This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
File:                     8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft (raw, json)
Hash identifier:          K37X4fmaLFDA1ngfKIdCgOfB/BT3xDVE0ReKQhBPq6s=
Subject key identifier:   13:03:31:E0:61:D2:89:F8:E3:0D:07:F3:96:B0:59:70:1E:24:CB:36
Authority key identifier: 8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5
Certificate issuer:       /CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
Certificate serial:       7FCCE4D6FBF49385E336073CB4D3D7F6F81C5BD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
Manifest number:          0149
Signing time:             Wed 10 Dec 2025 23:37:18 +0000
Manifest this update:     Wed 10 Dec 2025 23:32:18 +0000
Manifest next update:     Tue 16 Dec 2025 04:48:18 +0000
Files and hashes:         1: 34352e3137372e3130392e302f32342d3234203d3e20323637383537.roa (hash: GbEmjq+v78pS2fKbyMP7qZjAXhibk50GhbJY4JL/Tcc=)
                          2: 323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa (hash: KIEkSXBUvkmvlZFj8qpbSneQUu3idX7opP395FmRaIQ=)
                          3: 34352e3137372e3131312e302f32342d3234203d3e20323637383537.roa (hash: WYGAE0xls6+7i2OVhuCaL0WgYP2AmxT6JrofqpGylfs=)
                          4: 34352e3137372e3131302e302f32342d3234203d3e20323637383537.roa (hash: c3zSVEH2stc7Ga7P4dkoMP4nGJugURdM3tZR8TKq4Hg=)
                          5: 8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl (hash: zO/1i2T9+OGP8EuwlU0OuVQVjykWPQ4MBHLRc56CoY0=)
                          6: 34352e3137372e3130382e302f32342d3234203d3e203237393531.roa (hash: FQOijIFL5swjZ1bxEJkHU93lGq3iBteKK5DjHs4COIY=)
                          7: 34352e3137372e3130382e302f32342d3234203d3e20323637383537.roa (hash: lYppe92oV2wxWFUc6Gq+IqdH7+oUcyKiXZjkKaSvQsE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Dec 2025 04:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cc:e4:d6:fb:f4:93:85:e3:36:07:3c:b4:d3:d7:f6:f8:1c:5b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
        Validity
            Not Before: Dec 10 23:32:18 2025 GMT
            Not After : Dec 16 04:48:18 2025 GMT
        Subject: CN=130331E061D289F8E30D07F396B059701E24CB36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:a9:30:fa:c7:89:86:a7:68:28:39:41:db:
                    df:ef:fd:f1:23:0f:14:84:27:68:b8:81:d2:38:34:
                    2d:09:9d:38:40:f8:e6:ce:85:8e:c8:77:4d:f9:2b:
                    de:8c:75:95:ec:33:ea:70:89:85:80:5f:c4:44:70:
                    71:f8:b7:0c:cf:07:bb:10:34:8d:0e:bd:33:10:b2:
                    b1:02:0b:e6:71:b2:55:90:d9:c1:a1:1f:41:2d:56:
                    db:19:7a:85:66:b0:65:8e:43:ff:6b:11:45:29:ce:
                    ec:ef:7e:07:ad:38:29:02:37:0b:95:99:26:c4:22:
                    df:ff:f1:56:93:ca:4a:2e:f7:2d:56:12:18:39:d5:
                    30:14:d3:94:85:ac:f0:82:ff:74:c0:e4:0f:89:f0:
                    d3:6a:ed:7b:0e:cd:a7:ef:50:47:b2:8e:52:fe:83:
                    d4:86:24:b2:52:7a:85:00:d7:52:ff:f5:2e:da:68:
                    29:fa:1c:67:a8:c9:df:57:2f:4f:ec:9a:56:48:3f:
                    23:8e:62:70:6b:6b:77:5a:41:f2:b4:9e:91:f3:ca:
                    ff:ae:85:58:c2:8d:26:4d:44:82:e5:31:e3:35:9d:
                    2c:fa:b5:c1:10:e0:89:45:2c:73:5c:a0:34:c3:e2:
                    d6:e1:8f:e2:4d:56:98:b8:2b:1d:eb:73:7a:0f:94:
                    02:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:03:31:E0:61:D2:89:F8:E3:0D:07:F3:96:B0:59:70:1E:24:CB:36
            X509v3 Authority Key Identifier:
                keyid:8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8b:e6:e2:3e:cd:90:5a:5e:31:23:ef:da:4c:c2:80:27:39:
         ba:41:0b:06:17:5f:32:25:b2:3c:84:81:e7:05:b8:14:d8:55:
         7b:86:05:1a:b7:35:c4:05:b0:75:f0:e0:b3:ca:15:6e:99:3d:
         6d:46:2e:72:e9:8e:5c:a8:74:7c:5f:73:64:16:08:62:33:89:
         3d:f0:8c:c2:4a:f4:d2:52:23:fb:6d:4e:68:a0:4f:cf:b8:c1:
         31:25:95:e0:8c:22:f9:ec:05:9c:33:49:ed:33:b3:7b:f1:aa:
         78:8d:76:a8:b8:7c:d6:36:29:66:18:3f:ae:d2:c1:02:8d:44:
         73:a6:ae:76:fa:00:85:e6:3a:b5:fb:d8:e0:b4:42:06:4f:aa:
         13:eb:8e:ea:9d:1a:e2:e2:59:be:1c:fc:06:ee:ba:73:e9:87:
         a1:a7:5b:28:5a:d7:5b:84:ec:cc:87:62:63:49:3d:dc:8f:50:
         77:99:9c:73:07:38:b1:9b:7c:ed:d5:b2:40:89:8c:dc:57:63:
         1e:42:8b:be:91:09:de:61:fa:b6:fc:63:7b:d5:06:e3:12:ef:
         6a:5c:fb:39:56:44:1f:d2:e6:7f:95:6e:2c:8e:f9:f0:dd:7c:
         7b:12:32:9b:98:1d:57:19:df:09:b2:a8:24:3d:0b:54:19:84:
         79:22:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 02:35:21 2025 by rpki-client