This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
File:                     889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft (raw, json)
Hash identifier:          C5s96j6Pe9fI5nD1zx/J4wItcNOYs/MZE7kYDubfCRw=
Subject key identifier:   A1:51:77:4C:8D:BC:5D:C0:EE:B7:80:47:CD:12:C6:E5:A4:0C:65:13
Authority key identifier: 88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91
Certificate issuer:       /CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
Certificate serial:       4D182A257D9FBBB9CBFF6BB3FBA1B3E7F3826676
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
Manifest number:          0134
Signing time:             Wed 19 Nov 2025 05:11:56 +0000
Manifest this update:     Wed 19 Nov 2025 05:06:56 +0000
Manifest next update:     Mon 24 Nov 2025 06:52:56 +0000
Files and hashes:         1: 323830333a386165303a3a2f33322d3438203d3e20323639393333.roa (hash: o0JbiL7PQkPBSZZyiZ9yRs2FutaDcqR0ZkHLtn5XxYw=)
                          2: 34352e3139312e3139352e302f32342d3234203d3e20323639393333.roa (hash: 2JnT8LngpPtGR3HlKUCN52wxvco9mE6ll2JYf4Ka/Yk=)
                          3: 34352e3139312e3139342e302f32342d3234203d3e20323732383738.roa (hash: 1h9Hf5WULkAg1ZWjJoXr/2Dqs2TnvESri8I60F5REC0=)
                          4: 34352e3139312e3139322e302f32322d3232203d3e20323639393333.roa (hash: uWULA3oo8EV68bY5PqZ6+AfqGZoLlyWlowD/N4/QPzc=)
                          5: 34352e3139312e3139322e302f32332d3234203d3e20323639393333.roa (hash: vZQuTqj/nx111kG0MXXOXHVqdTEbNClQ6EDqHRSTVQQ=)
                          6: 889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl (hash: K9QBQOUGfbDdjfKsa/qgTzbvWn0CNciRLIjrEoVl7Os=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Nov 2025 18:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:18:2a:25:7d:9f:bb:b9:cb:ff:6b:b3:fb:a1:b3:e7:f3:82:66:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
        Validity
            Not Before: Nov 19 05:06:56 2025 GMT
            Not After : Nov 24 06:52:56 2025 GMT
        Subject: CN=A151774C8DBC5DC0EEB78047CD12C6E5A40C6513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:ed:e2:15:d6:ad:71:90:ea:a2:62:64:fe:
                    dc:01:64:ce:7f:08:7b:48:e1:1b:c8:0e:ec:f0:57:
                    d9:2e:40:55:bb:9c:0c:9c:24:d8:ac:dc:a3:ba:4c:
                    59:a1:32:6a:0b:75:59:ec:5a:4f:ab:e0:76:24:06:
                    0c:ef:26:fa:d4:45:4b:a5:a7:74:39:9e:eb:ab:1d:
                    ca:0f:a7:7e:00:82:46:1e:35:35:28:f6:c6:9b:04:
                    83:53:fd:3a:f8:68:68:58:b8:32:3e:05:9b:44:64:
                    ee:26:bf:3e:bd:51:16:dd:33:e3:ca:97:19:9b:10:
                    7d:8c:cd:18:0c:ca:4a:c0:7a:b4:85:4f:7f:a3:ae:
                    bc:b5:35:c3:d4:6d:3f:77:5e:e2:fc:6b:f2:04:b2:
                    a3:e1:e3:46:e5:6c:e7:8b:42:2a:5e:ab:0b:d4:20:
                    d0:ad:03:ec:f2:9f:c7:b9:99:c9:a0:09:58:a5:d3:
                    ec:e6:70:1b:3d:9f:69:9d:2c:db:43:2a:c0:b2:6f:
                    49:c9:3f:04:4a:05:c8:a1:80:bf:25:46:8a:8d:2b:
                    1b:ce:9a:c5:5c:b0:7b:8c:c3:b7:4a:e0:25:ae:11:
                    14:85:d7:97:10:19:b8:f1:3f:75:b3:9a:74:9c:3e:
                    f7:53:f8:4c:da:8d:70:7f:96:3f:36:d7:0d:0e:45:
                    bb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:51:77:4C:8D:BC:5D:C0:EE:B7:80:47:CD:12:C6:E5:A4:0C:65:13
            X509v3 Authority Key Identifier:
                keyid:88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:11:af:3c:a3:8b:f6:d0:54:69:16:69:84:52:d1:8e:93:ee:
         e5:80:73:0b:a0:50:4a:9d:eb:4a:08:37:9c:dc:3f:47:1e:c9:
         78:02:2c:c8:f9:bb:3f:43:6e:ac:fd:47:f2:db:b7:09:5b:8a:
         76:57:c3:7b:09:6a:18:69:d0:8c:83:4c:5a:f7:50:01:37:db:
         e6:38:8d:17:32:67:6d:0d:85:d8:cb:cc:3d:27:a0:93:e7:09:
         4e:c9:8c:59:ab:a9:6d:83:51:e6:5b:c6:4b:c2:22:03:51:1e:
         b9:f6:ae:75:d9:aa:f7:af:2f:0e:ba:fe:16:0c:e8:19:3b:8b:
         08:dd:5d:db:5f:4e:cb:3d:a7:27:29:93:c6:9d:88:ea:b7:1f:
         f8:66:ee:c8:45:20:b9:e1:d8:9b:e9:81:b2:03:ab:83:33:bb:
         28:2c:95:8b:94:4e:76:3f:e2:5b:2b:86:eb:ca:8e:90:16:5f:
         44:9b:2e:7d:9e:eb:f3:2e:a1:64:8d:19:a3:ea:fa:b2:5a:7b:
         3b:9f:eb:4d:25:7c:45:7c:c8:9e:64:37:2b:ff:01:bb:9b:ba:
         39:7e:b5:95:00:9b:82:df:d6:3a:18:1c:d3:b4:80:b2:ec:16:
         60:bb:79:1b:88:36:4c:61:4d:79:2f:95:00:ee:83:5b:20:47:
         c8:3e:5c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 20 15:21:09 2025 by rpki-client