This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft File: 3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft (raw, json) Hash identifier: I74re0EGx5hMSiVWVOP9SQmGEByH6vwuIXTd7uK3kho= Subject key identifier: 4A:0B:E4:CC:7A:97:46:1A:28:F7:BB:BE:41:6C:9E:C0:85:9B:F9:22 Authority key identifier: 3A:F4:20:E6:0A:DF:C0:F7:1F:2F:2D:DD:54:FA:7F:41:DF:D2:44:F3 Certificate issuer: /CN=3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3 Certificate serial: 62FBF59BAAC01FC352D37BE2350B7A544D17AAA4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft Manifest number: 33 Signing time: Sat 06 Dec 2025 11:22:49 +0000 Manifest this update: Sat 06 Dec 2025 11:17:49 +0000 Manifest next update: Fri 12 Dec 2025 03:57:49 +0000 Files and hashes: 1: 3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl (hash: a5W1Es2HbqfQ0v57IRV0oxvskIEU4RzY9GqZg+P8bw8=) 2: 323830333a366464303a3a2f33322d3438203d3e20323734313930.roa (hash: ngugspegyt4RHmTCpqVQx/FbbfeCWLgUEwqECaAoFsw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 16:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:fb:f5:9b:aa:c0:1f:c3:52:d3:7b:e2:35:0b:7a:54:4d:17:aa:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3 Validity Not Before: Dec 6 11:17:49 2025 GMT Not After : Dec 12 03:57:49 2025 GMT Subject: CN=4A0BE4CC7A97461A28F7BBBE416C9EC0859BF922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:24:e3:0a:c2:e1:da:c8:f4:56:d8:1a:d2: 32:47:9c:4a:c7:fc:d3:55:8c:46:45:09:c5:22:d4: f9:3f:7c:4a:00:94:e3:52:d7:05:d1:b2:97:bb:d6: 63:94:55:f1:f1:1d:7c:a0:23:56:45:10:bb:08:4b: 6e:60:88:fa:d5:9f:ab:2b:67:d3:6a:5d:59:f1:da: 64:c5:96:42:a0:19:c1:d3:63:b4:0d:8b:3a:85:d8: 53:fe:b5:ef:76:cf:51:d3:df:14:f9:65:87:72:f0: b2:90:ba:87:e7:3a:dc:5e:91:3f:96:05:f3:28:55: b8:53:54:65:89:9b:35:95:f2:d2:ba:3c:8a:ed:6b: 4b:ef:7e:56:93:82:9d:75:aa:eb:8a:c3:0c:ee:48: 96:38:7b:01:b6:f8:6d:2c:e2:2b:dc:bc:d4:37:76: b8:82:62:29:b1:2c:05:d6:16:fa:46:87:6c:6a:e5: b2:83:9c:58:8e:b4:49:c6:0a:8e:a7:a1:71:c5:d0: 2e:f7:7f:20:28:8d:bd:60:33:b5:61:55:62:74:17: 69:c6:a6:f3:c9:ed:d3:cd:48:4a:32:c1:8b:4b:12: f9:e8:2f:72:4a:70:1e:8a:f4:66:e5:50:b3:de:82: 09:e7:80:2f:a0:9b:86:13:a4:5e:7f:5b:41:0e:0c: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0B:E4:CC:7A:97:46:1A:28:F7:BB:BE:41:6C:9E:C0:85:9B:F9:22 X509v3 Authority Key Identifier: keyid:3A:F4:20:E6:0A:DF:C0:F7:1F:2F:2D:DD:54:FA:7F:41:DF:D2:44:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6f:0f:6a:10:4e:08:f1:6c:58:42:9d:8b:ea:ed:00:13:63: 