This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
File:                     2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft (raw, json)
Hash identifier:          6bT/HbgKm1CK7g6W4W63axJuSvgVMXKgVmPMvP4PARA=
Subject key identifier:   E9:C0:6A:BA:20:C4:95:32:CC:0C:E4:69:0F:D8:C3:1D:BF:B5:46:13
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       0E116E48E09F4E138A3C527776CA2386CEF0BEC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
Manifest number:          0149
Signing time:             Sat 22 Nov 2025 06:02:53 +0000
Manifest this update:     Sat 22 Nov 2025 05:57:53 +0000
Manifest next update:     Thu 27 Nov 2025 02:25:53 +0000
Files and hashes:         1: 3230302e3131322e3232302e302f32342d3234203d3e203233303331.roa (hash: ng5BLuGf1ZA0GWPOn21xjmjFpun6T9TRT8LCZwJcglY=)
                          2: 3230302e3131322e3232332e302f32342d3234203d3e20323636393034.roa (hash: ZO70/RqUyCZziRSssUArdylxT/ysjeCBjEIQfxRtfVQ=)
                          3: 3230302e3131322e3231382e302f32342d3234203d3e20323733303638.roa (hash: Qweg8TZmHNjVgCL3NJKFUKOMuQ5O7aHgtuhAfUBheR4=)
                          4: 3230302e3131322e3232312e302f32342d3234203d3e20323636393034.roa (hash: l7HHafmpQAspzhIE9eWLldutcDznPVN72k9pDlJ3A4Q=)
                          5: 2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl (hash: 2gVJDi+21qjekFlBOsxMx6B0EBeiGcFoDdo0bWRTfVI=)
                          6: 3230302e3131322e3231372e302f32342d3234203d3e203233303331.roa (hash: tazc6m45jtEiGWAIsT4EZTaz+W8HNwb7+JURH+PGRFk=)
                          7: 323830333a366130303a3a2f33322d3332203d3e203532333737.roa (hash: qcvHroSQOjx92YDTWKDrmckMiOiRmVZeZZ8ucrebQlg=)
                          8: 3230302e3131322e3231382e302f32342d3234203d3e203233303331.roa (hash: bfweLxWVa0FoJmwbE+U3fvhdmybU+PVmaGWnft4p1iU=)
                          9: 3230302e3131322e3231362e302f32342d3234203d3e203532333737.roa (hash: sXkmCTsqU0gnUIzkA55IcXo6KCGXzQVcf2KKvVSeKYs=)
                          10: 3230302e3131322e3232322e302f32342d3234203d3e20323733393531.roa (hash: Oe6e1Iq6Pd3HxmtCBr+pzNfMr/4r8M0bDp02uZEZq+M=)
                          11: 3230302e3131322e3232322e302f32332d3234203d3e203233303331.roa (hash: DlpZImvClDrjwcVIosF1eODZjsa0BwjH/+72jvzIaJg=)
                          12: 3230302e3131322e3231392e302f32342d3234203d3e20323733313233.roa (hash: dOYBAOwtay0NCA36DX2g39bfQp5POLUEYHZjMTJFwAE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Nov 2025 18:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:11:6e:48:e0:9f:4e:13:8a:3c:52:77:76:ca:23:86:ce:f0:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Nov 22 05:57:53 2025 GMT
            Not After : Nov 27 02:25:53 2025 GMT
        Subject: CN=E9C06ABA20C49532CC0CE4690FD8C31DBFB54613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:af:18:90:9f:72:a4:24:25:1b:07:81:81:
                    67:23:f5:4e:a8:3e:52:d6:45:e5:a4:65:9d:a0:95:
                    b1:40:d9:e3:88:d0:57:73:39:ef:44:2f:c0:d2:da:
                    fa:c1:6c:22:03:4c:3f:db:8a:53:9a:ad:3d:5b:7e:
                    b2:09:d4:69:ed:59:a5:1e:e9:1b:70:aa:2a:36:7c:
                    4c:92:80:de:9d:d7:06:1e:97:03:07:da:20:28:e1:
                    95:80:4a:5b:b0:e8:b9:30:31:24:22:8a:73:5f:6e:
                    2c:21:88:07:62:fb:09:56:32:00:32:0f:17:9f:7b:
                    ad:71:ba:1f:be:64:1e:b3:53:b1:07:ae:e9:00:ee:
                    79:a5:a1:37:fd:93:0f:37:fe:a6:e8:3e:7e:36:20:
                    68:e0:b2:a9:b5:f9:9e:2a:65:af:19:82:bb:ce:69:
                    f5:aa:f5:04:48:d4:df:bd:ea:3a:cd:ab:b6:97:53:
                    c0:41:b2:97:74:28:b3:dd:50:fa:8c:78:d0:f2:b5:
                    9c:2b:f3:f3:01:cd:24:99:5f:2b:0d:1b:ec:20:fc:
                    b3:b9:be:d9:3c:f0:05:6f:3b:1c:50:48:f2:d2:52:
                    9b:78:05:38:9f:93:0c:89:57:49:3f:95:7c:da:6e:
                    77:4f:59:4f:3c:f3:7a:c4:8d:b3:8f:62:d6:93:2f:
                    5e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C0:6A:BA:20:C4:95:32:CC:0C:E4:69:0F:D8:C3:1D:BF:B5:46:13
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5e:90:78:23:16:ed:c9:22:bf:e3:9f:ba:6a:dd:1a:2b:63:
         07:80:25:2a:c8:6c:06:70:a4:b3:c6:4c:3a:af:93:5b:15:b0:
         10:62:36:85:63:1e:0d:81:4b:32:af:5e:e3:a8:72:a2:d3:52:
         41:e0:e5:96:b4:1b:d1:ae:be:3b:92:b6:2a:fe:b8:7f:5e:ef:
         82:45:46:5f:2d:43:38:6d:e7:92:24:88:bc:50:47:fe:ab:68:
         7d:26:bb:9c:54:e9:fc:9c:2d:63:fc:70:73:54:69:94:a2:23:
         7b:5c:cf:9f:3d:0f:b9:b6:53:df:f7:86:a3:e5:66:e3:29:59:
         cc:02:34:6b:93:de:72:56:ad:a0:be:74:04:7a:99:de:11:40:
         18:64:c4:53:44:b7:82:a7:fa:ba:ae:dd:92:91:37:e8:c1:90:
         76:3a:3f:e1:22:e0:24:76:f6:f0:1c:59:9b:c9:6e:dd:47:e4:
         bb:a3:12:ae:23:b1:10:10:e5:d4:ed:41:15:61:b7:28:50:66:
         d1:30:1b:06:cc:ea:91:ff:9c:c6:2a:8e:29:f6:d2:f6:40:c4:
         4f:10:30:b9:26:eb:d1:53:55:bf:f6:22:ce:59:b7:e9:6d:54:
         de:e6:d0:3f:7a:67:98:0c:c6:15:5f:7b:6d:73:00:85:e4:36:
         b2:61:e9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 08:05:58 2025 by rpki-client