This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
File:                     089B798E1BD051786195E5F9D02238D550A5EAD7.mft (raw, json)
Hash identifier:          TbNvo/aSQ8QLTJ3LuIyZpBj8WoV3tpWCC8IkMKpTLGE=
Subject key identifier:   AD:F5:2D:B8:A5:B5:4B:95:42:36:AB:A9:E0:97:62:D5:61:1F:B5:04
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Certificate issuer:       /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial:       66BB7BD1EA11D3D0B3614A42DFE1C57EE6C86973
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
Manifest number:          0144
Signing time:             Sun 07 Dec 2025 21:02:44 +0000
Manifest this update:     Sun 07 Dec 2025 20:57:44 +0000
Manifest next update:     Fri 12 Dec 2025 05:02:44 +0000
Files and hashes:         1: 323830333a396163303a3a2f33322d3438203d3e20323731383832.roa (hash: PC7+F+5JF8mUNajEjRVajzRUMEmcXPL1R8ZIt3aWZoA=)
                          2: 3137302e3234342e3230382e302f32342d3234203d3e20323731383832.roa (hash: 0OSFx27uPB3bloHdY+39EBrnzcliZh0QgvjmUJFBajI=)
                          3: 3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa (hash: vJuqMo3FOvAjQjUwkJLglGJUvssmWIzn1UeqJnPQlog=)
                          4: 089B798E1BD051786195E5F9D02238D550A5EAD7.crl (hash: H9xisPJ1Btbb89wk4nxy4X3jvR2i/XgP4d930CEyniU=)
                          5: 3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa (hash: nnmiLoLd7bkCU1RUw5Od28HoP+sxRHWZc3jttiVT4pA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Dec 2025 05:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bb:7b:d1:ea:11:d3:d0:b3:61:4a:42:df:e1:c5:7e:e6:c8:69:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
        Validity
            Not Before: Dec  7 20:57:44 2025 GMT
            Not After : Dec 12 05:02:44 2025 GMT
        Subject: CN=ADF52DB8A5B54B954236ABA9E09762D5611FB504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7e:44:42:b8:29:93:80:d9:1b:08:b8:f0:8c:
                    ff:78:7b:32:8f:ad:33:c8:6c:6b:f0:18:14:89:61:
                    05:54:8e:82:0a:b7:d2:a7:3d:ce:c1:e6:b7:e7:c8:
                    44:28:b8:27:8d:90:fd:b1:61:57:e9:e8:fc:ab:01:
                    b9:85:4e:c7:0d:85:c3:eb:a3:63:9e:5a:11:d7:b3:
                    03:df:b5:66:36:5e:74:bb:62:84:95:18:b1:af:22:
                    a1:15:6e:5e:c3:b1:80:53:25:14:a8:da:05:b4:35:
                    e4:8e:00:9b:17:01:d3:96:c9:60:6a:b0:b1:12:f1:
                    7e:87:18:47:5a:0d:67:88:b3:9a:ab:81:58:33:14:
                    b5:8f:96:ef:71:bd:63:24:b9:c8:15:42:1a:89:4c:
                    7f:89:6f:ef:3f:6e:78:5d:32:16:2f:0c:9a:99:73:
                    f0:e6:ba:00:ba:2d:1b:45:5f:fb:f5:9e:1f:8a:96:
                    cd:87:25:bd:f2:1f:e3:d1:77:3e:3d:de:84:71:ff:
                    a4:71:5e:be:6b:a5:bc:d6:21:4a:a1:5b:5a:5c:de:
                    5f:de:b7:19:96:16:b3:d9:4d:d6:0c:72:4f:e4:6d:
                    2a:9e:34:92:d0:b5:70:c6:29:34:e7:48:b3:40:31:
                    d8:26:34:ed:eb:4e:3d:f1:0d:c1:17:82:b5:d4:9d:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F5:2D:B8:A5:B5:4B:95:42:36:AB:A9:E0:97:62:D5:61:1F:B5:04
            X509v3 Authority Key Identifier:
                keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9c:54:81:06:3f:cb:97:54:b6:6f:a2:3f:16:e6:70:c4:00:
         c8:85:d4:3b:51:f2:85:0d:92:0b:f5:e3:ec:5d:55:ae:89:f5:
         00:99:41:c7:d8:86:8b:24:5d:73:21:f2:24:9d:8a:e2:25:b5:
         26:d1:18:31:2b:d9:96:82:5f:5a:8c:65:2b:f3:50:0e:37:b7:
         24:9d:df:18:49:9e:ec:4a:bd:84:d5:f3:64:eb:62:19:aa:50:
         07:e4:12:29:43:90:56:96:d2:8f:a4:f2:90:83:45:d8:36:a6:
         c6:50:a4:58:e4:47:e9:08:e8:d4:4f:fb:7a:d3:74:ac:e7:a0:
         e0:7b:66:b7:dd:9e:4b:ae:0c:6f:e4:7b:09:dd:f8:a1:b8:13:
         9d:b3:d8:7f:08:ac:3b:27:91:a3:2b:5f:cb:14:b8:f3:bf:b9:
         14:36:ea:ab:cf:0a:ca:6c:91:ed:1e:68:89:ad:be:86:82:dc:
         ed:d0:01:66:4d:df:55:61:74:82:ef:d4:3a:6f:fd:e1:af:fd:
         9d:de:00:1f:b6:22:8b:2a:33:01:7e:89:68:59:77:82:85:c8:
         c5:57:72:68:19:34:40:b1:17:81:3f:1e:77:88:c0:b1:65:d1:
         fc:07:fe:d7:e9:75:a5:b5:83:d7:a0:3f:d6:8a:f7:a6:5b:95:
         7f:a2:10:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 03:04:30 2025 by rpki-client