This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.mft
File:                     FB2370BF9B986D58F8105A4410005CD845985926.mft (raw, json)
Hash identifier:          4SKESS3Uo7vcGNksKIX75Xig/mfsX6JzQMva/5w/t50=
Subject key identifier:   9F:89:3E:5B:25:08:F9:2C:40:E1:2A:C9:FB:CA:B7:4E:AA:73:BC:D1
Authority key identifier: FB:23:70:BF:9B:98:6D:58:F8:10:5A:44:10:00:5C:D8:45:98:59:26
Certificate issuer:       /CN=FB2370BF9B986D58F8105A4410005CD845985926
Certificate serial:       570932F85A8CC60B8839940240BCC5E8FA74A559
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.mft
Manifest number:          0148
Signing time:             Thu 18 Dec 2025 14:22:43 +0000
Manifest this update:     Thu 18 Dec 2025 14:17:43 +0000
Manifest next update:     Wed 24 Dec 2025 03:43:43 +0000
Files and hashes:         1: 3137392e36332e3230302e302f32312d3234203d3e203238303636.roa (hash: kvaFT9oydxkiexlbD6OtqT7CUgsEx2Hkw1HUcmQyscU=)
                          2: 3139302e3132322e3139322e302f32302d3234203d3e203238303636.roa (hash: AOvO0WcCKD/MQeFVKjVCSAFWcBOMSLdDzzGDUs+AhBg=)
                          3: FB2370BF9B986D58F8105A4410005CD845985926.crl (hash: SYKZrOV0TvX/OiWsnHdJLmm3rUHb/VeibU43EpSMKdg=)
                          4: 3139302e3132322e3230382e302f32312d3234203d3e203238303636.roa (hash: SExD8Cy1HvpQyf9Jd+Z5hHVl/tZeV/8pmkl2R32vYCQ=)
                          5: 3133382e3138352e3131322e302f32322d3234203d3e203238303636.roa (hash: JYnmC12NvVR6AwAlb55A3XYJotyotWiCpYIoIhvQJR8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 03:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:09:32:f8:5a:8c:c6:0b:88:39:94:02:40:bc:c5:e8:fa:74:a5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB2370BF9B986D58F8105A4410005CD845985926
        Validity
            Not Before: Dec 18 14:17:43 2025 GMT
            Not After : Dec 24 03:43:43 2025 GMT
        Subject: CN=9F893E5B2508F92C40E12AC9FBCAB74EAA73BCD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b3:83:d0:fd:70:29:c7:a3:2f:1d:ae:3b:ff:
                    51:e2:e8:c7:c6:fd:ce:c4:f1:14:a7:f3:c6:61:b1:
                    de:52:10:8b:3a:8a:9b:7e:08:64:de:d3:4d:b3:ba:
                    af:e3:08:05:e2:f2:e9:6a:c7:d9:d7:e7:01:41:38:
                    6f:2a:0d:1c:40:bd:ee:b7:74:1a:18:d9:ed:31:86:
                    23:5c:e9:e8:81:f7:d1:52:55:0e:f7:78:65:e7:3b:
                    c9:55:40:18:09:f9:11:4f:a1:b4:c1:a9:0e:aa:07:
                    ac:a1:9a:3e:e1:e4:48:08:59:65:b9:37:4a:73:f0:
                    5d:1a:48:6a:25:db:79:60:5e:9b:9f:52:b7:7b:81:
                    1f:e3:81:18:8c:3a:91:72:0f:fb:88:20:c7:2f:df:
                    40:e7:d7:df:9c:b7:5c:79:a5:c4:1e:f2:30:6b:5e:
                    10:18:48:96:17:9f:fe:60:43:87:8e:64:4b:87:42:
                    ae:85:15:70:2d:a6:44:e2:38:de:92:79:1e:97:9c:
                    3f:43:41:e1:e9:ad:c3:d1:09:19:a9:64:6b:57:a3:
                    f8:d2:e2:af:43:cf:5f:6f:08:b4:3e:ee:dc:1a:45:
                    74:b7:aa:c2:16:ee:45:d5:db:84:2f:26:23:40:5d:
                    f4:d3:07:91:ee:03:af:40:15:a6:6f:60:9f:4b:68:
