This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
File: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft (raw, json)
Hash identifier: tciPhcZc8/NhGHbeDclF6t1ZPKKxv9iIxr8VKRTHPQU=
Subject key identifier: BD:66:EF:D7:A5:4D:19:CD:A5:29:19:0F:BE:C6:CF:DB:B1:E7:64:75
Authority key identifier: 2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
Certificate issuer: /CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Certificate serial: 6858B3343648973F668F772A61BF0576A228566F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
Manifest number: 0150
Signing time: Wed 24 Dec 2025 14:02:55 +0000
Manifest this update: Wed 24 Dec 2025 13:57:55 +0000
Manifest next update: Tue 30 Dec 2025 08:52:55 +0000
Files and hashes: 1: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl (hash: 0usi7hGiOOcWBMPzk40hKBrtlNeKiyrplyeCE2tuI0Q=)
2: 34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa (hash: kOKzUPnxKUHR9eP3xpr7gimXHToWS9fXVFHPwQ+5XHY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 29 Dec 2025 06:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:58:b3:34:36:48:97:3f:66:8f:77:2a:61:bf:05:76:a2:28:56:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Validity
Not Before: Dec 24 13:57:55 2025 GMT
Not After : Dec 30 08:52:55 2025 GMT
Subject: CN=BD66EFD7A54D19CDA529190FBEC6CFDBB1E76475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:d7:6f:51:49:ab:4b:8d:83:0b:21:87:a9:
68:19:5c:50:4a:19:9a:4a:aa:68:71:c1:32:97:eb:
fc:41:18:b2:1f:d3:f6:ef:86:b0:60:7f:ac:3d:fd:
3c:61:45:6e:cc:ac:3b:c4:45:d3:43:43:4a:da:23:
e2:22:1d:ec:fa:48:73:5c:1f:c0:cf:14:99:00:7b:
41:29:c1:8e:cd:98:4c:8e:ba:54:0b:53:5e:4c:a0:
e2:4d:67:ed:8c:77:eb:a2:31:5f:c8:ae:a0:a7:32:
b3:b9:e9:70:7e:6f:90:16:90:bb:63:a4:0b:ea:21:
4c:7d:b2:29:12:1c:55:b2:cd:bc:74:df:e6:6b:7b:
08:f2:37:cb:1b:a3:66:56:a5:ff:a1:49:9a:9e:1f:
54:77:bb:65:f8:58:f0:45:c6:7c:28:ee:60:9a:33:
ba:1a:60:9a:34:8a:58:14:43:97:84:f5:ec:d1:95:
41:d4:71:e7:01:22:a4:53:a7:d0:07:20:c4:03:30:
5d:32:38:23:b4:98:de:70:2c:29:9f:6c:d9:f3:56:
72:eb:0d:f9:c9:72:27:fa:1c:06:0a:fe:cd:d9:79:
aa:7f:79:a0:0f:a7:ab:57:75:62:54:dd:bf:4f:ab:
94:bb:96:40:09:b3:df:72:b2:8d:cd:17:d0:f2:1b:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:66:EF:D7:A5:4D:19:CD:A5:29:19:0F:BE:C6:CF:DB:B1:E7:64:75
X509v3 Authority Key Identifier:
keyid:2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:05:41:a2:22:38:de:67:b4:76:70:f2:89:e2:73:5b:27:73:
8b:85:f7:dd:c5:a9:d0:3a:61:ea:3a:79:a4:37:55:c6:65:10:
29:e0:9d:c9:6e:99:de:92:c6:d1:6c:7f:53:58:97:07:af:69:
d8:34:fa:bd:47:0b:9e:27:27:9a:29:ed:11:89:f3:1d:dd:0a:
36:84:14:50:44:db:8e:ed:94:ee:64:c4:e9:8b:cc:09:27:96:
23:4d:63:24:86:ff:43:36:02:ab:63:61:cf:90:2b:b6:2b:66:
57:5d:b4:4c:69:33:53:6b:62:c3:34:03:13:cb:83:f1:a8:48:
03:15:b1:0a:97:02:a6:5e:c9:e0:51:d4:1e:87:e5:6e:71:76:
59:1b:59:9f:19:10:cc:74:7b:a2:14:b5:57:33:eb:a5:3f:ef:
34:5f:a8:83:da:8c:29:b1:be:7e:cb:1c:b4:b6:16:d0:34:51:
b6:7a:fd:37:6f:76:94:ec:17:fa:52:9e:8d:26:a0:82:19:de:
30:84:d6:0c:36:e7:d3:9b:9d:ba:2c:ca:44:a8:40:20:46:73:
6a:63:a9:74:3b:c9:d4:76:98:16:7e:d1:c2:d6:9a:37:c0:4d:
fa:e6:4c:5b:80:57:8f:37:2f:a6:a7:ba:11:84:42:0c:84:c4:
7f:55:05:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 12:34:07 2025 by rpki-client