This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/253120D1807C995036BC4D9454329185DF025960.mft
File: 253120D1807C995036BC4D9454329185DF025960.mft (raw, json)
Hash identifier: r53a5L7aLxdsGNDJTMd0Mq55y9VHP1dlvXJy75bp8F0=
Subject key identifier: 2C:A1:62:D3:77:42:BB:94:DF:2B:C9:77:C9:B7:1A:A7:24:6F:31:E3
Authority key identifier: 25:31:20:D1:80:7C:99:50:36:BC:4D:94:54:32:91:85:DF:02:59:60
Certificate issuer: /CN=253120D1807C995036BC4D9454329185DF025960
Certificate serial: 76D41904456D7FC7D9E506A3E775EDF8599E121C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/253120D1807C995036BC4D9454329185DF025960.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/253120D1807C995036BC4D9454329185DF025960.mft
Manifest number: 0149
Signing time: Fri 19 Dec 2025 08:49:57 +0000
Manifest this update: Fri 19 Dec 2025 08:44:57 +0000
Manifest next update: Wed 24 Dec 2025 20:49:57 +0000
Files and hashes: 1: 3138312e3232342e3136302e302f32322d3232203d3e20323632353839.roa (hash: Jig+BnKD8gwZ35rne8FcKEP9JD2iYMb10W9ql1e6f5E=)
2: 253120D1807C995036BC4D9454329185DF025960.crl (hash: TSJAdhnyif3o92QMvnJHFnhYNywK54e7Q734UNUShGs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/253120D1807C995036BC4D9454329185DF025960.crl
rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/253120D1807C995036BC4D9454329185DF025960.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/253120D1807C995036BC4D9454329185DF025960.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 20:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d4:19:04:45:6d:7f:c7:d9:e5:06:a3:e7:75:ed:f8:59:9e:12:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253120D1807C995036BC4D9454329185DF025960
Validity
Not Before: Dec 19 08:44:57 2025 GMT
Not After : Dec 24 20:49:57 2025 GMT
Subject: CN=2CA162D37742BB94DF2BC977C9B71AA7246F31E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:f1:f8:7f:7b:37:92:ff:91:7e:21:2b:1e:
8c:7d:96:78:b7:b7:0d:d6:64:cd:d5:50:f9:11:e6:
80:3e:35:82:4b:6b:e8:3e:b2:0b:92:22:a4:16:5d:
c3:39:40:99:33:97:58:cc:5e:c5:7f:b8:bc:e6:a4:
7b:fa:e1:8e:c1:de:ab:77:a0:9e:48:d1:59:86:63:
39:4b:e8:2f:3f:2f:44:5e:10:7b:8a:7d:18:b9:b7:
37:77:6d:0a:da:83:f6:78:12:a3:b0:e5:f9:29:b2:
f2:e1:89:23:64:27:55:29:e0:49:d7:cc:a1:cd:c2:
9d:f6:c9:f1:ac:f3:19:86:62:71:c6:d8:07:ac:18:
b3:e0:ac:29:e2:43:65:09:f9:84:b1:b6:a0:a9:c1:
f6:20:d7:fd:ea:4b:e0:bb:39:e9:0a:41:43:94:2d:
4b:66:18:2a:79:0a:ac:d9:75:f5:07:40:c4:8f:6d:
e3:92:36:b8:11:01:ea:93:ee:e0:e9:d7:75:b5:c7:
d9:47:28:8a:b2:1a:2f:40:8a:bd:d2:0b:4c:12:29:
66:61:04:70:8c:ad:bd:6a:c6:2d:ce:9c:98:70:3a:
f9:55:27:09:ee:a3:80:5d:27:dc:53:4c:6a:21:03:
aa:2b:8d:18:ab:11:f5:4c:91:83:2d:1f:0e:1b:a4:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:62:D3:77:42:BB:94:DF:2B:C9:77:C9:B7:1A:A7:24:6F:31:E3
X509v3 Authority Key Identifier:
keyid:25:31:20:D1:80:7C:99:50:36:BC:4D:94:54:32:91:85:DF:02:59:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/253120D1807C995036BC4D9454329185DF025960.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/253120D1807C995036BC4D9454329185DF025960.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/253120D1807C995036BC4D9454329185DF025960.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:93:1b:da:0d:1d:26:33:7c:d7:9f:92:88:47:5a:c7:1b:0b:
42:af:60:ef:fa:09:fd:f0:bb:5f:a6:36:13:bf:77:86:99:34:
38:66:28:e2:d4:3a:47:ef:32:59:da:f1:5e:5b:30:44:e9:b6:
db:75:03:cb:bc:0a:ea:d8:26:e3:71:86:dd:91:d5:99:94:ff:
86:8f:d0:56:2c:d1:6f:e2:15:73:fc:3f:b4:94:26:ca:d3:99:
6e:55:76:89:bf:c3:0e:c8:b2:84:71:e8:a1:c1:09:22:fb:16:
db:a4:85:79:12:d2:e5:14:81:73:ad:dc:89:5f:4d:3a:9a:09:
50:8c:c3:a1:c6:5c:f9:91:af:dc:3d:f3:a3:d0:16:2d:4e:75:
5e:36:c9:9b:cf:09:f1:bf:61:dc:9e:a6:f4:93:5e:7b:f3:6e:
f9:7b:88:8d:c3:8f:f9:21:5f:a8:58:dd:fb:5d:79:a6:57:5f:
6f:1f:94:94:df:4f:7b:08:11:08:4b:d4:ea:25:ba:70:26:51:
51:a4:1a:e4:88:51:49:df:86:14:2b:1c:73:98:38:76:27:83:
2a:66:fc:ee:67:0f:0a:64:68:28:07:cb:ef:27:da:9c:6d:3d:
1f:f1:c5:4d:33:2f:a7:01:d5:7e:d3:02:e7:61:43:77:4f:a6:
78:73:67:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:48:19 2025 by rpki-client