This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
File:                     3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft (raw, json)
Hash identifier:          6WsbYNHsX1rhE3NqofB4Lbz+liOsJVSTNwOSB508Xy8=
Subject key identifier:   7D:D5:28:D4:DD:D6:8B:C0:EB:6B:16:D9:20:7A:C9:77:9C:7B:08:55
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       57940DB16844B54C1A08E7E146840755142B12F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
Manifest number:          014D
Signing time:             Mon 01 Dec 2025 19:03:33 +0000
Manifest this update:     Mon 01 Dec 2025 18:58:33 +0000
Manifest next update:     Sat 06 Dec 2025 12:28:33 +0000
Files and hashes:         1: 3138312e33342e302e302f31352d3230203d3e203237383839.roa (hash: eXTF8wFJ5TpuKpu2ttMCp+YiWu31I3cndcqEwZLrJIU=)
                          2: 3138362e32362e3132382e302f31372d3230203d3e203237383839.roa (hash: uxsH05qS2B1QJ8hZ/Vx1eoRDDwA8kwIXknmq7Yj6ZMk=)
                          3: 3230302e3130372e3139322e302f32312d3234203d3e203237383839.roa (hash: 730gQjHjMcLxx+gjo3WiRmB7xQ2XMPJc5Ey6FIeuuRU=)
                          4: 3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl (hash: /P5sAni6dom4oOiZPoJ7Phc0l+MuLxHnys/95e+w9es=)
                          5: 3138312e33342e302e302f31352d3135203d3e2038303438.roa (hash: +ZCEIDosudj77xcjy8Its0LjS6TKkk/QfHryMcjYQlA=)
                          6: 3138312e31382e302e302f31352d3230203d3e203237383839.roa (hash: jTngqQUpo7n/YhFSsBURe77Iqp1YYNHl4Bftq/mc4TA=)
                          7: 3230312e3233382e302e302f31382d3234203d3e203237383839.roa (hash: 3THliZFI3hjXGW1flcxNUuPJOCVvAh7i5KZBGA0apD8=)
                          8: 323830303a3530303a3a2f33322d3438203d3e203237383839.roa (hash: yZ7A+3E9IIRiDRDR6ywByorkVI0oRAWOF24WdGH5zsQ=)
                          9: 3138362e32362e302e302f31382d3230203d3e203237383839.roa (hash: 7vUn68SwvoPxAdtqXWu37FHNaWKvLWj5sfRTV7bgT1o=)
                          10: 3138312e31372e302e302f31362d3230203d3e203237383839.roa (hash: Vi16ATN8SVHmivds/lhRqAfILTCy/2WZGZZquP8REqM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 12:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:94:0d:b1:68:44:b5:4c:1a:08:e7:e1:46:84:07:55:14:2b:12:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Dec  1 18:58:33 2025 GMT
            Not After : Dec  6 12:28:33 2025 GMT
        Subject: CN=7DD528D4DDD68BC0EB6B16D9207AC9779C7B0855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:81:6b:1f:c4:f2:a7:b4:11:1f:34:04:2c:
                    77:db:7e:2a:90:2a:e3:fb:71:11:c6:42:4e:1b:2d:
                    a2:f2:7b:2b:57:6c:b3:3e:13:63:b2:ba:e5:e7:cd:
                    66:05:33:ce:38:c9:6e:e2:e2:50:17:3c:5c:54:eb:
                    c4:cb:e1:2d:09:e3:18:5e:2e:63:0b:7c:bf:64:39:
                    f2:f7:22:35:02:fd:11:a5:53:31:2b:a8:96:97:bc:
                    20:26:67:68:36:b3:19:98:91:18:14:5f:a5:95:12:
                    2c:d2:05:32:22:b0:8e:0e:b3:91:b2:d9:d0:f9:d9:
                    8c:03:66:d1:dc:c6:10:c8:77:a6:a2:a5:11:4f:89:
                    0c:13:da:32:2e:26:bd:e8:b4:a0:cb:85:e1:be:db:
                    b8:b0:aa:13:d4:99:7a:a7:1b:0a:e6:b6:78:9c:d9:
                    e7:a7:34:eb:3f:bd:27:42:fa:43:06:d1:82:8f:41:
                    2d:fd:03:e9:b6:ee:80:77:78:d5:30:07:26:e2:5f:
                    45:c8:56:6b:d7:00:55:93:42:71:8c:47:7d:7c:fc:
                    62:8b:f6:60:0e:28:8c:26:38:be:7f:61:58:d2:49:
                    50:94:7e:d2:40:27:60:b0:61:4b:f7:c5:19:ad:6c:
                    6c:a6:5f:80:73:f3:bc:b1:85:02:5c:76:1b:78:74:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D5:28:D4:DD:D6:8B:C0:EB:6B:16:D9:20:7A:C9:77:9C:7B:08:55
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2a:72:9f:63:98:02:e2:ee:ab:07:1f:af:67:c5:91:a0:a6:
         eb:bf:cd:4b:7b:c2:37:af:0f:b4:29:6b:ec:42:85:93:47:14:
         2e:86:bc:5e:58:c3:63:8d:cc:e0:f0:1e:88:17:ba:7e:6f:be:
         d0:90:9b:62:da:78:42:0b:53:b4:28:44:dd:69:d1:30:94:f8:
         78:cf:d2:0b:dc:ea:6b:21:17:b7:61:d2:57:7d:b0:90:93:6c:
         48:30:3c:4d:02:aa:bb:6a:a5:0b:a4:d8:90:26:37:50:cb:e1:
         41:bc:dc:33:da:54:05:43:55:8b:3d:10:aa:6b:73:e1:0e:b3:
         c8:c7:b8:9d:44:bc:52:7b:f8:23:f1:e3:5c:1e:5c:93:17:2f:
         91:b9:0b:af:d2:8c:ff:25:31:69:b4:71:ca:81:03:09:09:12:
         41:43:f7:cc:8d:79:29:db:fd:34:2f:8e:61:91:0a:c8:2b:6a:
         8a:e8:e5:66:c2:97:a0:ad:4d:44:31:61:76:af:6e:9e:38:54:
         9a:68:bc:15:47:ec:81:0b:27:81:bf:77:62:df:ab:9f:05:c5:
         8b:43:f0:2a:90:45:00:ee:13:58:2c:ba:3f:63:a6:27:b3:cd:
         c2:b8:e2:63:18:96:58:6d:4a:12:f0:f8:19:c0:43:89:32:7e:
         b2:59:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 2 18:35:54 2025 by rpki-client