This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
File: 4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft (raw, json)
Hash identifier: TfTLwL84PNOWk22Lq7HG+knlXUBw5Fhb2LyVBPr5ing=
Subject key identifier: DA:7D:9F:A5:19:F3:12:9B:71:2E:0C:58:15:A5:21:D0:A2:B2:88:B4
Authority key identifier: 4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2
Certificate issuer: /CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
Certificate serial: 1E33552A61F23E84E10A1BF5C44F390DEF3EE194
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
Manifest number: 014B
Signing time: Thu 18 Dec 2025 23:07:57 +0000
Manifest this update: Thu 18 Dec 2025 23:02:57 +0000
Manifest next update: Wed 24 Dec 2025 18:26:57 +0000
Files and hashes: 1: 3134332e3230382e36342e302f32322d3232203d3e203332303334.roa (hash: mIKWkdMKyZAa2lLWVlxa3L5zNX5+6kV+s4L5AMIQSGo=)
2: 4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl (hash: Bs3qQUE8StkqMlZ5unGhsIZeybcmr6s3q1NNprui0z0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl
rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 18:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:33:55:2a:61:f2:3e:84:e1:0a:1b:f5:c4:4f:39:0d:ef:3e:e1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
Validity
Not Before: Dec 18 23:02:57 2025 GMT
Not After : Dec 24 18:26:57 2025 GMT
Subject: CN=DA7D9FA519F3129B712E0C5815A521D0A2B288B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:7a:dd:ac:ca:6e:f4:15:3f:18:d5:72:eb:
c2:bc:8f:9c:91:04:4e:7b:2e:d8:6f:fe:71:64:e0:
e1:dd:9a:f8:96:d5:58:2e:c2:b8:21:b7:41:25:14:
ab:68:ed:c9:44:ee:d6:4c:f9:7a:73:77:5a:bd:c4:
0c:92:57:d1:31:28:73:9f:9f:9f:30:82:9c:fc:68:
1b:6c:26:03:68:52:48:27:69:88:38:2b:ed:ba:f1:
34:38:52:79:d0:44:71:6a:ed:ac:4e:db:b7:49:24:
3c:e7:a6:64:3b:2d:0b:ec:dd:f0:05:33:f7:24:9e:
53:1f:16:4a:62:06:0b:61:19:99:2d:c0:ed:ce:32:
1e:18:bc:cf:bc:90:0d:d1:12:f6:e6:21:9c:96:72:
99:9f:51:ba:9a:7c:42:60:0d:b5:85:c6:b7:7e:b4:
2a:c7:3a:22:a8:31:6e:65:f2:27:21:c3:68:e0:48:
df:56:2c:f0:92:be:bd:69:97:b4:76:a4:f0:45:f0:
8d:43:de:ef:8e:69:22:b8:af:f6:4d:72:c3:66:4c:
dd:a3:b8:28:ea:72:33:06:85:2d:03:87:5c:a7:98:
f7:d6:c1:67:c0:18:b4:07:6c:c2:3c:a6:a0:d6:cd:
ae:8f:8e:4b:3a:6e:89:a2:23:d1:8c:42:ed:e7:d9:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7D:9F:A5:19:F3:12:9B:71:2E:0C:58:15:A5:21:D0:A2:B2:88:B4
X509v3 Authority Key Identifier:
keyid:4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0d:fa:d5:28:af:3d:d5:e0:2e:47:49:4e:6f:2d:30:6d:1c:
55:55:2f:46:fe:7e:c9:36:f1:2d:61:42:7b:e0:f1:3a:66:77:
2e:0b:49:50:18:ca:d4:65:31:8c:a0:3a:3e:8f:53:1b:d2:b2:
5f:12:e8:c4:04:51:e3:4f:b4:ac:5f:3a:1a:38:1c:80:8b:97:
77:79:06:da:a1:81:a1:0d:9c:03:a0:06:a6:41:87:5e:69:91:
9f:ad:84:66:56:68:e0:cf:1c:bb:91:2e:fc:51:38:4e:1f:26:
71:32:db:fd:cf:43:3b:4c:c6:12:39:09:b3:92:b2:84:d1:92:
df:e6:1f:81:af:aa:ad:8d:c3:3b:25:27:ef:e5:8d:33:75:5a:
34:06:94:bd:8d:2b:f0:2d:fa:62:fe:04:a2:4a:d1:a2:bc:3a:
a4:72:94:7d:9c:59:85:59:37:84:88:ae:5c:8b:77:50:f3:23:
d5:22:2b:6d:7d:84:aa:4c:fb:29:26:96:d3:a0:6b:08:4b:f3:
9a:e8:2b:55:f8:7d:8d:a6:a0:36:cc:9a:fe:8f:c9:2b:84:e1:
83:48:be:54:90:6f:ce:cf:00:1c:d7:b1:c2:66:b7:35:54:97:
8b:9e:70:05:24:20:04:70:78:30:91:d6:2e:36:69:c6:14:8e:
db:db:0f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:26:00 2025 by rpki-client