This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
File:                     8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft (raw, json)
Hash identifier:          PiXZ/soEj7ryyJUJ+yfjamnn3qKnmsKpSbuHXHwSp5s=
Subject key identifier:   C8:3D:41:2A:7B:96:43:4B:95:C7:33:2F:1D:4B:64:E6:E9:61:64:56
Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF
Certificate issuer:       /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
Certificate serial:       5F3B8C23BFCF18A648D2333CC8B5F010F4D11414
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
Manifest number:          0154
Signing time:             Sun 07 Dec 2025 13:48:46 +0000
Manifest this update:     Sun 07 Dec 2025 13:43:46 +0000
Manifest next update:     Sat 13 Dec 2025 11:48:46 +0000
Files and hashes:         1: AS22884.roa (hash: fEDPJsJW5ZSOA/r/br7IHyoptclXdu6G2CVGPXGK7zc=)
                          2: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl (hash: S41YkHctORFaH4pzu/U1D8W952sI7KpoXCMEl6GSoM4=)
                          3: AS17072.roa (hash: VDeI/EKLoGBwCXHPWUdQq9jR2t1wmnEXSQ0iTgrQM7k=)
                          4: AS28414.roa (hash: oLB6f9LZPceeei3hsyIsrm72NY62QAbK78fW/F63gaU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Dec 2025 11:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3b:8c:23:bf:cf:18:a6:48:d2:33:3c:c8:b5:f0:10:f4:d1:14:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
        Validity
            Not Before: Dec  7 13:43:46 2025 GMT
            Not After : Dec 13 11:48:46 2025 GMT
        Subject: CN=C83D412A7B96434B95C7332F1D4B64E6E9616456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:a6:76:eb:98:27:84:5e:2e:a5:a1:57:d5:
                    45:d7:fd:b2:24:b8:ea:c7:54:48:73:f7:20:88:25:
                    51:76:97:ec:2e:ec:2c:a7:c9:79:c1:c3:70:92:91:
                    6f:76:54:55:8b:3d:82:87:65:8f:76:40:52:1f:b6:
                    9d:81:4a:16:e3:23:63:cf:98:c5:89:f0:b7:f8:96:
                    aa:da:80:44:d5:ac:77:c0:2e:db:f4:12:ee:89:07:
                    ac:5d:23:d5:71:96:a6:a4:9f:72:b7:7b:61:5c:16:
                    fb:bc:8b:cf:1a:6c:dd:39:8d:3b:bc:85:21:3f:80:
                    90:06:a6:ad:d0:aa:1e:8e:82:73:39:6f:ad:84:bb:
                    b3:bf:33:e2:de:1c:d9:4f:06:4b:86:04:35:31:dd:
                    d0:e2:13:93:be:cd:9e:07:b3:69:90:f2:c3:01:52:
                    90:30:b8:60:ea:41:d4:fb:8d:3c:88:67:1b:2a:f7:
                    52:49:23:e0:47:09:f2:b0:8a:91:c1:fd:63:d0:eb:
                    66:ef:1d:1b:6a:ce:ae:4b:08:8a:8b:95:08:a3:b1:
                    c5:e5:66:8d:fc:25:98:10:7d:01:ad:e9:dd:2d:80:
                    43:51:35:07:9a:e6:9e:f3:44:e4:f0:3e:09:a2:c6:
                    30:87:0a:17:a7:f3:6d:31:25:06:d0:4c:1c:86:6e:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3D:41:2A:7B:96:43:4B:95:C7:33:2F:1D:4B:64:E6:E9:61:64:56
            X509v3 Authority Key Identifier:
                keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c1:b9:d8:64:f9:28:56:6e:0e:ec:c0:fb:4f:92:93:23:4a:
         53:21:9b:0a:f6:38:e3:7b:41:f2:c1:b4:a7:af:e5:7c:a4:a4:
         a3:68:f6:80:c8:f2:01:fb:81:a6:87:e1:04:b9:e8:9e:2a:76:
         55:cb:99:f6:60:e3:54:57:ff:45:47:55:28:14:50:4b:5c:7f:
         35:81:05:e4:58:fa:bc:5e:14:ed:52:79:d7:2b:bb:f6:26:37:
         ef:ef:36:22:4e:ee:19:7c:84:eb:48:ea:65:5e:cd:1d:b9:b5:
         da:96:28:b0:0a:c5:76:c8:5d:25:92:a1:0f:c8:ef:8a:7f:fe:
         8a:a2:d7:7b:64:14:12:67:10:c3:25:ea:d3:31:9a:79:9b:46:
         34:11:27:8d:8f:5b:90:ce:ca:98:3f:da:0c:e8:0c:df:58:e0:
         e1:a6:1f:0f:81:d0:b5:a0:6a:7f:3e:8b:8e:12:80:06:a8:f4:
         34:c2:d4:66:ad:4a:87:e9:ff:0d:d6:84:0a:b7:ac:55:af:de:
         6f:3a:63:02:71:19:50:a0:85:8d:68:a2:75:cf:58:d6:7c:40:
         f0:ea:ca:f5:c5:5c:4c:88:0a:c5:4c:f8:8f:1c:aa:6d:9b:ab:
         d3:7b:61:3f:45:37:e8:6b:bf:28:74:20:93:d4:10:62:eb:b5:
         b1:18:31:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----