                    aa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:89:3E:5B:25:08:F9:2C:40:E1:2A:C9:FB:CA:B7:4E:AA:73:BC:D1
            X509v3 Authority Key Identifier:
                keyid:FB:23:70:BF:9B:98:6D:58:F8:10:5A:44:10:00:5C:D8:45:98:59:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:65:5b:ff:ff:8c:11:bb:50:6f:27:dd:34:de:04:c9:f2:bb:
         f4:88:36:b5:e7:ee:90:a7:6c:53:9c:b6:5a:fd:74:51:91:3c:
         99:18:dd:b2:04:44:d2:9a:4a:9b:83:c4:eb:87:e1:8e:fb:15:
         80:a7:ab:1d:ce:79:93:17:4d:1c:f2:39:fe:00:76:71:78:06:
         96:f2:7c:b4:ce:29:93:96:4e:95:0f:04:6d:30:a8:8a:9d:d7:
         6a:4c:02:a3:6b:c1:e3:f7:96:ac:1f:8a:9e:d4:a8:89:63:0a:
         87:f6:d5:e9:53:be:8b:cc:c8:4e:eb:fb:a2:09:20:fd:e9:70:
         b0:fa:86:08:c7:81:45:5c:e3:9f:12:00:6e:da:76:9d:3d:2b:
         62:bc:c5:8c:cb:a4:21:88:98:18:76:3d:45:39:c4:bb:0a:b3:
         f0:38:cc:4f:39:4b:30:6f:9d:6f:ff:aa:37:e0:33:cf:d5:81:
         6c:db:88:d5:45:b2:d1:05:ad:e3:15:78:0d:3c:f4:71:2e:b1:
         a2:c8:fd:58:91:1c:84:ad:27:3f:da:0b:92:02:f4:38:27:4a:
         14:4a:2a:5a:66:84:f4:65:ec:b2:93:9f:aa:0b:6a:7b:02:a2:
         6f:0c:33:19:76:f7:61:c9:40:29:a5:65:18:c1:68:90:c8:40:
         ff:4e:a7:b3
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUVwky+FqMxguIOZQCQLzF6Pp0pVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIyMzcwQkY5Qjk4NkQ1OEY4MTA1QTQ0MTAwMDVDRDg0
NTk4NTkyNjAeFw0yNTEyMTgxNDE3NDNaFw0yNTEyMjQwMzQzNDNaMDMxMTAvBgNV
BAMTKDlGODkzRTVCMjUwOEY5MkM0MEUxMkFDOUZCQ0FCNzRFQUE3M0JDRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDys4PQ/XApx6MvHa47/1Hi6MfG
/c7E8RSn88Zhsd5SEIs6ipt+CGTe002zuq/jCAXi8ulqx9nX5wFBOG8qDRxAve63
dBoY2e0xhiNc6eiB99FSVQ73eGXnO8lVQBgJ+RFPobTBqQ6qB6yhmj7h5EgIWWW5
N0pz8F0aSGol23lgXpufUrd7gR/jgRiMOpFyD/uIIMcv30Dn19+ct1x5pcQe8jBr
XhAYSJYXn/5gQ4eOZEuHQq6FFXAtpkTiON6SeR6XnD9DQeHprcPRCRmpZGtXo/jS
4q9Dz19vCLQ+7twaRXS3qsIW7kXV24QvJiNAXfTTB5HuA69AFaZvYJ9LaKrBAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUn4k+WyUI+SxA4SrJ+8q3TqpzvNEwHwYDVR0j
BBgwFoAU+yNwv5uYbVj4EFpEEABc2EWYWSYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjA4RUM1QTJGNkVGMDYxRDg2M0RGRjU0QzFGQzA1ODk2
QzcxNEJBRUQzNEM5QUIzNTc0ODE4MUY2QzY4OEJDLzAvRkIyMzcwQkY5Qjk4NkQ1
OEY4MTA1QTQ0MTAwMDVDRDg0NTk4NTkyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjIzNzBCRjlCOTg2RDU4Rjgx
MDVBNDQxMDAwNUNEODQ1OTg1OTI2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDYwOEVDNUEyRjZFRjA2MUQ4NjNERkY1NEMxRkMwNTg5NkM3MTRCQUVE
MzRDOUFCMzU3NDgxODFGNkM2ODhCQy8wL0ZCMjM3MEJGOUI5ODZENThGODEwNUE0
NDEwMDA1Q0Q4NDU5ODU5MjYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWZVv//4wRu1BvJ9003gTJ8rv0
iDa15+6Qp2xTnLZa/XRRkTyZGN2yBETSmkqbg8Trh+GO+xWAp6sdznmTF00c8jn+
AHZxeAaW8ny0zimTlk6VDwRtMKiKnddqTAKja8Hj95asH4qe1KiJYwqH9tXpU76L
zMhO6/uiCSD96XCw+oYIx4FFXOOfEgBu2nadPStivMWMy6QhiJgYdj1FOcS7CrPw
OMxPOUswb51v/6o34DPP1YFs24jVRbLRBa3jFXgNPPRxLrGiyP1YkRyErSc/2guS
AvQ4J0oUSipaZoT0Zeyyk5+qC2p7AqJvDDMZdvdhyUAppWUYwWiQyED/Tqez
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:24:23 2025 by rpki-client