This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.mft
File:                     4042BFADA396ABB702E65D77D2E207DB761B973F.mft (raw, json)
Hash identifier:          VKEnubWx56A1OsxtSNxs1FPs1nRdWCYgRHtI0AzUNXc=
Subject key identifier:   96:2C:8D:2D:FB:AE:AC:7A:E4:79:40:27:CA:C8:D6:71:59:36:05:66
Authority key identifier: 40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
Certificate issuer:       /CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Certificate serial:       0BE35298881073F10C9B48259FE6186C7D8A46CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.mft
Manifest number:          013A
Signing time:             Sat 22 Nov 2025 21:56:37 +0000
Manifest this update:     Sat 22 Nov 2025 21:51:37 +0000
Manifest next update:     Fri 28 Nov 2025 06:41:37 +0000
Files and hashes:         1: 32372e35302e31322e302f32322d3234203d3e20323634383235.roa (hash: WsysQZm1Rvg2S9FpHDMH9r2v+RBC22p2JGzhBmtJizc=)
                          2: 3138372e36312e39322e302f32322d3234203d3e20323634383235.roa (hash: TE14ibkuXq+SqMWjs/kG4K2LGxwLZ6avmm4PSAVgk9I=)
                          3: 35392e3135332e34342e302f32322d3234203d3e20323634383235.roa (hash: T0+4uO0Xtyh3/MbNAsTUtAOdRY/bMxDw2+LIx7aE9f4=)
                          4: 323830333a363332303a3a2f33322d3438203d3e20323634383235.roa (hash: l4QubGCaluvHuzRzrvsxYe4aLHlVFxpzpc2xWKP0Ahg=)
                          5: 4042BFADA396ABB702E65D77D2E207DB761B973F.crl (hash: odHjnW0ryk8IWLHbs3q34EhWalT2fiZpygZqWFtv0OQ=)
                          6: 34352e3233302e3234302e302f32322d3234203d3e20323634383235.roa (hash: 4eEclyhtffraLE3VsTBAY9MBFlxDxo7jEbFH4AzAzZM=)
                          7: 3231302e3231312e35362e302f32312d3234203d3e20323634383235.roa (hash: 5E/cenK9QopBMgtuWNnd7B1mDbOaIZwVgIGUc+0p3J0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Nov 2025 18:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e3:52:98:88:10:73:f1:0c:9b:48:25:9f:e6:18:6c:7d:8a:46:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4042BFADA396ABB702E65D77D2E207DB761B973F
        Validity
            Not Before: Nov 22 21:51:37 2025 GMT
            Not After : Nov 28 06:41:37 2025 GMT
        Subject: CN=962C8D2DFBAEAC7AE4794027CAC8D67159360566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:07:75:66:be:a5:77:9d:30:2b:c3:65:7a:
                    de:b1:42:43:5b:91:14:bc:ea:79:3e:06:97:71:fb:
                    fa:e0:1d:0e:6e:b0:bb:1c:ab:dd:40:3f:b2:28:84:
                    7d:ce:da:18:3e:28:0c:90:4a:fd:4d:97:24:38:22:
                    2f:b1:94:2f:da:56:fc:7c:14:f5:75:c3:5a:4b:33:
                    c0:81:08:55:3f:77:cb:9b:cf:96:f0:88:96:e2:c2:
                    85:fe:c5:9d:11:84:32:0a:a9:5d:64:2a:af:84:d9:
                    dc:16:15:61:f5:1a:85:81:55:c5:00:31:e9:c9:c0:
                    9f:74:00:fa:c4:0a:5a:32:54:45:eb:0f:94:1e:58:
                    33:92:cd:67:f1:45:c3:74:b5:d1:19:b3:72:cf:bf:
                    c1:06:ac:83:58:36:56:a0:3b:2a:c9:79:45:5a:0e:
                    72:10:28:e0:4f:77:32:84:70:7a:ae:ae:be:bd:6b:
                    82:c2:26:c1:eb:93:3c:6d:55:4d:7d:11:81:f8:22:
                    ab:06:56:61:d0:ce:58:43:1b:85:9d:c1:03:49:65:
                    ed:77:87:51:be:7c:1d:cf:04:da:f0:5f:04:03:95:
                    1b:be:83:3a:c5:7c:71:24:a2:1f:9e:f7:6d:f0:75:
                    30:ac:7f:dd:d9:31:52:21:ce:f3:00:d9:fe:4a:ae:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2C:8D:2D:FB:AE:AC:7A:E4:79:40:27:CA:C8:D6:71:59:36:05:66
            X509v3 Authority Key Identifier:
                keyid:40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:fc:9d:a3:f5:19:d0:8f:aa:0a:d7:6b:a2:db:99:ea:a1:4e:
         03:7d:a6:97:e1:54:73:8f:67:a5:1e:26:ce:a6:81:7e:64:7f:
         fa:4f:d1:70:93:fb:94:db:0a:4e:a3:88:b3:7a:04:9e:f2:20:
         66:bd:67:a3:f9:04:91:6c:95:20:53:47:de:ef:a6:6b:37:68:
         1a:8e:81:fd:05:02:6f:a5:cd:96:5a:79:8c:7e:2f:09:a2:5a:
         a5:0f:17:b9:d3:a7:e6:0a:dc:cb:44:db:6d:0d:53:db:60:3b:
         02:d1:10:38:4c:40:2e:75:31:cb:77:cc:41:ad:a8:38:3f:90:
         e6:3b:11:9a:9e:bd:e7:74:c4:ec:c3:10:6c:80:d4:b9:23:39:
         ba:35:17:f9:19:24:fa:1a:88:ab:4a:0e:6c:7d:e1:3c:b0:ae:
         f4:98:95:e7:bb:1f:84:c8:62:45:22:c6:d6:2f:37:0b:da:b7:
         61:cf:21:0d:6f:21:d2:d8:67:18:47:af:5a:99:e5:bd:6a:b0:
         5c:fa:65:ca:9f:12:5c:35:08:65:6a:91:d6:0f:81:5d:16:a4:
         0a:bf:e0:3e:86:14:e2:cf:1e:d1:46:81:e4:f0:26:e3:92:f5:
         d2:67:f8:8f:4b:d9:e4:5e:e8:f7:8d:81:aa:a4:e6:0d:2a:ff:
         61:b7:92:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 01:52:11 2025 by rpki-client