This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft
File: 1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft (raw, json)
Hash identifier: avplduBzvwqH4O4vsp+vuDbKlRE2gvrGC84LDJMhG5g=
Subject key identifier: 0A:C8:F9:A8:6B:27:41:3D:DF:F0:CE:3E:C7:97:D2:E5:BF:17:42:E8
Authority key identifier: 1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC
Certificate issuer: /CN=1FF21857EA288ABC3D5018816284FC74ED1A1CCC
Certificate serial: 1A2FF271802C5B571CE5545828964FC7B1F15995
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft
Manifest number: 014E
Signing time: Sat 20 Dec 2025 13:32:19 +0000
Manifest this update: Sat 20 Dec 2025 13:27:19 +0000
Manifest next update: Fri 26 Dec 2025 12:01:19 +0000
Files and hashes: 1: 34352e3232342e35322e302f32322d3234203d3e203532333237.roa (hash: XCpLzTgjUcKT9zJs7aINeWvMrnyJCXpMD2VLmxfPxYg=)
2: 1FF21857EA288ABC3D5018816284FC74ED1A1CCC.crl (hash: Jig2+ysfoJ5JDSB652n98NiauJemLBJaxPBwmVbY3MY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.crl
rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 26 Dec 2025 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2f:f2:71:80:2c:5b:57:1c:e5:54:58:28:96:4f:c7:b1:f1:59:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FF21857EA288ABC3D5018816284FC74ED1A1CCC
Validity
Not Before: Dec 20 13:27:19 2025 GMT
Not After : Dec 26 12:01:19 2025 GMT
Subject: CN=0AC8F9A86B27413DDFF0CE3EC797D2E5BF1742E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:b7:fd:40:15:a4:be:1c:df:67:a6:29:19:
59:1f:63:38:71:c5:d1:60:97:02:df:9f:1f:b4:4c:
da:c7:ef:bf:d3:43:59:7c:0b:b8:b7:5c:f7:cf:f1:
d0:01:35:10:29:5d:49:a6:b3:20:48:0b:d4:ce:92:
fe:3e:35:6f:de:2a:df:56:79:88:b9:ed:4b:8b:73:
e7:8f:7c:18:94:d0:58:97:5c:1c:bb:5b:81:54:b5:
e6:dd:65:14:b1:73:72:69:cd:0c:6a:8d:e0:e1:01:
52:55:e1:f1:02:06:77:68:c7:a0:dc:8a:eb:39:90:
6c:3e:ba:87:a0:be:2f:21:eb:df:ba:cc:ce:77:7c:
44:fb:77:31:a3:73:bb:e3:22:79:2f:a2:f0:96:1a:
e2:99:c9:b4:ee:8c:14:86:50:a7:af:de:91:00:a2:
e2:3f:55:7e:0e:c9:04:af:d4:e0:cb:fa:cb:d3:86:
9b:02:c0:60:b2:83:10:22:93:31:69:36:5b:bb:38:
3b:f7:25:d8:35:dc:59:2e:3b:cc:f8:6a:a5:cc:a6:
fc:ab:d8:20:96:d5:e3:fc:96:8f:fd:97:2b:e7:d4:
ef:5a:ba:36:98:0d:e7:c2:77:c5:a1:48:98:90:64:
d1:c3:d8:09:d4:e5:fa:59:bb:75:54:a9:4a:af:0a:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C8:F9:A8:6B:27:41:3D:DF:F0:CE:3E:C7:97:D2:E5:BF:17:42:E8
X509v3 Authority Key Identifier:
keyid:1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7b:f0:a5:9b:90:00:de:8b:ee:0b:0a:fc:cc:d7:7f:2c:13:
03:0a:57:71:c2:bf:28:02:0a:8b:9a:42:34:29:a5:39:c0:b6:
61:bf:7c:8f:69:02:48:41:9f:9c:ac:29:56:8c:30:fd:30:d3:
53:81:2b:ac:9e:59:12:db:81:8f:cd:d8:c3:1f:ee:d3:b0:99:
4d:22:55:8b:09:c7:49:c1:29:b8:9b:2e:fc:21:1f:ab:61:fb:
56:87:58:bc:1c:08:a8:24:dc:43:92:bd:2b:07:7c:a3:f0:b5:
6a:76:3d:0f:4f:b7:df:20:40:2c:b2:7b:85:63:6a:9e:2d:44:
9f:ea:0f:d5:f2:9c:5f:77:00:36:c9:d1:a0:b8:55:95:5e:05:
07:90:7d:b3:60:75:87:a7:f7:e0:9b:fc:5a:8a:e4:4f:cd:98:
89:11:f6:ca:a6:d8:82:29:8f:67:b1:a9:f7:5f:90:74:a3:83:
e1:9d:f1:6e:70:8b:3d:49:01:b8:42:12:99:79:bc:0a:e5:69:
fa:d6:de:60:88:e9:90:1e:00:35:8b:70:de:96:e3:d8:8b:a9:
5a:b3:de:ce:44:ab:2d:6c:c4:42:ad:85:e2:1c:e9:ba:ff:6b:
cf:21:68:38:c6:b8:86:41:2b:7e:b2:a3:d2:18:d4:cf:5b:61:
27:4b:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:52:25 2025 by rpki-client