This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft
File: F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft (raw, json)
Hash identifier: SNubW+4q1y+hh0iltfdyUhJr3/LXNWHjv1x29bpgoZQ=
Subject key identifier: C1:F1:02:D9:28:0D:EA:B1:38:E1:0F:05:90:A4:EB:FD:A4:97:FC:CE
Authority key identifier: F7:E5:D3:5C:28:04:01:09:AA:C6:0D:F0:41:0F:2F:F5:0C:BF:37:EC
Certificate issuer: /CN=F7E5D35C28040109AAC60DF0410F2FF50CBF37EC
Certificate serial: 12268C711DFA3A55B57620AA53E2AF03125108D9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft
Manifest number: 0145
Signing time: Sat 20 Dec 2025 12:01:30 +0000
Manifest this update: Sat 20 Dec 2025 11:56:30 +0000
Manifest next update: Fri 26 Dec 2025 06:17:30 +0000
Files and hashes: 1: F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.crl (hash: zzEd6+CCzU4fg/qIWgyliAwKELZX0HdC/GtZWwJTS6s=)
2: 323830333a623835303a3a2f33322d313238203d3e20323733313230.roa (hash: nln2BmrsK03PDYf4F4KNYxb7dKIv8BZcL7rvvSyqu3Q=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.crl
rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 17:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:26:8c:71:1d:fa:3a:55:b5:76:20:aa:53:e2:af:03:12:51:08:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7E5D35C28040109AAC60DF0410F2FF50CBF37EC
Validity
Not Before: Dec 20 11:56:30 2025 GMT
Not After : Dec 26 06:17:30 2025 GMT
Subject: CN=C1F102D9280DEAB138E10F0590A4EBFDA497FCCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d7:50:16:76:71:59:27:a3:19:50:1a:1e:00:
4f:90:fe:48:94:79:ed:23:9e:54:41:fe:05:96:c6:
fa:99:18:68:b2:3d:2e:6c:f5:5c:8a:25:02:0e:2f:
a6:db:d4:48:2f:0e:7c:70:ac:12:72:34:21:a1:07:
c6:42:69:00:08:5b:ad:39:7a:de:88:c3:f1:b4:3b:
07:fa:7b:91:76:16:c2:07:eb:ea:47:d3:00:30:91:
66:92:cb:45:00:da:8c:f0:0a:7e:58:ec:3e:2a:76:
c7:00:83:2b:b0:8e:65:94:7b:1c:de:26:bc:86:93:
3b:6e:87:51:84:d6:d1:28:43:de:cc:45:46:0c:18:
9d:f4:e1:aa:3d:f9:37:cc:81:6f:e3:f0:f4:4f:1f:
45:68:61:46:b0:a5:f5:c5:4a:a4:ef:de:33:fe:88:
79:8f:78:75:90:db:b9:84:d9:60:bf:68:58:d9:be:
a9:9a:0e:07:c8:6c:22:ce:5c:0d:cc:80:b9:12:ba:
d9:6f:7a:c6:ac:49:62:e6:f8:33:57:d9:f2:d4:c3:
c2:3f:49:c1:48:8a:50:dd:42:dc:fa:b8:88:12:28:
e5:0d:52:7e:39:06:36:2e:da:b7:d8:d3:30:02:85:
ae:2e:fa:46:83:5e:1b:21:b9:fc:46:76:2d:e9:af:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:02:D9:28:0D:EA:B1:38:E1:0F:05:90:A4:EB:FD:A4:97:FC:CE
X509v3 Authority Key Identifier:
keyid:F7:E5:D3:5C:28:04:01:09:AA:C6:0D:F0:41:0F:2F:F5:0C:BF:37:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:aa:05:aa:3b:92:f7:62:d6:e4:80:6e:f4:b1:5a:01:f6:92:
5b:05:f0:bb:4e:4b:6b:86:8d:76:19:c9:4a:41:d2:e3:9b:31:
2b:1e:0a:26:fd:38:16:2b:23:1a:57:bd:c4:ca:63:25:2b:fa:
c8:24:67:6a:a6:75:a0:ab:81:21:06:55:7d:67:eb:a3:51:3c:
1a:57:e3:a1:5e:38:63:dc:81:df:b9:d0:e4:ec:f9:38:03:db:
ec:17:45:cb:f0:d3:99:f4:29:e0:32:b5:fa:50:a1:bd:18:5d:
b7:52:e1:cd:59:f3:5c:4d:b3:93:5f:56:6d:2f:6a:9b:8a:96:
09:89:fc:55:a3:2a:92:7a:18:a4:91:63:4d:f6:ec:cb:61:83:
f3:5b:e0:fa:3c:44:91:30:08:62:83:6f:fd:02:c4:4b:f9:4e:
a1:6a:be:d3:d7:9b:7b:45:41:a2:e2:a9:9e:7e:ba:8e:3d:45:
47:48:30:da:79:e0:21:31:f4:3c:d6:3b:0d:aa:cb:b3:e0:99:
f8:fa:91:67:48:d4:d7:ee:94:27:a2:fe:64:1f:c3:78:08:72:
4f:3c:41:cf:80:fa:c6:bb:3d:73:bb:83:48:91:f4:74:6b:17:
c8:78:5d:ad:03:88:aa:b9:42:0e:50:bf:b4:e0:c9:e6:1d:3e:
09:7e:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:02:20 2025 by rpki-client