1e:f1:04:8a:c1:f2:33:58:25:d1:4f:eb:40:
16:09:bb:94:5b:3c:dd:4c:4e:46:42:90:a2:e4:2c:
95:67:9f:51:19:64:64:4a:ae:d8:ea:c2:7d:58:89:
7b:68:cc:01:c5:ba:3c:8b:1f:71:ca:6f:b5:53:a2:
94:e8:41:97:61:14:45:85:c0:f0:2a:ce:f7:ed:75:
87:71:64:0c:64:28:92:4f:48:9e:fc:d6:fb:2b:74:
d3:59:6b:65:5b:1c:38:ca:dc:22:dd:7b:1a:88:3a:
0b:ff:51:a9:c1:87:3b:66:d9:3f:94:71:94:f4:d6:
21:b4:0c:1c:b2:62:bc:99:66:61:98:6d:d1:88:e1:
ca:5b:0f:f3:b7:10:e9:21:c9:06:ea:dc:92:4e:e9:
4e:67:e0:2b:9b:a7:fa:5c:68:7c:46:b2:5e:55:27:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7B:55:FC:3A:4A:E3:81:3F:29:CB:47:C8:03:5A:A0:31:9A:FE:C9
X509v3 Authority Key Identifier:
keyid:BD:46:A9:8D:09:6A:D8:AE:77:F8:6D:CA:2F:11:E0:BD:0A:B0:F2:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0d:b8:28:48:5b:2e:64:4f:dc:67:8c:34:7d:43:36:9b:c4:
48:65:4b:a0:9c:0a:68:bf:14:b6:af:9a:60:b2:68:a2:09:6c:
37:48:81:f5:33:e8:f3:ea:29:f5:a5:13:e7:91:ee:81:8d:10:
e6:2e:eb:59:03:f4:12:25:72:26:a6:13:c4:4c:24:2a:0e:e0:
10:6f:09:4f:19:80:27:8e:22:64:a3:a7:e7:c4:a8:96:83:23:
11:c2:e3:23:c0:5a:63:bd:2b:85:f4:30:e6:fc:31:06:be:b8:
9d:b6:b6:bb:44:50:13:10:a7:90:ea:c2:77:12:29:0f:6d:dd:
18:68:66:2c:76:36:ab:17:f5:7b:58:8c:79:b2:4b:d9:30:fd:
d8:b5:01:11:6f:cd:30:ba:8c:d8:17:4c:6e:70:bb:4a:09:a3:
4f:bc:0a:bc:3a:57:10:01:b5:4c:23:5b:2d:f6:70:9f:f7:6a:
84:a4:eb:fd:3e:fb:26:98:e2:e2:0c:fd:55:f0:a8:61:61:43:
1b:63:66:4a:cd:b3:3f:e3:f5:e1:33:81:a2:fc:13:26:18:d0:
90:b2:2c:36:93:bf:e8:f3:b5:53:4b:95:a5:29:55:5c:f7:70:
b4:95:3b:6c:b1:97:d8:05:99:d0:00:60:f7:a2:bc:1b:35:32:
4b:2b:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:09:48 2025 by rpki-client