This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft
File:                     B59FE64A7A5CEC130FFE578645806708FE6955A2.mft (raw, json)
Hash identifier:          OoPX2vBjv3dAVbG3NpHTf+qmz10M5fY7cbG3TI3e4LA=
Subject key identifier:   22:1F:2A:DC:8F:89:C3:FB:C2:29:53:AC:22:CD:F2:4A:B8:E7:0E:A8
Authority key identifier: B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2
Certificate issuer:       /CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
Certificate serial:       082E03489133AE08DC2F7E43D1FEE5609BE8DB48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft
Manifest number:          013E
Signing time:             Fri 28 Nov 2025 07:20:24 +0000
Manifest this update:     Fri 28 Nov 2025 07:15:24 +0000
Manifest next update:     Thu 04 Dec 2025 05:25:24 +0000
Files and hashes:         1: 3139322e3130302e3139382e302f32342d3234203d3e203631343638.roa (hash: IITUJlUk54b5Shyksw8Le3N38jLeorxJHrnosXbz8Go=)
                          2: 323830313a31303a363830303a3a2f34382d3438203d3e203631343638.roa (hash: mY0Zy1AlevZjofWzuweBdt9tjX7aEro1P/IuplDLVEQ=)
                          3: 3139322e3130302e3139382e302f32342d3234203d3e20323731383231.roa (hash: MgoMIfqhLDh7SSOcnIhR0MO7l2xnNGQNLkOrbJZIxIo=)
                          4: 323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa (hash: pfERmRW7pqKsXRH147dybdqeA8rQtA96IwMNwcwU4Sk=)
                          5: B59FE64A7A5CEC130FFE578645806708FE6955A2.crl (hash: 4W7GLOvc5KZuK+R1zKxebJ1v/kmQESU3Tk90g9XBESU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 04 Dec 2025 05:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2e:03:48:91:33:ae:08:dc:2f:7e:43:d1:fe:e5:60:9b:e8:db:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
        Validity
            Not Before: Nov 28 07:15:24 2025 GMT
            Not After : Dec  4 05:25:24 2025 GMT
        Subject: CN=221F2ADC8F89C3FBC22953AC22CDF24AB8E70EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:b4:9d:99:21:23:ed:04:63:6a:4a:99:b5:
                    0a:ea:5b:fe:c0:cc:25:92:f7:9d:6c:14:ca:32:29:
                    95:e7:42:17:4d:e3:ee:3e:77:d7:dc:4f:88:71:36:
                    f1:f8:f1:d4:5e:c8:0b:2a:83:66:1e:a3:2c:99:3c:
                    ab:e2:01:b4:cd:3c:0f:04:d2:ca:bf:21:84:12:01:
                    56:87:eb:2d:46:a7:ca:b1:0d:75:d4:2c:ec:f9:91:
                    97:a4:4b:6b:b9:88:3d:0f:d1:1d:4d:88:1d:99:15:
                    6f:07:b6:39:11:78:c2:25:64:53:fe:96:c1:dc:aa:
                    be:65:04:65:12:d0:4a:bf:23:19:ea:ad:ee:55:85:
                    ca:d4:d7:b7:b8:1f:6a:31:0f:be:ad:c7:dd:de:c1:
                    ad:2b:1a:a3:3b:32:93:b7:73:72:29:32:98:ce:21:
                    53:db:9e:9e:37:db:fc:27:b0:7a:c6:f5:a6:42:80:
                    7b:54:aa:ee:f8:fa:ec:08:4b:a7:66:d0:c7:08:b0:
                    d2:68:d4:f6:2d:54:41:ac:6b:2d:41:92:2b:e1:7c:
                    52:57:79:8d:c6:96:5c:ee:34:e2:0f:e6:ec:2b:1c:
                    9c:ec:13:e9:1a:70:bb:18:7e:a4:fc:44:52:99:3c:
                    36:ae:88:16:75:c7:c2:fc:08:28:17:6a:62:28:83:
                    35:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1F:2A:DC:8F:89:C3:FB:C2:29:53:AC:22:CD:F2:4A:B8:E7:0E:A8
            X509v3 Authority Key Identifier:
                keyid:B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:93:f0:f7:5e:13:09:c4:31:be:0a:81:c7:cf:44:15:ea:73:
         9d:dd:a3:a6:15:fe:05:33:fa:4c:2b:48:1d:89:15:6c:d5:9b:
         bf:f6:2b:ae:27:0b:fb:9d:f6:6b:59:c2:2c:08:a8:05:49:c2:
         35:fa:b8:2a:c4:53:bc:e1:23:c4:16:50:74:81:88:73:67:8c:
         29:5a:e1:ac:5f:e0:fb:36:ef:c1:de:8d:a7:9d:54:67:86:d4:
         97:fa:9f:6e:df:c8:68:0f:9d:7b:24:e9:53:fa:62:e9:a1:ba:
         3d:c1:e0:79:27:fc:70:c1:1d:c6:40:5c:18:9a:d5:64:f0:f6:
         cf:f6:57:6c:05:2a:82:81:91:ef:9a:c0:ed:d6:40:55:f8:d5:
         98:16:11:19:91:25:bb:d7:f5:50:9a:fb:34:12:a5:71:78:aa:
         78:06:81:8b:59:e4:6e:4b:05:40:94:e1:93:34:21:88:a6:1e:
         5b:9d:f4:cf:bd:af:1c:0d:a9:fa:77:34:73:9c:9d:15:f7:f1:
         08:7e:30:41:1f:1d:64:9a:34:84:76:a4:85:57:97:fc:7b:77:
         ed:2e:d0:93:f6:a2:49:fc:5f:1d:ac:8a:70:c1:97:ff:5a:d2:
         d8:04:64:11:0a:dd:9f:86:c6:33:b5:48:d2:ff:ef:0b:a5:80:
         be:be:bf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----