This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft
File: 336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft (raw, json)
Hash identifier: 1aCjQIX/LOE2SH21/o6DDPalVQ3SFzlHRnFhjD/nBbU=
Subject key identifier: E8:5B:3E:A5:50:AD:D6:16:3F:53:EC:9E:CE:5E:40:B8:85:D6:24:59
Authority key identifier: 33:6D:FC:57:AB:D9:32:C2:AB:D3:7A:88:DA:1E:1B:BC:DD:EC:40:7A
Certificate issuer: /CN=336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A
Certificate serial: 7BF232AADB6206E2EA1A2B7F17736C2F5FA7C544
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft
Manifest number: 0155
Signing time: Sat 10 Jan 2026 19:53:42 +0000
Manifest this update: Sat 10 Jan 2026 19:48:42 +0000
Manifest next update: Fri 16 Jan 2026 18:14:42 +0000
Files and hashes: 1: 3230302e38352e3138342e302f32312d3234203d3e203238303337.roa (hash: Wi5jyUAhXnpfJB+SH8jXVoArC69KsKvUaAFs6/ylbfE=)
2: 336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.crl (hash: pp6I5GB1WGeWj95FU69x0Qwx/jYkTVqd5zfAxIPIwOg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.crl
rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 18:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f2:32:aa:db:62:06:e2:ea:1a:2b:7f:17:73:6c:2f:5f:a7:c5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A
Validity
Not Before: Jan 10 19:48:42 2026 GMT
Not After : Jan 16 18:14:42 2026 GMT
Subject: CN=E85B3EA550ADD6163F53EC9ECE5E40B885D62459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:0f:f3:e5:d3:04:eb:ef:e6:75:6c:97:f1:
67:18:93:a3:de:c9:b2:19:59:ef:72:dc:ef:e6:ef:
72:b7:a8:fa:26:44:ce:eb:ca:d5:8c:23:0b:11:0a:
3b:98:d2:10:94:7e:bc:7a:0c:24:49:a8:11:03:2a:
e2:f7:ed:1b:a4:19:2e:2b:28:9d:78:36:19:a3:2b:
44:28:a4:18:8a:6c:1f:bd:58:d2:3d:00:95:ca:fb:
2e:02:46:49:c6:44:b6:7e:6c:01:e6:49:b4:7e:84:
65:e8:b3:ca:c7:79:7e:55:ae:a3:4e:91:97:8d:04:
4e:7a:d9:76:fd:53:81:30:98:55:17:83:e9:11:97:
32:6f:c7:22:f2:35:ed:9e:2c:9f:f1:1b:6e:48:bd:
92:1f:cc:7c:78:8a:86:8d:7e:fd:cb:d3:c8:d9:6b:
3b:9f:ce:0f:d9:65:d5:d3:72:67:09:26:76:71:ba:
77:cb:c4:fb:68:6d:89:ba:6c:15:fa:e9:ef:cd:27:
29:db:05:80:5a:00:40:2b:1b:a3:55:14:60:62:4b:
c8:df:da:f0:9f:66:73:8c:10:5e:7c:75:48:d4:a0:
ad:d9:ee:bd:b3:99:3a:93:08:ac:45:4f:db:a6:a1:
f8:28:78:19:35:0f:4c:56:27:f2:32:aa:d0:98:0b:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5B:3E:A5:50:AD:D6:16:3F:53:EC:9E:CE:5E:40:B8:85:D6:24:59
X509v3 Authority Key Identifier:
keyid:33:6D:FC:57:AB:D9:32:C2:AB:D3:7A:88:DA:1E:1B:BC:DD:EC:40:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:30:b0:db:1f:9b:6b:ab:f4:f5:48:b8:86:de:2e:30:ee:c7:
63:6b:ef:86:e8:5d:74:39:87:dd:ed:bc:69:f2:ed:25:b9:5d:
40:02:82:33:af:8e:3d:3b:33:3e:b4:4a:cb:b4:78:86:9e:7c:
c6:7d:c1:bb:77:6e:10:44:da:43:d9:73:e8:ae:c5:7b:e4:a0:
38:95:d7:21:26:05:5a:00:f8:89:3a:e8:06:85:bb:e8:18:8c:
07:8c:df:71:ba:13:92:a9:f0:17:c7:a8:4c:52:75:51:13:66:
80:a3:61:ff:66:d3:76:70:bc:f0:6f:b0:ff:fb:d2:9f:37:22:
4b:3d:8a:c7:7c:cc:68:fa:18:47:dd:c3:85:9d:5b:57:6f:2f:
ca:cd:66:fb:b5:1f:bf:f3:1f:17:97:13:95:ad:77:54:c7:56:
70:6a:1e:13:ff:e9:b3:4e:d6:b6:d2:73:77:2a:d7:57:67:1b:
b5:c2:88:ac:a1:f1:b2:47:84:99:bb:eb:89:46:5e:f8:89:4c:
9c:de:f8:a9:54:68:15:a4:4f:7f:1e:b0:36:ec:32:e0:70:41:
70:91:84:bc:be:c8:fc:43:3c:a5:b1:12:23:21:4c:48:76:54:
9a:5f:42:bb:10:c0:c6:7d:3e:c9:db:74:ea:7a:71:81:68:4f:
b0:85:99:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:58:41 2026 by rpki-client