This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
File: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft (raw, json)
Hash identifier: W2Dcf5tgafaiBsDw9b+uwdlWSQ44kjt25O5FDSjwV1c=
Subject key identifier: 74:15:06:01:9A:BF:2E:7E:BB:C6:BA:11:86:7E:60:54:DA:B2:A3:B1
Authority key identifier: 3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D
Certificate issuer: /CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D
Certificate serial: 3C93DCE50943579C209C89B9FCA8F9B7FC8C9E79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
Manifest number: 0152
Signing time: Sat 10 Jan 2026 12:48:57 +0000
Manifest this update: Sat 10 Jan 2026 12:43:57 +0000
Manifest next update: Thu 15 Jan 2026 17:16:57 +0000
Files and hashes: 1: 3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa (hash: WD+eLyobsw/8MlklBmwopGTS4G6J3R053E42ZeLL7+w=)
2: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl (hash: R+1o3A/MPtXYFni4x7szkQTlmRybFFPIIWrlq709slI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl
rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 17:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:93:dc:e5:09:43:57:9c:20:9c:89:b9:fc:a8:f9:b7:fc:8c:9e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D
Validity
Not Before: Jan 10 12:43:57 2026 GMT
Not After : Jan 15 17:16:57 2026 GMT
Subject: CN=741506019ABF2E7EBBC6BA11867E6054DAB2A3B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:ea:af:89:78:ca:ef:bf:ab:12:27:7e:7f:
49:c8:33:f1:76:70:e6:05:75:74:74:97:e3:1d:20:
71:3a:87:0a:d7:82:b1:4b:dc:b5:f2:45:e9:55:8a:
f9:e2:2f:d8:36:da:80:62:27:70:ef:80:7b:ad:9d:
a7:c3:20:99:2a:25:4f:3d:6c:9d:36:08:02:f6:ea:
ab:f5:a9:bd:02:90:92:5c:7b:cd:ce:b7:c2:01:58:
9d:34:e0:2b:5b:59:67:18:f4:29:32:06:c9:a4:cc:
a7:67:38:bc:15:61:0f:d0:21:3f:47:28:fb:3c:f0:
67:23:69:61:98:89:66:02:f8:e6:84:b3:a9:e1:d8:
01:73:4c:60:e4:00:c4:0a:2b:44:eb:6c:dd:69:db:
76:aa:fc:66:36:f0:ec:1c:9e:f4:39:b7:52:a6:6a:
9a:76:62:6e:b3:c4:16:29:c7:02:a8:2a:ce:6e:e9:
7d:45:7f:f0:b1:75:50:88:b8:bd:b6:fb:78:5b:e7:
92:45:e8:1d:c3:ca:c8:b5:bb:f2:e4:3b:ba:2e:68:
f7:d7:bd:66:3f:1c:6d:48:ce:4a:e8:fb:be:e4:5e:
cf:25:c2:f0:45:14:c3:67:cb:1e:ea:47:7c:3f:eb:
09:76:2d:0e:e2:c0:a4:dd:64:5c:08:61:f4:3a:cc:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:15:06:01:9A:BF:2E:7E:BB:C6:BA:11:86:7E:60:54:DA:B2:A3:B1
X509v3 Authority Key Identifier:
keyid:3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:7f:f8:12:51:bb:87:5f:71:3d:3b:0d:1e:7d:e7:58:4f:
86:4d:13:1b:81:58:36:c1:c5:b7:78:0e:e8:e4:d4:d8:d7:54:
91:29:97:10:a6:c0:74:0a:80:7e:f8:5c:67:75:7e:3a:3c:fa:
8d:5e:87:33:13:e4:49:ef:3b:41:a6:d6:66:05:e4:51:28:83:
83:28:c0:46:7c:95:fd:29:c2:f0:73:80:2f:75:fb:61:92:c5:
fe:e7:9b:f7:ca:8f:b9:bc:47:2e:72:ae:8a:62:39:84:18:ab:
63:e2:04:8f:a4:34:9d:1e:56:16:ef:27:0a:94:cd:cb:9d:2a:
c1:ae:65:ca:38:97:54:1e:08:e5:38:51:3c:0f:da:c5:2d:84:
52:ac:0c:6a:37:00:36:8e:56:2f:50:05:5f:40:c8:b6:9b:f8:
a4:45:7a:3d:69:a3:8d:b3:cd:8f:c3:72:0d:53:c3:e8:b6:c8:
ec:3f:3a:fc:5c:17:10:cd:b7:5c:bd:a2:4b:a5:da:b0:be:8a:
59:4b:41:15:13:d0:7f:e4:0b:52:e7:54:5e:60:2c:ba:60:6a:
da:7c:dc:6f:c9:0b:1d:42:51:92:48:8b:3f:ab:00:8e:5b:82:
a5:b0:0e:f0:77:69:be:a0:0a:04:e6:74:6a:d2:cc:c2:ab:04:
66:d9:fe:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:04:53 2026 by rpki-client