This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft
File: 3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft (raw, json)
Hash identifier: f1nau6FvrtR1u6ZInxuhz4C6h24chLGOhzvGSJpT7EE=
Subject key identifier: 9F:A6:28:77:E7:0C:17:A3:1D:69:5F:35:A6:3D:FC:14:6A:FB:20:E6
Authority key identifier: 38:34:E0:AC:0F:6F:E4:7D:0E:28:19:D7:BD:DE:CC:70:CC:B2:EB:E0
Certificate issuer: /CN=3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0
Certificate serial: 31A49A3C04FE283B43FBCC3F651E210FDDDC76B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft
Manifest number: 014E
Signing time: Wed 24 Dec 2025 07:44:13 +0000
Manifest this update: Wed 24 Dec 2025 07:39:13 +0000
Manifest next update: Mon 29 Dec 2025 20:13:13 +0000
Files and hashes: 1: 3137392e36332e342e302f32322d3234203d3e20323732383031.roa (hash: unVIWL9Rb/hAm0sECiQuIqJTRQGUJ5jwcSLWiyoxrJM=)
2: 3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.crl (hash: kp27J7PLsrmuiGRlMnd2O8RL4c7pCdv3bsA/5EIkZps=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.crl
rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 29 Dec 2025 06:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a4:9a:3c:04:fe:28:3b:43:fb:cc:3f:65:1e:21:0f:dd:dc:76:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0
Validity
Not Before: Dec 24 07:39:13 2025 GMT
Not After : Dec 29 20:13:13 2025 GMT
Subject: CN=9FA62877E70C17A31D695F35A63DFC146AFB20E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:43:c7:92:82:8f:df:d2:5a:99:a2:98:87:
0d:f5:d6:c8:6e:d2:54:11:48:45:47:59:c0:f3:c1:
68:db:e6:dc:bd:1b:0a:fa:97:d3:29:f4:b0:73:68:
09:c7:c9:57:6d:6c:b3:53:e7:a3:6d:1d:72:4b:f4:
40:9b:c7:d5:1b:fc:2d:25:b2:a8:4b:d4:cd:04:08:
33:75:28:03:49:d6:83:42:85:13:5d:d6:e0:18:22:
b0:e1:c6:e9:dd:6b:9e:39:3c:a7:02:38:d1:ff:f5:
ce:a4:ad:be:1a:71:c0:87:0c:a9:13:8d:4d:55:6a:
f9:2c:c0:3d:f8:94:c2:38:43:68:cb:40:ac:aa:d6:
3e:a2:f8:e2:f1:97:ba:d7:2b:e4:91:0d:20:e2:72:
0b:3e:8c:7c:7b:ea:33:8f:a4:37:e0:85:ad:db:90:
fa:3c:b9:3b:b5:17:89:00:81:95:91:9a:10:82:81:
3b:29:45:1b:65:e5:dc:8c:55:a1:4c:c0:8e:d1:53:
70:f1:e1:ef:d2:bc:8e:a6:8c:59:cb:d0:08:fb:c9:
8d:36:01:ca:52:ef:51:e4:bd:a7:46:01:25:9b:c1:
69:9e:34:18:ab:ab:d4:e8:c5:89:db:71:2c:c6:57:
9c:b7:aa:a5:af:19:17:2b:71:36:fa:d5:42:ec:77:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A6:28:77:E7:0C:17:A3:1D:69:5F:35:A6:3D:FC:14:6A:FB:20:E6
X509v3 Authority Key Identifier:
keyid:38:34:E0:AC:0F:6F:E4:7D:0E:28:19:D7:BD:DE:CC:70:CC:B2:EB:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ea:61:0f:df:98:72:87:c1:e9:f6:89:b1:9b:b4:f6:6b:17:
2d:39:b1:db:52:79:8e:77:a1:3b:39:7d:11:ef:16:3b:0b:7f:
85:07:45:5d:d2:09:f7:31:55:7a:e2:b7:df:46:d0:be:4f:b0:
87:74:27:8c:7e:5e:4f:87:e8:c2:fa:6b:6c:fa:11:98:54:b1:
f2:4c:a7:56:b6:1d:3a:d7:85:49:75:1a:0e:18:37:83:b5:47:
b0:ef:6f:c3:16:24:1a:cb:b7:87:6c:cb:25:8e:05:42:1c:1a:
de:50:4a:4b:4b:f0:45:76:8f:30:ea:95:0b:bb:98:fb:e1:f6:
58:31:8d:94:90:9a:f5:90:b4:b2:ec:6b:60:2f:a5:22:af:d7:
c6:6a:81:fd:b5:fb:27:2a:05:de:9f:de:e1:09:d6:31:88:c3:
c6:08:0a:af:2a:f8:3b:76:da:a2:fb:81:97:e5:04:cb:88:4e:
3a:d8:6a:c6:31:cd:b8:5a:b2:09:7d:0a:a1:80:cd:aa:a5:92:
90:fd:42:57:ae:44:4c:f1:93:90:ee:cc:b0:55:5f:82:7e:79:
49:8d:73:db:bc:e4:29:60:bb:5a:84:2d:1c:06:0f:d0:49:52:
b4:1d:8a:a3:54:f3:64:a9:30:89:67:be:46:f2:14:b3:e2:09:
72:27:f8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:03:58 2025 by rpki-client