This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft File: 5021716DB872AFEA302E881734C3D03B1DCE1384.mft (raw, json) Hash identifier: OhOR8OlOdP7u6+TkNDCOp9vNXjz8IWRzeZ3j+nqwZf4= Subject key identifier: F3:DC:2C:50:A7:70:6D:10:32:3E:B0:A0:13:64:D5:3F:34:5F:37:5E Authority key identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84 Certificate issuer: /CN=5021716DB872AFEA302E881734C3D03B1DCE1384 Certificate serial: 65A3F74DC788230955CDA13F7D2297B3E3E798D8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft Manifest number: 0148 Signing time: Mon 22 Dec 2025 12:47:47 +0000 Manifest this update: Mon 22 Dec 2025 12:42:47 +0000 Manifest next update: Fri 26 Dec 2025 16:56:47 +0000 Files and hashes: 1: 5021716DB872AFEA302E881734C3D03B1DCE1384.crl (hash: SNYonJqV1Xdk3mojv0rLx3D0uhoaxlafp4+g7oULmUQ=) 2: 323830333a613339303a3a2f33322d3438203d3e20323733303135.roa (hash: 2oSwKrz6vwox7aQCuIM+FoLcJChYMj4MeA8HE/N/tRY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 26 Dec 2025 16:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a3:f7:4d:c7:88:23:09:55:cd:a1:3f:7d:22:97:b3:e3:e7:98:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5021716DB872AFEA302E881734C3D03B1DCE1384 Validity Not Before: Dec 22 12:42:47 2025 GMT Not After : Dec 26 16:56:47 2025 GMT Subject: CN=F3DC2C50A7706D10323EB0A01364D53F345F375E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:55:16:1f:a2:19:77:08:dd:31:73:9f:8a: c8:2b:ff:e1:9f:ef:33:e7:c5:84:fc:06:43:1c:02: 87:e9:b1:7b:0d:8d:53:80:90:95:75:53:b4:99:ed: e3:72:f7:03:b1:9b:f5:e9:c8:a2:7f:c6:79:1c:41: 6e:3f:d2:64:0d:3d:41:09:6a:4f:74:09:9e:77:26: 7d:dc:49:25:f3:bd:0d:a5:66:12:b1:2b:d0:a9:f3: aa:ef:15:9d:63:b8:2c:b3:42:20:9e:cf:95:71:29: b9:37:fc:49:24:fa:90:55:43:74:d9:ed:17:0f:31: f8:17:90:ef:04:f9:05:52:f4:6a:ac:ba:df:cb:86: 32:8f:c0:b0:e5:bc:7e:d0:82:f1:1d:93:30:11:5b: 16:81:a8:2b:06:de:6a:42:2f:d5:b2:aa:79:ea:bd: 0d:b1:4e:b4:aa:0b:80:9d:52:54:71:71:63:74:7f: 91:e8:4d:33:b2:d2:65:da:5d:d9:98:c4:11:84:92: d6:f5:25:1b:e0:41:f8:b3:0e:57:2e:d5:4a:c1:d2: 3a:a3:aa:87:46:ce:6c:96:06:21:eb:6a:5c:b3:8d: f9:c1:2c:58:25:dd:56:15:16:6b:71:27:51:ce:f7: b1:0f:2f:14:8a:9a:31:35:2e:9f:8a:bc:08:74:e3: 33:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DC:2C:50:A7:70:6D:10:32:3E:B0:A0:13:64:D5:3F:34:5F:37:5E X509v3 Authority Key Identifier: keyid:50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f1:fc:11:f7:22:d8:ba:03:1c:e7:99:0d:98:be:c2:85:b0: a0:f1:65:db:be:4c:d9:83:86:92:4f:87:a4:ec:27:e0:cf:ce: 