This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.mft
File:                     8AC4B3EBC3ADB80107711DD87A95CA1625852301.mft (raw, json)
Hash identifier:          C+AXM6duqyw8oAQzK0a+qC0uoQExue5u/x+jpL1O82c=
Subject key identifier:   C2:94:45:F6:CC:69:04:72:D2:88:7E:FE:EC:0D:5F:B0:CD:34:91:A5
Authority key identifier: 8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01
Certificate issuer:       /CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
Certificate serial:       132E0A47AC4811C4BC654DF9A9F460DCCA64BDFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.mft
Manifest number:          0141
Signing time:             Fri 19 Dec 2025 06:03:13 +0000
Manifest this update:     Fri 19 Dec 2025 05:58:13 +0000
Manifest next update:     Wed 24 Dec 2025 07:24:13 +0000
Files and hashes:         1: 3134332e302e36352e302f32342d3234203d3e20323732303036.roa (hash: Xe5fWgPgJ1XpiUUn9N0A2JwXL2/RGN9xKDKI6AW15T8=)
                          2: 8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl (hash: FVZsbsvwoFGTtH0QXQBKh0hhwK8VZ4b/9EbleKzedcw=)
                          3: 3134332e302e36342e302f32322d3232203d3e20323732303036.roa (hash: OLi26h9Ql7+XqlePwLjAbi0TA4Y7wobqaP1LlB/Gul4=)
                          4: 3134332e302e36372e302f32342d3234203d3e20323732303036.roa (hash: juS8zQ2DK0E21TZAA4GvZAwHQkPEWMIgA9Apde3gTVc=)
                          5: 3134332e302e36342e302f32342d3234203d3e20323732303036.roa (hash: tNsNPkl3jCAU+hCZI0POSBzclJKx6+DOSBJK9xOKeSc=)
                          6: 3134332e302e36362e302f32342d3234203d3e20323732303036.roa (hash: 2Wji6VOmBWNyltU50aAEI9PczIE6o8YIp2QLq3RbGtg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2e:0a:47:ac:48:11:c4:bc:65:4d:f9:a9:f4:60:dc:ca:64:bd:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
        Validity
            Not Before: Dec 19 05:58:13 2025 GMT
            Not After : Dec 24 07:24:13 2025 GMT
        Subject: CN=C29445F6CC690472D2887EFEEC0D5FB0CD3491A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:3f:ff:cf:6f:7c:bd:29:36:b5:39:5e:a1:
                    b7:c5:80:be:a8:cd:ab:bd:b0:fd:44:29:af:04:a0:
                    67:12:45:c7:98:3b:12:44:a6:46:04:3c:2e:19:5f:
                    7b:41:a0:d1:5d:02:c0:c9:32:f2:4e:25:5d:ed:d0:
                    35:5e:67:40:4a:c8:f1:98:a8:29:c0:c1:b4:9b:8f:
                    35:e3:4c:d9:4d:35:5c:47:7b:b2:2c:ee:49:eb:aa:
                    30:2c:ca:4d:bb:11:98:80:9a:8b:37:e6:8e:8f:4c:
                    c1:44:36:b6:08:b9:07:4f:2e:55:0a:4e:d6:4c:9b:
                    55:68:82:f9:95:3c:09:7c:b5:52:95:e8:c7:31:d3:
                    39:60:3a:5e:c6:63:e3:16:1d:f8:f4:f4:3a:16:e5:
                    66:25:28:59:57:fb:7f:d6:0e:49:93:2c:7a:ed:3b:
                    da:c4:f9:28:94:6e:68:11:b7:58:f1:2c:b9:50:25:
                    33:ac:a6:e8:89:d0:58:b5:6c:44:25:f5:c8:89:a9:
                    8b:e4:fe:61:e9:87:75:ed:56:f1:1d:af:65:fd:be:
                    87:f5:48:8d:2b:70:12:af:65:05:bd:a0:ae:a0:b9:
                    1f:09:c2:fc:71:0c:24:cc:8f:1f:ed:0a:ed:ad:f1:
                    22:80:5c:65:b3:62:ff:d1:49:f5:03:a7:95:b6:09:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:94:45:F6:CC:69:04:72:D2:88:7E:FE:EC:0D:5F:B0:CD:34:91:A5
            X509v3 Authority Key Identifier:
                keyid:8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6f:14:c8:07:6a:8d:05:33:6b:c7:e9:98:7d:61:b7:6e:9f:
         57:d8:37:be:e6:a8:66:89:94:56:4d:56:0a:e3:25:66:37:9a:
         54:bd:b4:a9:e0:84:d6:80:25:34:26:d7:2c:9d:67:fb:a4:8d:
         9a:01:14:1c:f0:ec:60:39:4c:d3:0a:c6:85:49:70:5a:be:31:
         f1:38:83:3d:83:24:a8:8c:ac:fd:9c:e7:88:16:36:07:ab:e0:
         e5:f9:ec:ff:52:ed:1b:00:86:3d:8d:d6:96:56:96:9a:9f:88:
         78:87:8b:30:1f:37:80:b8:f2:ce:24:63:c5:fe:82:9c:25:92:
         6c:e8:50:20:38:15:6c:c9:f6:c7:3c:fd:f1:b2:b0:23:e1:2e:
         49:6e:ee:17:04:b1:10:7e:c2:0f:e6:ed:04:c4:e0:01:27:b5:
         8e:3f:84:80:2e:36:b7:3e:86:cf:7f:7a:1d:06:c5:ea:fb:33:
         23:71:e4:75:61:61:e2:59:88:83:00:f2:a8:c2:75:fe:13:a8:
         1b:4c:fe:78:d3:cc:dc:65:e1:2e:7d:98:82:e4:58:f3:6b:59:
         73:58:f3:c2:22:a2:7c:bd:4d:78:9c:50:b2:11:ed:d6:d9:b2:
         9c:14:d0:05:fc:9f:f3:92:b6:d9:18:de:f1:8f:1d:9a:d5:d4:
         90:c9:5a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:19:20 2025 by rpki-client