This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
File: D3A9BB2434EF24613DA3D824164DFABE55243F12.mft (raw, json)
Hash identifier: 7J2cLvVgigisHzK4jFgcmPUBcBissb+B9bxMb1a8004=
Subject key identifier: 11:CC:FC:94:F9:CA:23:11:7D:A8:E4:4D:0E:00:A2:B6:AB:36:D6:13
Authority key identifier: D3:A9:BB:24:34:EF:24:61:3D:A3:D8:24:16:4D:FA:BE:55:24:3F:12
Certificate issuer: /CN=D3A9BB2434EF24613DA3D824164DFABE55243F12
Certificate serial: 751DCC40F595FE64165C87BD947749AA77548972
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
Manifest number: 0C
Signing time: Fri 05 Dec 2025 04:20:21 +0000
Manifest this update: Fri 05 Dec 2025 04:15:21 +0000
Manifest next update: Tue 09 Dec 2025 19:10:21 +0000
Files and hashes: 1: D3A9BB2434EF24613DA3D824164DFABE55243F12.crl (hash: ytIoG2Lm3Zh91+zDh4IF7TckHNMPl8/w2SjiSbxplrc=)
2: 323830333a653764303a3a2f33322d3332203d3e2037333033.roa (hash: fdb8H8VqkJYA0bY105LFtERGfPeDP7saEd+IzOgBJdM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.crl
rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 09 Dec 2025 19:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:1d:cc:40:f5:95:fe:64:16:5c:87:bd:94:77:49:aa:77:54:89:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3A9BB2434EF24613DA3D824164DFABE55243F12
Validity
Not Before: Dec 5 04:15:21 2025 GMT
Not After : Dec 9 19:10:21 2025 GMT
Subject: CN=11CCFC94F9CA23117DA8E44D0E00A2B6AB36D613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:af:1d:74:6d:d2:91:5c:1f:f6:15:95:8f:
c9:ba:94:ad:e9:a5:29:dd:72:85:d2:93:40:ac:32:
28:0e:ce:fb:bb:e4:52:76:61:ea:e7:b1:9f:e2:2e:
e2:93:90:8c:6f:f4:8c:3e:0a:94:34:78:09:18:db:
84:42:be:86:a5:3a:c2:e3:9a:ce:1d:19:b3:29:f7:
3d:5d:a4:52:43:ed:e9:aa:0c:a4:2f:af:9d:f6:57:
cc:e7:a0:f0:9c:91:99:c9:13:70:c1:a2:67:81:ce:
2d:61:0c:06:bf:7a:77:8d:be:f8:91:48:33:b9:53:
a3:53:67:02:85:eb:58:76:04:da:0a:5e:b7:f9:01:
55:5e:60:43:12:fb:11:2b:8d:bd:f4:96:2d:7e:3e:
2a:2a:db:60:40:f4:a0:5e:48:f7:c3:e3:cc:01:f4:
59:95:2f:1c:f6:49:4e:4b:90:a2:56:0b:10:95:95:
13:a6:b3:6a:2e:dc:2e:ee:b4:f9:a8:c4:7e:fd:21:
c9:f1:9f:6a:da:d6:66:cd:8c:01:df:9e:d0:f1:8c:
db:b0:d1:32:72:d1:60:55:4b:ee:4d:df:22:f2:b8:
90:d2:87:d2:25:96:43:7b:bf:0d:95:4e:2b:97:a7:
81:f5:9f:c3:06:39:22:84:3a:c6:4f:1a:e9:66:94:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CC:FC:94:F9:CA:23:11:7D:A8:E4:4D:0E:00:A2:B6:AB:36:D6:13
X509v3 Authority Key Identifier:
keyid:D3:A9:BB:24:34:EF:24:61:3D:A3:D8:24:16:4D:FA:BE:55:24:3F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:53:cc:31:4d:de:3b:9a:3e:ad:29:14:e0:48:63:ba:e8:46:
25:88:ca:a3:01:b0:ea:09:b8:3b:6d:56:6b:98:39:9c:cb:70:
9c:2e:f6:6f:33:03:8e:e9:87:17:66:38:ab:d7:d1:4b:23:86:
d5:03:c4:7a:5e:4d:84:fd:61:12:54:87:cb:c5:97:16:8f:5b:
45:18:cb:d3:21:37:d9:ad:c8:87:10:ad:47:af:31:db:48:7a:
3e:a4:3c:44:93:6d:f1:87:c3:84:26:60:f9:41:6f:a2:fe:51:
d0:18:bb:8e:95:4c:1d:4b:f8:44:22:1c:6a:0c:20:8b:5e:c5:
d2:28:dd:a2:80:24:df:33:76:76:c9:ea:3d:f3:ee:f5:43:10:
d2:77:59:d9:7e:35:79:73:8e:fb:ad:c5:6c:ea:9c:57:00:a6:
f7:ea:49:02:9a:99:d8:62:f4:31:65:a2:80:6f:d7:a5:8f:8a:
70:4e:44:7a:de:ed:3a:a1:64:10:c5:f9:06:b0:03:c2:93:25:
1a:01:03:f5:32:64:8b:f0:42:cc:19:41:94:95:6b:8d:1a:25:
c0:a0:10:79:c4:be:4a:1c:74:8e:80:b9:e3:78:7a:5f:c7:97:
ca:04:70:dd:05:68:7b:41:dd:b5:49:f0:a5:fd:c6:0b:f1:d0:
74:71:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:58:01 2025 by rpki-client