This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.mft
File:                     CBF31447B564264D0A347F323D8011AEBA5D1613.mft (raw, json)
Hash identifier:          F8e5QcszjjbjIW0HMDwXryGw9Lftr4pG1vW4MuYBjow=
Subject key identifier:   C4:6E:8E:2A:C0:56:89:50:29:A4:B2:55:F5:D3:58:FC:74:DE:B0:44
Authority key identifier: CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13
Certificate issuer:       /CN=CBF31447B564264D0A347F323D8011AEBA5D1613
Certificate serial:       2ACE534C2BE507AFDF8D369895332D25F96E73F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.mft
Manifest number:          013F
Signing time:             Thu 20 Nov 2025 11:33:46 +0000
Manifest this update:     Thu 20 Nov 2025 11:28:46 +0000
Manifest next update:     Tue 25 Nov 2025 14:02:46 +0000
Files and hashes:         1: 323830333a626632303a3a2f33322d3438203d3e20323636373833.roa (hash: dV9ydLHucd/r/eKMbEUDxszJMX3pRfUSqtrePTubvow=)
                          2: 34352e3233352e31332e302f32342d3234203d3e203532343638.roa (hash: wX80AJv9LItMxmrMs20mFmBYZQabPTv8Sf1iNrDwX04=)
                          3: 34352e3233352e31332e302f32342d3234203d3e20323733393233.roa (hash: BtKuoZdZIttYBqrNPO63p0UlaKEFsIz0Xu2UK93ghKo=)
                          4: 34352e3233352e31322e302f32322d3234203d3e20323636373833.roa (hash: dD3zLp0WrO8lzWf8DpDQBlTm7s85pj4/PxFuAxruOfw=)
                          5: CBF31447B564264D0A347F323D8011AEBA5D1613.crl (hash: hgHV5TAEiPYMHJyC0okBbEROLYW5OxRGwsVS2Z9ahZU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Nov 2025 18:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ce:53:4c:2b:e5:07:af:df:8d:36:98:95:33:2d:25:f9:6e:73:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBF31447B564264D0A347F323D8011AEBA5D1613
        Validity
            Not Before: Nov 20 11:28:46 2025 GMT
            Not After : Nov 25 14:02:46 2025 GMT
        Subject: CN=C46E8E2AC056895029A4B255F5D358FC74DEB044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:2c:fa:e2:2b:23:31:df:8f:1b:00:3f:5f:
                    90:2b:ce:1e:a2:4f:ca:14:9b:be:de:b2:fc:dc:e2:
                    9c:d2:79:0b:16:1a:dc:6a:10:8e:22:db:bf:b6:a6:
                    dc:14:1e:b8:1f:8b:52:ab:d7:bd:e3:9e:73:44:36:
                    a1:77:94:1f:e6:aa:c4:55:9d:0b:89:b2:1a:04:7d:
                    40:21:4a:16:58:94:1f:ee:2c:11:82:fa:a0:c8:6e:
                    d5:5f:39:59:1c:8b:fd:ba:53:4c:ba:2b:67:1f:00:
                    15:5f:47:c3:78:7f:2b:69:8b:8e:33:c9:c3:96:ad:
                    88:02:80:52:6e:d0:c4:ce:08:f0:7a:8e:63:c0:4b:
                    4c:96:64:4e:f4:90:74:08:32:67:5e:06:a2:14:04:
                    53:2f:58:8f:06:5e:eb:88:ab:83:fa:6c:b3:90:f3:
                    ca:93:56:d9:2f:9b:a5:b7:a3:87:b4:d8:3e:78:1f:
                    fe:41:23:1f:17:4e:28:83:c2:96:74:08:8a:c7:d9:
                    f6:de:27:fe:7b:24:9f:fb:59:bb:df:52:1c:79:d7:
                    9c:e9:1a:44:fa:af:75:ab:b6:ad:0f:28:cf:62:54:
                    b6:2f:d8:5c:a2:b7:c8:3a:d0:a4:14:dc:7c:2a:a6:
                    f9:7d:56:e0:61:e9:e9:d6:e9:bc:02:7f:ac:a4:0b:
                    2a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6E:8E:2A:C0:56:89:50:29:A4:B2:55:F5:D3:58:FC:74:DE:B0:44
            X509v3 Authority Key Identifier:
                keyid:CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:ea:fc:f4:1a:ba:84:67:54:8b:e2:9d:59:dd:cf:af:8d:
         4d:4f:e6:dd:e7:5d:ea:4b:10:9d:10:9f:bb:61:80:d9:3a:24:
         15:3c:39:0c:2a:3f:50:88:35:ea:c4:66:d0:e9:3e:e3:48:68:
         55:df:0d:c1:81:97:1f:d7:a0:7d:5e:f3:a6:d5:9e:90:98:a3:
         81:b8:4b:78:a0:28:46:ee:f0:c8:ae:01:6f:dc:1b:fb:7a:55:
         e6:c5:87:3c:de:ec:85:51:3d:4a:10:b1:80:40:13:b2:c2:26:
         98:62:3d:a5:a4:59:83:db:f9:77:f9:79:87:b2:9f:9f:fa:64:
         08:47:8c:49:0f:7b:0a:4e:5b:08:8c:21:03:88:d4:07:b0:1f:
         69:30:10:e3:69:33:99:79:ac:10:30:1c:e6:84:70:bf:43:fe:
         4f:38:b9:46:89:a3:3c:40:85:05:ad:03:10:fc:b6:34:62:cd:
         b4:b1:57:4b:ed:5f:31:f0:c0:d1:a0:59:ed:c7:18:cd:5c:ed:
         35:80:01:c3:4b:3c:3d:88:d0:0c:db:00:fd:05:8b:17:d3:11:
         5e:d4:1e:1b:d0:f8:6b:84:b8:24:74:fc:56:d2:e1:f2:db:3a:
         87:00:27:d0:99:38:de:55:c2:60:d2:0e:a4:13:24:eb:86:3f:
         7d:7e:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 20 18:01:56 2025 by rpki-client