This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft
File:                     866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft (raw, json)
Hash identifier:          nhtGBlqtCGg7kQlbuQcfxCVh5UNMv4zWItG8lGs0F7Y=
Subject key identifier:   75:DE:64:2B:16:89:D0:73:4D:E3:4B:4C:76:A4:52:03:77:0A:93:EC
Authority key identifier: 86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F
Certificate issuer:       /CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
Certificate serial:       3523CB999039382F02296209B9CE438190EAFEBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft
Manifest number:          0148
Signing time:             Wed 10 Dec 2025 18:34:21 +0000
Manifest this update:     Wed 10 Dec 2025 18:29:21 +0000
Manifest next update:     Tue 16 Dec 2025 01:33:21 +0000
Files and hashes:         1: 3139302e3131332e34382e302f32322d3232203d3e20323731393236.roa (hash: BE1KVmubb/bReeoI+nfbQXG78miJMdzKDpUPzKYw1Ww=)
                          2: 323830333a616131303a3a2f33322d3438203d3e20323731393236.roa (hash: C2SltXQZnvvY3PNwNnCpDsytDi4bf1yd876HHt1Z18Y=)
                          3: 3139302e3131332e34382e302f32342d3234203d3e20323731393236.roa (hash: SW2TQjbEF0kUJhHESaaFLZTgmFhhYA4TqzVS2kv01Dk=)
                          4: 3139302e3131332e35302e302f32342d3234203d3e20323731393236.roa (hash: f660PTLDT2nhjTTrtpq5KZyVrpDQDuQ7Rpbsyr0rhws=)
                          5: 3139302e3131332e35312e302f32342d3234203d3e20323731393236.roa (hash: sR9coDYh2RgMySmZCppoKng/QyAqpAtqs+YGGc7PG3Y=)
                          6: 3139302e3131332e34392e302f32342d3234203d3e20323731393236.roa (hash: utKfbItlMxe6olWWK8DsXGD6XCKOJbHF+JuyR7131w0=)
                          7: 866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl (hash: Jo0ZNXX2HbOBbxWLo4xjL1kROCD8+5u+9mxv7hXm4VY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 08:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:23:cb:99:90:39:38:2f:02:29:62:09:b9:ce:43:81:90:ea:fe:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
        Validity
            Not Before: Dec 10 18:29:21 2025 GMT
            Not After : Dec 16 01:33:21 2025 GMT
        Subject: CN=75DE642B1689D0734DE34B4C76A45203770A93EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:af:af:05:44:ec:bc:fb:7f:61:ed:ff:3d:1e:
                    90:54:52:91:ff:11:47:0b:0e:6d:3b:59:46:1e:41:
                    f0:0e:e2:53:21:23:48:30:5b:4d:b6:95:e3:49:ff:
                    7f:58:ff:3b:63:7c:cf:62:6d:04:8a:d6:1f:11:f6:
                    26:bd:25:3f:52:e7:54:2a:9b:7c:40:4f:9a:86:83:
                    d2:53:0d:2d:d1:c5:0d:33:5b:8f:56:2c:ea:48:d5:
                    bb:13:75:2e:00:93:18:a8:62:36:b7:0d:b4:e3:99:
                    49:d2:35:e6:61:81:e6:5c:b0:cf:48:7f:7a:d6:42:
                    8c:36:36:fd:f2:2b:e4:9f:d3:05:e9:59:f4:8a:39:
                    48:65:1d:5a:8e:00:3a:cd:47:87:b5:d1:e0:41:23:
                    1e:c6:da:65:8b:7f:35:c3:c6:de:4a:1e:4c:49:19:
                    ad:05:2a:0c:41:33:1e:6e:b6:0b:0d:d0:eb:58:ad:
                    4a:57:48:da:b9:dc:6e:e5:14:33:eb:ca:44:c0:e7:
                    8e:5d:d7:d5:02:03:56:f2:0e:95:cf:92:b5:37:32:
                    a1:d2:2d:ac:ef:29:2b:3d:ba:d6:f3:60:42:34:22:
                    22:73:8c:e1:19:c5:41:17:c4:56:f2:1f:97:77:45:
                    30:c0:ee:8d:80:85:b7:99:e0:08:a7:75:26:19:02:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DE:64:2B:16:89:D0:73:4D:E3:4B:4C:76:A4:52:03:77:0A:93:EC
            X509v3 Authority Key Identifier:
                keyid:86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:af:6f:23:49:84:d0:c5:59:69:b4:17:72:0e:db:73:67:04:
         51:06:76:9b:6d:10:c0:86:43:6c:5d:bf:0c:5c:68:5a:fe:31:
         47:39:98:9d:8d:d9:f3:a6:14:82:24:78:86:d8:f2:f6:9d:5f:
         cf:4a:db:f1:84:15:8c:f9:4e:6b:81:dc:de:fe:78:90:28:4f:
         11:80:f5:ef:d0:25:86:33:3e:75:0a:f6:51:18:f5:e1:a1:5e:
         49:64:22:f8:21:16:02:3e:73:d3:b6:da:42:fd:a8:18:56:40:
         2a:07:6a:c9:c7:d5:eb:68:e9:fa:72:3e:1c:4a:97:f1:b4:2e:
         e4:4c:be:36:ee:e5:8e:30:24:c1:4e:76:a1:2b:aa:2a:c0:6d:
         a4:f4:52:8d:c9:4c:f4:d6:ce:e0:35:4e:cf:98:58:95:81:b9:
         3b:cd:d4:90:2f:93:98:55:7b:c4:63:4f:60:d7:f7:4a:9e:28:
         e1:f5:6b:7f:32:89:4c:f4:73:f9:83:11:68:a5:5b:f8:62:18:
         a3:75:7d:6f:e3:c5:bc:b1:c9:eb:e7:d5:33:2b:b3:33:4f:9b:
         ce:b7:e4:b0:be:47:83:80:b9:27:c3:7a:38:94:63:62:1c:ce:
         1a:94:16:2f:c8:7f:d3:39:16:c6:cb:81:0a:89:59:b3:2f:e6:
         9e:d9:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----