This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
File: 20FD70DC301FF93D288ED851C3A69B22D7B04220.mft (raw, json)
Hash identifier: a71DUc86pYX4EyKmiJux1fSaAzTr6+WNSbBXrjsfCZ8=
Subject key identifier: A2:37:1D:FD:80:60:3F:80:4B:64:3B:A0:7B:42:73:62:8E:C9:51:1F
Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20
Certificate issuer: /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220
Certificate serial: 6166AB203E197FFA47047904E4F350A5EA15118A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
Manifest number: 0159
Signing time: Sat 24 Jan 2026 03:10:05 +0000
Manifest this update: Sat 24 Jan 2026 03:05:05 +0000
Manifest next update: Wed 28 Jan 2026 08:28:05 +0000
Files and hashes: 1: 20FD70DC301FF93D288ED851C3A69B22D7B04220.crl (hash: nAzu/wcEF3PH0+/UwxrdS/H7r/XwQxF3ZhOAqitmt5s=)
2: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (hash: g8hHWzP4kDSiOiSHBMQM7MYWGMPCqeG59pSNv4PvdWU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl
rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 08:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:66:ab:20:3e:19:7f:fa:47:04:79:04:e4:f3:50:a5:ea:15:11:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220
Validity
Not Before: Jan 24 03:05:05 2026 GMT
Not After : Jan 28 08:28:05 2026 GMT
Subject: CN=A2371DFD80603F804B643BA07B4273628EC9511F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:37:c4:8e:e3:f4:37:a3:0e:07:ee:52:9b:
f8:7f:68:a9:07:c1:cd:44:dc:3a:45:a1:c5:60:60:
e2:ec:ab:c2:c6:f0:8b:20:0a:6a:d8:52:1f:65:24:
ed:58:d8:e9:54:9c:c8:87:3e:5f:c9:5a:60:df:98:
e7:f0:8d:6d:f7:16:21:d5:90:5b:b1:22:cf:a2:92:
53:6e:20:66:98:2c:a5:fd:82:1a:17:28:a5:5b:52:
2f:5e:17:8b:c0:4e:06:c2:26:b7:43:4f:d5:36:d5:
77:87:05:b2:2b:2f:19:29:ab:fe:65:d2:5d:a1:57:
69:18:31:ae:c3:d2:56:02:d7:0c:07:39:8e:cb:62:
a2:15:18:ab:09:12:f6:58:b7:8a:9d:2f:13:43:b1:
ce:27:93:30:0c:86:2d:ed:46:c8:26:b4:2d:46:27:
ea:f8:bf:31:8c:38:51:28:a3:d3:6f:b1:c9:8d:8c:
3a:8c:56:39:ba:2d:16:58:80:47:fd:69:ca:fb:c4:
f7:ea:f7:ba:16:21:88:ef:c5:bf:00:df:30:a9:d8:
73:43:0e:e1:3e:a3:01:5a:8b:85:86:da:62:25:f3:
44:25:d0:35:e3:12:e6:9e:51:a1:81:54:b5:78:86:
e0:b5:f9:98:36:24:10:13:05:7a:9e:f6:35:fc:cc:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:37:1D:FD:80:60:3F:80:4B:64:3B:A0:7B:42:73:62:8E:C9:51:1F
X509v3 Authority Key Identifier:
keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:74:f0:e6:69:27:d9:0b:f4:c7:e9:bb:4c:3f:c4:f0:93:a8:
21:68:bd:a5:1a:ba:9d:1e:f0:c3:29:5d:f3:9e:ca:45:04:17:
