This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
File:                     CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft (raw, json)
Hash identifier:          ycI3Pe1ITI9EbP3O4tqU7Rn5d6exxOTfofXccNRG+WU=
Subject key identifier:   60:6A:67:72:93:42:29:C8:13:0C:2B:2C:16:BB:1B:43:E5:5B:9E:F3
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       1D36CE20E8C6B2CC00B5F2E1B80B5D79ED07C17D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
Manifest number:          0141
Signing time:             Sat 06 Dec 2025 12:13:16 +0000
Manifest this update:     Sat 06 Dec 2025 12:08:16 +0000
Manifest next update:     Thu 11 Dec 2025 19:48:16 +0000
Files and hashes:         1: 323830333a623263303a3a2f33322d3438203d3e203237383535.roa (hash: cBZAsgYBRe9PwtVJB9mQrHmPZG5SNZVKpc0a0adUbj4=)
                          2: 323830333a623263303a3a2f33322d3438203d3e203232373234.roa (hash: ZeGfFxSVzSzbCf8uwl2ie0Rwykq8YLtVgrtdXaAM5A8=)
                          3: 323830333a623263303a3a2f33322d3438203d3e203139313639.roa (hash: FJy02U9rWd+tvACRc1LjDSE7WXZY7AKkni5n69/WdtE=)
                          4: 323830333a623263303a3a2f33322d3438203d3e20323634383531.roa (hash: yMxXoOQr2UNiqFenv+tsegYIY8UyyHHlBTx8sL/6MO0=)
                          5: 323830333a623263303a3a2f33322d3438203d3e203132393536.roa (hash: r9HRMnWiyty0Ot3j1ORr3wjDrr1Lr/ocUP8HIbxzZvQ=)
                          6: 3137302e38332e3231362e302f32322d3234203d3e203237383535.roa (hash: 3KgKaqDK90iI5kU+rlWYz1fV/y1gKUBdK2uqjZ9tZAo=)
                          7: 323830333a623263303a3a2f33322d3438203d3e203237393437.roa (hash: cik4ui3C6oU7kz9yeHeRALjMQIPm4DDux8BHlrZqVeE=)
                          8: 3137302e38332e3231362e302f32322d3234203d3e20323634383531.roa (hash: DWq9A5P4cTHGYlQekszn1Ov7s9cpWi9RiEkBKsRc3A0=)
                          9: 323830333a623263303a3a2f33322d3430203d3e2033353439.roa (hash: OHazFAKL7lVks8hx1YQfTr0f1g0PtvCkynMUmxkOMSs=)
                          10: CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl (hash: eBUlfKrjl1gvKemSsMq8dJ2Ed0fJXUlJbpTIUugpdh8=)
                          11: 3137302e38332e3231362e302f32322d3234203d3e2033353439.roa (hash: OvTJZuvFkSEVitHExbH+8DKKzFHQUI1HvX5A526CK4c=)
                          12: 3137302e38332e3231362e302f32322d3234203d3e203237393437.roa (hash: K3Bmn3u4iMFezN9w6C1SnmZB71U6qZxo+pXxmNRLH8A=)
                          13: 3137302e38332e3231362e302f32322d3234203d3e203139313639.roa (hash: ORRHzNnBMbGNzrjs9zGKoGIPZTbb54sGzahRty+TAJ0=)
                          14: 3137302e38332e3231362e302f32322d3234203d3e203232373234.roa (hash: oEDE8tIeiw9g3LimO8fnl1grvxAHKQgXswG0iZhG8OQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:36:ce:20:e8:c6:b2:cc:00:b5:f2:e1:b8:0b:5d:79:ed:07:c1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Dec  6 12:08:16 2025 GMT
            Not After : Dec 11 19:48:16 2025 GMT
        Subject: CN=606A6772934229C8130C2B2C16BB1B43E55B9EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:19:80:10:5d:83:85:3f:05:77:6b:ca:6b:80:
                    6e:65:e3:07:f1:23:5a:b5:18:b3:21:ad:90:a7:e1:
                    59:1e:bf:be:47:13:25:aa:8b:6b:93:d2:6c:70:35:
                    0f:ae:37:97:81:16:7f:21:8c:d3:86:8e:58:41:47:
                    04:97:33:e8:4c:c5:96:85:94:6a:d9:ea:1f:12:6b:
                    c7:6a:d1:b8:1a:43:8c:81:5d:9d:66:0a:9d:09:21:
                    a5:ef:7b:91:c5:f7:d9:16:16:cd:d4:bb:bd:e4:36:
                    21:2c:b8:5b:3c:61:8d:c3:f6:f3:7f:89:b2:26:3a:
                    b1:6e:29:fc:8a:e0:ec:f9:b0:6e:9c:4c:5d:00:d7:
                    b5:40:65:d3:b6:cb:d5:a3:b5:42:f0:a5:e6:e6:64:
                    f5:e5:79:c9:2a:50:40:61:18:08:57:81:93:df:cd:
                    e9:d5:9b:e1:fa:4d:77:b5:d2:60:71:03:cc:94:c5:
                    a4:99:32:fe:f7:8e:74:13:c7:36:d5:68:9d:74:cc:
                    ff:e0:f7:3c:02:d0:78:16:b8:04:d7:aa:9f:a2:44:
                    13:d9:82:a6:29:c8:4a:cf:98:c7:71:27:d2:ec:ed:
                    1f:7d:d5:78:22:72:3a:2b:a3:59:c9:92:84:88:4d:
                    70:51:ce:0d:16:af:e0:e3:ba:55:d3:3f:8b:e3:14:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6A:67:72:93:42:29:C8:13:0C:2B:2C:16:BB:1B:43:E5:5B:9E:F3
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7f:9e:2b:2d:be:d3:39:12:c1:8a:77:67:cd:6f:2f:bd:dc:
         e3:47:68:6d:73:87:7f:ed:d5:58:cd:5c:35:5d:77:bf:42:dd:
         13:c6:a2:b9:71:09:e7:19:3c:b9:5c:82:47:d5:eb:9e:c8:d9:
         1e:fe:9f:5b:62:47:34:0d:c9:3a:63:a6:da:7d:23:ec:9c:58:
         80:a4:eb:e3:74:fd:e2:67:bd:af:a7:59:7a:38:c3:bc:98:fd:
         45:43:37:df:b9:b7:5b:3b:1d:f2:5f:ff:98:93:b6:b7:9d:fa:
         5b:ca:37:40:f0:ea:19:a6:f0:29:c4:58:bf:ba:c7:28:27:4a:
         79:e1:b6:53:fa:fb:56:c1:ff:54:9d:65:68:60:cc:9f:53:e4:
         31:90:01:f3:79:dc:6d:3f:1a:cb:25:c0:06:de:a0:1f:0d:f4:
         0d:07:f6:49:3c:cf:01:56:ba:5a:b0:84:56:e3:41:8d:ee:3c:
         a4:0e:fc:7d:83:0a:fe:f6:f3:f1:35:b6:80:79:33:9b:69:7e:
         12:34:08:a8:9f:3b:57:2b:88:ec:f5:47:5c:f0:d3:fc:a9:bd:
         12:e1:8e:54:41:c8:e6:5f:41:23:0c:b1:91:2b:00:e9:e0:74:
         6c:d9:b9:fb:42:2d:c6:c2:6b:02:29:11:42:fb:a0:b1:b6:fb:
         6e:54:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:06:53 2025 by rpki-client