This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft
File:                     08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft (raw, json)
Hash identifier:          4orb0qv2m+l7GQgVtWI6BKNEms4PPX7i7tKfyeefmt0=
Subject key identifier:   BF:F4:F0:94:52:69:61:A5:C5:A3:AD:14:AE:AC:69:D3:AF:F4:46:A4
Authority key identifier: 08:52:20:00:E6:80:B6:B5:BB:AE:CA:5C:D4:D9:E5:B0:AC:EA:5B:E4
Certificate issuer:       /CN=08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4
Certificate serial:       678FF289181A13FCE21CEF636AEC21B1EADC923B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft
Manifest number:          0140
Signing time:             Tue 02 Dec 2025 13:59:10 +0000
Manifest this update:     Tue 02 Dec 2025 13:54:10 +0000
Manifest next update:     Sat 06 Dec 2025 19:59:10 +0000
Files and hashes:         1: 08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.crl (hash: bSk5cqGQr36fc4FewtjK7LbcmJbqzPL3e342aNAf/Qw=)
                          2: 323830313a31653a653830303a3a2f34382d3438203d3e203532343638.roa (hash: ZPaeTyibkqijJmc/3wT0E2E/09+8TavZjcRT2Qu8C3k=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 19:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8f:f2:89:18:1a:13:fc:e2:1c:ef:63:6a:ec:21:b1:ea:dc:92:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4
        Validity
            Not Before: Dec  2 13:54:10 2025 GMT
            Not After : Dec  6 19:59:10 2025 GMT
        Subject: CN=BFF4F094526961A5C5A3AD14AEAC69D3AFF446A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:0a:56:4d:d2:ed:60:a2:dc:ba:96:da:bc:
                    0c:8b:9f:71:e1:bc:6d:53:d3:f5:15:3c:4c:22:f7:
                    b7:b2:d4:fb:a1:d5:73:7f:da:db:81:96:7b:08:0b:
                    58:a2:fb:26:e7:69:8f:60:8b:da:67:0d:44:28:e6:
                    15:02:92:30:14:e3:6e:28:02:4c:d5:e2:ad:78:9e:
                    bf:bc:0d:10:2c:9a:aa:69:d1:71:cb:82:83:24:7a:
                    e0:55:0c:0a:c0:7b:66:bc:33:ce:7b:fd:b8:00:de:
                    cc:34:bc:52:49:77:82:53:79:30:52:3f:3c:f3:05:
                    ec:8e:c8:7d:56:84:9a:ae:71:fe:7b:b4:d4:bb:f4:
                    bb:5f:a6:9d:11:9a:e0:3b:a4:05:2c:e9:25:62:77:
                    22:85:f3:7c:47:dd:e7:a8:df:21:73:f7:54:26:b0:
                    78:d3:51:84:bc:ff:0d:f5:30:98:f3:42:c4:64:e6:
                    fa:d5:7f:3f:7e:2a:46:68:77:81:9b:8b:87:c2:13:
                    de:51:4e:bc:15:c5:5e:ad:8b:f3:5c:a8:89:bd:ca:
                    f9:ef:17:ba:93:f5:e4:4c:77:8f:cb:75:7d:53:24:
                    a5:d8:ee:30:0c:5d:44:83:a9:14:0c:b0:f5:d5:ba:
                    a3:e3:57:3b:c4:08:a8:1b:86:d9:90:be:dc:a0:b9:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F4:F0:94:52:69:61:A5:C5:A3:AD:14:AE:AC:69:D3:AF:F4:46:A4
            X509v3 Authority Key Identifier:
                keyid:08:52:20:00:E6:80:B6:B5:BB:AE:CA:5C:D4:D9:E5:B0:AC:EA:5B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:39:34:92:46:ae:5a:14:48:ff:c0:7e:95:da:9f:1a:9e:3e:
         73:d5:bf:99:ca:ab:80:21:ba:0b:11:9d:53:82:f1:6e:85:85:
         fc:4f:8d:1e:34:72:c0:0f:f8:ad:f9:6e:9e:65:97:a8:d1:7d:
         5f:a7:bf:3d:9e:34:c8:05:24:76:41:1e:61:08:a2:7b:63:96:
         02:2d:8c:7b:fc:6b:e3:7c:81:c6:95:7f:f5:a5:9a:1a:aa:2c:
         ea:67:34:92:4e:17:83:56:10:cc:6a:a8:77:e4:74:e1:fc:d2:
         2f:db:04:6f:25:33:49:c7:15:9b:3f:28:31:f9:98:15:12:23:
         86:2d:b0:10:74:38:f2:7f:e6:90:6f:81:1b:fd:80:ff:b5:d9:
         dc:38:77:7d:10:a9:15:53:bd:f1:f7:73:e8:c8:31:f0:0c:b1:
         57:a5:07:b9:66:ec:22:76:37:b0:b2:f7:5a:1f:38:d7:86:8d:
         bb:ea:f0:5a:45:ac:e1:40:f8:81:57:76:b7:83:f6:d3:13:b9:
         f7:0f:4c:24:0f:22:a6:4e:d6:b6:eb:1a:f2:a1:ad:79:30:3d:
         2d:dd:45:ab:7b:ae:90:f8:f6:91:c2:cc:93:ea:53:50:d5:10:
         00:2f:1f:89:86:92:22:9b:9c:ec:19:fa:99:f6:40:df:a6:1c:
         cb:bd:3c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 09:19:58 2025 by rpki-client