This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft
File: 2AC489AA343746243A2A3A97A473CEE27756EAA1.mft (raw, json)
Hash identifier: QiEpv6QXrv/Rh/QLZQCpzMfzHkZVQm8+1fDGpfeEHxg=
Subject key identifier: BE:E0:0B:77:00:DC:64:C0:E3:AF:FF:EF:20:1F:F9:F1:B9:A8:1D:1D
Authority key identifier: 2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1
Certificate issuer: /CN=2AC489AA343746243A2A3A97A473CEE27756EAA1
Certificate serial: 74B93145C112E3BEDA868B11C1D7730983DF1885
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft
Manifest number: 014D
Signing time: Sat 20 Dec 2025 01:19:23 +0000
Manifest this update: Sat 20 Dec 2025 01:14:23 +0000
Manifest next update: Wed 24 Dec 2025 19:30:23 +0000
Files and hashes: 1: 323830313a31393a313830303a3a2f34382d3438203d3e203134303830.roa (hash: Aq19bHGezD8Uw7TFu4tX5et4obxnS6jNdf+zmERjlBI=)
2: 2AC489AA343746243A2A3A97A473CEE27756EAA1.crl (hash: kMJ7GZXq+z3695U5O5lEHtGfAJvHhwnu35BTtupxfpU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl
rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 13:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b9:31:45:c1:12:e3:be:da:86:8b:11:c1:d7:73:09:83:df:18:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AC489AA343746243A2A3A97A473CEE27756EAA1
Validity
Not Before: Dec 20 01:14:23 2025 GMT
Not After : Dec 24 19:30:23 2025 GMT
Subject: CN=BEE00B7700DC64C0E3AFFFEF201FF9F1B9A81D1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:dd:e7:86:25:19:8a:08:e3:70:6c:45:0b:
0f:fa:49:f6:ca:0d:e7:d7:78:4c:2d:90:a5:b4:b7:
b8:62:41:7c:35:b9:b1:39:14:32:a2:2a:3b:4a:c1:
6e:52:98:77:17:89:b7:91:cc:f8:3e:60:e5:ee:ef:
81:33:3f:16:d1:23:b2:5e:68:39:6a:41:bc:db:45:
ce:59:7a:ea:3a:fc:0d:48:2b:fa:9b:fd:30:ac:d0:
64:a0:47:f2:8d:e0:83:e8:40:7e:c7:06:e4:59:a4:
e5:23:f3:fe:81:2a:b1:8b:3c:22:61:e0:4c:9a:ab:
d9:3f:b1:d4:ae:fd:31:8b:e8:f9:7f:b3:32:50:83:
a2:ed:9e:3c:92:77:29:97:8c:18:2b:61:1d:f0:e6:
91:58:d3:9b:c6:b1:ac:65:e9:ce:dd:07:a3:c8:bc:
98:27:5f:71:cb:a9:64:03:80:95:e4:38:36:91:47:
c4:10:df:53:c7:74:3b:58:50:0b:0f:09:fa:ab:96:
a1:52:0c:86:c7:8e:89:30:c6:21:16:11:89:da:e6:
34:c7:a3:71:15:1b:94:5f:43:28:ce:a9:5c:11:c3:
7d:aa:d2:86:61:e8:2e:ab:8f:55:aa:f6:4f:61:78:
7c:43:7f:a5:e4:cc:0e:2c:1b:4e:3f:14:46:40:ac:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E0:0B:77:00:DC:64:C0:E3:AF:FF:EF:20:1F:F9:F1:B9:A8:1D:1D
X509v3 Authority Key Identifier:
keyid:2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f0:cc:c9:a8:4c:de:e2:82:3a:47:86:d4:52:5e:35:a3:76:
8f:a0:15:3e:d7:cd:6b:51:a1:ad:47:50:ce:4a:04:fb:92:95:
da:33:f5:78:da:28:2e:e6:b4:9a:03:d5:69:50:29:fa:45:9c:
46:15:16:af:35:57:08:16:77:e6:9d:1a:2c:51:24:06:bc:5c:
4b:19:bb:1e:27:42:37:48:c0:b5:a5:68:a8:12:78:fb:8f:92:
d3:dd:71:0d:40:01:ba:1a:c2:9d:36:22:7b:04:31:eb:f2:42:
e8:4c:e9:2e:0f:d4:45:f7:e1:84:d9:a0:8d:68:36:d7:ba:ea:
d3:3f:c3:d7:57:54:a2:4a:9f:cd:83:93:9e:ac:38:7c:8b:84:
5f:d5:00:2d:cd:b4:e4:5b:74:29:b8:ed:4a:15:a3:34:eb:20:
c0:ce:9a:65:69:f0:8d:af:58:44:c0:f5:f5:f4:4b:d4:e5:9d:
61:50:bf:6d:e2:b0:0c:c9:77:f3:5e:67:02:5e:c6:f7:cd:76:
91:4f:74:d0:75:ff:41:87:d5:7c:88:57:18:40:11:1b:64:b1:
84:72:2f:af:60:e1:b3:03:3b:bf:c4:a9:91:a8:2f:2d:eb:11:
f7:e8:20:e6:14:ff:2b:ab:54:8f:b6:b7:71:ec:51:33:69:df:
47:1a:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:15:42 2025 by rpki-client