This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft File: 958AE74C7555B3A115DBFFC8840395CE219F59B5.mft (raw, json) Hash identifier: Q82EmJhQipzU3Hym1g54GOB5Rh8+a9EMGpWzVYTTPE8= Subject key identifier: 02:91:4C:2E:0A:B6:8A:B9:F5:79:8F:0E:34:9F:24:76:A9:26:A4:DC Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5 Certificate issuer: /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5 Certificate serial: 3DFFD99495BBEB30761C4D2741ED32E3893FD844 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft Manifest number: 0143 Signing time: Fri 05 Dec 2025 22:20:22 +0000 Manifest this update: Fri 05 Dec 2025 22:15:22 +0000 Manifest next update: Wed 10 Dec 2025 08:54:22 +0000 Files and hashes: 1: 3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa (hash: DsrrF+UUK1Q1sB6PvCAllfUXQz6xxhErCjiWOoHEOPc=) 2: 3139322e3134312e34302e302f32322d3232203d3e20323635373934.roa (hash: wrwjTyh9pOptnNw9f/Tc7oUs2AyzWXt8NtoMFsZcyT4=) 3: 323830333a653032303a3a2f33322d3332203d3e20323635373934.roa (hash: kte3CTPUXYYiPA/2fZyA0RgagBOOb+s0KWpcd0MjF1Y=) 4: 3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa (hash: diXk1/Gtwc/ZoVUL78ZJK+xf8Tc+NqK2dFhbBJwjjXQ=) 5: 958AE74C7555B3A115DBFFC8840395CE219F59B5.crl (hash: Iz+wpZ5D596huna0eTvBCHNTpeqh8Ora1AnSBKq5+J0=) 6: 3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa (hash: lFMPHHji0WkM/od00nWsQTxJbZLHB08h94Wr7OzPf/o=) 7: 3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa (hash: 1eatcISrRWEjiJa/p7xBX6b+4bgRrTHTtU+86eOUpvs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Dec 2025 08:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ff:d9:94:95:bb:eb:30:76:1c:4d:27:41:ed:32:e3:89:3f:d8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5 Validity Not Before: Dec 5 22:15:22 2025 GMT Not After : Dec 10 08:54:22 2025 GMT Subject: CN=02914C2E0AB68AB9F5798F0E349F2476A926A4DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:62:45:9b:19:a1:c4:d4:f6:97:81:31:87: 67:ff:17:1f:72:5a:c1:a5:99:88:e3:1b:3a:70:45: 90:5b:64:ec:4a:a7:3f:9d:5d:68:c2:1e:5c:ac:9c: c7:e8:37:0d:96:6a:67:a1:ae:af:14:79:b7:b8:07: c7:7b:a7:6b:13:00:15:5a:5b:68:6b:31:e8:b3:78: 38:34:5a:57:10:a1:b5:85:d9:ec:45:e8:11:b7:e2: b8:eb:a8:c3:0d:84:3c:c1:d2:31:35:a8:11:12:84: ec:3d:5e:38:f5:cc:cf:65:e2:b1:22:93:b5:7e:d5: 53:d1:0a:95:b3:ce:a7:50:6f:15:20:e3:fb:f7:b5: 2c:b2:11:a6:a7:3f:b9:1e:f4:44:db:d3:54:b4:32: 64:8a:8e:b1:e7:d6:4c:c9:f7:da:68:d3:bb:9e:73: 1e:51:48:ea:97:22:cf:96:12:02:cb:67:a8:93:27: 39:f6:79:d4:19:34:c3:07:22:4e:d1:5b:34:71:b5: da:47:d6:a2:43:c3:1d:aa:b1:ed:c6:1a:8b:2d:1f: 9b:94:c4:b4:df:f0:b4:1d:98:a1:ca:89:43:1e:f0: c6:d0:56:34:4e:5a:cb:55:06:47:89:8e:85:78:d5: 21:d3:98:8c:1c:34:7b:8e:c2:e2:77:5f:c9:15:f9: 20:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:91:4C:2E:0A:B6:8A:B9:F5:79:8F:0E:34:9F:24:76:A9:26:A4:DC X509v3 Authority Key Identifier: keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ff:56:12:7d:b7:b6:64:f9:b5:8a:67:6d:9e:b0:ed:02:c9: f4:0c:71:c0:f7:36:3b:26:af:05:a2:6b:f4:a1:2f:88:0e:25: 41:37:e2:08:5b:9f:2b:ec:ac:54:99:14:6a:cb:47:f4:66:0e: 10:78:5e:12:9e:c9:5d:ab:f1:ea:16:a7:72:70:5c:53:16:a0: f7:3e:04:72:4e:29:ac:ef:e3:0d:a9:2e:18:59:15:8c:8d:cc: 9e:d2:06:a2:69:e9:37:3f:d3:15:85:eb:7d:95:85:43:8c:69: 1a:1d:c1:59:de:34:0b:af:63:0c:ce:20:7a:04:06:d0:06:da: 12:89:45:b7:65:54:1e:40:33:46:81:83:aa:75:0b:cf:e0:8c: 69:04:2b:4e:6e:9b:14:d8:76:3b:b0:10:ff:73:36:1a:b3:9b: c5:f2:e3:15:f0:af:cf:8c:59:ad:0b:b8:a9:47:fb:e4:df:2d: 61:12:13:33:2e:38:b1:34:f3:26:d2:6c:4e:61:d7:29:bd:ea: 43:c6:ba:ab:c5:27:62:e8:c4:29:d8:b0:cb:ca:26:a1:f3:a4: 8f:7c:4d:0c:67:cb:77:ea:30:37:45:c0:d8:e2:ee:dc:21:31: 04:79:63:ca:77:b6:06:bd:9d:ef:7b:ad:4d:b9:59:be:1c:e9: 30:a3:1d:a5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPf/ZlJW76zB2HE0nQe0y44k/2EQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4QUU3NEM3NTU1QjNBMTE1REJGRkM4ODQwMzk1Q0Uy MTlGNTlCNTAeFw0yNTEyMDUyMjE1MjJaFw0yNTEyMTAwODU0MjJaMDMxMTAvBgNV BAMTKDAyOTE0QzJFMEFCNjhBQjlGNTc5OEYwRTM0OUYyNDc2QTkyNkE0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznWJFmxmhxNT2l4Exh2f/Fx9y WsGlmYjjGzpwRZBbZOxKpz+dXWjCHlysnMfoNw2Wamehrq8Uebe4B8d7p2sTABVa W2hrMeizeDg0WlcQobWF2exF6BG34rjrqMMNhDzB0jE1qBEShOw9Xjj1zM9l4rEi k7V+1VPRCpWzzqdQbxUg4/v3tSyyEaanP7ke9ETb01S0MmSKjrHn1kzJ99po07ue cx5RSOqXIs+WEgLLZ6iTJzn2edQZNMMHIk7RWzRxtdpH1qJDwx2qse3GGostH5uU xLTf8LQdmKHKiUMe8MbQVjROWstVBkeJjoV41SHTmIwcNHuOwuJ3X8kV+SDFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUApFMLgq2irn1eY8ONJ8kdqkmpNwwHwYDVR0j BBgwFoAUlYrnTHVVs6EV2//IhAOVziGfWbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRTEzNTA0MDlCRTAzMENBQkYyOENFREUwOEQzQTI3OTlD MzYyOEYyNDNGMDA4Q0UzNzk0Nzc4RDMyMENBODMyLzAvOTU4QUU3NEM3NTU1QjNB MTE1REJGRkM4ODQwMzk1Q0UyMTlGNTlCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NThBRTc0Qzc1NTVCM0ExMTVE QkZGQzg4NDAzOTVDRTIxOUY1OUI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUUxMzUwNDA5QkUwMzBDQUJGMjhDRURFMDhEM0EyNzk5QzM2MjhGMjQz RjAwOENFMzc5NDc3OEQzMjBDQTgzMi8wLzk1OEFFNzRDNzU1NUIzQTExNURCRkZD ODg0MDM5NUNFMjE5RjU5QjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAK/1YSfbe2ZPm1imdtnrDtAsn0 DHHA9zY7Jq8Fomv0oS+IDiVBN+IIW58r7KxUmRRqy0f0Zg4QeF4Snsldq/HqFqdy cFxTFqD3PgRyTims7+MNqS4YWRWMjcye0gaiaek3P9MVhet9lYVDjGkaHcFZ3jQL r2MMziB6BAbQBtoSiUW3ZVQeQDNGgYOqdQvP4IxpBCtObpsU2HY7sBD/czYas5vF 8uMV8K/PjFmtC7ipR/vk3y1hEhMzLjixNPMm0mxOYdcpvepDxrqrxSdi6MQp2LDL yiah86SPfE0MZ8t36jA3RcDY4u7cITEEeWPKd7YGvZ3ve61NuVm+HOkwox2l -----END CERTIFICATE-----Generated at Sun Dec 7 10:11:18 2025 by rpki-client