This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
File:                     25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft (raw, json)
Hash identifier:          mbmO7duSIvBjb8qPj90zCJxDPMzQ0GPeqBLcJbEUZJI=
Subject key identifier:   00:F3:B6:3B:70:07:59:10:65:1B:1F:FC:F2:DB:9D:D1:5F:00:50:09
Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A
Certificate issuer:       /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
Certificate serial:       72A0DE8E22521EB6AA6AA91C400549D0DFBD09F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
Manifest number:          014A
Signing time:             Mon 22 Dec 2025 11:06:48 +0000
Manifest this update:     Mon 22 Dec 2025 11:01:48 +0000
Manifest next update:     Sat 27 Dec 2025 04:47:48 +0000
Files and hashes:         1: 34352e3136312e34342e302f32342d3234203d3e20323636393032.roa (hash: 9jaD8ScaSBtZgY1McxVIxZirAvjcAcgSOFZqFeK76+o=)
                          2: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl (hash: eF961cSy1DFN7lY+CbhiNd2j3MVqwqvmTPeeniRocPs=)
                          3: 323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa (hash: KyyYuN0Yyj5ZO2OssZou9c0xljNW9QC9IlHwmAWoHQg=)
                          4: 34352e3136312e34362e302f32342d3234203d3e20323636393032.roa (hash: xDW4Lo9hVeYDQd0CfzQjVI0iUuT8tc/GgroA2Aw5kCM=)
                          5: 34352e3136312e34352e302f32342d3234203d3e20323636393032.roa (hash: /0gy1miHRoy/ostSkAVmkit9ibYLsGQ/IUPZTZwCW20=)
                          6: 34352e3136312e34372e302f32342d3234203d3e20323636393032.roa (hash: R49+wWAjZezXpnjFE7SoK205+j8QHF55FrOQnSN8YaY=)
                          7: 34352e3136312e34342e302f32322d3232203d3e20323636393032.roa (hash: wff5HMuPjRY+aZAF2OdCcw6nUxf458UNR9ehNwtR7m8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 04:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a0:de:8e:22:52:1e:b6:aa:6a:a9:1c:40:05:49:d0:df:bd:09:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
        Validity
            Not Before: Dec 22 11:01:48 2025 GMT
            Not After : Dec 27 04:47:48 2025 GMT
        Subject: CN=00F3B63B70075910651B1FFCF2DB9DD15F005009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:37:6c:0a:3d:1d:fd:10:f1:c1:6b:f3:d3:
                    84:98:f7:31:26:36:01:44:12:99:e0:39:7a:b0:3b:
                    a3:58:6c:ce:07:c3:eb:fc:6b:33:83:f7:a8:d6:f1:
                    4f:e8:a7:e0:31:f0:c4:8a:a7:c0:60:f4:a1:b7:b1:
                    8c:1f:29:ec:ba:72:8e:1b:2d:89:c3:cb:3f:1c:29:
                    1c:69:ad:1c:8f:de:1a:20:67:38:d8:68:0e:75:1c:
                    a4:ea:41:6e:06:16:1c:38:55:2b:22:09:5b:46:ab:
                    f6:2b:60:98:e2:56:49:c5:c3:dd:92:fd:da:4d:65:
                    1b:de:4a:55:96:26:ce:b8:c5:41:f6:a7:d9:bc:19:
                    de:77:c9:50:2f:b1:bc:83:68:77:b0:ad:30:4d:dc:
                    84:99:3c:e4:8b:f7:28:69:66:fb:08:3b:da:a9:5b:
                    4e:84:60:00:e5:d4:bf:fc:ab:cf:b8:71:a0:e6:7b:
                    3c:ee:d7:9c:cb:51:dc:16:48:35:e8:48:8f:72:ca:
                    39:9a:fd:49:3c:0a:77:e0:5d:10:5f:34:fb:18:1f:
                    17:58:7a:2e:c3:6b:ad:7c:9f:76:4b:93:06:8a:2c:
                    41:bf:7b:32:98:13:08:33:4b:5a:9d:31:4a:82:02:
                    34:51:4e:db:af:4a:c9:47:0a:2e:20:05:e6:dc:41:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F3:B6:3B:70:07:59:10:65:1B:1F:FC:F2:DB:9D:D1:5F:00:50:09
            X509v3 Authority Key Identifier:
                keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0b:fb:fb:14:4c:cd:76:73:1e:c5:e5:bb:76:59:18:2a:db:
         12:82:47:73:11:4e:96:81:ed:07:81:88:76:0d:ea:32:4b:6e:
         c9:f3:1e:8a:04:c7:be:05:66:b3:96:04:89:0c:83:a7:95:d9:
         d0:7a:23:eb:e1:2d:e9:71:c3:5e:c6:78:79:79:cb:21:84:88:
         79:17:0a:ba:cb:c9:c5:2b:46:2f:3a:ac:24:38:6c:2d:0e:e4:
         e8:bd:1f:4e:f2:0c:89:5b:24:03:15:7b:c0:2e:a3:b8:91:85:
         c9:d0:7c:42:64:5c:2a:53:65:84:c2:f7:4d:68:84:f7:51:c0:
         6f:94:a9:aa:b7:a0:d2:c3:57:5a:9c:4a:d3:09:41:93:07:3d:
         86:0d:11:6a:2f:fa:96:3d:5a:0f:d0:91:73:05:5e:13:fc:40:
         d6:69:55:e8:0c:d3:7c:d3:09:e3:00:fe:04:7a:67:7e:ed:ea:
         6f:c3:94:2b:e5:71:6a:67:08:05:47:e0:3b:bd:97:34:f7:8e:
         b6:9a:33:8b:9d:66:c0:aa:76:0f:e7:3e:45:7e:87:cc:6c:5d:
         55:a9:37:e7:8d:83:f1:8a:3f:1f:9f:46:bf:c1:dd:40:17:c5:
         10:46:e0:ea:9b:48:de:84:a3:35:0b:a2:ed:7c:33:a6:77:91:
         fb:6b:9d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 00:28:22 2025 by rpki-client