This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
File: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft (raw, json)
Hash identifier: S6X6x9YlvfHW2Mo30FZzhvOdowX9Ov6CqGpZ3qmPpqg=
Subject key identifier: 4F:7D:8C:2A:41:6D:C1:64:1E:BB:6A:4C:13:B2:5A:38:F7:6B:D6:EC
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Certificate issuer: /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial: 303DD82C361821533CE0317CA1FCAA6AC9582852
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
Manifest number: 0140
Signing time: Sun 07 Dec 2025 05:43:27 +0000
Manifest this update: Sun 07 Dec 2025 05:38:27 +0000
Manifest next update: Sat 13 Dec 2025 03:11:27 +0000
Files and hashes: 1: 3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa (hash: UxWVsSHgc7sCdCdtXfz5xPAdpgKquF6TGclmGWtYyus=)
2: 3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa (hash: Y3oZHoznCaUCBQoRIIqHUk1GE9kbKfIIaQ4fpU0PJjw=)
3: 323830333a383465303a3a2f33322d3332203d3e20323733303036.roa (hash: IhrcR9v71SHVWTPWhhNNwFVAgzsaGowtRREEzljdA5Q=)
4: 34352e3138392e3233352e302f32342d3234203d3e20323733303036.roa (hash: tHCd2o3Ws3sRzLZIPTJtx1XUzBWF561xvUTQHUix3mg=)
5: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl (hash: el9P8qQ441S3lOoLkGdje4i+mW5gzN4F44N6U7oqdu4=)
6: 3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa (hash: D4Wuw579mtmQk3148E/t7+wdylw1tUvsSFL+d95cbeo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 09:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3d:d8:2c:36:18:21:53:3c:e0:31:7c:a1:fc:aa:6a:c9:58:28:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Validity
Not Before: Dec 7 05:38:27 2025 GMT
Not After : Dec 13 03:11:27 2025 GMT
Subject: CN=4F7D8C2A416DC1641EBB6A4C13B25A38F76BD6EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:49:9b:1b:47:b0:ef:70:42:52:38:61:29:
94:ec:8b:62:85:bf:86:ff:1b:82:af:ab:97:de:ef:
af:2c:8a:40:57:12:2a:d3:7e:aa:95:46:97:41:8d:
3d:0c:51:bd:3e:17:a7:16:7d:39:e5:b8:e1:c8:2c:
e2:0f:ae:2f:49:e8:4c:b2:94:73:f9:16:fa:ed:cf:
04:45:c1:fc:d7:5e:e6:ac:35:9d:e4:13:7a:81:42:
55:a8:9c:99:c7:60:2b:fe:45:9d:7a:b8:51:8f:1a:
2c:b0:d1:85:b0:da:80:36:0b:f2:d0:fe:01:96:7d:
1d:1e:54:9c:99:60:64:76:a7:ab:cc:b3:d1:0b:51:
b0:d1:6b:20:46:39:39:49:50:19:50:b1:d8:67:74:
83:e3:4b:e0:96:17:46:d1:d0:d9:c6:74:29:3c:c5:
38:e9:54:89:b5:f6:6b:65:a5:61:3c:59:32:b2:81:
d1:75:52:9b:77:eb:77:d9:ea:d4:f3:f6:4a:7b:2a:
71:69:36:f5:e3:92:03:1b:4c:6e:84:b4:00:04:bd:
1a:e2:40:2c:29:3b:be:43:7f:f3:82:7b:e3:9f:19:
f5:c1:4c:ba:25:5c:4c:77:46:d5:84:8b:88:b8:d6:
1d:21:a4:a2:16:b4:50:72:ef:f5:2e:37:bf:99:2c:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7D:8C:2A:41:6D:C1:64:1E:BB:6A:4C:13:B2:5A:38:F7:6B:D6:EC
X509v3 Authority Key Identifier:
keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:20:ba:70:06:3a:0b:84:df:85:69:f7:7d:54:d8:00:09:5d:
ed:99:47:7b:4b:e4:de:51:43:b9:d3:fe:c3:1e:12:47:ee:0c:
de:83:23:b0:47:94:c9:1c:e3:60:68:b3:2f:81:52:0f:1a:83:
58:ac:94:df:b3:82:2d:f6:a3:a5:aa:d8:72:4e:c1:b1:63:2f:
00:ba:4a:f9:0d:6a:53:5b:c4:19:e3:ec:67:b1:11:c7:6a:77:
20:a4:a2:71:df:92:30:37:f0:ee:30:d5:ef:a8:eb:ad:8c:62:
cd:51:c7:45:8c:3f:da:91:e1:7a:f3:e8:57:4c:08:4e:21:41:
76:65:b7:02:bb:b9:be:93:d0:5d:8a:e6:24:db:42:7d:9c:60:
b9:81:0f:9f:05:fb:fe:9b:d7:1a:cc:e1:d3:f0:a5:5d:12:a6:
87:ac:97:67:64:88:43:5d:3f:f5:f8:66:e6:27:53:c9:60:7d:
5e:64:d5:28:7e:6c:b4:40:a4:3a:9a:c6:df:04:8e:7b:01:1b:
fb:f6:3b:9a:74:40:c8:24:4e:13:a6:af:85:05:4e:1f:b9:fd:
ae:d2:c9:09:28:95:bb:94:c7:ea:7b:88:91:17:29:53:40:a1:
1e:e3:90:9d:3f:15:07:f3:76:9d:46:39:92:70:39:46:2a:65:
58:1f:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:33:14 2025 by rpki-client