This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft
File:                     0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft (raw, json)
Hash identifier:          h+nQMQdQZoH7nuR+vn6H22f8l+ZitAtL+PcqQDzdhcw=
Subject key identifier:   81:B4:94:AF:66:12:C2:69:25:E3:3E:A6:68:FD:34:2B:C1:EE:5B:07
Authority key identifier: 0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5
Certificate issuer:       /CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
Certificate serial:       0E06594CD6BAA4714CFAD0D0052690D26480F8F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft
Manifest number:          014B
Signing time:             Thu 27 Nov 2025 07:12:02 +0000
Manifest this update:     Thu 27 Nov 2025 07:07:02 +0000
Manifest next update:     Wed 03 Dec 2025 04:13:02 +0000
Files and hashes:         1: 0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl (hash: +5LcR10z9OzoSvN4eaN2ERGRNhcSdi5IE++2K/HyQmk=)
                          2: 3138312e3137372e3230382e302f32312d3234203d3e203532333237.roa (hash: 9Zmu+Kq1oDOZsE8wYHIdBUc9a455vXOjdKVhC7cgE5o=)
                          3: 323830333a376430303a3a2f33322d3332203d3e2030.roa (hash: arvmV9/n1go30HvpDDmadIoCXCDhnKJQ6Zj5hdtG2Qg=)
                          4: 3137302e38302e3131362e302f32322d3234203d3e203532333237.roa (hash: ZIPIxHbPwceQToF6GLER9h1o/KmK32CdQpim4Eidfi0=)
                          5: 323830333a376430303a3a2f33322d3438203d3e203532333237.roa (hash: YlN86YVc3t4QCnXbW/MTGH7DenuetIh992QbUWAr5Zw=)
                          6: 3133312e3136312e3233322e302f32322d3234203d3e203532333237.roa (hash: aII+rsrXDI/GaWjK8XYZ5HePEKR+vKXKtaYYq142aVY=)
                          7: 3139302e35322e35362e302f32312d3234203d3e203532333237.roa (hash: wOYS8pYAPfvxCY3gECvrSHgDdC9UC73r7fv6YYLQLUs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Dec 2025 08:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:06:59:4c:d6:ba:a4:71:4c:fa:d0:d0:05:26:90:d2:64:80:f8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
        Validity
            Not Before: Nov 27 07:07:02 2025 GMT
            Not After : Dec  3 04:13:02 2025 GMT
        Subject: CN=81B494AF6612C26925E33EA668FD342BC1EE5B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:a9:54:db:b4:0b:79:64:7d:0b:e4:8d:89:
                    44:28:fc:18:ce:98:37:57:20:f0:3c:25:a8:16:10:
                    60:ff:bd:00:ed:a6:6a:45:8b:35:e2:f4:9a:be:45:
                    01:4c:b2:79:66:75:4f:ff:4e:31:9c:55:71:46:cd:
                    26:c3:5b:b7:50:90:38:2a:97:bc:59:f3:e1:e5:5d:
                    ca:9f:20:db:60:48:a9:e0:0a:3a:cc:53:7c:29:74:
                    40:09:7e:9e:34:5d:b7:91:b7:6e:7c:cd:ea:9d:c4:
                    f1:04:87:19:8d:5a:f6:b6:71:80:0e:cb:88:cb:73:
                    00:71:62:07:08:c3:19:d9:4b:55:aa:a0:51:3d:8c:
                    cd:a0:17:fd:94:a6:a0:6e:6b:b9:e3:23:c4:99:d4:
                    74:45:00:fe:e1:da:96:df:fc:53:b7:85:19:0b:e1:
                    20:2b:2d:b1:31:60:78:98:f2:8d:2e:46:fa:99:91:
                    95:ed:e4:fc:50:3f:a4:9c:3e:7e:75:35:fa:9e:d1:
                    d2:89:47:f2:53:f9:22:5a:dc:03:d6:49:19:32:62:
                    d9:ad:db:1d:5a:01:ec:99:fb:b6:d9:ed:e5:f8:8a:
                    3a:96:14:d4:fe:28:e9:c7:47:27:71:9a:2c:85:af:
                    d6:ec:2e:94:6a:f0:27:22:6b:f2:8b:9e:06:00:26:
                    cb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B4:94:AF:66:12:C2:69:25:E3:3E:A6:68:FD:34:2B:C1:EE:5B:07
            X509v3 Authority Key Identifier:
                keyid:0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:60:fd:44:f2:39:7c:a4:d1:45:e4:53:dd:58:61:59:90:98:
         19:67:b0:56:e2:c3:70:72:d9:99:5c:41:6a:88:0e:c6:ea:68:
         2c:76:a1:57:45:67:06:21:04:8d:41:98:59:7c:39:fd:44:82:
         71:30:8e:88:b0:d9:fc:03:01:2a:f8:7b:c5:c1:7b:92:7c:c5:
         55:d6:e9:91:fa:97:39:0f:ce:4a:4e:b4:de:98:06:b7:c6:84:
         83:31:7d:bb:f5:57:b1:84:31:05:5f:d6:3d:fc:f3:5d:50:3f:
         07:4a:7e:10:07:ec:d0:27:bc:53:06:bc:ae:d9:70:09:25:9e:
         87:5f:68:59:5d:ce:88:54:ae:19:ba:52:cc:72:78:4d:5e:9a:
         a1:7a:4d:6e:c6:27:96:c4:98:b9:3c:44:ab:cc:4c:5d:28:3b:
         09:f1:8b:c1:c8:5d:76:e4:92:79:d3:7d:8e:17:99:a6:0d:e1:
         9c:1b:7b:02:47:61:bd:ba:e4:a3:58:a4:4e:71:07:cd:13:d6:
         d6:50:1e:52:a3:58:54:78:ab:8a:2f:db:b7:c0:c5:d7:0f:8b:
         35:7f:f7:16:0a:1b:e4:fd:64:63:2e:1b:77:5c:1e:36:8c:3b:
         6a:1f:ac:6f:a3:28:90:3c:f6:4b:89:ca:11:9c:7b:5e:e1:e0:
         82:e9:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 27 10:50:28 2025 by rpki-client