This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
File: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json)
Hash identifier: f69DBltBZ8Er1wVVPQw1YvElQ05TDg5CqZalRmWdNfM=
Subject key identifier: 90:72:76:AD:C7:D4:9B:99:A1:19:C9:27:08:3F:57:27:43:87:51:BB
Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
Certificate issuer: /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Certificate serial: 610FFF515EB9EE64AA2AE2426DBE905BF342B316
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
Manifest number: 0142
Signing time: Tue 23 Dec 2025 05:23:08 +0000
Manifest this update: Tue 23 Dec 2025 05:18:08 +0000
Manifest next update: Sun 28 Dec 2025 18:57:08 +0000
Files and hashes: 1: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: oO7wKo0+SVqOjkWZN+0gQ07+aVmVbN4/1cQXmOBOt+E=)
2: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: HS5Dtm3IxA/+cCwZi5w4GJfuqr+E+9WdelyjhS2QKog=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Dec 2025 18:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:0f:ff:51:5e:b9:ee:64:aa:2a:e2:42:6d:be:90:5b:f3:42:b3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Validity
Not Before: Dec 23 05:18:08 2025 GMT
Not After : Dec 28 18:57:08 2025 GMT
Subject: CN=907276ADC7D49B99A119C927083F5727438751BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:36:cc:c1:d5:e6:e6:24:82:e8:04:ed:9b:
8c:3a:8e:9d:6a:1c:46:80:91:4d:b0:13:bc:9c:42:
bb:09:74:ba:42:e7:3b:a0:b6:f7:93:76:3f:26:08:
50:ce:82:10:4a:93:f7:1e:cd:5e:ff:99:ea:4a:8c:
15:03:b0:46:00:0f:26:2e:c7:f6:a4:27:aa:a1:41:
70:d6:eb:14:11:c9:ca:8b:9b:56:47:a7:da:90:29:
79:88:40:6a:1d:4d:14:27:a1:06:33:a0:0b:c3:9f:
dc:44:73:c8:eb:b4:5f:61:56:ad:5b:f1:0f:3b:44:
24:8d:23:79:4d:ae:fd:15:65:9e:25:4f:16:1d:0b:
0d:50:43:0b:bf:7d:29:29:84:86:16:8a:87:d3:d6:
37:12:c0:e6:8d:a5:88:08:88:b0:e6:ac:05:7e:4f:
87:b6:34:86:2b:3e:4e:07:e6:81:90:ee:c6:9e:f1:
5d:17:3e:d8:be:78:40:40:81:d0:8e:77:1a:08:d3:
ee:65:b1:2c:28:e8:1a:7f:a1:f0:50:f9:16:43:89:
03:48:5b:bb:5b:ec:5c:0d:40:66:5a:cf:9a:42:f6:
a4:72:a6:5b:4d:83:28:e2:d1:f0:70:ff:13:e4:2c:
bd:1f:12:71:e9:56:51:11:03:84:e4:81:40:d1:3a:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:72:76:AD:C7:D4:9B:99:A1:19:C9:27:08:3F:57:27:43:87:51:BB
X509v3 Authority Key Identifier:
keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c1:8d:28:1c:6c:58:5a:21:25:8b:74:74:72:d2:88:5e:24:
1d:b0:66:3b:6e:40:e8:f3:58:df:35:0b:ce:51:7c:3f:c1:31:
a2:fc:ae:e7:d1:7f:57:4b:65:af:a0:fe:b6:d3:f4:a4:6d:9b:
46:cd:3d:9b:08:e7:66:f0:e2:45:0b:29:84:66:db:a1:fe:a8:
5d:e3:fe:85:34:66:e1:b3:a9:56:21:ef:61:cf:08:e7:3b:18:
66:44:cf:92:a9:9c:76:98:8f:1d:bf:1a:20:e7:2b:03:69:93:
5a:cf:7c:c6:88:fc:e5:c0:3b:21:60:01:85:67:24:25:a5:25:
01:91:2d:be:7b:61:b1:0b:e0:d3:cc:c0:cf:25:43:cd:06:67:
6a:ba:bd:14:6e:56:90:45:a9:e3:24:5e:c0:37:78:1c:5d:f3:
40:4d:7f:30:37:d6:0a:e6:67:88:79:31:1c:1d:e1:95:b7:17:
ab:88:90:a6:bc:62:56:c4:59:80:1f:66:78:7e:56:2b:b1:92:
c2:2f:6a:22:ba:27:07:1a:5f:6f:72:66:d7:1a:d0:c4:cd:0c:
1b:22:69:15:3f:5f:da:67:0c:87:b1:b6:d0:2f:92:e7:fe:a7:
09:5f:47:d1:ee:b1:ea:22:03:b1:f9:d2:a2:8f:ee:7a:0e:c8:
90:60:5a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 11:05:52 2025 by rpki-client