This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
File:                     8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft (raw, json)
Hash identifier:          9HiE9RyhZvcDxIEbdMxoIsI/p4FinnMqvc5fFC6LK/s=
Subject key identifier:   E9:98:33:91:C8:65:40:68:B5:20:4E:10:96:FA:9F:00:A8:96:1D:8F
Authority key identifier: 8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
Certificate issuer:       /CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Certificate serial:       5FF559D75404A22FF2699D43DD972AEAD1A73525
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
Manifest number:          0147
Signing time:             Fri 05 Dec 2025 01:33:42 +0000
Manifest this update:     Fri 05 Dec 2025 01:28:42 +0000
Manifest next update:     Tue 09 Dec 2025 02:21:42 +0000
Files and hashes:         1: 3230302e312e3136312e302f32342d3234203d3e20323639393431.roa (hash: Mn9HP51sd3nq80GCLvFm4IDufKTTGBNvzNiXgOdxkOg=)
                          2: 8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl (hash: WW0f/LhgfSnNBq4drqtIMnT50IlTPigLew5Oex3DZZ0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Dec 2025 02:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f5:59:d7:54:04:a2:2f:f2:69:9d:43:dd:97:2a:ea:d1:a7:35:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
        Validity
            Not Before: Dec  5 01:28:42 2025 GMT
            Not After : Dec  9 02:21:42 2025 GMT
        Subject: CN=E9983391C8654068B5204E1096FA9F00A8961D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:c2:41:1c:f5:4b:43:95:83:77:63:cb:b3:
                    ee:81:c8:cf:b9:1f:37:e3:7f:fa:76:a2:ee:b5:7d:
                    51:f4:4a:e9:19:1d:54:6e:09:02:d7:67:b5:2b:a1:
                    2c:3f:29:67:71:e8:ef:62:1a:1e:99:cb:31:89:0f:
                    eb:1a:88:7b:d0:1f:b1:11:42:6c:5f:14:9d:01:2c:
                    d9:f3:3c:8a:c0:92:f5:df:98:08:b7:34:6f:de:d7:
                    8c:85:94:cd:ab:53:82:30:79:69:6b:ae:81:69:26:
                    24:bf:ac:84:c7:4e:01:96:c7:a3:80:6c:9e:57:0b:
                    8c:3e:dc:69:ee:b9:da:43:87:3f:45:c8:54:8e:e2:
                    e7:04:fe:af:3e:5c:df:ad:26:5a:ab:08:92:b9:8d:
                    f7:21:e3:3b:66:7d:69:84:c6:7e:02:2f:37:32:13:
                    08:5d:a2:fe:61:6d:5d:bb:e2:d3:1b:53:3c:2d:06:
                    69:29:c9:91:b7:09:f9:b8:4c:11:0f:01:fe:2a:ec:
                    3d:b0:fa:52:26:e4:cd:70:5e:db:01:d1:3d:ff:aa:
                    93:ae:8b:8e:bd:f0:23:85:e5:06:9c:4e:56:13:b3:
                    49:75:c9:95:ea:84:6f:c4:9b:be:f4:53:78:76:fe:
                    b4:ea:4d:6b:8b:6e:f5:7e:86:cb:f2:2c:df:ff:fa:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:98:33:91:C8:65:40:68:B5:20:4E:10:96:FA:9F:00:A8:96:1D:8F
            X509v3 Authority Key Identifier:
                keyid:8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:fb:ab:14:2c:fb:1b:45:d3:d4:86:0d:5d:a2:25:d4:5f:ed:
         15:e2:b1:ed:d9:0a:f2:39:d8:f9:99:7e:68:75:f2:22:f1:e6:
         20:93:52:9a:07:14:04:46:e9:05:61:0d:4b:4e:b1:f1:cb:7f:
         fc:ad:ba:bd:ae:6c:9f:22:cb:7b:fd:7a:59:6a:09:e2:ca:69:
         53:1f:33:6c:a3:34:20:21:e6:6b:78:60:4c:ca:4f:30:42:24:
         bd:e7:68:98:62:44:c3:e6:33:a5:14:cb:60:80:29:d8:8c:34:
         64:f4:2b:b2:fc:64:55:89:61:d6:04:b8:ac:9a:4f:0c:24:65:
         1e:e9:87:4c:dd:c9:71:dd:2e:4c:fd:e6:5f:86:fa:57:be:b5:
         d0:82:c4:71:c9:82:a3:cf:b4:a6:42:30:fc:15:c8:5f:15:85:
         81:0c:85:b9:32:17:7a:3b:e1:8e:8a:c6:de:7b:f4:82:70:31:
         b9:d7:1e:32:44:14:a1:f4:9c:02:54:fa:8d:fa:b5:88:79:f7:
         31:0f:8e:23:c6:30:c8:25:a6:0f:18:e9:92:53:d5:96:76:2f:
         41:0d:67:0a:81:54:61:76:ae:45:a0:3d:85:d1:38:57:fa:dc:
         eb:fd:4a:a0:e1:8a:10:58:45:3a:db:a4:2c:77:2a:25:f9:97:
         9d:45:90:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 15:04:32 2025 by rpki-client