This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft
File:                     D097D27028EDDD1240D51150F45062D4CE0E87F4.mft (raw, json)
Hash identifier:          wh/p9LRHyVyNvy6rDA9Z/lrqnZ+qnAdWE59EFSZkdw4=
Subject key identifier:   22:20:14:3A:F5:CA:56:1C:6A:C8:B8:9F:3B:C2:F9:31:32:7E:8F:F6
Authority key identifier: D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4
Certificate issuer:       /CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
Certificate serial:       3F3AA3D5629D32C207F446A9EF2DEEC8BDA9130B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft
Manifest number:          0156
Signing time:             Tue 30 Dec 2025 04:57:48 +0000
Manifest this update:     Tue 30 Dec 2025 04:52:48 +0000
Manifest next update:     Sun 04 Jan 2026 04:08:48 +0000
Files and hashes:         1: 3230302e302e32302e302f32332d3235203d3e203238303137.roa (hash: GdpUxMh3zFuMAOTtesHW0Jx41nG2pcBGPiozNstkHhk=)
                          2: 323030313a313363373a363030343a3a2f34372d3536203d3e203238303137.roa (hash: 3AYEXgq8EkVfx2n+V7zkw5VoJOeNB0wveQizD3cQK/k=)
                          3: 323030313a313363373a363030353a3a2f34382d3536203d3e203238303137.roa (hash: 7xNM3kaRkyqpqDiONm0PJxKeI2VaLjLc8NFybnJj6sY=)
                          4: 3230302e302e32312e302f32342d3235203d3e203238303137.roa (hash: cdHwN+EJbvvLguE4cra2ECaHzSaFwJD8Q4sq1tmcpiM=)
                          5: D097D27028EDDD1240D51150F45062D4CE0E87F4.crl (hash: EsWKWedSI0ED9knX/l5ngv4iahSGWLPp7lm0Bd+eF+s=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 Jan 2026 09:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3a:a3:d5:62:9d:32:c2:07:f4:46:a9:ef:2d:ee:c8:bd:a9:13:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
        Validity
            Not Before: Dec 30 04:52:48 2025 GMT
            Not After : Jan  4 04:08:48 2026 GMT
        Subject: CN=2220143AF5CA561C6AC8B89F3BC2F931327E8FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:30:a4:23:29:d7:d0:41:7a:5d:ac:79:32:
                    5c:da:96:58:83:d9:cb:48:8a:4b:63:f9:be:05:b2:
                    59:c0:cb:30:76:f9:c9:f4:a8:f6:4c:c5:7a:99:57:
                    1b:67:0f:70:1d:af:16:b8:e2:9d:3e:1d:1b:c4:53:
                    55:95:9c:d6:09:42:b2:be:0a:f0:33:4a:0c:0c:65:
                    8d:ae:5c:57:05:0c:59:06:3d:9d:22:89:51:c9:66:
                    1f:bf:a1:ef:5f:3f:59:f3:7c:08:44:6d:31:8e:51:
                    63:17:db:9d:37:78:43:77:56:a7:45:f5:6f:33:b0:
                    fa:db:a3:11:ea:1c:aa:4a:4b:02:e1:3f:0b:29:30:
                    70:89:b2:08:86:03:67:5b:5d:a0:62:84:f8:6a:ae:
                    b0:be:50:a0:5b:6a:bb:77:4a:5d:6c:92:5a:b1:51:
                    38:26:66:70:78:a8:11:e1:c3:a1:fb:5f:bc:b9:c7:
                    ff:e4:1f:1e:6e:06:b4:0c:1d:e2:28:c0:9b:55:63:
                    16:18:24:ff:3f:58:5d:b8:92:5b:6e:ab:1f:22:21:
                    51:64:e1:7b:83:6a:a1:eb:b0:ff:bd:e4:51:05:89:
                    1a:86:c4:77:e1:7f:bd:f9:5a:e0:a8:00:b7:8c:0e:
                    fa:ef:96:5c:c8:a0:99:ae:70:bf:f8:f7:69:05:31:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:20:14:3A:F5:CA:56:1C:6A:C8:B8:9F:3B:C2:F9:31:32:7E:8F:F6
            X509v3 Authority Key Identifier:
                keyid:D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:07:ee:2a:7b:04:e7:8a:e5:8b:f6:26:8f:09:35:8b:a7:99:
         83:f5:18:85:ba:6f:0c:a7:5c:90:e4:cd:40:dc:42:b5:14:95:
         fe:42:3b:e9:12:50:0c:d7:00:aa:e2:52:69:77:5e:45:f0:0e:
         57:0e:cb:72:bc:8b:25:fb:6f:00:15:d1:95:42:ac:24:01:e8:
         6e:35:d4:69:01:6e:2e:f8:fe:ef:eb:23:f7:9f:eb:c0:f9:f3:
         5b:15:be:86:87:2f:d4:02:40:70:84:67:a1:f4:ae:52:14:aa:
         ab:ab:9b:8a:9c:3d:eb:7b:7d:24:85:f1:d7:fc:85:db:bd:f2:
         d2:3b:b2:32:ce:61:4b:d7:4a:98:a9:30:a3:a8:ed:19:58:15:
         69:0c:e9:1d:00:66:73:62:75:56:41:e2:f5:25:27:48:99:66:
         28:e9:db:e7:c1:08:68:ef:d7:08:56:b4:a3:bb:dc:9e:a5:2d:
         65:9d:e6:97:db:bc:a9:e7:8e:53:5e:04:da:9e:b8:51:d9:35:
         b0:d2:c7:a6:2f:ab:77:5e:77:fb:9a:e4:04:f2:83:0f:a9:84:
         e5:4a:73:da:bc:56:92:bd:51:07:c7:a6:18:f5:c5:3f:7a:dd:
         6f:d0:94:0e:93:62:d3:31:14:27:e6:d0:eb:94:a0:27:c9:44:
         c2:85:e2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 10:57:20 2025 by rpki-client