This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.mft
File: BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.mft (raw, json)
Hash identifier: TznUBetNUDWpPkuZTFXipbZctX5QgSqSmv4uN+xLXYg=
Subject key identifier: 40:52:82:22:DA:CC:1C:5D:B4:CE:9E:0F:0F:DD:0C:B7:54:8F:2C:7D
Authority key identifier: BD:EA:B8:9A:AA:52:19:DB:07:46:A9:7B:B7:46:F4:3F:4F:66:57:F3
Certificate issuer: /CN=BDEAB89AAA5219DB0746A97BB746F43F4F6657F3
Certificate serial: 3B1A4686232DE2B58152F917EF57B73F4AF6DA80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.mft
Manifest number: 3A
Signing time: Sat 24 Jan 2026 01:03:42 +0000
Manifest this update: Sat 24 Jan 2026 00:58:42 +0000
Manifest next update: Thu 29 Jan 2026 01:38:42 +0000
Files and hashes: 1: BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.crl (hash: UK1FwTkhPvdpJHTbsquY9I2mapbvumfSEEYvW05lUbY=)
2: 323830333a343364303a3a2f33322d3438203d3e20323734323033.roa (hash: 9faBTKhwZ+AvYW+eeJEl3M1zA/kjwU1ngpOqG0mTmsk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.crl
rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 01:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1a:46:86:23:2d:e2:b5:81:52:f9:17:ef:57:b7:3f:4a:f6:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEAB89AAA5219DB0746A97BB746F43F4F6657F3
Validity
Not Before: Jan 24 00:58:42 2026 GMT
Not After : Jan 29 01:38:42 2026 GMT
Subject: CN=40528222DACC1C5DB4CE9E0F0FDD0CB7548F2C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:9a:37:04:69:d0:76:54:df:be:bd:c5:45:
11:23:5e:76:9d:88:e3:d0:02:62:a4:11:4a:83:70:
80:80:52:e3:cf:4d:7f:1e:b8:fb:6b:0e:cc:65:67:
e9:ae:14:b0:99:d2:26:33:19:63:b5:16:77:9f:53:
26:5a:e1:df:53:fb:87:c4:65:82:e2:84:35:55:7b:
29:ed:4e:2d:b7:bb:62:34:35:32:bb:03:92:7b:5c:
b6:79:3d:46:fd:df:fc:39:3e:20:3e:18:ee:c4:ad:
f5:33:30:15:21:e1:e3:5b:94:f7:a4:df:09:01:fe:
06:ea:4f:60:a4:32:8d:8d:3e:14:77:a4:90:35:a4:
60:84:b8:af:65:42:21:66:20:b4:a2:4b:28:44:83:
64:94:02:f8:b6:b5:70:94:71:2e:9a:a5:8a:bf:38:
c6:76:6b:2d:09:c8:3e:22:bc:d9:0c:f2:c8:1f:b1:
eb:82:70:04:ab:54:8c:41:8d:0e:ad:15:88:a7:3c:
07:c4:65:de:6d:a0:c5:f9:7d:cc:86:fb:67:3f:5c:
02:f1:dc:5a:3e:63:07:e2:97:78:57:1b:5b:b0:94:
e3:32:0a:31:69:05:da:66:21:4a:93:85:46:9a:1a:
26:4f:f1:48:7d:74:87:e3:ce:3f:17:6d:f6:55:2d:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:52:82:22:DA:CC:1C:5D:B4:CE:9E:0F:0F:DD:0C:B7:54:8F:2C:7D
X509v3 Authority Key Identifier:
keyid:BD:EA:B8:9A:AA:52:19:DB:07:46:A9:7B:B7:46:F4:3F:4F:66:57:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b1:30:5a:2d:e8:36:71:3d:44:b7:53:59:39:b2:2c:c6:9a:
2c:c8:25:df:70:b4:8b:a3:c8:91:07:82:c8:e5:33:c5:bf:48:
bd:0a:f3:7a:0b:bc:c0:23:bd:ee:6d:e5:a5:b2:15:12:4f:c7:
ba:d5:06:cc:18:0e:57:ef:f0:92:fa:55:2b:55:a1:a8:97:73:
7f:a9:ce:66:e8:b7:0c:1e:ba:ef:c5:54:b6:89:6f:3c:a0:94:
89:cc:df:20:b2:45:a7:a9:74:27:2e:bb:ba:2f:2d:46:d0:ed:
d8:d4:6d:71:57:79:5a:d6:11:9e:8f:e8:c8:cd:ff:e9:49:8e:
a8:63:05:3b:58:38:f8:34:07:fd:c0:fb:2c:5f:c9:bc:b7:10:
9b:88:b5:5f:47:3f:05:05:3b:fa:e8:35:77:47:25:8d:b9:03:
23:56:73:13:37:8a:53:02:c9:07:9c:ef:bf:b6:14:84:d3:19:
f1:fb:b3:65:d5:9d:3c:cd:c0:83:20:27:98:b7:8d:65:34:06:
92:f9:2c:58:15:b2:32:ec:0a:b3:b1:ea:fa:e0:fe:5b:cd:94:
25:b5:41:15:c3:64:25:50:0d:cd:3f:d8:fd:12:6f:a0:bc:fb:
07:cd:72:b0:6e:f9:32:0c:e3:2f:ef:46:e7:9b:dd:72:ba:91:
22:89:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:50:21 2026 by rpki-client