This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft
File:                     0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft (raw, json)
Hash identifier:          +OXNUSEPuXS6psnak9EZipYwJOwqkHS3T7YDomqGtWk=
Subject key identifier:   B4:BA:BE:C0:D4:A5:51:05:CB:B4:97:FC:56:83:1D:6D:42:11:8D:09
Authority key identifier: 0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78
Certificate issuer:       /CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
Certificate serial:       4AE6B4565F20CB43E8131D2542D874E0DE3E45ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft
Manifest number:          0149
Signing time:             Mon 08 Dec 2025 22:12:28 +0000
Manifest this update:     Mon 08 Dec 2025 22:07:28 +0000
Manifest next update:     Sat 13 Dec 2025 16:32:28 +0000
Files and hashes:         1: 323830333a383965303a3a2f33322d3332203d3e20323730303038.roa (hash: 3viU1D+HCnwgWJijWczm9DvUPihHk64a6YWePh2GJPY=)
                          2: 3230302e32332e3134302e302f32342d3234203d3e20323730303038.roa (hash: Do3EW/kaxtiLK9duxsddjCfNMZ9iRxFH+m3EW9MS3ok=)
                          3: 3138392e3132372e3133362e302f32342d3234203d3e20323730303038.roa (hash: /Pef5lNY+CedlAfewPIYk4pbarZ/NqC59hWj8bJXu5U=)
                          4: 3138392e3132372e3133372e302f32342d3234203d3e20323730303038.roa (hash: kXvHiEAf1vtoPraQly5Dcahlpqvxpdv4dK/Si05OKbg=)
                          5: 0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl (hash: FXSglicXQ+eQLC+YC5LojUHgAUAFHx9csJNIqEXU7SE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Dec 2025 16:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e6:b4:56:5f:20:cb:43:e8:13:1d:25:42:d8:74:e0:de:3e:45:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
        Validity
            Not Before: Dec  8 22:07:28 2025 GMT
            Not After : Dec 13 16:32:28 2025 GMT
        Subject: CN=B4BABEC0D4A55105CBB497FC56831D6D42118D09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:0b:47:08:6c:b7:0a:f0:c3:e8:dd:8d:5c:
                    92:06:9f:6a:c9:b1:14:83:8e:4f:14:35:10:8a:4f:
                    f0:1e:28:8b:e7:1d:42:06:31:e4:03:b6:11:4a:d7:
                    f8:e5:d9:e8:88:0c:30:b7:ec:60:17:bc:48:17:6e:
                    cd:c1:5f:b0:78:ab:dc:9f:2e:da:08:b2:88:57:e8:
                    14:43:ed:6b:3e:a5:91:31:3b:e4:61:37:48:87:99:
                    bb:32:f0:4d:67:75:ca:4c:da:4f:85:12:67:b3:04:
                    fa:7e:ee:da:ec:a0:54:6e:f7:1a:88:06:04:f5:d8:
                    6d:f2:a8:4b:c9:5d:69:8d:62:06:7b:8b:40:79:ab:
                    71:b5:bd:e0:9f:28:07:e3:99:9d:31:c8:9e:b2:3f:
                    0d:1e:39:e1:9d:ee:70:ff:42:c7:dc:80:df:cd:ae:
                    1e:f2:30:d7:b4:7a:9f:35:1c:fc:c3:5f:0a:dd:53:
                    cd:91:93:35:b5:a0:ca:75:de:d3:5d:40:fd:91:2a:
                    f9:10:85:e0:69:38:c6:e1:40:0c:73:a8:8b:fa:a6:
                    55:72:ce:82:91:c0:e6:f1:9e:6f:b1:8d:5a:0c:98:
                    3d:17:77:be:7a:b9:af:b5:32:85:70:39:a7:63:d4:
                    02:09:b4:49:37:79:7b:ed:06:7d:bb:f2:a4:13:2c:
                    18:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BA:BE:C0:D4:A5:51:05:CB:B4:97:FC:56:83:1D:6D:42:11:8D:09
            X509v3 Authority Key Identifier:
                keyid:0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:13:ff:3e:2e:de:13:47:13:62:df:41:ae:a0:ad:1b:8e:a8:
         5d:59:eb:ec:80:5b:d8:00:24:a6:62:23:c2:87:34:b2:ff:f0:
         54:94:16:dc:f9:b6:5d:c5:c8:ec:b9:da:2b:50:6c:8c:7c:e9:
         20:7a:47:0b:e5:9a:3b:b3:94:31:62:c1:02:4b:02:3f:6f:15:
         b0:2b:8d:f3:d9:90:dc:13:ed:99:c6:a1:0d:00:4a:49:97:d1:
         29:90:ee:31:b5:c1:e4:63:46:de:88:5e:98:82:c5:8d:f5:f1:
         fb:f5:ad:3b:d4:36:18:6e:47:84:11:dd:44:00:fa:79:ee:fd:
         61:93:1b:f8:51:ef:a5:3c:1f:2d:eb:0e:5a:8b:76:62:40:5d:
         63:64:7d:b6:d6:ad:ea:a2:83:b5:16:81:83:9f:61:7e:06:67:
         b9:6e:26:eb:e2:f1:69:80:ef:b9:13:ad:a0:c7:d6:19:c3:20:
         97:4b:58:ed:e4:98:92:b5:db:be:51:ec:1b:1b:fc:e4:91:db:
         48:96:13:81:31:c9:c0:27:35:8f:e4:ee:4e:b4:44:5d:23:0f:
         4d:6f:4b:b9:73:0b:0a:1d:20:f8:d6:34:22:65:8e:45:24:b6:
         38:09:03:a2:f2:e1:16:b8:b3:7b:c6:51:b0:19:61:26:69:f0:
         8b:64:c0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:35:42 2025 by rpki-client