This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
File:                     90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft (raw, json)
Hash identifier:          1W7V0GM/Gl6kX2WErAd8ztBOcWspY8Ysl3DcVCdxVDM=
Subject key identifier:   B9:33:A5:B5:DC:AC:B7:7C:1C:69:28:1F:A5:96:55:23:51:69:05:D6
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Certificate issuer:       /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial:       7E469AD7CAF4D560C28794AF2180E03DA5D0541D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
Manifest number:          0142
Signing time:             Tue 09 Dec 2025 00:54:01 +0000
Manifest this update:     Tue 09 Dec 2025 00:49:01 +0000
Manifest next update:     Sun 14 Dec 2025 16:03:01 +0000
Files and hashes:         1: 3137392e302e3138362e302f32342d3234203d3e20323730303437.roa (hash: fyRGQzyGeXQb0Hf9HS5woNqwmgif3EEmzwspZ8LZT64=)
                          2: 3137392e302e3138342e302f32332d3233203d3e20323730303437.roa (hash: Tovtnxs0BzC/aG5sMUwxIm+tRF1bT1k8A8YhE0Oqy54=)
                          3: 90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl (hash: IqDqTXjuyOaOuGTZ8bcRu6MC9uQGV0pSfZ/0PKXNwts=)
                          4: 3137392e302e3138342e302f32342d3234203d3e20323730303437.roa (hash: xJ3+uZjEvFpOS9R1lHwgmc0wFjMAfz/4TlWXb/xtpts=)
                          5: 3137392e302e3138342e302f32322d3232203d3e20323730303437.roa (hash: hcy5DJ8trnwYq4/DItz046iMI/pD2mstXBT1GvS6mvg=)
                          6: 3137392e302e3138362e302f32332d3233203d3e20323730303437.roa (hash: GvDnn1iI7gRVFN8m1yG1xi9A45FOzv9354A42cRhB+k=)
                          7: 3137392e302e3138372e302f32342d3234203d3e20323730303437.roa (hash: uRJ05mwwrs2mUjTG4w7sdIwZZxO0kN9DQjvbv/Limyc=)
                          8: 3137392e302e3138352e302f32342d3234203d3e20323730303437.roa (hash: GyxFFx9WeHLOISGCFimf+ZCvzgD2D8fDofNkKqZcvl0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Dec 2025 16:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:46:9a:d7:ca:f4:d5:60:c2:87:94:af:21:80:e0:3d:a5:d0:54:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
        Validity
            Not Before: Dec  9 00:49:01 2025 GMT
            Not After : Dec 14 16:03:01 2025 GMT
        Subject: CN=B933A5B5DCACB77C1C69281FA5965523516905D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:f4:5a:b8:f5:26:96:2e:49:eb:be:50:f6:
                    b3:c6:dc:bb:f0:f6:1a:1f:cf:6c:d7:9b:cc:f7:48:
                    d5:89:24:11:47:76:c2:82:b0:ab:f4:2b:5a:8d:e2:
                    0f:a2:bc:66:52:9f:71:c2:16:05:e5:9f:cc:d5:3f:
                    b0:55:1e:8b:06:98:15:c7:e2:b4:1c:15:24:49:d9:
                    fa:81:7a:0e:fa:1f:1d:7d:cc:01:92:e1:c4:2f:4d:
                    d9:9b:2b:90:22:90:a0:12:c8:e3:71:83:d3:15:34:
                    7b:cc:e1:d7:0c:0b:54:8c:78:5a:e9:f7:3e:02:b3:
                    37:25:df:97:55:51:80:09:14:3d:da:4f:35:9a:bb:
                    20:d0:33:4d:95:1b:09:5e:e5:37:ce:3b:41:9d:77:
                    bb:84:9b:14:37:20:cd:b2:88:cc:14:05:ab:18:ac:
                    85:55:89:18:f9:dc:4a:1f:e5:54:62:2f:ea:67:c5:
                    a5:de:40:26:49:38:4b:84:4f:5d:f4:8b:a9:28:7e:
                    8d:55:ab:90:ed:66:9f:5b:49:1c:50:9f:d5:d1:45:
                    d1:56:b2:cc:4e:1b:fe:36:22:0e:58:78:48:54:e0:
                    f5:d9:56:61:3e:97:98:d4:69:c4:cc:57:8f:28:49:
                    d2:ab:36:04:44:ea:3d:60:c0:bd:4c:4d:8c:a2:66:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:33:A5:B5:DC:AC:B7:7C:1C:69:28:1F:A5:96:55:23:51:69:05:D6
            X509v3 Authority Key Identifier:
                keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a7:7f:30:9b:cd:e1:40:ee:60:f0:f6:b6:bb:7c:9f:97:0a:
         36:af:67:98:20:78:9c:8e:66:7f:6d:f1:3a:84:fb:f2:ad:57:
         6f:3b:cb:e1:5a:36:45:a4:71:ea:a9:e1:35:1f:4f:ae:4d:e1:
         d2:1f:76:97:25:0d:0e:46:0c:f2:9a:d0:74:87:25:45:70:20:
         9a:8c:01:5e:a2:73:ac:ca:f0:a3:4d:1b:ae:55:cf:57:bb:84:
         87:6c:eb:79:46:f9:4d:13:9c:5d:8d:d2:fc:7d:45:fe:e7:c1:
         da:d0:28:11:97:31:6b:56:87:6c:98:18:17:b7:05:0d:40:04:
         71:2f:1d:71:cc:9a:d1:65:72:b7:21:4b:a8:71:db:c3:81:e9:
         8a:01:89:ce:19:6d:21:7c:6e:77:47:72:1c:18:ee:08:34:01:
         ee:6d:76:22:0e:8f:b7:68:ec:54:5e:bc:52:15:21:47:70:33:
         3d:4b:8e:ed:e0:b8:12:d3:6c:c2:6d:36:9c:f6:ad:44:3a:07:
         ba:55:84:6f:55:48:af:b9:0e:cc:82:b0:ac:37:ae:d4:bc:82:
         bc:43:34:7f:05:ee:a6:50:e2:cc:4e:f7:08:37:e5:d8:02:8f:
         b1:d2:b9:e5:fa:70:87:78:ef:a2:0a:0e:2e:aa:e6:d6:ae:24:
         93:ec:8e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:13:24 2025 by rpki-client