This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
File: BF32AEE1B63DB0DF1296575D56FA963E24476012.mft (raw, json)
Hash identifier: MXuKE1XYN1WCJPfqz2yfcdDwvFz5bOcCNdsQpS6GnpE=
Subject key identifier: 63:AF:A7:7A:D5:A5:10:B1:E0:72:BA:CF:09:4A:5F:AF:89:0E:8E:CC
Authority key identifier: BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12
Certificate issuer: /CN=BF32AEE1B63DB0DF1296575D56FA963E24476012
Certificate serial: 3C144188B63BCF8D2D92BCE45BA7698D203CD974
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
Manifest number: A3
Signing time: Fri 23 Jan 2026 19:40:32 +0000
Manifest this update: Fri 23 Jan 2026 19:35:32 +0000
Manifest next update: Thu 29 Jan 2026 00:07:32 +0000
Files and hashes: 1: 323830333a323264303a3a2f33322d3334203d3e20323734303438.roa (hash: 4aH4uYkWGE+cc9ahkSEXCeY+Hh6RB/BBL4FOK1r2QC0=)
2: BF32AEE1B63DB0DF1296575D56FA963E24476012.crl (hash: xsZKfZZBkE2pblBzYUs5vri9Kal7z/SaZGIB7wlrsrk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl
rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:14:41:88:b6:3b:cf:8d:2d:92:bc:e4:5b:a7:69:8d:20:3c:d9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF32AEE1B63DB0DF1296575D56FA963E24476012
Validity
Not Before: Jan 23 19:35:32 2026 GMT
Not After : Jan 29 00:07:32 2026 GMT
Subject: CN=63AFA77AD5A510B1E072BACF094A5FAF890E8ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:a0:97:d3:d8:49:de:07:61:a8:41:75:7c:
0e:a0:e1:35:77:4a:51:a5:b8:0f:22:b7:0e:08:bc:
88:4c:df:9d:41:1b:5b:5d:e3:46:e2:d5:bf:12:55:
11:02:55:75:8b:5b:d9:96:73:cf:73:5e:69:3c:91:
21:d2:57:52:7c:7b:b0:9b:87:71:68:3f:51:3b:c3:
85:79:cf:90:a8:79:78:c7:29:93:4c:f9:84:ef:68:
eb:32:c0:9e:cb:36:da:16:a1:82:4e:6b:5c:bb:cf:
49:81:c7:1f:e0:b4:45:f4:ea:9c:ce:7a:89:1d:83:
b0:98:2a:0c:f3:b7:6e:b6:18:c1:48:4b:47:8b:e7:
19:82:50:df:82:d6:8f:50:d5:9b:09:54:5c:82:7a:
8e:6a:91:58:01:e3:05:f7:4f:14:83:3d:c7:1b:4c:
b6:8c:44:aa:12:c1:3d:ca:cf:43:38:ca:94:f2:8e:
e1:64:98:60:6b:88:d6:5e:6e:5d:66:b0:08:22:1e:
04:3d:b4:68:d4:41:bf:e9:7b:01:b7:ab:39:d1:66:
34:f9:02:ed:07:a1:b0:08:7e:f9:39:47:12:0f:a6:
dd:f3:48:6c:4e:6a:36:a5:a6:69:08:8e:ee:0a:74:
1b:ab:5e:a4:0f:fd:ef:88:b3:d1:d4:1d:f4:a0:c2:
ff:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AF:A7:7A:D5:A5:10:B1:E0:72:BA:CF:09:4A:5F:AF:89:0E:8E:CC
X509v3 Authority Key Identifier:
keyid:BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c5:fa:a1:bf:fa:8b:3e:46:05:88:81:87:c3:76:60:64:35:
af:3e:71:45:00:51:46:18:d2:34:3b:b3:88:77:94:86:58:42:
b2:f8:73:8d:d4:1c:7c:ea:2e:d4:15:ff:cd:57:99:4c:9c:21:
c9:ce:ef:00:22:19:1a:6d:0f:20:fa:a9:4f:85:f4:67:d8:58:
33:02:37:fb:1d:d1:3d:8a:c6:df:43:70:21:19:50:91:63:3c:
24:98:32:64:df:22:0c:4e:af:90:54:10:86:cc:88:12:5a:94:
1b:ca:ed:f9:c5:72:2b:fe:ff:dc:77:37:46:c2:3c:98:32:29:
0c:6b:dd:a6:53:25:3e:1d:28:1b:95:76:03:18:7d:e4:9d:20:
e0:5c:63:88:c6:bb:1e:01:c9:cd:4b:23:fa:73:f4:7b:20:80:
4a:4f:40:6f:b0:fd:95:23:50:32:01:7d:ff:8d:c1:0a:e1:ec:
3e:06:08:75:66:f2:4c:6b:97:52:c3:03:f7:98:a8:6e:65:a7:
45:cc:74:50:b1:1c:9c:cd:4f:d0:ea:f7:48:d8:6b:98:a8:2d:
0c:d2:e0:b8:45:7c:09:d9:72:a6:73:bc:62:a9:8b:36:dd:ba:
3d:71:9a:be:8b:12:39:48:34:9d:a7:72:9e:4f:71:2d:e4:6c:
9a:91:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:55:10 2026 by rpki-client