This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
File:                     CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft (raw, json)
Hash identifier:          Wnd5FCHiWvEqoD11FiLHxbJgzWbrhwxy7w/tpg2h2Og=
Subject key identifier:   BD:A7:EC:0A:99:FC:F7:48:19:3A:32:79:C3:A8:C1:12:7F:F6:F0:16
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       06822BEDDA0E86A7B160ECBA76593E8E14BC0E06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
Manifest number:          0156
Signing time:             Fri 26 Dec 2025 03:20:54 +0000
Manifest this update:     Fri 26 Dec 2025 03:15:54 +0000
Manifest next update:     Wed 31 Dec 2025 22:02:54 +0000
Files and hashes:         1: 3137302e3135302e35392e302f32342d3234203d3e20313938393439.roa (hash: 7RGpY/XBpOBhxSwzR+Uyed1wlKrIs2uoOjGaM+NmrY0=)
                          2: 3230302e3130352e39362e302f32312d3234203d3e203532323633.roa (hash: oYkq7+CyDDn/snXLYaYFtH/o41Wi0O+YgxyA71w+48Q=)
                          3: 3137372e39332e302e302f31392d3234203d3e203532323633.roa (hash: s4BvyelKadZMYkpAtLqR0SNsZ2baCRlAZ5NIgSS0Lrw=)
                          4: 3230302e3232392e302e302f32302d3234203d3e203532323633.roa (hash: 15AnM/dZ2cOa4ul8ya6chcuL7wO96O9N5qgUEe0rbqc=)
                          5: 3133382e3131382e38302e302f32322d3234203d3e203532323633.roa (hash: +tpnvgwn+fekYn4fFlRp22qfms/lZ40WHjkbzkol9vs=)
                          6: 3137302e3135302e35362e302f32322d3234203d3e203532323633.roa (hash: FEWS1FF/XF+UlpNr4p4hcjaJzVSq5aKm/ZVtKJXfumQ=)
                          7: 323830333a313330303a3a2f33322d3634203d3e203532323633.roa (hash: rjI4ULmGu6qYjv0FL0k2/1/NMRijEcEzQUkamWFbEsw=)
                          8: 3139302e3131332e39362e302f31392d3234203d3e203532323633.roa (hash: y02JrXJYNXuWW9UHV3528drFMBQbw38YOOkzJPUFtFk=)
                          9: CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl (hash: zedvPSdjROR+ybEHl8MNjsTT9KE0ILIauvYMUB9145o=)
                          10: 3139302e3137312e39362e302f31392d3234203d3e203532323633.roa (hash: OdxcYAVFWJ0LXWU4ccY3o3N3bUq6GFK5FchgsDHF/dc=)
                          11: 3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa (hash: 5bexrapK4q9CZpLcnBFYUUN76MCYRsb04cp3LUHAk/I=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 22:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:82:2b:ed:da:0e:86:a7:b1:60:ec:ba:76:59:3e:8e:14:bc:0e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Dec 26 03:15:54 2025 GMT
            Not After : Dec 31 22:02:54 2025 GMT
        Subject: CN=BDA7EC0A99FCF748193A3279C3A8C1127FF6F016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:ef:27:ca:9d:40:95:5f:ae:f5:a1:2f:3c:
                    52:21:96:76:e6:4b:c8:57:e9:5c:30:31:ac:0d:b1:
                    f9:9b:9d:a2:87:c9:7b:7b:6a:82:1b:c7:23:59:53:
                    b0:31:d8:6b:ee:4d:a7:c8:41:5c:63:e1:13:b1:da:
                    73:bd:d6:7d:95:ee:42:75:83:3a:47:85:1d:7c:3c:
                    46:9c:a4:35:cf:15:cc:b9:3a:9e:8a:6e:01:87:a9:
                    b0:54:f2:2e:98:fc:3c:39:0b:f0:64:a8:49:ad:d0:
                    f7:4c:21:66:fd:70:84:15:9f:d6:37:8e:a6:4c:42:
                    9f:96:93:e8:5c:53:ee:09:aa:f3:11:a4:38:69:38:
                    6f:b1:2e:10:84:71:c9:66:db:ff:4d:c6:2b:b3:43:
                    a2:3f:68:7f:a1:11:2b:f3:51:c3:e3:83:bb:6f:94:
                    34:86:b2:3c:85:4e:97:6f:ad:aa:7b:c9:39:38:72:
                    b5:a7:fd:c0:f2:eb:60:d5:dc:7a:6b:35:a1:07:44:
                    70:87:a0:6c:26:41:34:a6:a8:61:f0:ff:a1:96:da:
                    a3:a1:65:df:6d:68:16:8d:91:49:c6:de:b0:52:98:
                    97:eb:ad:a2:f1:42:d0:71:ed:23:fe:4f:53:5b:6f:
                    9e:1a:ce:3d:b2:65:a6:a6:e4:44:72:c6:52:13:e2:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A7:EC:0A:99:FC:F7:48:19:3A:32:79:C3:A8:C1:12:7F:F6:F0:16
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:f9:fa:f7:c5:da:86:00:81:35:a4:23:ab:9f:7d:be:89:
         d3:cd:0a:01:23:c5:04:9a:90:81:fa:11:04:cf:17:e3:93:fa:
         e9:3c:4d:f7:50:61:d1:86:76:43:65:c8:7a:26:cc:2c:72:2d:
         87:f2:17:d0:f0:a4:1e:cd:a6:a9:67:c9:33:b9:54:c9:79:54:
         c7:6f:bb:fc:81:54:e2:4d:ce:28:d3:8a:b2:14:ac:ac:78:a8:
         af:52:59:f6:19:8d:d4:a5:21:c8:c1:9e:77:51:e1:f1:2a:83:
         ea:e5:b2:62:c3:87:80:24:d4:4c:dc:3e:5d:59:06:b7:7e:36:
         c3:ac:ae:7d:9b:55:f7:89:ec:9b:2d:ff:3a:ad:bd:99:5b:03:
         69:88:85:7e:f0:49:01:97:b4:92:50:75:40:ee:a5:be:64:c3:
         e3:b2:8d:99:49:b1:b0:c0:41:91:e7:dd:a3:4d:ae:1f:d3:f4:
         bd:63:53:fc:d5:b6:2b:17:e0:9f:a1:1c:88:c0:5d:90:0e:27:
         05:02:6e:8f:d6:23:dc:c5:03:71:88:dd:08:0e:35:b0:21:74:
         7d:4b:46:ea:69:6b:ea:82:29:87:b4:7c:88:f3:57:e0:a1:27:
         bd:e8:90:86:b7:de:86:71:aa:1a:38:02:98:8c:bc:e9:8b:45:
         0a:88:26:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 23:26:11 2025 by rpki-client