This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
File:                     CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft (raw, json)
Hash identifier:          JnNMmjA84tsD4V6vXKpUg1bfVjeql1S1GovxiZunSwM=
Subject key identifier:   2E:0A:E5:CB:37:F1:3D:D2:BB:3D:47:6A:47:45:46:16:F4:F4:65:05
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       5D66679F72853BE14FE80BBDC8162F6CB4EDB404
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
Manifest number:          014D
Signing time:             Fri 19 Dec 2025 02:40:03 +0000
Manifest this update:     Fri 19 Dec 2025 02:35:03 +0000
Manifest next update:     Tue 23 Dec 2025 23:20:03 +0000
Files and hashes:         1: 3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa (hash: EqsSaCt8bWlKbQxBJ4+VRsUziVKjMJDVV+4mGez7uEE=)
                          2: 3139312e39372e31362e302f32322d3234203d3e20323634383434.roa (hash: Yuf5XFzKCIo2d0epsdNAai1Ql9jRbdyDY/wpCpQorNA=)
                          3: 3139312e39372e31372e302f32342d3234203d3e20323732383635.roa (hash: 8JFBRRJPMn+8eQeCdhdOgi4iQs4rzxptXxCUEWx1+Q0=)
                          4: 323830333a383238303a3a2f33322d3332203d3e20323634383434.roa (hash: l4Jx734awB6q++zt4yuuQs6QtfSrV51cP9wPz5GLhCQ=)
                          5: CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl (hash: Nu6EKvYLq/5URTB5UYfBYb65ZKV1hvGD4EGF59RlvXw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 23:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:66:67:9f:72:85:3b:e1:4f:e8:0b:bd:c8:16:2f:6c:b4:ed:b4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Dec 19 02:35:03 2025 GMT
            Not After : Dec 23 23:20:03 2025 GMT
        Subject: CN=2E0AE5CB37F13DD2BB3D476A47454616F4F46505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:49:23:4a:d0:92:c4:c7:83:d2:35:ea:43:
                    8f:9e:9c:65:18:8b:09:08:70:81:04:d2:29:16:d6:
                    14:4b:7f:6d:e0:fa:7a:f2:f4:d4:00:79:ec:6f:f4:
                    71:9d:d3:87:18:27:45:18:9e:d1:11:93:1d:e1:e8:
                    cc:3a:1f:01:3a:48:af:69:7c:b1:37:e9:95:58:72:
                    bc:8b:45:e2:ce:83:d5:a7:9d:2a:83:8b:5b:20:c4:
                    80:28:25:e1:59:6d:b6:18:af:c4:ca:75:57:89:11:
                    85:db:4e:a8:0b:ef:36:9f:3b:dc:f1:67:e2:a1:fd:
                    06:b9:8d:ef:d5:3c:fa:f6:f9:48:db:48:61:49:fd:
                    4e:02:ed:2b:39:41:b5:6a:b4:01:6e:95:85:3d:da:
                    77:81:8f:59:95:e8:36:c6:1f:34:2f:73:25:81:1c:
                    3a:66:72:82:cd:1c:71:2c:61:eb:00:ac:91:84:6c:
                    66:94:a5:7e:7a:fe:3c:a2:d0:0a:a5:ad:66:8a:ae:
                    99:c2:82:9c:57:15:36:35:19:c4:79:5e:05:7a:6c:
                    ea:32:94:54:74:1e:46:dc:de:28:78:7d:d2:aa:18:
                    a4:6e:55:20:65:1a:62:27:7f:25:b4:97:03:cf:de:
                    99:c9:d3:1f:ad:c4:a2:51:8b:95:97:f3:c8:a1:52:
                    ce:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0A:E5:CB:37:F1:3D:D2:BB:3D:47:6A:47:45:46:16:F4:F4:65:05
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:20:f2:00:98:b8:38:13:a1:a7:c6:f0:46:d3:67:03:d9:60:
         a5:6c:f8:06:2f:ba:42:b9:af:77:06:4e:bc:62:72:d4:ad:2e:
         ba:c7:4f:76:4f:48:0e:38:95:6b:af:cf:a3:fd:ea:81:18:8d:
         6a:ef:e7:cf:1a:68:7e:13:cc:aa:72:97:2d:43:e0:4b:fc:90:
         f4:0f:78:8f:4a:f1:3d:b5:ba:74:bd:21:f8:68:05:6c:4a:cf:
         e0:fe:50:68:d9:6f:76:a7:6c:c6:fd:8a:8c:2f:d7:18:38:cc:
         1f:7c:00:cc:9a:d4:9a:f2:b9:6d:3e:72:e9:16:3d:67:fd:cb:
         aa:3a:32:70:54:64:49:7b:71:57:67:1f:d5:58:eb:6d:50:c9:
         8c:1e:34:81:9d:a5:b5:f5:f2:91:bd:d3:ef:67:c6:00:81:30:
         d5:1e:00:4d:f4:86:31:c7:37:02:15:43:5b:1b:fe:05:4b:ac:
         86:e9:39:77:76:d1:7c:96:b2:25:83:9f:a3:aa:73:99:e3:44:
         ca:b9:e1:a1:54:85:ab:db:d9:5e:e7:68:72:51:b5:8b:85:8e:
         71:11:11:cd:df:48:f3:f1:9e:fa:a2:f5:9f:53:ab:a6:88:31:
         10:76:3c:ad:4a:ff:5a:e1:38:c8:63:80:61:37:ee:26:2e:e5:
         fc:94:48:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----