This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.mft
File:                     B1225D42FCF145DB2561F136DC359390925409AD.mft (raw, json)
Hash identifier:          sib2QvibkmGyyudQ5TDMFVPQat20jQiv1MJHeTFhw6I=
Subject key identifier:   F8:11:4A:6C:21:B3:2F:A9:C3:AD:A3:6D:7E:30:04:7E:1F:9E:8D:C7
Authority key identifier: B1:22:5D:42:FC:F1:45:DB:25:61:F1:36:DC:35:93:90:92:54:09:AD
Certificate issuer:       /CN=B1225D42FCF145DB2561F136DC359390925409AD
Certificate serial:       14412511F157F5256DB04B56CF4F22A6DAC6F5C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.mft
Manifest number:          014F
Signing time:             Sun 21 Dec 2025 20:31:48 +0000
Manifest this update:     Sun 21 Dec 2025 20:26:48 +0000
Manifest next update:     Sat 27 Dec 2025 14:49:48 +0000
Files and hashes:         1: 34352e3232352e312e302f32342d3234203d3e20323635383537.roa (hash: iV+/JURFv2n12sQROcvkBDt8vVLOtkABtD18FcI7TgQ=)
                          2: B1225D42FCF145DB2561F136DC359390925409AD.crl (hash: DL1sj2dGh4cWhLzfRVL4bucjN1cZW5f3Y92s+wH4VI4=)
                          3: 34352e3232352e332e302f32342d3234203d3e20323635383537.roa (hash: wkLkCjW7oVjKPrtwq4NY49S0vkcf9AlFCWgMaBNvd2o=)
                          4: 34352e3232352e322e302f32342d3234203d3e20323635383537.roa (hash: nZpvpMORhu81XYTiy/5HoqT3TWqVpG05mRyeeJ082A8=)
                          5: 34352e3232352e302e302f32322d3234203d3e20323635383537.roa (hash: 2n7WDWx7plW9vPiMH2fqasGvNw2xJPajeVQ7JP0HeGE=)
                          6: 34352e3232352e302e302f32342d3234203d3e20323635383537.roa (hash: xbUll9pSzB/8l3e/d35ShqgHHYsmjGiuXGwca8n9M/g=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 20:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:41:25:11:f1:57:f5:25:6d:b0:4b:56:cf:4f:22:a6:da:c6:f5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1225D42FCF145DB2561F136DC359390925409AD
        Validity
            Not Before: Dec 21 20:26:48 2025 GMT
            Not After : Dec 27 14:49:48 2025 GMT
        Subject: CN=F8114A6C21B32FA9C3ADA36D7E30047E1F9E8DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:2a:2b:79:5a:d9:b0:7a:75:43:66:31:42:
                    98:b3:63:12:cd:00:7e:71:de:75:66:32:5c:6a:75:
                    e7:04:dd:d8:a6:75:00:a5:a8:42:76:66:9c:60:67:
                    1c:ec:98:8b:a4:03:ee:6d:c4:c9:be:0c:c2:2f:4a:
                    c1:77:af:8d:41:c5:ed:be:18:d0:cb:df:82:71:74:
                    ed:1f:a3:c7:0b:73:74:ad:42:9a:f6:de:58:dd:b3:
                    a6:88:e1:31:25:1b:b7:ee:12:63:d8:73:af:78:e9:
                    a9:4d:9f:35:59:54:df:3c:b1:02:16:35:26:db:7a:
                    14:f3:67:43:5a:e3:59:7b:6b:e7:98:61:88:5d:5a:
                    d3:8c:15:99:85:3a:ff:cf:1e:02:72:6f:a7:51:34:
                    2b:be:fa:7c:be:9c:9a:3c:12:76:cb:df:d0:2a:4f:
                    4a:d0:c1:05:8a:ec:46:57:cf:b8:56:1b:83:c3:74:
                    2b:06:cc:cf:3b:27:bb:e4:84:5a:cd:19:57:dc:62:
                    fc:fc:a7:ca:f6:26:52:8d:db:11:cd:bb:85:f4:03:
                    9d:46:86:8a:41:1a:9a:ef:e0:d2:e6:75:ab:01:e4:
                    fb:d7:53:27:35:60:d4:5b:65:0b:89:23:40:d0:31:
                    c4:06:86:74:0d:5d:48:91:67:ca:03:e0:74:f1:04:
                    74:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:11:4A:6C:21:B3:2F:A9:C3:AD:A3:6D:7E:30:04:7E:1F:9E:8D:C7
            X509v3 Authority Key Identifier:
                keyid:B1:22:5D:42:FC:F1:45:DB:25:61:F1:36:DC:35:93:90:92:54:09:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:61:64:e5:2b:b0:a5:57:88:c6:a1:1d:1f:f9:4e:0d:78:8f:
         6d:3e:f1:09:30:87:6f:ea:01:78:65:14:b4:c3:5a:f0:bd:be:
         26:49:53:15:1a:34:f3:54:5e:96:d6:42:a5:84:c2:8c:b0:92:
         d3:ac:16:f0:f3:27:3d:88:48:8f:11:31:33:93:47:5a:f7:a4:
         9f:dc:25:a5:e7:bb:9a:84:b5:70:39:91:84:6a:55:ba:2d:d6:
         21:55:dd:d6:24:39:93:a0:e8:97:7f:5e:4d:a5:89:43:5b:a3:
         ac:3f:46:8e:37:25:2d:d7:a8:3c:4c:e2:01:b2:23:04:bd:22:
         31:85:27:b8:6a:9a:86:3a:1b:6e:67:5c:bf:ae:14:ab:77:a4:
         ec:d7:a1:fe:09:42:b0:d1:41:20:19:0f:3d:23:8e:95:85:05:
         71:be:c8:04:b8:d7:3c:3b:04:5c:20:12:65:02:10:bf:b7:da:
         a5:ca:97:68:94:14:0d:07:e6:ad:04:1c:6d:ad:9c:f9:1b:6d:
         77:5a:5e:61:9c:e7:dc:58:96:c3:a0:cf:a6:b3:c9:3e:f7:48:
         f6:cd:05:59:93:da:b5:5e:51:01:58:1c:0e:26:ac:14:35:52:
         11:75:27:12:d6:3c:5d:e6:cf:6f:85:f5:84:a4:ff:5d:f4:7c:
         13:f4:7f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 13:11:33 2025 by rpki-client