This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.mft
File: 6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.mft (raw, json)
Hash identifier: hrJQgdLjU4Xxhx33by+MeJP//g8jPo5zUHF50jaA+zQ=
Subject key identifier: 82:08:7C:8A:08:5B:D5:21:65:9E:0D:D8:95:BC:4B:7A:B3:57:A5:61
Authority key identifier: 6B:38:B8:C5:3E:C1:C9:8F:73:63:65:5F:62:F1:AD:6C:C7:E6:71:7D
Certificate issuer: /CN=6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D
Certificate serial: 43EA71DC3D4EEED55C72F9FF365B34EA4FACDDD0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.mft
Manifest number: 33
Signing time: Sat 06 Dec 2025 01:01:49 +0000
Manifest this update: Sat 06 Dec 2025 00:56:49 +0000
Manifest next update: Wed 10 Dec 2025 16:19:49 +0000
Files and hashes: 1: 6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.crl (hash: q88z8OA/fdv7Pmdvn6I3L0OJup5FtW8KHKPGblPwPa0=)
2: 323830333a376564303a3a2f33322d3438203d3e20323734313233.roa (hash: mmorgycZuVptE0GRCVCRHDnoXUDlcjCodGhtwUTKStw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.crl
rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 16:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ea:71:dc:3d:4e:ee:d5:5c:72:f9:ff:36:5b:34:ea:4f:ac:dd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D
Validity
Not Before: Dec 6 00:56:49 2025 GMT
Not After : Dec 10 16:19:49 2025 GMT
Subject: CN=82087C8A085BD521659E0DD895BC4B7AB357A561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:aa:dd:c5:44:57:24:01:45:f6:5e:97:b7:
9e:74:8e:39:a3:58:db:a8:2d:02:26:82:6b:3c:d6:
30:81:38:ac:ae:91:59:4f:60:cb:fb:50:57:1c:53:
4c:8b:c0:b2:d2:88:e2:58:99:de:71:93:9c:1e:b2:
ea:6e:29:b2:d5:c6:fb:c8:11:18:29:3a:aa:63:33:
9d:11:70:22:60:5f:a6:e7:16:ba:12:4e:36:d0:ce:
0a:74:9c:80:f8:20:99:36:5b:62:4d:0e:49:9f:61:
ef:ba:c4:be:6a:5c:b1:cc:97:ec:1c:a8:c0:f2:1a:
1b:47:68:89:b2:8e:08:66:62:eb:67:cf:ef:46:1c:
16:1a:e3:ef:e8:81:29:ff:aa:85:15:c4:5a:65:2a:
c7:37:15:45:b2:dc:4a:99:72:b8:e0:bd:af:89:9d:
d5:db:a4:e8:ec:4a:da:87:7b:c8:72:ae:89:14:65:
5e:3b:42:4e:f3:5a:e3:be:4d:19:2a:bd:73:85:4d:
a8:9e:56:16:ac:9d:95:96:f8:85:d8:d1:ed:85:27:
01:cb:47:06:0b:df:3a:99:f3:5e:9f:e9:98:e0:4b:
d4:98:f9:3d:00:ff:2c:54:ba:b6:12:44:cf:14:ea:
74:be:b6:7b:f2:0e:ae:17:17:52:de:98:8c:65:d7:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:08:7C:8A:08:5B:D5:21:65:9E:0D:D8:95:BC:4B:7A:B3:57:A5:61
X509v3 Authority Key Identifier:
keyid:6B:38:B8:C5:3E:C1:C9:8F:73:63:65:5F:62:F1:AD:6C:C7:E6:71:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:72:15:90:a5:9c:d2:3e:3a:69:91:cf:bc:bb:dd:f0:b5:60:
1c:7a:3b:7d:00:17:24:05:9d:64:85:49:c5:f7:e3:38:17:51:
ab:49:1f:8c:8e:e4:58:55:b1:b9:75:d9:d8:c2:f2:95:ac:eb:
54:3d:8e:b6:3f:15:27:98:98:2d:a4:d3:10:84:18:99:24:5e:
43:01:35:a6:20:75:e5:9d:64:b9:e2:bd:19:3e:33:a3:11:e3:
a3:c1:0e:97:c4:f3:eb:e8:72:d8:a6:3c:a5:5c:56:af:cb:0c:
ad:e2:36:22:79:94:97:95:3f:31:f7:10:02:a4:55:4b:c1:77:
eb:55:02:1d:34:f2:29:ff:6f:df:6d:89:10:d5:16:a0:01:0e:
4f:da:87:6c:37:47:5c:dc:3e:2e:9d:7d:6e:2c:4e:03:80:b8:
ab:51:f6:fb:5d:df:74:a6:49:09:de:16:e9:76:5f:d2:30:d6:
82:9a:0a:1e:51:63:21:6f:fb:44:31:66:db:cb:8c:ae:8a:13:
72:25:90:72:2f:91:d4:73:56:c9:06:a8:f4:29:77:0a:ab:30:
27:9a:0b:db:6c:56:c5:b7:3e:25:00:a2:ed:0d:82:44:9a:5b:
e8:69:4a:7f:f5:be:77:85:58:e4:9c:ae:f3:ab:bd:ba:28:b1:
3c:b0:94:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:37:31 2025 by rpki-client