This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
File:                     8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft (raw, json)
Hash identifier:          JK3WJJvn7okNEhfgIx1V9AqELDKkrK45NGvhkDahL1g=
Subject key identifier:   2A:5E:52:BE:7D:94:C6:F9:12:18:58:36:9B:29:FA:3E:2A:2C:26:D1
Authority key identifier: 8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5
Certificate issuer:       /CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
Certificate serial:       500F48907B2E1A9BAD5CE18DF36D3FEF3B29D8A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
Manifest number:          0146
Signing time:             Fri 05 Dec 2025 06:51:48 +0000
Manifest this update:     Fri 05 Dec 2025 06:46:48 +0000
Manifest next update:     Tue 09 Dec 2025 06:58:48 +0000
Files and hashes:         1: 34352e3137372e3130382e302f32342d3234203d3e203237393531.roa (hash: FQOijIFL5swjZ1bxEJkHU93lGq3iBteKK5DjHs4COIY=)
                          2: 34352e3137372e3130392e302f32342d3234203d3e20323637383537.roa (hash: GbEmjq+v78pS2fKbyMP7qZjAXhibk50GhbJY4JL/Tcc=)
                          3: 34352e3137372e3130382e302f32342d3234203d3e20323637383537.roa (hash: lYppe92oV2wxWFUc6Gq+IqdH7+oUcyKiXZjkKaSvQsE=)
                          4: 323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa (hash: KIEkSXBUvkmvlZFj8qpbSneQUu3idX7opP395FmRaIQ=)
                          5: 8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl (hash: Yg79b1UeAbEGYzbPjy2ynbSx6Mjlrrwm+JfXBYV+ef0=)
                          6: 34352e3137372e3131312e302f32342d3234203d3e20323637383537.roa (hash: WYGAE0xls6+7i2OVhuCaL0WgYP2AmxT6JrofqpGylfs=)
                          7: 34352e3137372e3131302e302f32342d3234203d3e20323637383537.roa (hash: c3zSVEH2stc7Ga7P4dkoMP4nGJugURdM3tZR8TKq4Hg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Dec 2025 06:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0f:48:90:7b:2e:1a:9b:ad:5c:e1:8d:f3:6d:3f:ef:3b:29:d8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
        Validity
            Not Before: Dec  5 06:46:48 2025 GMT
            Not After : Dec  9 06:58:48 2025 GMT
        Subject: CN=2A5E52BE7D94C6F9121858369B29FA3E2A2C26D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:29:76:71:06:f4:4b:aa:1c:ef:49:ea:72:
                    17:dc:1c:74:33:b3:f8:ec:89:94:33:91:3b:5f:d9:
                    a1:1c:0e:44:dd:12:3d:04:92:fd:9b:78:6d:45:78:
                    dd:39:82:e4:36:42:c3:29:54:66:09:7f:6e:26:ce:
                    61:49:e1:6d:ef:a9:f6:11:ff:81:a9:0c:01:aa:dc:
                    53:bb:c0:77:f9:af:5e:6e:09:22:9e:7e:1f:10:8f:
                    4f:53:8c:a6:d8:75:7a:81:aa:4f:70:06:b2:a2:63:
                    bf:47:22:76:aa:7f:f4:0d:60:82:3c:7b:64:3b:2a:
                    e7:33:30:4b:c3:0b:44:9f:32:2b:0e:ad:a8:0f:b5:
                    ed:df:6d:ac:d6:3b:9a:75:b3:5c:9f:74:6d:4b:1d:
                    e2:b5:37:63:4d:37:5b:2e:09:bd:2b:21:ad:b2:b9:
                    9e:2c:b0:9e:87:3b:a9:bb:69:bd:47:e1:b4:ca:4b:
                    92:88:3c:2e:46:8d:55:68:19:bb:7c:c1:ca:3e:54:
                    67:65:ad:45:12:4e:8a:bd:0f:27:94:b8:9d:fa:34:
                    eb:85:a7:a4:73:24:6f:6b:8e:f9:39:2c:6f:b3:28:
                    c9:4a:d0:d6:38:aa:48:f6:9f:28:07:bb:86:5c:18:
                    81:70:fe:98:51:cb:dd:2e:75:c3:1c:b3:f6:1b:37:
                    38:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5E:52:BE:7D:94:C6:F9:12:18:58:36:9B:29:FA:3E:2A:2C:26:D1
            X509v3 Authority Key Identifier:
                keyid:8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ed:e4:83:8a:5c:f4:cf:6a:8d:0f:b5:59:8c:f3:f3:b7:65:
         a3:3e:4e:df:6f:f9:53:88:3c:96:70:14:c6:3a:4e:f6:95:ba:
         99:ed:a0:af:b7:3f:15:0e:42:04:ec:4e:cb:59:5c:c6:1c:06:
         54:49:b7:8c:21:e4:16:37:ae:18:7e:a6:9a:a0:02:df:65:5f:
         f9:93:42:e3:14:79:09:10:08:4f:fc:0e:9e:23:3e:02:7e:0b:
         dd:d5:d6:b6:65:4a:bd:be:a3:51:0b:7a:c0:13:85:7f:84:03:
         c9:5f:9b:43:34:5d:00:72:56:6d:db:ae:91:6e:bb:34:c8:44:
         b7:59:b9:28:bd:f6:84:bb:38:a7:e7:e1:a5:c9:6f:62:58:55:
         d7:70:61:3b:ef:7b:fb:f8:f8:1c:57:8f:9b:00:f1:bc:a7:60:
         e9:80:4e:18:1a:93:34:3c:d9:1d:16:80:da:a5:88:8b:f4:3e:
         76:b1:41:f9:7e:d8:48:7e:1f:ce:f9:7e:e9:4b:f7:9b:29:58:
         c3:45:f1:c8:99:fc:a3:d8:f0:b3:e8:f6:45:a7:72:b5:ae:23:
         19:8f:21:e7:33:05:6c:23:eb:33:39:14:0b:e0:5b:b2:4b:b9:
         74:c0:e7:15:bb:ee:33:83:33:f1:36:ea:51:60:05:73:e0:7d:
         74:e9:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 21:26:29 2025 by rpki-client