This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft
File:                     68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft (raw, json)
Hash identifier:          0ndEauZrNlGYWQr7SP+uRa9bbfijUUkK08uH3HTe7bM=
Subject key identifier:   C2:1F:CB:42:0D:40:7D:79:A8:36:1F:8C:4C:90:20:CC:7D:DF:54:62
Authority key identifier: 68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4
Certificate issuer:       /CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4
Certificate serial:       2D65ED503ADF9431049D6E016C96B1D8F4C89185
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft
Manifest number:          0149
Signing time:             Sun 07 Dec 2025 06:18:44 +0000
Manifest this update:     Sun 07 Dec 2025 06:13:44 +0000
Manifest next update:     Fri 12 Dec 2025 03:03:44 +0000
Files and hashes:         1: 68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl (hash: WzXjLUIVPkwI5VT5mMfJi2AceSv8r4rRn9LNclkn/lI=)
                          2: 3136382e3139372e3137322e302f32322d3234203d3e20323634373733.roa (hash: 3rfNOwpMTnnVLYvbkknBiFpW3dsqoeSfVXWluCnVzC8=)
                          3: 323830333a663063303a3a2f33322d3438203d3e20323634373733.roa (hash: /QD54agEPqRInPu4NXDXrOdrQzIZ1Y2ihEubl2HM/0U=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Dec 2025 03:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:65:ed:50:3a:df:94:31:04:9d:6e:01:6c:96:b1:d8:f4:c8:91:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4
        Validity
            Not Before: Dec  7 06:13:44 2025 GMT
            Not After : Dec 12 03:03:44 2025 GMT
        Subject: CN=C21FCB420D407D79A8361F8C4C9020CC7DDF5462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:69:0f:8b:86:7d:65:98:e7:9a:36:32:3e:
                    6f:86:c2:c9:db:86:ed:a4:ce:ee:e8:84:41:35:90:
                    b0:0b:ac:f6:78:c0:a2:3a:c4:15:ee:0a:7a:30:96:
                    31:1b:04:8f:44:9c:4a:30:c8:a1:30:4e:16:22:e4:
                    55:b5:92:5f:0e:07:cf:3d:a3:48:53:2a:b5:b9:93:
                    e1:6b:65:1f:39:0e:5f:d2:e8:c5:a7:01:da:ca:56:
                    ed:d1:09:f5:1d:a7:8c:d3:47:23:82:5e:70:b3:63:
                    58:01:8b:c7:ce:f0:52:5a:30:5f:cf:19:53:3b:dd:
                    e6:c1:f0:55:9c:e5:8d:5d:63:50:70:8a:bd:c1:8f:
                    57:47:1b:a4:25:ce:90:6d:6f:da:b9:b3:f7:a3:02:
                    3e:b9:5c:e8:b9:ef:3a:f1:25:20:19:c7:d6:f9:64:
                    7b:95:65:39:1b:a0:1a:c2:46:14:04:b0:c2:f4:85:
                    68:3a:fc:19:9a:e3:97:80:f0:f4:cb:ba:9f:59:f0:
                    8f:f9:1b:0e:12:5f:af:78:63:11:84:8d:e5:63:42:
                    3a:64:47:6c:de:38:1c:4f:7d:33:c0:de:5f:ff:e9:
                    2a:69:19:47:2a:6b:eb:3a:f8:96:4c:ea:eb:27:f6:
                    4d:ef:ea:a0:38:59:1b:c5:c0:41:f5:10:65:10:30:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1F:CB:42:0D:40:7D:79:A8:36:1F:8C:4C:90:20:CC:7D:DF:54:62
            X509v3 Authority Key Identifier:
                keyid:68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:98:d4:f5:b3:6d:84:32:87:f6:27:6a:a6:9c:69:5c:b1:39:
         63:2d:3c:98:32:bf:18:26:2a:f9:a9:51:9e:53:01:42:40:4c:
         82:72:a4:b5:81:51:3e:10:4a:9f:4b:27:da:fc:cb:31:43:62:
         f1:cb:92:a4:5c:c0:82:17:a7:c8:e8:98:50:77:b2:cf:ed:c8:
         89:15:37:d8:43:12:43:be:2e:d6:c1:d7:7c:6d:19:5a:aa:4e:
         bf:18:9e:28:c8:ee:9b:f0:bf:75:4d:de:4f:aa:2f:a2:3b:e4:
         d7:33:c8:c7:18:9f:4f:bf:d9:0f:a5:ae:4e:d9:16:fa:35:14:
         d2:ce:41:6d:d9:e7:8c:bf:56:ad:63:dd:40:14:f2:12:03:dd:
         8c:95:6f:ee:15:38:a4:0e:f5:88:20:bc:4c:c4:cf:e4:7a:50:
         53:05:c3:29:e7:16:6a:b1:54:d6:e9:81:52:e7:75:8a:96:93:
         ba:91:ed:98:3b:d3:a5:4f:fa:60:58:30:86:30:8d:cc:26:e9:
         4e:76:37:64:89:a3:1c:6d:7c:5a:d8:83:55:f9:32:d4:32:ad:
         48:eb:c4:0f:d0:7f:d4:cb:11:68:ec:08:83:8b:aa:b5:4c:6f:
         6c:08:e7:f0:f1:6b:21:d4:2b:ae:27:bc:fb:91:4d:d7:bc:80:
         20:82:bf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:00:00 2025 by rpki-client