This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft
File:                     D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft (raw, json)
Hash identifier:          OochoNZs1XnIZeWvb7MUlY/JLFf3yvbafWleY2VYKPs=
Subject key identifier:   4C:B2:D7:6F:05:92:06:AA:7F:94:69:07:96:D7:CE:F4:70:38:EC:E8
Authority key identifier: D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E
Certificate issuer:       /CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
Certificate serial:       0C62639024B2DFE98B07857F6E17C319FDC0E60D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft
Manifest number:          0149
Signing time:             Fri 19 Dec 2025 23:43:19 +0000
Manifest this update:     Fri 19 Dec 2025 23:38:19 +0000
Manifest next update:     Thu 25 Dec 2025 05:04:19 +0000
Files and hashes:         1: 3136342e3136332e3231372e302f32342d3234203d3e20323635373734.roa (hash: VqCgRDXDCYkvh+7P8AQR6pWxR98y8vuzmpcvkNIwHic=)
                          2: 3136342e3136332e3231382e302f32342d3234203d3e20323635373734.roa (hash: oi+3AlsB1K/9tzRcnIqWYuywwU2C2bXNMbYoTSdZ8JQ=)
                          3: 3136342e3136332e3231392e302f32342d3234203d3e20323635373734.roa (hash: ZTGnLH5AuruyXrOa0JrRxjcPTAIeu/L321gw5lIFR4E=)
                          4: 3136342e3136332e3231362e302f32322d3232203d3e20323635373734.roa (hash: 2iIM3IOjytFz4Q9rl81bRm2gVqq+6QbWLs7bBgv87Ew=)
                          5: 323830333a663763303a3a2f33322d3332203d3e20323635373734.roa (hash: sxzTTKNZtAguoNCOhJ7sF/p8p9ZZi2g5iiWQjocIqOo=)
                          6: D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl (hash: Gevb/ttoaz1JyzDexc4OhENiWBLIxyyWFQmsSHFOG0w=)
                          7: 3136342e3136332e3231362e302f32342d3234203d3e20323635373734.roa (hash: cUMDsAckHfyTEubuHRgWwC/Ulg4m8hyIbcAQ8QyvroY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 13:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:62:63:90:24:b2:df:e9:8b:07:85:7f:6e:17:c3:19:fd:c0:e6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
        Validity
            Not Before: Dec 19 23:38:19 2025 GMT
            Not After : Dec 25 05:04:19 2025 GMT
        Subject: CN=4CB2D76F059206AA7F94690796D7CEF47038ECE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:4a:84:6d:5a:7c:bd:da:99:5f:48:23:b4:
                    c9:58:a7:80:89:c6:4b:45:2e:93:50:cc:fd:ea:f0:
                    09:f6:5d:f1:c6:9d:34:c8:a4:8d:af:c5:cc:c0:d9:
                    50:31:81:6b:19:f5:e4:de:36:b6:d5:7b:0f:c3:8b:
                    16:98:94:7a:65:48:c7:dd:4a:28:75:c4:f4:d5:07:
                    ab:0b:29:c4:c9:b5:80:aa:b5:e3:71:fb:7e:9d:ad:
                    69:7d:ec:68:93:81:a8:cd:f9:f3:44:67:11:b5:99:
                    b2:b3:7b:04:f9:0f:cf:33:2a:1f:5b:30:a6:67:52:
                    82:47:d3:7a:d4:f2:b2:64:c3:8c:b0:5d:bb:d4:a1:
                    47:26:1e:fe:62:b5:49:50:e7:0f:71:0c:6d:ad:d0:
                    e6:b2:b4:42:b6:f4:f4:48:6f:d1:6b:ca:72:72:8a:
                    06:92:8d:a0:ff:77:7e:5a:d1:ea:32:41:32:bf:34:
                    29:f7:d6:86:8a:e7:ff:57:e3:03:8b:55:68:ad:2c:
                    3d:84:11:63:ab:61:54:3f:28:eb:76:eb:23:bf:29:
                    26:e5:94:31:94:77:f0:81:5e:d1:50:77:73:e8:34:
                    0e:8d:86:14:b5:11:6c:03:b0:d7:a1:f5:36:50:a4:
                    15:d6:53:36:9d:c1:fa:f3:6c:5e:1c:e0:3a:f3:9e:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B2:D7:6F:05:92:06:AA:7F:94:69:07:96:D7:CE:F4:70:38:EC:E8
            X509v3 Authority Key Identifier:
                keyid:D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:d3:ba:ae:b5:2d:2f:fc:54:c5:19:70:02:71:2a:a0:73:
         0e:92:32:be:ff:d4:d4:eb:af:27:56:0c:4f:53:9d:77:8e:70:
         dd:d0:66:db:97:5d:52:1a:06:06:62:99:ef:ed:3d:25:ef:fb:
         8b:25:3a:f3:8f:89:25:74:64:b4:d9:67:3d:8e:37:4c:7b:b7:
         59:25:a8:bf:ea:60:a4:ca:b2:5a:37:4f:50:fd:a2:df:20:79:
         0c:60:3f:79:0a:e4:59:87:32:3b:74:44:9b:17:60:36:df:e3:
         39:3c:c9:f5:35:5c:24:4c:55:30:51:c1:af:41:9a:44:79:7c:
         4b:76:7e:89:08:89:50:24:6e:8a:75:bb:ff:e6:80:be:dd:ff:
         8d:f2:a8:4b:df:0f:41:50:a9:8c:0a:d7:1d:30:eb:40:76:30:
         5f:76:97:b1:91:4f:bc:5b:1f:62:aa:19:bc:23:25:61:ec:ca:
         07:79:fb:6d:91:98:00:17:d6:01:a7:d8:47:53:d7:c5:cf:00:
         c9:00:4b:1b:bd:da:1d:04:fe:a2:5f:ed:8f:c7:2f:07:ff:6f:
         58:99:bb:86:68:8f:6d:46:ce:c1:4c:fc:02:0d:78:56:cc:57:
         df:cd:36:47:f4:ee:46:f0:7d:af:14:48:9b:da:73:17:1b:11:
         e7:7f:0e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:15:35 2025 by rpki-client