This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: ONaxnSBzb+sF/7lj+DXFke/zgDJ+SDf1GtP6p4JPFfk= Subject key identifier: A1:BB:84:2A:03:EE:42:F5:5D:E2:13:4B:0C:E9:E0:5D:60:24:38:BA Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 282322F2AEE6D55FED18199C3D0B6680EE320B4E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: 0143 Signing time: Sat 06 Dec 2025 05:19:22 +0000 Manifest this update: Sat 06 Dec 2025 05:14:22 +0000 Manifest next update: Wed 10 Dec 2025 13:41:22 +0000 Files and hashes: 1: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: CfW1ngjVubqLW2PlJMjoPTqK6rkgu1muvKo3Lpc5ggo=) 2: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: aEjGzC9WyQcaAq/pDczNBjuThFt4XEwbTDLIcE0Y+Vs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Dec 2025 13:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:23:22:f2:ae:e6:d5:5f:ed:18:19:9c:3d:0b:66:80:ee:32:0b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: Dec 6 05:14:22 2025 GMT Not After : Dec 10 13:41:22 2025 GMT Subject: CN=A1BB842A03EE42F55DE2134B0CE9E05D602438BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1e:cc:01:44:63:f7:3d:fd:ed:7e:9e:b1:fe: 7e:d9:5b:ea:e4:77:28:e3:3a:c8:39:89:b6:41:5b: b6:30:2e:34:53:2f:86:89:84:df:85:8a:16:ef:39: 73:d0:d6:00:99:6a:b9:19:f1:22:55:cf:99:05:0b: 8c:dc:bd:28:47:43:02:e9:55:53:51:85:dc:a8:7d: f9:3b:5c:3f:9a:08:e7:b1:b4:bc:44:cc:79:00:0f: f2:6e:86:db:44:8e:0a:fc:12:52:ce:e1:66:50:ab: 63:5a:3a:32:ce:75:a1:f4:d8:53:ee:a2:43:66:69: c5:78:de:d1:6e:89:3b:87:05:70:06:48:79:bb:26: a7:e7:0e:33:be:6d:3a:ad:0d:f3:48:52:0f:2d:b5: a2:68:c5:f3:1e:55:0e:55:27:6d:5d:ce:ed:3c:ab: 6f:97:96:96:47:ac:85:e9:b4:2d:a5:7e:a3:3a:bc: a0:89:13:56:ee:06:16:9f:49:00:d4:d2:d3:d6:a8: b0:b1:e8:74:93:be:54:43:46:e7:d2:d9:5b:9c:60: 6a:2f:b5:08:8e:70:da:63:e0:91:2a:4d:c4:2b:b8: 0c:fd:e8:ef:26:e9:10:bb:c9:8c:4d:84:94:23:67: 1c:07:0b:ca:19:a2:fd:28:a0:00:15:e9:ca:08:d7: f4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BB:84:2A:03:EE:42:F5:5D:E2:13:4B:0C:E9:E0:5D:60:24:38:BA X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b2:6a:2c:89:46:24:1b:11:85:2c:72:42:64:fd:bb:2e:05: 7c:fe:35:ab:5b:84:cf:97:cb:cd:50:e4:7f:a4:3e:f4:b8:cb: 66:e8:a0:aa:14:73:ef:2d:15:7b:17:33:da:01:8e:a2:46:69: 0e:2a:66:cd:06:c1:82:94:cc:17:aa:9c:f6:d7:76:48:e1:46: 53:61:33:2c:5e:73:f4:6c:0d:5a:48:f2:1b:03:d4:9e:d1:9a: 16:9c:39:72:5e:dc:81:17:82:a4:35:9c:08:4d:79:dd:d7:b8: ea:e4:d0:0c:0d:ca:a1:ac:5e:d8:03:3b:2f:f5:fb:47:ab:46: 01:30:f9:9c:c2:7f:25:db:87:51:a9:74:ca:1b:d2:fc:37:b5: 45:b3:1c:40:ff:95:a5:66:4a:7b:81:90:89:da:9a:d4:a5:8d: cd:72:22:49:40:ff:47:89:17:97:d1:03:9a:42:79:ec:8f:07: 13:8a:7f:65:29:eb:9f:e3:20:c8:86:e3:c4:33:f9:23:f2:32: 77:84:60:08:31:bf:9b:ba:31:1b:cd:46:4c:64:81:8b:c0:9c: b2:dc:2f:d4:8e:0f:db:35:12:1d:95:41:86:d6:d1:26:c5:1d: dd:8c:8b:0f:80:18:84:a8:40:b0:0d:d8:b5:8e:f4:74:15:55: 0b:ea:dd:97 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKCMi8q7m1V/tGBmcPQtmgO4yC04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNTEyMDYwNTE0MjJaFw0yNTEyMTAxMzQxMjJaMDMxMTAvBgNV BAMTKEExQkI4NDJBMDNFRTQyRjU1REUyMTM0QjBDRTlFMDVENjAyNDM4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgHswBRGP3Pf3tfp6x/n7ZW+rk dyjjOsg5ibZBW7YwLjRTL4aJhN+FihbvOXPQ1gCZarkZ8SJVz5kFC4zcvShHQwLp VVNRhdyoffk7XD+aCOextLxEzHkAD/JuhttEjgr8ElLO4WZQq2NaOjLOdaH02FPu okNmacV43tFuiTuHBXAGSHm7JqfnDjO+bTqtDfNIUg8ttaJoxfMeVQ5VJ21dzu08 q2+XlpZHrIXptC2lfqM6vKCJE1buBhafSQDU0tPWqLCx6HSTvlRDRufS2VucYGov tQiOcNpj4JEqTcQruAz96O8m6RC7yYxNhJQjZxwHC8oZov0ooAAV6coI1/QtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUobuEKgPuQvVd4hNLDOngXWAkOLowHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAsmosiUYkGxGFLHJCZP27LgV8 /jWrW4TPl8vNUOR/pD70uMtm6KCqFHPvLRV7FzPaAY6iRmkOKmbNBsGClMwXqpz2 13ZI4UZTYTMsXnP0bA1aSPIbA9Se0ZoWnDlyXtyBF4KkNZwITXnd17jq5NAMDcqh rF7YAzsv9ftHq0YBMPmcwn8l24dRqXTKG9L8N7VFsxxA/5WlZkp7gZCJ2prUpY3N ciJJQP9HiReX0QOaQnnsjwcTin9lKeuf4yDIhuPEM/kj8jJ3hGAIMb+bujEbzUZM ZIGLwJyy3C/Ujg/bNRIdlUGG1tEmxR3djIsPgBiEqECwDdi1jvR0FVUL6t2X -----END CERTIFICATE-----Generated at Sun Dec 7 01:15:03 2025 by rpki-client