This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DC09DB95218CBF425B33EEDB656D1B6F8D980048086FDE50C37D3BB65FA19C8/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.mft
File: C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.mft (raw, json)
Hash identifier: YX6Yv+IxVUgnNybyaYmuJyDDjY3NRjKoP6ynUWaYnug=
Subject key identifier: D5:AE:0E:BB:FC:BC:11:0E:A6:1A:F5:91:8A:0B:CB:12:FE:DD:E1:C2
Authority key identifier: C3:EC:0E:3B:B4:31:09:E8:97:4E:C1:70:FA:7B:FC:7D:E3:D8:20:24
Certificate issuer: /CN=C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024
Certificate serial: 28729A96990817D9A436657F294AFC2E7AF27402
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1DC09DB95218CBF425B33EEDB656D1B6F8D980048086FDE50C37D3BB65FA19C8/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.mft
Manifest number: 014F
Signing time: Sun 21 Dec 2025 23:53:48 +0000
Manifest this update: Sun 21 Dec 2025 23:48:48 +0000
Manifest next update: Sat 27 Dec 2025 20:16:48 +0000
Files and hashes: 1: C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.crl (hash: 2OG4bmmvJ+U18/fommb+6J/wxZqzMRdlJfQQPUEx7Kc=)
2: 34352e3233382e3234382e302f32322d3232203d3e20323636383338.roa (hash: 6qZr9u9JKGc3VLcXQCqUXuqp+PQebiA0U08N0D9ouao=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1DC09DB95218CBF425B33EEDB656D1B6F8D980048086FDE50C37D3BB65FA19C8/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.crl
rsync://repository.lacnic.net/rpki/lacnic/1DC09DB95218CBF425B33EEDB656D1B6F8D980048086FDE50C37D3BB65FA19C8/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 26 Dec 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:72:9a:96:99:08:17:d9:a4:36:65:7f:29:4a:fc:2e:7a:f2:74:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024
Validity
Not Before: Dec 21 23:48:48 2025 GMT
Not After : Dec 27 20:16:48 2025 GMT
Subject: CN=D5AE0EBBFCBC110EA61AF5918A0BCB12FEDDE1C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:27:a5:f5:27:66:13:8e:a4:55:ef:23:1e:
aa:32:4c:e7:c0:4c:1f:c6:b6:f5:78:bf:a3:1a:51:
51:de:62:c5:4f:7c:2c:59:29:d6:bc:bf:64:4d:bb:
07:a9:d9:14:92:7a:c4:22:5c:90:3a:99:5d:78:41:
c5:66:1e:ab:01:a0:05:be:82:69:a0:71:1d:f5:f0:
a0:ac:ea:9c:ba:95:11:47:dd:8b:f5:b0:6f:27:8f:
cd:d1:59:b0:1f:36:c4:b3:82:01:06:d0:84:80:f1:
ae:3c:46:a1:ae:81:d9:3d:0d:64:55:95:dc:47:0b:
15:43:29:e5:06:05:b8:ed:d6:fb:36:3a:00:ef:a5:
2a:9c:37:bb:16:e2:03:1f:c2:96:2e:41:51:1f:68:
91:cc:b1:32:ca:88:4d:13:6f:1d:1f:6b:4d:78:c2:
ae:14:3b:e1:c4:6a:25:35:cf:12:49:94:65:b3:de:
d6:68:73:ec:f3:17:2b:94:00:2d:3b:cf:03:59:70:
f9:4c:a6:21:40:d5:ae:4d:47:5e:b5:bd:6e:b8:ae:
4c:f9:99:a6:8d:61:83:66:17:18:d2:8a:b2:10:05:
ca:61:e3:c5:5a:a1:c0:b9:9d:58:0b:bc:ce:79:42:
8c:01:ff:35:49:05:75:b6:a1:c2:5e:39:bb:eb:2c:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AE:0E:BB:FC:BC:11:0E:A6:1A:F5:91:8A:0B:CB:12:FE:DD:E1:C2
X509v3 Authority Key Identifier:
keyid:C3:EC:0E:3B:B4:31:09:E8:97:4E:C1:70:FA:7B:FC:7D:E3:D8:20:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1DC09DB95218CBF425B33EEDB656D1B6F8D980048086FDE50C37D3BB65FA19C8/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DC09DB95218CBF425B33EEDB656D1B6F8D980048086FDE50C37D3BB65FA19C8/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:82:67:22:8c:13:19:1c:82:29:1b:7c:da:d7:0e:3b:ed:15:
79:79:58:50:4e:11:8e:a5:7c:11:57:8f:88:0a:45:fc:89:58:
23:69:c6:35:cf:d4:83:97:8b:2f:47:ad:3e:99:31:c8:93:bd:
be:ef:96:2a:c1:38:76:9f:ea:cf:6b:d5:67:fc:f0:eb:e9:c0:
af:75:2f:3d:8c:95:8f:2e:3b:a7:a3:da:d6:d8:92:c5:ad:6c:
99:30:1e:7b:79:7b:47:f2:9e:12:02:86:59:20:3e:ac:8f:04:
e9:8d:12:cc:b3:47:36:72:35:78:45:f5:9b:98:15:87:0c:2b:
f4:98:cd:0c:23:c6:03:98:9b:85:eb:c9:db:d9:42:f9:06:20:
6e:c5:6b:19:36:c7:21:66:ac:bb:d8:39:20:3e:09:df:b2:1d:
d6:58:8a:cb:e8:2f:13:e5:51:07:e4:69:ec:da:ed:cc:42:5a:
4d:a2:74:f3:aa:81:86:2a:da:e6:1d:40:e9:80:af:03:15:8c:
d3:c9:99:f1:13:5e:bb:6c:13:4d:dd:cd:10:7c:af:2c:d2:70:
d0:e3:59:54:77:9c:0c:a3:a5:84:aa:2a:c2:9d:90:63:42:c8:
41:a6:99:4f:b0:1a:2b:a2:58:0b:9b:0f:6e:90:22:73:3a:9a:
2e:37:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:52:44 2025 by rpki-client