This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
File: 2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft (raw, json)
Hash identifier: JzXforfwr+1csKG62ocCoHYdgCepnTEleiJDmwujvRQ=
Subject key identifier: 2D:D8:A2:FD:6C:47:EE:1B:BE:61:B6:C1:26:BB:26:DB:B0:47:56:E3
Authority key identifier: 2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B
Certificate issuer: /CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B
Certificate serial: 7F53FD9042EE92B6FD27743819B5BFFBF21C0996
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
Manifest number: 0145
Signing time: Sat 06 Dec 2025 06:35:05 +0000
Manifest this update: Sat 06 Dec 2025 06:30:05 +0000
Manifest next update: Thu 11 Dec 2025 04:35:05 +0000
Files and hashes: 1: 323830313a31333a643830383a3a2f34382d3438203d3e203139343239.roa (hash: pCCwwwI4kK35qb09IHCCQu4MrgMz9s784gSsBRbVivw=)
2: 2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl (hash: 2kmZAbyhvp+HCE59EV+8fPrGYexDDLWLyzHt+VqG4G4=)
3: 323830313a31333a643830303a3a2f34382d3438203d3e203134303830.roa (hash: kkafS8rLlGBeQ6VUx0AiD6jnTOHLthXrAqZWKLP0AKs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl
rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 03:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:53:fd:90:42:ee:92:b6:fd:27:74:38:19:b5:bf:fb:f2:1c:09:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B
Validity
Not Before: Dec 6 06:30:05 2025 GMT
Not After : Dec 11 04:35:05 2025 GMT
Subject: CN=2DD8A2FD6C47EE1BBE61B6C126BB26DBB04756E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d6:27:9b:26:32:e0:a0:e0:41:24:41:6d:20:
e1:73:a8:a1:e2:ba:c6:0b:95:55:5b:71:39:90:f8:
7c:26:55:49:65:c2:04:85:0a:e8:9e:f4:18:4d:f8:
b5:3c:29:22:9c:01:da:1e:52:f7:17:50:08:b6:7c:
50:9d:14:51:89:ba:a4:8f:99:0b:fc:30:64:40:bb:
0b:2d:f7:b5:72:a3:cc:d1:18:1c:da:35:d7:f4:0b:
da:e2:1d:13:d3:80:3e:e4:7f:41:87:a8:d8:7b:6e:
0e:7a:2c:44:2b:90:49:ef:9c:85:d6:e1:6f:82:4a:
36:fa:20:0a:d3:36:19:98:56:52:33:70:62:f6:2a:
34:1d:3b:4c:13:10:e4:b0:a1:5c:0e:67:20:4d:88:
dd:e8:8e:46:5a:a8:ad:66:64:24:fc:53:ce:9e:b4:
7e:ac:2d:5c:d3:08:ac:47:f6:47:3f:7b:79:1f:27:
c3:58:dc:24:2c:bf:f7:73:9a:47:bf:bc:d9:57:ed:
cb:29:66:60:82:2c:4e:fa:c6:79:0d:6c:3a:a0:7b:
ce:95:37:15:d8:27:52:97:d6:82:5d:f5:ea:d2:1c:
3e:b5:16:40:b1:1b:ed:9b:c9:61:43:c3:78:74:cb:
8b:51:1e:ab:ab:4f:0d:f7:c3:3f:32:27:81:8d:e7:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D8:A2:FD:6C:47:EE:1B:BE:61:B6:C1:26:BB:26:DB:B0:47:56:E3
X509v3 Authority Key Identifier:
keyid:2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:85:08:89:2a:27:14:3d:f6:57:2d:54:0c:c2:2f:db:af:92:
64:8b:ef:4a:3f:47:9a:43:89:e5:71:03:95:85:d4:19:ee:26:
01:6d:75:3d:42:b3:f6:59:75:48:93:07:2d:78:7d:17:c5:c1:
ae:24:6a:b7:56:2c:7a:eb:80:6e:9a:51:3d:1c:72:b9:e8:1f:
e0:96:85:d9:90:59:ab:b0:91:8f:7e:4a:d9:c5:b0:4d:e5:db:
39:7f:77:d2:8c:8e:65:ba:73:0c:76:92:b0:a7:a0:09:c0:b9:
e6:90:95:2f:4e:bf:26:93:f0:9f:d6:67:6f:c1:53:34:98:b8:
ab:8a:4b:e4:6c:88:6c:f0:f0:52:06:12:5d:67:fc:a1:95:d7:
7a:a2:38:a2:c6:06:95:23:7f:08:c4:00:7a:d3:86:4c:08:30:
3d:fc:65:7e:2f:5e:e6:8e:32:d5:d3:56:ac:7f:87:51:43:a3:
f4:2b:63:5d:0b:15:8e:b9:66:10:1f:cb:7e:50:ef:8c:84:d1:
df:dc:33:e1:1d:90:ff:1d:e6:57:c6:38:7b:76:50:9e:42:6e:
ee:20:b1:eb:76:3a:c8:f7:60:b7:7b:e8:7f:ff:d0:d7:cf:f2:
46:23:ca:33:8f:17:99:e0:5d:4e:2b:8a:aa:a8:02:ae:b9:f4:
48:14:02:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:47:10 2025 by rpki-client