05:d2:ea:ce:f0:b7:a9:bd:87:c0:d2:28:75:0d:17:99:40:d3: 47:62:6c:d5:fd:ce:77:83:29:de:6b:a7:a2:fe:99:5d:14:c1: be:d1:81:8e:f9:95:cf:47:27:ad:0f:19:e5:af:e2:1f:70:c3: f1:73:74:15:86:71:d6:3e:24:9c:05:31:00:3d:d5:da:49:fd: 66:10:c7:40:46:cb:0d:7b:85:fa:20:e2:8e:4d:86:d5:3d:5f: 56:30:af:fe:2b:64:0d:03:f1:8f:82:f8:c8:b6:f2:01:2b:4b: 4f:cf:3c:0d:f3:ee:b0:93:1c:47:9a:80:7f:e6:dd:51:6a:37: 3c:d5:b4:9a:37:28:40:ad:e9:bf:cb:eb:ec:fc:a9:4d:da:01: 5d:2c:2f:c9:25:93:bf:39:bf:25:6f:5e:6c:36:a1:a6:99:5e: 9d:f0:f4:38:99:3e:ba:b0:41:9d:74:f5:e2:1c:60:b4:84:b7: bc:a4:ca:87:44:43:17:c0:64:a5:b1:dd:37:03:ae:a0:b5:db: a3:ba:61:5f:3d:7c:6d:d2:0d:e6:22:12:dc:78:69:a2:3a:08: 02:6e:1b:af -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZaP3TceIIwlVzaE/fSKXs+PnmNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAyMTcxNkRCODcyQUZFQTMwMkU4ODE3MzRDM0QwM0Ix RENFMTM4NDAeFw0yNTEyMjIxMjQyNDdaFw0yNTEyMjYxNjU2NDdaMDMxMTAvBgNV BAMTKEYzREMyQzUwQTc3MDZEMTAzMjNFQjBBMDEzNjRENTNGMzQ1RjM3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3x1UWH6IZdwjdMXOfisgr/+Gf 7zPnxYT8BkMcAofpsXsNjVOAkJV1U7SZ7eNy9wOxm/XpyKJ/xnkcQW4/0mQNPUEJ ak90CZ53Jn3cSSXzvQ2lZhKxK9Cp86rvFZ1juCyzQiCez5VxKbk3/Ekk+pBVQ3TZ 7RcPMfgXkO8E+QVS9Gqsut/LhjKPwLDlvH7QgvEdkzARWxaBqCsG3mpCL9Wyqnnq vQ2xTrSqC4CdUlRxcWN0f5HoTTOy0mXaXdmYxBGEktb1JRvgQfizDlcu1UrB0jqj qodGzmyWBiHralyzjfnBLFgl3VYVFmtxJ1HO97EPLxSKmjE1Lp+KvAh04zPRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU89wsUKdwbRAyPrCgE2TVPzRfN14wHwYDVR0j BBgwFoAUUCFxbbhyr+owLogXNMPQOx3OE4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81Mjk3QjcwNzhGQjFCNTIxMDA2RDc1MUEzMkEyQUMzNUY2 MTQ2MTc1MjI0ODRGODg3RTVFNzdBMkNGQzc1MjU3LzAvNTAyMTcxNkRCODcyQUZF QTMwMkU4ODE3MzRDM0QwM0IxRENFMTM4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MDIxNzE2REI4NzJBRkVBMzAy RTg4MTczNEMzRDAzQjFEQ0UxMzg0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTI5N0I3MDc4RkIxQjUyMTAwNkQ3NTFBMzJBMkFDMzVGNjE0NjE3NTIy NDg0Rjg4N0U1RTc3QTJDRkM3NTI1Ny8wLzUwMjE3MTZEQjg3MkFGRUEzMDJFODgx NzM0QzNEMDNCMURDRTEzODQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCe8fwR9yLYugMc55kNmL7ChbCg 8WXbvkzZg4aST4ek7Cfgz84F0urO8LepvYfA0ih1DReZQNNHYmzV/c53gynea6ei /pldFMG+0YGO+ZXPRyetDxnlr+IfcMPxc3QVhnHWPiScBTEAPdXaSf1mEMdARssN e4X6IOKOTYbVPV9WMK/+K2QNA/GPgvjItvIBK0tPzzwN8+6wkxxHmoB/5t1Rajc8 1bSaNyhArem/y+vs/KlN2gFdLC/JJZO/Ob8lb15sNqGmmV6d8PQ4mT66sEGddPXi HGC0hLe8pMqHREMXwGSlsd03A66gtdujumFfPXxt0g3mIhLceGmiOggCbhuv -----END CERTIFICATE-----Generated at Tue Dec 23 12:42:49 2025 by rpki-client