This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
File:                     CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft (raw, json)
Hash identifier:          sOAWA7bwsZVopjj1MXlR8HxK1Sw4utinGUPcofXPF8k=
Subject key identifier:   CA:F4:90:7A:13:F1:BC:7F:4E:5F:EA:0B:47:24:5D:9B:1F:3E:B9:DF
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       554D6AC61F875E1E86ADD2A1F0AA996B56AE34A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
Manifest number:          0151
Signing time:             Wed 17 Dec 2025 19:51:12 +0000
Manifest this update:     Wed 17 Dec 2025 19:46:12 +0000
Manifest next update:     Tue 23 Dec 2025 08:19:12 +0000
Files and hashes:         1: 3137302e3135302e35392e302f32342d3234203d3e20313938393439.roa (hash: 7RGpY/XBpOBhxSwzR+Uyed1wlKrIs2uoOjGaM+NmrY0=)
                          2: 3137302e3135302e35362e302f32322d3234203d3e203532323633.roa (hash: FEWS1FF/XF+UlpNr4p4hcjaJzVSq5aKm/ZVtKJXfumQ=)
                          3: 3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa (hash: 5bexrapK4q9CZpLcnBFYUUN76MCYRsb04cp3LUHAk/I=)
                          4: 323830333a313330303a3a2f33322d3634203d3e203532323633.roa (hash: rjI4ULmGu6qYjv0FL0k2/1/NMRijEcEzQUkamWFbEsw=)
                          5: 3133382e3131382e38302e302f32322d3234203d3e203532323633.roa (hash: +tpnvgwn+fekYn4fFlRp22qfms/lZ40WHjkbzkol9vs=)
                          6: 3230302e3130352e39362e302f32312d3234203d3e203532323633.roa (hash: oYkq7+CyDDn/snXLYaYFtH/o41Wi0O+YgxyA71w+48Q=)
                          7: 3137372e39332e302e302f31392d3234203d3e203532323633.roa (hash: s4BvyelKadZMYkpAtLqR0SNsZ2baCRlAZ5NIgSS0Lrw=)
                          8: 3139302e3131332e39362e302f31392d3234203d3e203532323633.roa (hash: y02JrXJYNXuWW9UHV3528drFMBQbw38YOOkzJPUFtFk=)
                          9: CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl (hash: gcju1rF5sadnp+tMUiI4hgfAEyTozraL+xT5lar91dE=)
                          10: 3139302e3137312e39362e302f31392d3234203d3e203532323633.roa (hash: OdxcYAVFWJ0LXWU4ccY3o3N3bUq6GFK5FchgsDHF/dc=)
                          11: 3230302e3232392e302e302f32302d3234203d3e203532323633.roa (hash: 15AnM/dZ2cOa4ul8ya6chcuL7wO96O9N5qgUEe0rbqc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 08:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4d:6a:c6:1f:87:5e:1e:86:ad:d2:a1:f0:aa:99:6b:56:ae:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Dec 17 19:46:12 2025 GMT
            Not After : Dec 23 08:19:12 2025 GMT
        Subject: CN=CAF4907A13F1BC7F4E5FEA0B47245D9B1F3EB9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:39:cb:cf:4b:0a:f8:b6:08:94:51:0f:58:ee:
                    d7:aa:ab:29:4e:e6:37:87:7d:4a:b9:40:c6:ba:6b:
                    65:7d:c9:8a:57:eb:b3:33:57:f8:95:3d:b1:3c:0b:
                    e8:3d:e9:d6:ed:64:c2:73:b6:8f:37:a7:57:88:56:
                    c7:e5:f9:14:ce:3f:02:b7:ac:98:03:c3:d4:73:2c:
                    dc:79:dd:3c:aa:fe:18:5a:6d:a4:c7:63:b7:46:87:
                    9f:89:58:ad:82:39:aa:27:e2:a2:f2:fd:57:e1:8a:
                    01:c8:89:63:60:07:79:05:bf:8d:37:d1:68:e3:bf:
                    aa:71:b2:5e:90:f5:7c:95:30:2f:f6:3c:70:33:54:
                    cc:47:70:d0:88:3b:c3:92:0d:5c:0b:a0:86:3f:a5:
                    7e:2a:9a:11:89:ea:42:52:51:3d:85:19:1d:91:ef:
                    62:6b:86:12:be:82:60:77:2c:33:a9:29:a0:af:62:
                    9d:13:e6:31:53:a3:40:10:95:f9:3f:41:82:dc:cc:
                    c0:d7:fa:82:37:43:03:f7:c0:c0:49:68:a7:0d:19:
                    7c:77:19:7e:80:cc:bf:7b:e1:1d:fa:1b:28:16:8a:
                    a4:aa:76:00:2c:55:fb:fc:4e:8a:62:5d:5e:13:3f:
                    80:19:61:ef:8a:52:3f:20:b6:0e:db:82:cf:22:62:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F4:90:7A:13:F1:BC:7F:4E:5F:EA:0B:47:24:5D:9B:1F:3E:B9:DF
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f1:02:fc:70:11:0d:36:74:0b:d7:87:aa:02:86:4d:03:db:
         e0:a5:37:9b:2f:01:e5:35:cc:05:47:36:d1:3b:aa:c9:e7:4b:
         a9:36:23:9f:78:8b:00:8e:5b:e8:b8:20:f1:8a:fc:4e:92:33:
         2f:35:c5:34:ca:3f:73:e0:dd:b7:41:1e:11:7c:90:82:01:d0:
         1c:5d:6b:9a:02:6c:62:c9:b0:05:fe:a0:91:6a:92:33:fb:1a:
         33:44:8a:d6:ff:0d:dd:28:0c:8a:5d:77:0a:b4:43:ec:6f:66:
         73:5c:21:f4:63:f4:60:b4:0c:d1:62:30:fc:c6:32:2a:c7:03:
         77:b6:84:37:26:46:8a:cf:8a:44:9e:d0:41:5b:69:8b:6f:cd:
         52:c6:17:76:f7:25:82:d6:bd:f0:fd:7c:c7:6b:76:1b:21:41:
         ff:70:95:a0:f5:1e:f4:57:49:27:18:db:29:63:22:cc:12:bc:
         7d:76:0c:30:a9:5d:f0:9f:20:f9:9f:15:4d:ee:bb:ea:3d:77:
         a0:46:01:53:f7:d9:de:66:49:d6:a3:b5:d7:80:ba:fe:a9:fe:
         69:ac:34:85:14:0d:41:8c:f9:e0:3f:40:a8:2c:42:04:f3:f3:
         22:2e:93:84:e2:a4:e9:d9:1c:00:ca:81:e3:8d:dd:e6:80:54:
         09:f6:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:53:49 2025 by rpki-client