This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft
File:                     871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft (raw, json)
Hash identifier:          JxZdHgIWx+HuDubIpZSFusW4cC7WMZJlh4GgSTwslXg=
Subject key identifier:   97:F3:BC:35:9F:EB:A5:65:EE:51:5A:0A:BF:28:25:99:55:79:7D:79
Authority key identifier: 87:1A:5F:48:AD:8A:83:C1:83:DB:36:24:AE:A0:58:25:D7:49:DD:F7
Certificate issuer:       /CN=871A5F48AD8A83C183DB3624AEA05825D749DDF7
Certificate serial:       0DB8A5EF93313C1B2A431DA5DC50C971658C4215
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft
Manifest number:          0148
Signing time:             Sat 13 Dec 2025 08:09:54 +0000
Manifest this update:     Sat 13 Dec 2025 08:04:54 +0000
Manifest next update:     Thu 18 Dec 2025 09:11:54 +0000
Files and hashes:         1: 3137392e36332e3231362e302f32312d3234203d3e20323634363430.roa (hash: NA7iNkhojMgXNzijn7fXI4vYnsi4C4yiU42bGMIvHks=)
                          2: 3137392e36332e3231362e302f32312d3234203d3e203532343638.roa (hash: kj2UEEp8DRwC+BRaq5aJwktCbtWC5e+9Uf5dRj85fmY=)
                          3: 323830333a393838303a3a2f33322d3438203d3e20323634363430.roa (hash: PCrQ3+AMkbGN6p48/UWhGEULuAU60h0SXbWd2m0z8is=)
                          4: 871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl (hash: hMcNSN7rHiHW1td+UDgfAxjfLDRCIqG/OTGK6hJ9dUs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 09:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b8:a5:ef:93:31:3c:1b:2a:43:1d:a5:dc:50:c9:71:65:8c:42:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871A5F48AD8A83C183DB3624AEA05825D749DDF7
        Validity
            Not Before: Dec 13 08:04:54 2025 GMT
            Not After : Dec 18 09:11:54 2025 GMT
        Subject: CN=97F3BC359FEBA565EE515A0ABF28259955797D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:33:df:a5:d0:80:ea:4a:49:30:b0:b3:a0:
                    9a:d2:24:74:f9:bb:46:86:60:e7:a2:be:dd:51:21:
                    65:40:2c:f7:8f:fc:6f:db:87:b7:9c:87:16:ac:76:
                    b8:d2:87:f8:c5:54:52:2e:7f:99:18:90:10:a6:9d:
                    87:3c:9b:8e:6b:1a:9b:b2:4e:90:e3:46:7e:57:1b:
                    59:ae:29:83:e9:ec:e9:d1:b9:2b:a9:89:e4:25:50:
                    86:cd:09:93:86:41:88:66:16:25:35:0c:a7:cf:96:
                    de:e4:68:32:f8:dc:3b:a5:02:96:a5:2f:d2:02:fd:
                    82:a4:0d:5b:53:e8:2d:ca:a9:55:0b:e3:32:bb:27:
                    2d:07:fd:71:db:2b:02:39:07:bd:c5:d0:29:00:a9:
                    32:28:cc:ad:74:4e:82:7d:7c:5b:be:89:6e:38:80:
                    f2:fa:eb:42:85:71:43:30:62:b8:43:f1:63:d4:c7:
                    59:40:cb:9f:53:3a:d3:c8:68:a2:9a:78:e5:97:81:
                    a6:42:32:46:20:1a:d3:5a:7b:10:a2:14:32:d0:7a:
                    98:b6:5b:7a:7a:bc:35:c0:1a:fd:cd:d5:ed:2f:7b:
                    fb:00:c4:26:b4:67:fc:a3:31:07:1f:7e:3e:06:6e:
                    f7:ab:b8:fe:bf:0c:ae:27:73:5b:69:4d:ba:42:75:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F3:BC:35:9F:EB:A5:65:EE:51:5A:0A:BF:28:25:99:55:79:7D:79
            X509v3 Authority Key Identifier:
                keyid:87:1A:5F:48:AD:8A:83:C1:83:DB:36:24:AE:A0:58:25:D7:49:DD:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:e4:77:06:ae:3c:0f:62:81:82:18:64:81:c5:ca:2f:6c:
         42:fb:2a:4f:23:12:81:c0:4e:ee:b4:3b:e5:fe:62:6f:c6:fb:
         08:43:f7:47:5e:a6:03:65:0d:a2:bf:b9:89:15:2b:82:2e:80:
         b9:37:f2:89:53:ac:df:c9:13:39:e5:90:3c:13:c9:b8:53:a4:
         68:dd:c3:e0:d3:87:22:1c:fe:89:ec:f2:46:4d:25:b5:56:b5:
         52:6b:19:62:76:5f:7d:5b:8e:35:47:d4:c7:e7:67:d2:cf:5c:
         ad:a0:e5:b2:dc:3f:7c:56:2e:fa:d5:30:56:43:ee:16:21:6c:
         4e:ca:fd:13:9b:5c:c7:68:6e:78:1e:d0:2d:0e:38:69:72:08:
         46:07:92:85:bf:4e:09:ca:ca:31:20:8a:c7:83:93:a3:16:56:
         90:44:24:54:c5:c0:41:9f:0e:2d:d3:32:8a:46:b5:33:d4:4c:
         2b:d9:f8:e0:a8:89:46:ec:5c:4c:85:c8:f8:71:f9:21:ae:9f:
         80:46:d3:1a:49:48:94:d9:39:eb:83:5c:27:98:59:7f:5c:6f:
         61:fd:89:96:1d:a9:df:b0:2c:70:cd:f4:33:87:f9:1b:92:e5:
         c3:16:cb:e5:f4:46:12:3a:a0:43:f6:54:82:3c:22:f3:56:ad:
         57:f0:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----