This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
File: 33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft (raw, json)
Hash identifier: BWbHy9boy6xazHk/lryRnitntV9QQX5AIoqmXUtmS+4=
Subject key identifier: 70:FF:E9:98:E3:DF:4E:5C:FF:AB:13:FC:0C:BB:46:96:F4:30:30:3E
Authority key identifier: 33:88:7D:46:6E:F0:24:3F:A7:B3:C3:58:00:D7:0E:2D:B5:6A:26:A7
Certificate issuer: /CN=33887D466EF0243FA7B3C35800D70E2DB56A26A7
Certificate serial: 045C08F912A40FFEB1AC6163782AA30BD588DA63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
Manifest number: 27
Signing time: Sat 06 Dec 2025 18:56:58 +0000
Manifest this update: Sat 06 Dec 2025 18:51:58 +0000
Manifest next update: Thu 11 Dec 2025 05:29:58 +0000
Files and hashes: 1: 3133312e3139362e37322e302f32322d3234203d3e20323635373534.roa (hash: A3xXzpOaKCo1SvZ7OY8UcWolLdK5MkkAJljb47PcBNM=)
2: 33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl (hash: TAgJsMwdHAsQowsiqe40Im6ZIrsoqaVc+rOI0PMVw8s=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl
rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 05:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:5c:08:f9:12:a4:0f:fe:b1:ac:61:63:78:2a:a3:0b:d5:88:da:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33887D466EF0243FA7B3C35800D70E2DB56A26A7
Validity
Not Before: Dec 6 18:51:58 2025 GMT
Not After : Dec 11 05:29:58 2025 GMT
Subject: CN=70FFE998E3DF4E5CFFAB13FC0CBB4696F430303E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:d0:4b:a5:d3:02:37:af:44:5d:08:76:fb:
b7:d0:5e:54:48:01:30:87:82:8e:2e:f5:2d:ff:7c:
af:bb:78:57:d5:dd:70:d2:ea:4d:f0:17:a0:34:59:
0a:5b:b9:37:48:03:08:86:bc:7f:2b:1f:36:bb:a1:
23:e8:90:26:72:a6:d4:1f:c4:4c:59:32:cd:04:86:
d1:92:6e:f5:c6:86:9d:d1:99:06:fb:59:27:80:ba:
c6:39:15:fc:15:32:ac:e4:c7:36:4f:68:1d:3b:88:
36:87:44:d2:4f:78:65:fc:80:25:db:79:98:b0:d2:
59:1a:d4:1a:a5:21:ca:51:1a:cf:e4:f1:13:e0:b2:
f8:83:54:4f:75:18:ec:64:c5:90:b9:58:25:64:5d:
0c:09:c7:ec:a1:8e:2d:af:b5:ee:fb:29:72:71:4f:
12:0b:c0:ab:41:76:3a:83:79:6e:5f:4d:a1:ec:f3:
f1:67:52:95:30:71:fc:03:9c:d1:aa:b9:12:40:45:
c1:d4:94:d6:81:6a:d1:d6:a8:4b:5b:5b:84:d3:fc:
06:76:c5:54:b8:35:06:7d:28:f5:0a:28:7a:bb:b7:
cd:6e:e0:aa:ae:50:35:41:0c:51:fc:03:dd:cc:11:
e6:db:7b:51:c8:0b:55:fc:66:58:b5:f2:55:05:86:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FF:E9:98:E3:DF:4E:5C:FF:AB:13:FC:0C:BB:46:96:F4:30:30:3E
X509v3 Authority Key Identifier:
keyid:33:88:7D:46:6E:F0:24:3F:A7:B3:C3:58:00:D7:0E:2D:B5:6A:26:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:47:29:9a:2f:43:7b:7c:7f:51:e7:a4:39:0b:6f:bb:53:3a:
5e:7a:f5:0b:32:e6:77:19:1a:e1:ed:11:cd:ff:ab:15:d1:93:
82:ba:8b:28:cd:3a:39:57:ea:9b:0d:6a:7c:14:c4:02:5e:cd:
ab:62:27:a8:5f:3a:25:f3:86:f4:3c:8a:5e:03:46:a0:63:0d:
14:0a:1e:9f:db:e4:db:09:b1:41:96:df:fa:d5:8b:a7:e8:9f:
79:1a:48:bf:b1:85:27:75:0a:29:e6:6a:60:76:5c:4c:62:73:
fe:e8:53:ff:7f:70:5c:82:04:83:56:47:a1:6c:57:ce:94:53:
2d:48:25:8a:fd:61:73:20:44:19:f9:df:39:90:4d:72:be:88:
bb:cb:a2:f3:3d:a0:58:18:ff:5a:b8:3b:c6:7e:81:9d:b7:ba:
f8:81:e2:5f:6d:f1:ed:f3:79:30:1e:52:42:7f:87:9f:ec:8c:
e3:43:27:75:0a:a7:42:09:94:84:5f:b1:d3:57:30:8c:45:97:
d6:e5:e6:54:f1:31:72:2c:91:7e:1b:bc:22:9f:a9:79:b8:ee:
da:7c:26:87:f4:7c:f9:5c:6d:40:97:58:23:45:f6:a3:c0:4e:
4e:df:f3:31:3a:94:f4:5b:87:b5:7f:f9:bb:c6:c7:e7:0e:91:
e2:a6:9a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:08:12 2025 by rpki-client