This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
File: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft (raw, json)
Hash identifier: cHbEO5IfPKiIuh84mjTGVt7W+WBYS6yRs/zG/VeQntQ=
Subject key identifier: 41:A2:10:40:DA:91:28:C5:E1:16:F8:12:2F:E7:C0:78:BA:7D:29:F6
Authority key identifier: 3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D
Certificate issuer: /CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D
Certificate serial: 06D5DE167A9D5A188F391ADBCB1DC96027486AA7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
Manifest number: 0159
Signing time: Fri 23 Jan 2026 20:56:20 +0000
Manifest this update: Fri 23 Jan 2026 20:51:20 +0000
Manifest next update: Thu 29 Jan 2026 17:03:20 +0000
Files and hashes: 1: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl (hash: 2eEzKEjlZ+mwjPzljCt0n72t8os/BczT4AwCCjDhLhM=)
2: 3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa (hash: WD+eLyobsw/8MlklBmwopGTS4G6J3R053E42ZeLL7+w=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl
rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d5:de:16:7a:9d:5a:18:8f:39:1a:db:cb:1d:c9:60:27:48:6a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D
Validity
Not Before: Jan 23 20:51:20 2026 GMT
Not After : Jan 29 17:03:20 2026 GMT
Subject: CN=41A21040DA9128C5E116F8122FE7C078BA7D29F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:f6:07:0c:5e:96:7e:1f:ad:d2:aa:fd:f6:
27:34:22:21:45:95:0f:e2:7c:0f:27:8f:6c:ce:9e:
3f:ca:d3:99:9b:98:67:10:d7:88:11:17:1c:d1:ba:
6e:7e:2f:72:a2:71:ea:f6:67:00:f7:67:49:99:61:
87:1b:ef:7f:11:78:b9:98:cf:b2:50:19:f5:3a:ca:
ff:e8:c7:50:43:ba:61:03:8e:90:46:55:92:3c:32:
08:d2:8f:6d:d2:b0:ea:5f:2f:19:cc:ec:92:4c:5f:
a7:80:ef:da:09:4c:d1:60:b9:7f:81:0b:60:e5:b9:
cd:02:14:7d:77:ae:7a:5b:09:02:7b:57:91:6e:50:
7f:a0:13:4e:1c:28:4e:7b:56:ff:cd:ae:de:d4:f0:
6c:18:19:92:8c:81:ae:87:06:fd:4a:55:ba:45:d3:
87:e1:9c:8f:67:e9:54:f7:01:19:7f:01:4a:ec:81:
af:0f:a9:ab:23:21:01:e3:c4:18:cf:d1:28:e1:50:
dc:0c:0f:39:35:37:c0:ec:32:4f:74:0a:4e:aa:67:
99:61:cf:5c:0f:34:9d:21:48:b0:5f:bb:65:07:c4:
b0:e8:36:51:b1:17:5e:44:7f:3f:0d:ee:7f:61:9a:
95:b8:20:9f:a2:fc:56:3b:64:93:9b:5c:ce:00:69:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A2:10:40:DA:91:28:C5:E1:16:F8:12:2F:E7:C0:78:BA:7D:29:F6
X509v3 Authority Key Identifier:
keyid:3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:26:47:96:a9:5c:f2:4f:21:f9:a3:df:1d:78:cd:c5:f2:82:
d4:6c:0f:e4:0c:a2:f5:a5:a6:81:a7:59:57:96:86:b9:8a:65:
67:57:bf:79:38:b0:61:6b:7f:f9:8c:52:2d:5b:c7:be:d5:3e:
d5:d2:2e:44:cb:d6:03:21:48:7e:6c:e7:fb:61:b8:cd:62:c1:
8b:1c:65:0f:32:73:89:22:df:47:49:0d:2d:93:01:1c:34:e9:
65:19:0f:55:be:dd:ca:b6:42:88:69:9b:44:0a:27:68:ab:22:
dc:21:62:5a:54:99:57:9d:81:5e:43:e7:ed:ad:5d:00:42:7b:
f2:9a:90:8e:53:63:e7:0d:f6:fc:41:08:a8:b6:9a:62:51:2e:
12:4f:e5:78:42:a8:5a:0c:e3:ee:d4:b9:22:75:7b:ff:43:a7:
1d:7d:d7:12:2e:1d:cb:6b:87:7e:42:c8:5a:16:04:c1:fc:dc:
ce:90:e5:db:a9:24:37:99:d1:69:1d:fb:10:aa:6b:51:22:2a:
8b:9d:03:65:c7:85:33:f2:cc:4a:d4:33:6d:2a:e8:08:92:93:
76:84:7b:b8:67:9d:43:53:11:ba:59:ea:8c:89:d8:cb:9f:44:
83:72:84:93:d0:74:63:c1:dd:7b:53:73:40:d5:30:c5:1f:35:
04:49:93:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:01:44 2026 by rpki-client