This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft
File:                     0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft (raw, json)
Hash identifier:          VwI+CVdPv11OOR0kcF8fgtBO/KEM+PqGcqoGuGvGkeY=
Subject key identifier:   5A:E0:B6:D0:67:C0:7E:4F:4B:92:A9:3F:FA:B6:2E:4A:33:49:5A:87
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Certificate issuer:       /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial:       3B20755F225CFD7F064C5827849E62CB542BCE04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft
Manifest number:          0148
Signing time:             Sat 06 Dec 2025 20:12:46 +0000
Manifest this update:     Sat 06 Dec 2025 20:07:46 +0000
Manifest next update:     Thu 11 Dec 2025 13:07:46 +0000
Files and hashes:         1: 323830313a3131313a333a3a2f34382d3438203d3e203138373437.roa (hash: qSDkpJHeJxiCXATPPFW//r+LuWbkI+yyIbM4gV//kaU=)
                          2: 323830313a3131313a323a3a2f34372d3438203d3e203138373437.roa (hash: GvU02c1A/TSQx17Alm7E4eBllAU9engXwaaZdgiB+1U=)
                          3: 323830313a3131313a343a3a2f34372d3438203d3e203138373437.roa (hash: J+elfS06jKiJEnOlGr0FzhuTbRFJPrFAln4cLf9k8ok=)
                          4: 323830313a3131313a3a2f34342d3434203d3e203138373437.roa (hash: DgLtTk5IjWIQ7kbnKlM5X6Gh5nfWqJ6YXwsB3IDj2IQ=)
                          5: 0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl (hash: D6889TlDn8RxdwWk8ClBeD65M5sO5c3FvEkFDMdxJGY=)
                          6: 323830313a3131313a323a3a2f34382d3438203d3e203138373437.roa (hash: FmVt0KCJ51S1P08GAJ+JoYYRaa+uIcmyA4mIqdEQH+Y=)
                          7: 323830313a3131313a343a3a2f34382d3438203d3e203138373437.roa (hash: QmqZAUef9vbGdWrCscH5ZLokc/AHvxx2rInnCdR5b7s=)
                          8: 323830313a3131313a353a3a2f34382d3438203d3e203138373437.roa (hash: qNzvr4ULpDy9qHFxmuhVzAKH9ytOv+j1Y0aiPqxB0hI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 13:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:20:75:5f:22:5c:fd:7f:06:4c:58:27:84:9e:62:cb:54:2b:ce:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
        Validity
            Not Before: Dec  6 20:07:46 2025 GMT
            Not After : Dec 11 13:07:46 2025 GMT
        Subject: CN=5AE0B6D067C07E4F4B92A93FFAB62E4A33495A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:c8:f9:f1:20:03:8c:2c:16:2c:70:54:84:
                    34:67:52:69:1e:06:e3:0d:d7:e1:d9:8d:de:c4:34:
                    3c:54:44:67:30:28:5a:d2:e7:20:92:3d:f3:7a:e6:
                    66:10:de:0e:66:75:cb:98:24:ce:53:b5:0c:7e:10:
                    12:bc:47:4b:5d:93:4b:06:46:b4:fe:26:58:2f:af:
                    83:ae:06:14:43:cd:44:e3:68:ff:29:a6:07:48:c1:
                    3b:a3:e0:74:b9:43:e8:c7:3e:cc:8b:ea:80:92:93:
                    ba:36:9a:ec:ea:9a:13:42:ac:97:26:32:07:2a:b1:
                    67:96:d3:fe:25:8b:22:b9:79:8c:82:d5:fc:d3:a5:
                    d0:bd:29:90:3d:c6:8f:d5:2c:58:bf:d1:25:c8:ef:
                    42:7e:4d:49:07:40:71:d3:6b:43:ad:15:01:d7:a7:
                    70:6e:7b:77:82:f0:b8:fa:75:c9:8c:4d:5b:2d:90:
                    87:a7:7c:9f:61:af:24:96:cd:fe:2e:00:67:06:be:
                    c0:cb:87:0e:3c:82:88:99:4a:3c:1a:38:84:bf:60:
                    ac:2c:fc:86:6a:f4:b7:92:32:90:4a:c1:41:03:3d:
                    81:2f:fa:8a:96:8c:c9:38:0c:54:3d:eb:dc:8e:e8:
                    93:70:b8:f4:87:c4:de:35:14:43:4a:0f:aa:28:0a:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E0:B6:D0:67:C0:7E:4F:4B:92:A9:3F:FA:B6:2E:4A:33:49:5A:87
            X509v3 Authority Key Identifier:
                keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:24:78:83:f2:5b:0c:5c:d5:3e:88:d5:c5:ed:b9:a8:2e:3c:
         8c:27:c2:d6:46:c3:76:b6:49:32:28:d5:09:a1:7c:5f:15:31:
         1c:3c:be:81:4b:b9:8d:c0:2e:7c:0e:68:8a:04:cd:5c:29:2f:
         35:5e:e1:05:99:36:e1:5d:c4:bc:c0:97:22:56:06:23:c7:2d:
         8b:5a:dc:cb:71:7f:6b:7f:fa:ef:e7:c0:76:9b:d9:f5:2d:21:
         4c:ca:f0:b6:cc:48:ea:9d:06:75:59:61:b6:94:71:e8:a0:84:
         d1:6c:52:2b:35:9c:ba:1e:e4:ca:82:e2:64:e0:4d:6f:10:d9:
         8d:13:f9:0a:b3:d4:72:50:51:a9:75:ae:37:6d:b2:4c:7c:76:
         04:f5:00:98:e1:39:e6:14:38:fe:11:a0:da:4a:2b:5f:da:01:
         e9:82:b9:d4:55:55:eb:a6:37:6c:4a:2c:17:a1:94:69:9c:59:
         ca:7e:ae:92:f7:3d:01:27:54:e3:79:1e:1e:40:37:01:e4:f0:
         c9:39:52:d9:09:5c:e5:04:ec:72:fb:97:f2:1a:ee:de:40:c1:
         29:8f:cd:9c:27:d5:f2:a7:0f:70:22:c1:81:05:68:42:50:b0:
         e6:ae:94:1d:e9:0e:0b:2c:77:43:7c:ab:09:59:3d:3f:d5:3f:
         83:e9:b3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:00:44 2025 by rpki-client