This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft
File: DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft (raw, json)
Hash identifier: rDKA0lXfpjeOT1WKqpoXHHALoTdwS1frAokukutdZ2U=
Subject key identifier: 43:11:E7:6B:EE:F0:2E:6A:EF:9C:2B:3A:5E:54:72:77:C1:B9:43:D1
Authority key identifier: DA:C2:CF:C9:35:EC:2F:A7:67:F1:EC:1D:7F:A8:FE:23:5D:EA:35:51
Certificate issuer: /CN=DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551
Certificate serial: 5B4BD48FD85907CFDC7F0429F9FB9DB8E403522E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft
Manifest number: 3D
Signing time: Sun 07 Dec 2025 08:09:53 +0000
Manifest this update: Sun 07 Dec 2025 08:04:53 +0000
Manifest next update: Fri 12 Dec 2025 21:22:53 +0000
Files and hashes: 1: DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.crl (hash: Vtzn2HCj7nf+p2dVCE6u//hA4746xkZhc/6H8Gmt7Zc=)
2: 323830333a663339303a3a2f33322d3438203d3e20323733303238.roa (hash: GbxfBZdsYzBpzFY2/23FU6K35pcdUO+ZJXm6P0hKK0A=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.crl
rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 16:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:4b:d4:8f:d8:59:07:cf:dc:7f:04:29:f9:fb:9d:b8:e4:03:52:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551
Validity
Not Before: Dec 7 08:04:53 2025 GMT
Not After : Dec 12 21:22:53 2025 GMT
Subject: CN=4311E76BEEF02E6AEF9C2B3A5E547277C1B943D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:3a:9e:6e:35:7d:bc:e3:f8:18:06:0c:5e:
85:90:47:7d:7a:bb:1e:2d:54:cb:49:82:56:ed:b8:
39:df:55:9e:61:cd:7f:78:1e:9d:cf:f7:a3:21:b4:
fd:f7:8b:a9:79:22:1a:eb:63:cb:da:d4:be:a3:2f:
57:ed:4b:a9:6c:61:2a:d4:0f:e3:f3:65:4c:a1:aa:
b9:ef:03:6e:37:4f:78:b1:77:bb:d0:4f:af:8a:df:
35:0e:3d:3e:e4:41:5b:a3:fc:3e:70:a2:76:c6:9f:
2c:a3:b2:b0:b6:87:1c:bf:b2:59:2a:3d:dd:96:08:
9e:53:18:15:a3:5a:18:59:e8:e9:d5:8f:1d:69:1f:
15:84:02:9d:52:ad:b9:dd:e3:1c:f0:6b:d9:e1:e2:
38:7f:88:64:04:90:6b:c4:d7:9f:34:4e:e9:9f:b1:
a1:1d:c6:0c:94:1c:6d:f7:b7:13:cf:e4:9d:77:16:
ab:7e:fd:c7:66:94:e0:b9:e6:56:6d:09:ab:f2:a9:
e0:de:ce:34:0c:d6:98:9a:01:72:9a:7f:96:db:c7:
c9:de:81:53:63:17:a3:c3:0d:40:1b:44:a6:5a:c5:
2b:11:c9:03:44:b3:0d:b9:b4:b6:ea:ff:30:f9:9a:
9d:67:65:e3:06:62:2d:9c:1c:54:be:73:fa:7c:f2:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:11:E7:6B:EE:F0:2E:6A:EF:9C:2B:3A:5E:54:72:77:C1:B9:43:D1
X509v3 Authority Key Identifier:
keyid:DA:C2:CF:C9:35:EC:2F:A7:67:F1:EC:1D:7F:A8:FE:23:5D:EA:35:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ee:3f:85:62:be:26:18:4c:d5:b5:99:6c:46:40:4c:2d:7c:
8f:bc:d8:16:b1:40:2c:14:11:8f:74:f9:04:ce:29:93:6c:b4:
56:a3:a4:6a:62:89:32:bd:8a:19:fb:fd:6b:51:bc:d1:03:2b:
51:2c:d7:62:00:40:a6:aa:53:a4:3e:1c:05:8f:5e:5d:35:0d:
b3:73:d5:a6:de:ef:14:fb:67:6f:ea:f5:25:4e:4e:9d:55:7b:
9c:04:99:ff:ef:7d:4f:da:20:3f:c2:b8:d5:e1:da:25:3c:bc:
5d:0b:d3:a6:15:5f:08:e6:8b:ec:54:4f:b6:43:91:98:da:a6:
c4:2f:f2:86:80:60:62:ec:94:ec:31:d6:26:c2:6e:3b:81:df:
a4:41:52:93:ee:4e:37:d7:28:ac:75:a9:c7:0a:1b:2d:2a:c2:
97:24:89:6a:34:f4:99:3f:d7:21:1b:76:b6:36:09:23:b7:43:
61:ab:f3:b4:92:39:b8:a1:94:e4:1f:5e:f0:29:b2:8b:51:41:
6a:4d:b1:0c:a7:d8:e2:db:53:ab:11:9c:01:08:8d:f9:1e:07:
89:8c:f4:3a:6e:95:f4:4d:82:54:96:ce:b3:98:b2:c1:4b:97:
17:03:4d:95:e3:99:1d:24:c1:a0:71:81:2b:71:5c:a7:17:06:
63:26:51:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:03:36 2025 by rpki-client