This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
File: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft (raw, json)
Hash identifier: nFbVEDSqAIjNOHvJoplK7817nNqKC7zYZjz0WpWB/ws=
Subject key identifier: 33:5E:22:12:29:A7:AD:49:61:0B:A5:24:CA:E2:52:42:80:7A:77:69
Authority key identifier: 3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D
Certificate issuer: /CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D
Certificate serial: 44EB71BE80CB11C62C0146F017C82651283FCEE6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
Manifest number: 0148
Signing time: Tue 23 Dec 2025 15:29:07 +0000
Manifest this update: Tue 23 Dec 2025 15:24:07 +0000
Manifest next update: Sun 28 Dec 2025 07:31:07 +0000
Files and hashes: 1: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl (hash: HozcxpPPGx1288yTCZ2k1YEh9/P3kipwjOn3sELMJuQ=)
2: 3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa (hash: AHFicsh51xc7duqTOrlmoLWuP5aU+OV95Mt4Zf+cn9c=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl
rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Dec 2025 07:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:eb:71:be:80:cb:11:c6:2c:01:46:f0:17:c8:26:51:28:3f:ce:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D
Validity
Not Before: Dec 23 15:24:07 2025 GMT
Not After : Dec 28 07:31:07 2025 GMT
Subject: CN=335E221229A7AD49610BA524CAE25242807A7769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:40:25:6a:6d:bc:9e:1b:ad:12:8f:bd:2c:
05:20:3e:07:14:13:db:30:52:98:88:ed:b4:0f:e5:
dd:93:94:89:b4:03:74:f5:5e:86:f1:29:c9:b2:69:
34:31:42:6f:dd:2b:c6:2a:c1:53:90:8e:b6:8d:47:
0b:c0:d3:e6:5c:b2:78:0f:1b:34:4f:7a:47:43:70:
d8:34:4c:3d:51:cf:f1:fe:34:b9:4e:c2:9f:74:6b:
47:be:18:97:37:26:af:29:69:2a:ac:a5:e1:38:7a:
86:a5:53:17:9f:61:04:5a:d5:72:98:d1:52:35:70:
e5:2e:42:37:4e:7f:56:c7:f7:cf:48:1f:d9:36:e3:
8f:ac:3d:d1:f6:5f:2d:0e:44:32:10:b9:8e:0c:22:
e5:35:03:2a:f4:c8:ac:e7:f7:3c:90:2a:64:fd:5d:
50:4d:48:61:a5:53:d8:3a:12:13:83:49:2d:3e:0f:
ef:e9:ea:0e:d7:5c:bc:84:89:a6:58:cc:a9:24:18:
7a:8d:77:80:64:9b:b9:ca:1e:4b:0d:1f:7b:92:03:
14:95:a3:6b:65:02:4a:7c:41:77:6e:7c:ad:6e:9b:
91:e7:ef:20:6f:85:c2:b3:e6:ec:93:b5:eb:69:ea:
ad:c5:61:54:66:5d:3b:e4:3d:02:0c:2a:4b:c4:96:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5E:22:12:29:A7:AD:49:61:0B:A5:24:CA:E2:52:42:80:7A:77:69
X509v3 Authority Key Identifier:
keyid:3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c5:ef:08:d5:c4:66:56:89:41:e5:98:3e:b4:9f:58:0b:7f:
d3:dc:f8:5c:9d:d1:4f:b3:42:94:00:55:85:25:1d:1c:c5:00:
82:1c:2d:d2:cb:9d:02:5d:9d:3f:ee:29:93:6d:f5:7e:ef:29:
d2:5b:f2:65:ba:e3:9c:e3:ca:c7:96:0d:d9:1f:b7:05:f1:1c:
8c:17:f3:b0:9b:c8:20:4a:31:8b:03:54:d8:1d:88:08:6d:21:
9d:66:f2:d4:97:14:94:7b:83:11:57:f1:0d:a2:4c:c2:86:27:
87:de:f4:0a:1a:f6:97:14:f9:3f:29:f0:8f:a3:7c:9b:a4:53:
83:87:3a:c5:df:4d:30:c3:75:c8:28:ad:cf:eb:d1:13:c0:b2:
10:da:2a:1a:8f:1d:fb:de:32:db:ac:3f:12:91:07:47:dd:4a:
88:4b:f8:04:eb:76:ee:48:16:a8:c3:09:df:7f:61:c0:86:f9:
34:93:57:3c:af:87:e6:c3:1f:48:c3:25:e0:96:35:fd:67:4b:
e6:92:93:c9:7a:d3:66:c4:26:03:95:4f:ad:bb:55:2a:4c:7d:
e2:75:a9:85:fb:92:77:b8:af:6d:c5:c3:bd:02:11:e1:a2:4e:
05:9d:36:34:58:9c:4c:7d:53:07:a4:8c:c4:59:69:34:8a:d1:
a4:eb:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 06:36:23 2025 by rpki-client