This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft
File:                     7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft (raw, json)
Hash identifier:          DskQK1OjD5ll+6YYgSkRxkp+aVx2O2kjOgckEBEBrso=
Subject key identifier:   85:9B:C8:37:98:33:A6:43:F1:39:21:6B:A1:B6:4F:EB:58:E6:AA:99
Authority key identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9
Certificate issuer:       /CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
Certificate serial:       04F3BA24871886E9E06E2C1ECFF0388904BD85D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft
Manifest number:          0144
Signing time:             Tue 09 Dec 2025 09:14:49 +0000
Manifest this update:     Tue 09 Dec 2025 09:09:49 +0000
Manifest next update:     Sun 14 Dec 2025 20:41:49 +0000
Files and hashes:         1: 3132382e3230312e38312e302f32342d3234203d3e20323635373431.roa (hash: vQvm8ssCA8oRDfp/t9lq/yeN393rTdHUettipaBNpT4=)
                          2: 3132382e3230312e38332e302f32342d3234203d3e20323635373431.roa (hash: oTbIbkCoPULACE3GYfSx2Q4mtyBCejkEQ6ubzK+XTl0=)
                          3: 3132382e3230312e38302e302f32322d3232203d3e20323635373431.roa (hash: E9gmiiebqL/g1Nbp5h/OwrD7f1H6xiNJefO36JndoE4=)
                          4: 323830333a393363303a3a2f33322d3332203d3e20323635373431.roa (hash: IO0FBXbQvEDNkFsDcvKB31Xoxvbzrp6+rZZv8v5BLKM=)
                          5: 7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl (hash: 7Ujl2j5fGid7FZ7NLC5Em99OBfp3LixEyzkBRQADRcs=)
                          6: 3132382e3230312e38302e302f32342d3234203d3e20323635373431.roa (hash: CE/c9ODIt4Wk+j5DtnZcLvRc3UPTTcdSqTqgyHeW590=)
                          7: 3132382e3230312e38322e302f32342d3234203d3e20323635373431.roa (hash: uhj4t8J4c1RSB78KB6BMoicKauuI0Jxjmsfg+xikves=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Dec 2025 20:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f3:ba:24:87:18:86:e9:e0:6e:2c:1e:cf:f0:38:89:04:bd:85:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
        Validity
            Not Before: Dec  9 09:09:49 2025 GMT
            Not After : Dec 14 20:41:49 2025 GMT
        Subject: CN=859BC8379833A643F139216BA1B64FEB58E6AA99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:e4:e2:25:b2:54:b3:55:55:bf:62:90:ee:
                    0f:99:51:0e:67:2c:ac:7a:77:3d:5d:7b:a5:e3:43:
                    89:d3:7a:20:be:14:54:b4:50:da:da:1b:f6:06:68:
                    51:f4:d2:80:1f:b4:56:c2:28:09:c1:f3:9b:f4:c3:
                    18:79:c0:00:1a:0b:64:1c:9a:a4:94:fb:49:1d:d7:
                    46:2c:75:95:ef:db:7e:48:0c:01:a4:7c:5c:90:7a:
                    62:4f:a8:33:b2:b9:2b:c5:f7:63:a7:1f:77:95:19:
                    60:3c:53:2d:1d:35:68:57:3f:5e:bf:96:18:4b:38:
                    0f:8c:8a:b5:4a:90:33:21:0d:7a:a6:ed:a0:04:43:
                    9d:31:14:86:1d:39:56:f6:51:32:9c:59:54:89:1a:
                    de:da:fb:42:3e:cf:ac:0b:02:94:69:65:e4:7e:90:
                    eb:d6:ee:67:79:81:17:00:47:b1:f7:cb:07:5b:b5:
                    e9:a8:4f:94:21:88:64:be:26:84:f2:56:7c:e5:81:
                    57:3c:19:bd:3b:ab:01:6c:79:b4:b5:c3:99:ac:12:
                    e5:6b:79:c9:bf:8c:99:11:98:c7:77:26:e7:10:46:
                    08:fd:78:f2:27:42:61:5f:f6:2b:d0:63:71:94:06:
                    91:58:0a:0d:1f:cf:a8:8d:95:b2:a1:49:13:ce:b6:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9B:C8:37:98:33:A6:43:F1:39:21:6B:A1:B6:4F:EB:58:E6:AA:99
            X509v3 Authority Key Identifier:
                keyid:71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:65:3f:ab:df:8e:93:d3:c0:90:23:c9:66:0d:b0:1e:95:9c:
         ef:2a:ff:8e:dd:33:ef:50:07:69:0c:c8:1b:74:e4:2e:18:d8:
         23:52:9f:4a:b8:d2:fa:eb:05:55:3a:eb:c8:53:b3:53:31:92:
         15:20:20:09:66:4d:73:ce:03:20:ed:49:e7:40:58:86:ef:bf:
         15:ab:59:6a:d6:b6:f0:94:c8:d0:f3:57:9c:3b:96:10:cd:54:
         c8:43:1a:c6:51:67:38:9b:25:32:94:b6:9a:f5:51:85:58:31:
         a2:16:10:08:af:e0:d6:06:cd:bd:d6:19:3f:5a:f8:ad:80:24:
         c5:34:52:15:61:e5:f8:74:c6:fd:c2:74:66:23:52:c4:07:fa:
         2c:32:8c:ce:37:c3:4f:69:4f:cd:de:46:48:df:7b:dd:14:b7:
         dc:13:33:97:9e:5b:34:76:58:40:37:e4:d6:c9:9b:a4:c8:bc:
         9a:d0:69:1b:fb:18:c5:21:20:2f:e2:fb:00:cf:61:8b:51:de:
         a1:a7:f8:bf:0a:7e:1c:1f:2a:c2:db:45:8f:fa:61:f5:82:46:
         44:88:81:f6:31:9b:f6:4c:5e:05:f6:97:48:d3:06:bd:e9:4f:
         c0:4e:b4:33:cf:de:56:69:55:e9:d3:bf:8e:1f:42:c1:58:d6:
         5d:a5:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:15:03 2025 by rpki-client