This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
File: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json)
Hash identifier: hNOxoYAzfxP5VGIomF/micqm+Es2+BrA8ear3iT2KBA=
Subject key identifier: 6B:43:B8:BF:3E:18:33:49:26:D7:25:CD:DE:FB:BB:6E:84:33:AC:1B
Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9
Certificate issuer: /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
Certificate serial: 37057AB46FEC2E38ECB511FD0A820F4431FA161B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
Manifest number: 0151
Signing time: Mon 12 Jan 2026 15:37:03 +0000
Manifest this update: Mon 12 Jan 2026 15:32:03 +0000
Manifest next update: Sun 18 Jan 2026 11:49:03 +0000
Files and hashes: 1: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: Um86cEkZc1cblKMuUA3/7tQwstJEkeehuPwQs3wj8OI=)
2: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: 4LFf4uRlMxMf2oudTQtCgNr/ddYwiQolDdMBxGwEJcg=)
3: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: kXeP2rJJjnn1Z8VfbTHQNCqqw9ibWIFb8osHqKo0bHE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl
rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 14:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:05:7a:b4:6f:ec:2e:38:ec:b5:11:fd:0a:82:0f:44:31:fa:16:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
Validity
Not Before: Jan 12 15:32:03 2026 GMT
Not After : Jan 18 11:49:03 2026 GMT
Subject: CN=6B43B8BF3E18334926D725CDDEFBBB6E8433AC1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:28:52:00:9c:a7:5a:68:11:45:78:c9:b4:7e:
7b:86:2f:fd:69:8a:f4:da:64:cd:09:2e:76:ba:4a:
7a:ea:07:2b:da:0b:87:40:a2:cd:88:d0:53:5f:4b:
85:6c:73:77:2e:50:41:fd:76:94:78:11:ca:2d:3e:
9d:af:12:9b:26:34:1e:26:92:9e:3b:43:dd:52:86:
58:ab:0a:33:ca:5b:76:a9:a8:f3:fa:3a:22:e7:f5:
ef:bd:76:fd:1c:df:7b:02:5f:53:ae:f1:91:c0:de:
3d:03:94:4b:1f:7a:11:1d:ec:a0:4b:25:0b:30:c6:
6f:a5:a2:19:48:aa:7b:0d:b1:f1:f6:51:07:c2:55:
65:af:59:e6:c1:10:f6:ec:f1:fa:b2:e4:29:95:b2:
dd:ef:d7:73:37:73:0d:25:f9:e4:dc:41:4e:fd:52:
be:b7:6c:1a:09:39:cb:9e:95:32:b5:ff:47:7b:42:
f3:a1:19:86:5a:68:23:fd:aa:00:32:e8:d2:61:9e:
aa:32:25:71:85:fc:09:7d:e7:ac:b1:f2:3e:92:a4:
83:65:34:b0:ba:3d:1f:1a:41:10:ec:33:90:86:6b:
7a:6e:04:1b:89:94:ed:3b:a6:00:10:59:9f:8e:37:
b8:1e:06:8b:9e:e8:b2:51:32:2c:f5:bc:55:bc:36:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:43:B8:BF:3E:18:33:49:26:D7:25:CD:DE:FB:BB:6E:84:33:AC:1B
X509v3 Authority Key Identifier:
keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9f:9a:c8:36:7d:64:8d:16:a9:98:cc:53:fb:f9:3a:71:9d:
5c:5e:fe:20:42:53:e5:34:68:9c:b9:d4:87:26:5e:b4:19:65:
b0:8d:9b:f2:b4:e2:bc:53:dd:00:dd:61:64:77:e2:c7:88:1f:
8a:5f:d1:2d:dc:42:5a:59:a9:99:a3:f4:44:fc:4b:15:65:8e:
73:d8:05:35:8d:20:2f:9a:6c:f9:5b:62:3e:87:af:00:f3:63:
09:6f:9d:b6:29:52:e0:3e:47:d8:b3:bd:e5:41:79:ca:34:13:
ec:85:db:ed:52:24:7b:13:18:27:54:92:2f:34:86:b1:ea:4f:
ec:12:95:d1:9f:dd:d4:41:8f:4d:a0:d5:e0:de:d6:16:db:87:
53:c7:1c:af:fe:16:51:a5:15:9e:cc:3f:ef:21:05:4a:74:9a:
61:51:a0:cf:87:88:32:19:45:cc:4c:18:ed:f0:07:ca:2c:a9:
69:2d:df:7a:0d:22:74:58:a0:41:13:c0:ec:72:64:b2:7e:47:
cf:95:eb:f3:ee:73:2f:4f:2e:ec:af:ca:33:12:5a:a2:e6:f6:
f7:a9:5f:5e:4f:64:db:98:d1:41:10:5c:29:69:9e:06:34:08:
75:3a:76:9a:34:12:42:42:9a:30:d1:5e:cf:30:df:60:a5:dd:
c2:fd:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:02:07 2026 by rpki-client