This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
File: 8CECD8998683594E93B9972D95397E3623CDB7A8.mft (raw, json)
Hash identifier: JrqLHXx9HMBqcrjuZay+wT8VilJleiNBPh4l39WaKMo=
Subject key identifier: C3:B7:E2:46:60:B8:5B:79:4E:57:E3:A8:03:A7:5B:91:A4:6D:6B:3E
Authority key identifier: 8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8
Certificate issuer: /CN=8CECD8998683594E93B9972D95397E3623CDB7A8
Certificate serial: 085548BF0CE65B7C0CBBCA830D456607265DD2F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
Manifest number: 0130
Signing time: Wed 24 Dec 2025 02:20:20 +0000
Manifest this update: Wed 24 Dec 2025 02:15:20 +0000
Manifest next update: Sun 28 Dec 2025 06:16:20 +0000
Files and hashes: 1: 3133312e3235352e3133392e302f32342d3234203d3e20323731383631.roa (hash: +DFzi9xgHlw57h5KMxGRsk/tBwNLgrrMth+O5GVl6Vs=)
2: 8CECD8998683594E93B9972D95397E3623CDB7A8.crl (hash: D9FDOK4KxHVDoYNzVPVIxnR45kaEhy/o/X7Nl9YPM0k=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl
rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Dec 2025 06:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:55:48:bf:0c:e6:5b:7c:0c:bb:ca:83:0d:45:66:07:26:5d:d2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CECD8998683594E93B9972D95397E3623CDB7A8
Validity
Not Before: Dec 24 02:15:20 2025 GMT
Not After : Dec 28 06:16:20 2025 GMT
Subject: CN=C3B7E24660B85B794E57E3A803A75B91A46D6B3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:39:02:09:b0:7f:86:bd:1e:fa:cb:bc:db:
bc:fc:1f:d6:19:1a:67:62:55:5d:8a:f6:55:48:9c:
c5:1b:d3:b2:b4:e2:4b:d5:9d:27:c3:c5:79:fa:29:
a0:f7:72:eb:2d:c3:8c:c6:06:77:6a:77:9e:50:06:
46:53:8a:74:df:96:21:89:6c:24:a5:9d:ca:ec:d6:
32:9e:c4:e9:41:43:e8:e5:2c:eb:75:64:d6:b0:0b:
42:b7:d5:a7:ed:64:61:7b:64:bf:83:7f:f9:9a:d8:
98:5a:7e:b6:be:2e:e0:a7:db:a6:60:43:f2:24:d5:
b7:ab:a2:c5:5e:c7:5b:df:8d:ce:04:24:22:72:a2:
b8:5d:cd:75:38:60:cc:3e:92:38:af:ce:83:c2:a5:
32:f8:35:17:6c:30:e8:e6:38:74:c4:b0:48:df:f7:
01:3e:89:df:82:11:f1:87:d9:f6:15:e9:be:1f:eb:
53:b9:a2:50:58:6b:17:6f:ec:3b:b7:45:35:6d:d0:
03:25:16:f7:da:62:f2:f3:02:29:bd:b3:1b:9b:97:
27:50:83:17:0f:dd:f4:5e:2f:fa:70:ed:70:ca:01:
4c:fe:3b:9f:81:8d:30:40:1d:64:1d:d5:60:d5:cc:
47:b7:68:44:0a:34:63:e1:9c:b8:7e:29:b1:0f:db:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B7:E2:46:60:B8:5B:79:4E:57:E3:A8:03:A7:5B:91:A4:6D:6B:3E
X509v3 Authority Key Identifier:
keyid:8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2d:c1:42:60:fa:bc:9b:a3:c8:ce:1c:2f:30:bf:b5:2b:2f:
f7:fc:6f:8a:f0:27:ae:4a:57:ae:4a:8b:ac:b4:96:d1:45:c7:
b4:78:3b:f0:49:0a:49:10:5c:2d:d4:99:c8:9c:04:14:5c:25:
6b:18:74:56:5f:88:23:ac:32:06:4e:3a:58:b2:61:66:0c:60:
aa:63:61:8b:51:13:d6:e6:12:c1:c6:c1:25:d5:f1:ee:a6:c0:
59:e2:89:05:15:d7:06:b5:50:96:95:52:75:b4:3e:a6:ce:85:
ce:69:33:59:a1:c4:ba:db:13:89:03:65:f0:fd:82:9f:ef:ba:
df:2d:4b:bd:8e:5a:9c:92:a5:ee:2e:53:b0:fb:ea:e1:fe:e0:
c5:c1:e1:5f:36:90:1b:19:99:44:bc:b9:85:e3:f2:4d:6d:c9:
2e:ba:e6:78:d0:64:8a:d3:38:8d:aa:9d:20:d6:12:97:86:bf:
30:73:30:a6:81:1c:eb:f1:f2:b3:bc:de:55:eb:f9:2b:7d:f0:
60:51:8a:26:1c:e4:f7:f7:a4:c5:d7:7d:9c:0f:ed:8e:d5:ba:
0e:36:f0:da:97:7b:af:cf:34:0b:d7:80:bc:be:fc:59:96:d8:
d8:b3:df:31:cf:af:dd:76:3b:8c:ab:49:6b:6c:d4:ca:ac:ce:
1b:ea:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:27:21 2025 by rpki-client