This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.mft
File:                     70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.mft (raw, json)
Hash identifier:          qkT0a7W7TruQk8yuas3QyzALDwpcJVSCQD3LBbtoh3w=
Subject key identifier:   65:9A:86:E9:C2:00:B6:05:C2:47:17:92:06:76:5E:09:A2:91:2C:47
Authority key identifier: 70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
Certificate issuer:       /CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Certificate serial:       068077E0DB5F7F68612FF637F1CAA74BD265FF99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.mft
Manifest number:          0143
Signing time:             Mon 08 Dec 2025 04:07:00 +0000
Manifest this update:     Mon 08 Dec 2025 04:02:00 +0000
Manifest next update:     Fri 12 Dec 2025 22:44:00 +0000
Files and hashes:         1: 3139302e322e38302e302f32312d3234203d3e203238303733.roa (hash: eHwEi8jaU3o/1s7lb2AqKr20eC93h5yMz6xomY2J7zA=)
                          2: 323830333a343730303a3a2f33312d3337203d3e203238303733.roa (hash: wapsU/kMcMVwFJGkqhV1u78MoAzYgfx4AUS09syDgLo=)
                          3: 3137302e38342e3132382e302f32322d3234203d3e203238303733.roa (hash: fs5Gvcxn2fFfbsNh9YQocS4lf/zoc/tuge3cXqQAAP8=)
                          4: 3139302e302e3233322e302f32312d3234203d3e203238303733.roa (hash: 4YpGjH5JeWXUj7xEw+61qPi+lL41rjMgb6VXw5JVw3Q=)
                          5: 3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa (hash: qQ7ebZQVaxclRrIVU7d1vlheZKrqMplgVauWbtIcWac=)
                          6: 70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl (hash: fFCaHPBi0gpoNHhnsJktjpBL6t8TiJ5WyAtjSS2dLyM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Dec 2025 22:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:80:77:e0:db:5f:7f:68:61:2f:f6:37:f1:ca:a7:4b:d2:65:ff:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
        Validity
            Not Before: Dec  8 04:02:00 2025 GMT
            Not After : Dec 12 22:44:00 2025 GMT
        Subject: CN=659A86E9C200B605C247179206765E09A2912C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:69:9a:fa:36:1b:75:89:f5:e3:01:2b:d2:
                    2d:e3:c3:26:e0:7e:e3:d0:36:a4:41:0c:d8:bc:8e:
                    ac:9b:00:ec:59:9a:a9:ed:ed:47:46:96:c6:77:8a:
                    d1:13:d2:3b:8a:41:7b:9f:ad:41:7d:2f:63:7b:91:
                    82:1a:4d:9e:ee:8e:74:f8:73:49:b4:8e:6b:b4:d8:
                    d8:26:a3:d7:10:11:68:de:1e:1e:38:64:6f:6f:8e:
                    4e:cb:66:90:b6:c9:b2:7c:c1:29:31:eb:78:15:f2:
                    11:93:e5:f5:b9:08:ec:46:1a:6f:38:da:f3:ab:12:
                    2a:11:98:e5:db:25:6c:de:89:9f:5f:bf:1b:88:a8:
                    9a:10:77:d6:b9:6a:56:d8:c1:39:d0:2b:66:71:45:
                    e5:49:d9:0f:aa:c8:dc:e7:82:4c:a9:24:f4:d3:7c:
                    a8:67:d5:c3:73:d6:97:ce:7a:e1:01:3d:2e:83:53:
                    44:08:56:54:77:27:47:29:5b:fd:ce:5b:c7:13:3c:
                    22:b9:a3:e0:4a:f4:dc:04:9d:96:0a:0f:42:56:cc:
                    de:14:53:3a:d9:d4:b9:55:37:ef:70:83:91:40:f0:
                    62:1f:93:88:f3:eb:bf:e1:09:7b:07:0e:f8:81:d0:
                    9b:3e:49:5e:47:36:52:32:a1:4e:d1:9e:a2:55:51:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9A:86:E9:C2:00:B6:05:C2:47:17:92:06:76:5E:09:A2:91:2C:47
            X509v3 Authority Key Identifier:
                keyid:70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e8:cd:c6:67:25:5a:67:75:e9:60:1a:75:8a:41:e4:97:52:
         af:6d:2f:73:43:2d:76:80:27:f3:5b:8c:af:de:52:a2:dc:15:
         c6:10:13:e4:d0:4d:5d:7e:c0:87:cd:39:ef:b8:50:c5:d5:2e:
         40:6e:ef:18:68:f8:bc:1d:fe:fb:2a:ab:19:04:d2:b7:5b:f3:
         c7:32:3d:66:6a:d9:8f:8d:a8:b4:62:59:08:9d:74:0a:a9:6f:
         f3:e2:61:94:cc:d7:35:80:fa:04:a1:97:9c:38:3f:d7:bb:0a:
         d9:7e:57:4e:9b:ab:ac:df:fa:dc:87:eb:92:1a:f7:98:36:27:
         86:62:7f:f3:e3:2c:24:70:2d:37:f3:49:cd:25:74:2d:88:31:
         a1:1a:fc:01:ec:aa:0b:6d:4e:d8:64:25:64:6f:93:eb:2d:f9:
         fe:03:f0:b4:bb:ce:cf:40:ed:dc:eb:8a:d0:b3:22:72:7c:41:
         4d:88:be:6d:c5:e7:3c:5d:dc:86:96:b1:89:0d:e8:b2:d9:31:
         4f:90:e2:7f:b8:8c:6f:ab:0a:83:51:e5:de:67:eb:6d:a4:6b:
         9e:5d:1a:b1:59:1d:b9:de:5a:e9:cf:d9:f9:0d:fe:d2:f6:29:
         7c:47:4c:61:f6:e1:85:39:4d:e3:f9:11:4d:ac:a3:b0:26:9e:
         7f:bd:5c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:36:31 2025 by rpki-client