This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.mft
File: 8EC85B4C27B04A291CCCBF3385A339E01B6F3834.mft (raw, json)
Hash identifier: io9reXsXBFVSxrQQfcr2wFaXOMtbCj6uPYLbvC5UY1M=
Subject key identifier: 4A:3D:6C:C2:6F:B2:8B:E3:4B:5D:35:46:88:47:6A:B0:85:DC:37:3A
Authority key identifier: 8E:C8:5B:4C:27:B0:4A:29:1C:CC:BF:33:85:A3:39:E0:1B:6F:38:34
Certificate issuer: /CN=8EC85B4C27B04A291CCCBF3385A339E01B6F3834
Certificate serial: 258C84D07A2FB413500F7686B9E164E51E22B745
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.mft
Manifest number: 40
Signing time: Fri 05 Dec 2025 18:28:14 +0000
Manifest this update: Fri 05 Dec 2025 18:23:14 +0000
Manifest next update: Wed 10 Dec 2025 11:39:14 +0000
Files and hashes: 1: 323830333a3964303a3a2f33322d3634203d3e20323734313435.roa (hash: 3jO+BLhUpwYWeds8xYGDEz3hSrW7Pp9RUMGq4ZvZG6I=)
2: 8EC85B4C27B04A291CCCBF3385A339E01B6F3834.crl (hash: QGQw/1RES+rZj4ruqyapBYgZgzSgPD/L3lqZR4dzdSA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.crl
rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 11:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:8c:84:d0:7a:2f:b4:13:50:0f:76:86:b9:e1:64:e5:1e:22:b7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EC85B4C27B04A291CCCBF3385A339E01B6F3834
Validity
Not Before: Dec 5 18:23:14 2025 GMT
Not After : Dec 10 11:39:14 2025 GMT
Subject: CN=4A3D6CC26FB28BE34B5D354688476AB085DC373A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:0e:66:b9:57:a0:7f:4a:46:0b:38:9d:22:
c1:81:ce:1c:2c:91:1e:fd:dd:de:95:96:18:49:15:
f4:aa:54:b2:83:67:c8:0f:95:16:03:8f:b3:da:f1:
77:0d:7d:32:f1:4b:00:2a:56:8b:06:f4:43:68:73:
bb:c6:96:bd:0c:65:78:0b:89:01:55:f2:b1:0b:56:
e4:78:11:cf:32:2f:cb:59:77:21:a6:58:c5:6a:c5:
7d:3f:56:3e:44:61:28:00:4c:6e:ec:aa:4f:03:c4:
1b:15:98:0d:bf:2b:28:6c:6f:52:1c:4f:ed:9b:cc:
18:96:ee:ff:86:c6:1e:ea:b6:7a:06:0a:7b:77:f3:
b8:5f:c0:3c:3c:3e:7f:51:ff:94:f3:9f:1b:18:f2:
35:5a:80:6d:cc:0a:3a:ef:16:cb:39:b2:9b:a8:1b:
a2:bd:d0:f5:a6:f0:0f:c1:c0:f1:96:46:c5:97:ab:
6f:7e:1c:fd:67:6b:3c:e5:14:a9:e5:ad:cf:43:a4:
10:95:8c:67:32:79:7c:d7:4c:14:27:c4:39:69:af:
d6:f1:4d:b1:04:82:f3:2f:a4:ef:26:c3:3e:33:10:
e0:c4:c1:a8:fc:72:14:a7:59:e4:22:fe:57:33:0d:
8f:51:b3:e7:b5:c8:79:40:c7:14:01:4e:74:f8:9d:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3D:6C:C2:6F:B2:8B:E3:4B:5D:35:46:88:47:6A:B0:85:DC:37:3A
X509v3 Authority Key Identifier:
keyid:8E:C8:5B:4C:27:B0:4A:29:1C:CC:BF:33:85:A3:39:E0:1B:6F:38:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b4:af:95:e4:43:b5:1d:fd:6f:04:f3:4b:84:46:7b:ae:20:
6d:99:83:61:3d:5e:51:9e:41:7c:44:68:3a:34:d5:9a:00:b8:
9d:4a:26:fe:d5:9b:28:2e:05:33:97:9e:e6:17:f2:7f:97:c4:
01:d6:59:43:d0:97:1f:01:8e:6b:c0:83:8c:0b:22:f8:d0:6b:
89:35:fb:e1:3f:f2:0e:20:38:b9:96:b2:f1:00:bc:5a:e9:9f:
6b:69:17:53:6f:c8:97:ec:db:0a:67:70:98:d9:34:bf:41:39:
91:57:c6:d5:fc:91:31:99:47:7e:68:d4:20:17:ea:48:ea:f9:
69:a4:22:63:bc:8a:d6:b8:00:be:39:f1:24:07:2c:f7:06:4f:
25:e0:a5:7b:f9:31:a2:f1:3d:37:e7:85:9d:a7:c0:8e:4d:89:
b3:ca:8b:1a:a9:d5:60:06:db:b4:ed:d9:a1:34:16:38:cb:fe:
9f:3c:35:e5:6c:58:0b:39:35:61:33:d1:33:92:d3:98:57:e9:
83:9d:61:6b:44:ee:52:a2:1b:18:48:35:88:1a:45:52:d9:27:
38:9c:d5:73:f8:af:37:f8:48:2a:09:b2:10:cc:10:63:50:3b:
37:e5:6e:29:70:71:f8:25:b4:56:59:7c:54:c4:3d:3b:5d:3b:
63:fc:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:44:29 2025 by rpki-client