This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft
File: 280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft (raw, json)
Hash identifier: UJ9y40WcIvWxBOKFLtcgz+eAL0tDAq/Bitggb5FfrRw=
Subject key identifier: 93:8C:E2:96:A8:84:64:D3:80:FF:48:25:2F:D4:0C:D7:11:25:D0:1D
Authority key identifier: 28:0C:60:6B:42:E3:E2:9D:27:F6:E5:AD:C0:ED:5E:13:09:3C:25:E8
Certificate issuer: /CN=280C606B42E3E29D27F6E5ADC0ED5E13093C25E8
Certificate serial: 10F193325AA7590504AC06E779DA82B2D7C4E8D2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft
Manifest number: 0145
Signing time: Sat 20 Dec 2025 20:56:58 +0000
Manifest this update: Sat 20 Dec 2025 20:51:58 +0000
Manifest next update: Fri 26 Dec 2025 18:34:58 +0000
Files and hashes: 1: 323830333a316239303a3a2f33322d3438203d3e20323733303434.roa (hash: lFF+DjACeCDUFHfZ+y6xFpQFjs8slqARJDIP/QmLICM=)
2: 280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.crl (hash: WCJa3HmgIE0rq8oTk0NZA7p8th7wpWd5kRJGu3fztgw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.crl
rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 26 Dec 2025 18:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f1:93:32:5a:a7:59:05:04:ac:06:e7:79:da:82:b2:d7:c4:e8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280C606B42E3E29D27F6E5ADC0ED5E13093C25E8
Validity
Not Before: Dec 20 20:51:58 2025 GMT
Not After : Dec 26 18:34:58 2025 GMT
Subject: CN=938CE296A88464D380FF48252FD40CD71125D01D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:94:00:08:c1:a9:08:7d:d2:c8:52:da:69:a7:
5d:7d:df:6b:4c:25:ca:57:2c:18:a6:f0:88:4c:53:
3b:81:31:7a:fd:59:1e:7f:64:f9:49:fe:0f:90:05:
7d:1b:4b:3c:1b:e3:cb:cb:d0:0f:cb:36:1b:c5:1f:
d3:dd:7a:63:27:4c:57:65:52:00:23:5f:1d:18:4e:
73:c5:0d:ae:b5:7d:44:76:78:dd:25:02:b5:5c:46:
8b:e8:90:4b:33:3a:cd:3f:76:50:4e:db:9e:54:ca:
3a:bb:6f:5d:14:c8:50:d1:f5:8c:2a:25:29:d9:cd:
c0:48:91:25:a6:b5:67:ac:13:2f:bd:73:95:d4:98:
85:5e:c9:2f:fc:3d:9a:eb:86:25:36:51:ee:d6:65:
6a:da:93:55:f0:ee:75:64:4a:de:e0:37:84:6f:b3:
11:34:39:47:2b:5a:1a:e0:72:c4:b6:d4:66:47:41:
2c:a9:60:81:52:72:9c:d5:2c:53:e4:d4:5e:22:21:
66:58:38:6b:5b:86:9f:23:c2:d3:bf:d6:e7:c4:bc:
4d:03:27:46:15:d6:b8:85:a0:04:0a:e4:e3:13:df:
16:da:55:bb:73:ec:3d:d2:e9:4c:d3:68:8a:51:53:
e5:f6:5e:1f:6b:3c:e9:08:f5:f5:72:40:ec:e3:55:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8C:E2:96:A8:84:64:D3:80:FF:48:25:2F:D4:0C:D7:11:25:D0:1D
X509v3 Authority Key Identifier:
keyid:28:0C:60:6B:42:E3:E2:9D:27:F6:E5:AD:C0:ED:5E:13:09:3C:25:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a8:0f:31:d1:5a:be:11:e9:9e:9a:fd:5a:30:c1:f1:b8:32:
ce:8b:bb:ad:72:2c:16:02:2d:a6:2c:61:14:19:82:63:b1:26:
66:bf:ff:24:83:46:7b:9e:49:b0:0a:e4:f6:1a:a3:6e:68:e8:
ad:51:b7:51:90:15:72:8d:0c:ca:d7:9e:ec:aa:75:cb:24:83:
0f:af:e2:88:76:16:92:e3:e6:db:9c:a2:f6:6b:1d:92:7d:fb:
4b:c6:f0:e9:5e:af:8b:e8:3a:b0:8e:d0:16:0a:6f:52:1a:24:
0d:29:db:fb:f9:70:bf:55:05:ad:00:c6:d4:33:c9:a0:18:2e:
8c:2c:e2:dc:6e:ff:59:e9:f3:30:64:00:09:35:a1:57:95:0f:
9a:b1:b5:28:d3:70:49:ed:05:da:b7:74:d2:c4:28:47:14:6a:
ea:ba:b0:74:01:ae:32:db:9c:00:a2:2c:ab:5e:1f:38:0e:ff:
b8:14:9a:26:9f:2d:df:21:db:89:4e:69:f8:a7:d1:f2:22:46:
e1:88:8c:8a:13:d6:4b:fd:13:47:0b:5a:de:ed:08:af:94:30:
24:ae:f5:8d:d4:c3:01:61:cb:0d:e6:17:07:93:5f:fb:0a:16:
d2:7c:77:7b:57:e7:0a:26:7d:3c:1e:2c:e5:b4:bb:37:92:da:
4b:36:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:08:33 2025 by rpki-client