18:f9:f9:12:5d:15:ca:6c:50:6a:76:57:dd:69:cc:86:f0:95: a6:c2:3d:00:34:05:3e:ca:ff:b8:70:54:8e:c0:01:8f:33:3a: 2c:1a:bc:00:06:dd:58:b9:f9:46:24:9b:08:a3:27:0d:86:b2: b4:80:13:41:15:97:86:a6:52:b9:8b:a8:7a:fc:82:3e:52:ad: 8d:2d:03:83:ab:1c:26:9d:68:14:2c:bd:dd:59:5a:38:34:cb: b4:84:bc:10:36:47:82:b1:48:51:ce:18:7b:79:63:be:7d:bc: 95:04:1e:ef:8d:31:e5:85:51:68:1b:4c:b6:35:c5:6b:bb:35: ac:45:79:74:53:d7:4f:c1:34:be:6d:8c:e7:59:37:4e:fe:80: 55:0f:72:01:1f:1e:23:3f:4e:cd:5b:88:05:29:3f:52:a5:ed: 4d:2a:f6:c9:ba:4b:87:b7:e8:39:fa:f0:1a:80:5d:47:7a:7c: 95:f8:5d:5c:c2:7b:8a:f1:0c:7a:86:ba:42:f9:08:96:24:73: cf:7f:ef:69:bd:4f:a5:48:88:b0:be:3a:f8:44:10:ea:54:cf: 56:de:04:97:5d:c7:ba:b6:86:8f:8d:c1:d0:d3:9a:c3:07:b5: a8:31:b0:55 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYvv1m6rAH8NS03viNQt6VE0XqqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGNDIwRTYwQURGQzBGNzFGMkYyRERENTRGQTdGNDFE RkQyNDRGMzAeFw0yNTEyMDYxMTE3NDlaFw0yNTEyMTIwMzU3NDlaMDMxMTAvBgNV BAMTKDRBMEJFNENDN0E5NzQ2MUEyOEY3QkJCRTQxNkM5RUMwODU5QkY5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJWiTjCsLh2sj0Vtga0jJHnErH /NNVjEZFCcUi1Pk/fEoAlONS1wXRspe71mOUVfHxHXygI1ZFELsIS25giPrVn6sr Z9NqXVnx2mTFlkKgGcHTY7QNizqF2FP+te92z1HT3xT5ZYdy8LKQuofnOtxekT+W BfMoVbhTVGWJmzWV8tK6PIrta0vvflaTgp11quuKwwzuSJY4ewG2+G0s4ivcvNQ3 driCYimxLAXWFvpGh2xq5bKDnFiOtEnGCo6noXHF0C73fyAojb1gM7VhVWJ0F2nG pvPJ7dPNSEoywYtLEvnoL3JKcB6K9GblULPeggnngC+gm4YTpF5/W0EODCZfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSgvkzHqXRhoo97u+QWyewIWb+SIwHwYDVR0j BBgwFoAUOvQg5grfwPcfLy3dVPp/Qd/SRPMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNUMxQjJCMTU0MTk4Q0Y4QTk1MEQyREQxNDczNzYxM0RE Q0RGRTIxQ0QwQTBFOUFERjg3QzlBMTU2RDlFODM2LzAvM0FGNDIwRTYwQURGQzBG NzFGMkYyRERENTRGQTdGNDFERkQyNDRGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQUY0MjBFNjBBREZDMEY3MUYy RjJEREQ1NEZBN0Y0MURGRDI0NEYzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjVDMUIyQjE1NDE5OENGOEE5NTBEMkREMTQ3Mzc2MTNERENERkUyMUNE MEEwRTlBREY4N0M5QTE1NkQ5RTgzNi8wLzNBRjQyMEU2MEFERkMwRjcxRjJGMkRE RDU0RkE3RjQxREZEMjQ0RjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbbw9qEE4I8WxYQp2L6u0AE2MY +fkSXRXKbFBqdlfdacyG8JWmwj0ANAU+yv+4cFSOwAGPMzosGrwABt1YuflGJJsI oycNhrK0gBNBFZeGplK5i6h6/II+Uq2NLQODqxwmnWgULL3dWVo4NMu0hLwQNkeC sUhRzhh7eWO+fbyVBB7vjTHlhVFoG0y2NcVruzWsRXl0U9dPwTS+bYznWTdO/oBV D3IBHx4jP07NW4gFKT9Spe1NKvbJukuHt+g5+vAagF1HenyV+F1cwnuK8Qx6hrpC +QiWJHPPf+9pvU+lSIiwvjr4RBDqVM9W3gSXXce6toaPjcHQ05rDB7WoMbBV -----END CERTIFICATE-----Generated at Sun Dec 7 12:05:28 2025 by rpki-client