This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
File:                     6243575DF1F667D5FC35E515D93014D37B684DA3.mft (raw, json)
Hash identifier:          knT26/x3ikpt4T4HW3nbLb++72wHlvCthGD7crg0ac4=
Subject key identifier:   B2:02:4D:06:A4:AA:DC:C8:E5:B5:78:1D:51:C5:03:93:15:CA:C6:89
Authority key identifier: 62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3
Certificate issuer:       /CN=6243575DF1F667D5FC35E515D93014D37B684DA3
Certificate serial:       7DA53DC1A6D2D7B2CC60824EAC47390E144C8670
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
Manifest number:          0147
Signing time:             Mon 08 Dec 2025 15:53:58 +0000
Manifest this update:     Mon 08 Dec 2025 15:48:58 +0000
Manifest next update:     Sat 13 Dec 2025 10:01:58 +0000
Files and hashes:         1: 3138312e3232342e3230372e302f32342d3330203d3e203532343132.roa (hash: dksWCkS1P7DxqVa36YIfgdb6QTnHQ4LmXfySVSECx+E=)
                          2: 3138312e3232342e3230362e302f32342d3330203d3e203532343132.roa (hash: 7enFo58yNDykcAb3b76Z6V1XPZ8Bzyvx32WiCRzHVdg=)
                          3: 3138312e3232342e3230342e302f32342d3330203d3e203532343132.roa (hash: vJCxX+g4DT+LZ9DSKkn2RniTa4KASLI/jyWEpGDZ2nA=)
                          4: 3138312e3232342e3230352e302f32342d3330203d3e203532343132.roa (hash: FgeLlkgYzs1mkO84lkykq51unA8y5AQLf38+dbLb9tk=)
                          5: 6243575DF1F667D5FC35E515D93014D37B684DA3.crl (hash: vYPQW66hcv1QXafO2LGOZu0NTZFW/9HkZHc30RsGQ8A=)
                          6: 323830333a643939303a3a2f33322d3634203d3e203532343132.roa (hash: 9LU9XyjPPOdbyOuzD/VEGx2MU8RrVrPr4K/YaOFhDp8=)
                          7: 3138312e3232342e3230342e302f32322d3234203d3e203532343132.roa (hash: aRYl82Rv8JKEkKlq/9V9WSeOsyxorzWkTJy5GgjvJvA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Dec 2025 10:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a5:3d:c1:a6:d2:d7:b2:cc:60:82:4e:ac:47:39:0e:14:4c:86:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6243575DF1F667D5FC35E515D93014D37B684DA3
        Validity
            Not Before: Dec  8 15:48:58 2025 GMT
            Not After : Dec 13 10:01:58 2025 GMT
        Subject: CN=B2024D06A4AADCC8E5B5781D51C5039315CAC689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:ec:5b:06:1f:12:6e:9c:01:30:e6:84:2d:
                    97:ea:34:e3:dc:60:1f:36:38:58:de:08:c4:02:ac:
                    65:3e:49:36:56:98:5d:ab:72:45:cf:1b:b7:3c:d2:
                    a2:f9:41:47:77:4a:11:81:17:8e:ad:17:ce:65:97:
                    d7:df:27:a0:da:8d:8a:01:3c:46:56:ff:6c:b8:d9:
                    b6:17:80:4e:3d:f6:42:5f:b0:c7:3a:92:45:ab:8d:
                    49:9f:71:da:fb:d7:2d:be:a7:ae:50:82:53:c3:65:
                    4b:2a:06:6f:7b:7b:a9:69:25:a7:a1:41:ab:ce:14:
                    f9:71:00:5c:04:e0:22:ae:1d:4c:36:0e:f8:ab:9b:
                    73:b2:9f:34:25:f0:c1:d5:97:37:e5:6a:ef:e2:b9:
                    50:de:82:e1:1a:48:64:f5:73:54:b6:f6:5d:40:ce:
                    4c:89:7c:d8:b3:08:82:6b:4c:ff:50:b7:1d:2b:18:
                    a4:ac:5a:0b:9b:89:6b:28:b4:85:6d:cb:0e:f4:2f:
                    c4:84:da:c5:0d:c4:67:37:42:c8:bc:5f:de:6c:c5:
                    7e:12:92:97:1e:db:bc:89:17:de:32:3c:b5:a6:bb:
                    1f:ee:a0:cb:46:ab:2c:ba:e3:64:08:87:f8:3c:88:
                    32:52:7a:c0:53:11:1e:14:a0:0d:d9:4e:c7:a8:a7:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:02:4D:06:A4:AA:DC:C8:E5:B5:78:1D:51:C5:03:93:15:CA:C6:89
            X509v3 Authority Key Identifier:
                keyid:62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:ba:c0:57:56:87:e8:c9:19:f5:44:57:90:9d:8a:b4:81:7b:
         6c:0f:e3:3a:fe:77:19:27:1f:e4:32:27:59:03:11:09:b5:18:
         5a:da:7f:b8:a8:17:2f:97:8f:60:cb:ca:bf:c6:8d:a4:67:90:
         29:50:f3:c0:e9:e2:5f:c7:79:de:4b:6b:9f:d0:19:db:2c:5f:
         b4:61:ab:cd:31:d5:b4:55:07:c6:69:b2:83:61:67:e4:c6:14:
         39:d4:44:a9:23:95:4f:ba:6f:a5:a1:b3:0d:99:47:f2:cf:8c:
         a6:05:17:99:0e:33:9a:84:01:18:c5:86:fd:ad:f8:d8:5d:2a:
         38:68:3d:7a:5c:fc:93:84:96:ac:29:21:a6:1e:89:8e:da:a8:
         61:cb:18:ac:63:31:02:ef:b1:cc:5b:8d:04:55:b1:db:8f:ae:
         49:eb:ea:18:de:e4:c3:08:20:63:c3:17:51:e1:f2:7b:d7:98:
         2e:a4:ec:4d:b6:d8:4f:b0:b5:17:90:b2:76:80:6d:bb:86:04:
         fd:2a:f5:6c:f5:4f:3a:b0:5c:77:ab:08:4e:ba:fa:cb:8b:51:
         23:5a:f6:b2:41:84:c2:1d:70:52:13:a1:67:da:68:5c:c3:57:
         e6:25:ce:f3:32:5c:3a:16:01:8e:57:b8:e3:40:97:51:ed:f7:
         30:46:a6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:13:27 2025 by rpki-client