37:0f:59:21:1c:45:63:2b:47:aa:7b:01:03:84:db:67:0c:62:
de:c5:a4:9f:37:45:10:8f:37:eb:ba:70:07:94:29:70:2b:da:
83:f1:f3:b9:c7:0b:23:3f:92:f9:31:f5:13:6a:a6:12:e5:75:
e7:1e:7a:88:13:77:2a:f5:f2:32:99:9c:d7:85:a3:e6:29:ae:
c2:3f:74:75:e5:5c:00:8d:6a:62:81:fb:93:46:fa:94:20:80:
11:7f:a2:ec:2a:14:ce:9f:6e:c3:b3:15:f6:20:c8:2c:40:4d:
5d:e1:31:f0:44:2d:46:57:bf:59:8a:6b:7a:ef:23:df:eb:07:
11:b1:5d:7e:08:57:45:e2:0e:c3:b6:ea:d3:7c:37:50:94:2b:
e5:20:49:cc:f6:48:f1:47:eb:b0:c5:90:01:a0:98:2c:a0:79:
d2:29:b5:6b:1f:51:1b:87:9b:03:89:29:6c:60:94:fb:66:77:
83:0d:19:f5:dc:ab:a1:0c:1d:47:fe:0a:1e:12:8d:42:0e:41:
09:34:20:06:42:ee:a6:04:e9:1c:fe:14:44:b5:06:00:cb:b1:
de:d0:e9:68
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUYWarID4Zf/pHBHkE5PNQpeoVEYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBGRDcwREMzMDFGRjkzRDI4OEVEODUxQzNBNjlCMjJE
N0IwNDIyMDAeFw0yNjAxMjQwMzA1MDVaFw0yNjAxMjgwODI4MDVaMDMxMTAvBgNV
BAMTKEEyMzcxREZEODA2MDNGODA0QjY0M0JBMDdCNDI3MzYyOEVDOTUxMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicDfEjuP0N6MOB+5Sm/h/aKkH
wc1E3DpFocVgYOLsq8LG8IsgCmrYUh9lJO1Y2OlUnMiHPl/JWmDfmOfwjW33FiHV
kFuxIs+iklNuIGaYLKX9ghoXKKVbUi9eF4vATgbCJrdDT9U21XeHBbIrLxkpq/5l
0l2hV2kYMa7D0lYC1wwHOY7LYqIVGKsJEvZYt4qdLxNDsc4nkzAMhi3tRsgmtC1G
J+r4vzGMOFEoo9NvscmNjDqMVjm6LRZYgEf9acr7xPfq97oWIYjvxb8A3zCp2HND
DuE+owFai4WG2mIl80Ql0DXjEuaeUaGBVLV4huC1+Zg2JBATBXqe9jX8zEhZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUojcd/YBgP4BLZDuge0JzYo7JUR8wHwYDVR0j
BBgwFoAUIP1w3DAf+T0ojthRw6abItewQiAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQTIwRjM3RTFCRDYyQTUxQTk5REVENkI0QTEzOEIwNzBD
RTFCOUQzQjNCQUU2M0Y1NTVCMDU3OTAwNUYyMzAwLzAvMjBGRDcwREMzMDFGRjkz
RDI4OEVEODUxQzNBNjlCMjJEN0IwNDIyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEZENzBEQzMwMUZGOTNEMjg4
RUQ4NTFDM0E2OUIyMkQ3QjA0MjIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkEyMEYzN0UxQkQ2MkE1MUE5OURFRDZCNEExMzhCMDcwQ0UxQjlEM0Iz
QkFFNjNGNTU1QjA1NzkwMDVGMjMwMC8wLzIwRkQ3MERDMzAxRkY5M0QyODhFRDg1
MUMzQTY5QjIyRDdCMDQyMjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADdPDmaSfZC/TH6btMP8Twk6gh
aL2lGrqdHvDDKV3znspFBBc3D1khHEVjK0eqewEDhNtnDGLexaSfN0UQjzfrunAH
lClwK9qD8fO5xwsjP5L5MfUTaqYS5XXnHnqIE3cq9fIymZzXhaPmKa7CP3R15VwA
jWpigfuTRvqUIIARf6LsKhTOn27DsxX2IMgsQE1d4THwRC1GV79Zimt67yPf6wcR
sV1+CFdF4g7DturTfDdQlCvlIEnM9kjxR+uwxZABoJgsoHnSKbVrH1Ebh5sDiSls
YJT7ZneDDRn13KuhDB1H/goeEo1CDkEJNCAGQu6mBOkc/hREtQYAy7He0Olo
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:23:50 2026 by rpki-client