This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft
File:                     8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft (raw, json)
Hash identifier:          X/X0W6vBfmeDnb6PUiK0MnWU4LnAcVrQMDb062+JH48=
Subject key identifier:   19:BC:88:ED:50:94:AF:43:A8:A9:7C:9F:5E:A2:27:86:4A:97:98:9C
Authority key identifier: 8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D
Certificate issuer:       /CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
Certificate serial:       491C6E5A89F7ECD4EFEEC2E0953D5F416506FA9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft
Manifest number:          0123
Signing time:             Sat 06 Dec 2025 16:30:35 +0000
Manifest this update:     Sat 06 Dec 2025 16:25:35 +0000
Manifest next update:     Fri 12 Dec 2025 04:24:35 +0000
Files and hashes:         1: 3134332e3235352e34322e302f32342d3234203d3e20323635353137.roa (hash: avOh+OWgm1tfX96N+pVX4W9TN0HaNSo61Oo7fLze8Zs=)
                          2: 323830363a3230633a3a2f33322d3332203d3e20323635353137.roa (hash: s9+7XWrorOr7KpXLfdnkeKA3/NG6PURJW18u6rG19vo=)
                          3: 3134332e3235352e34302e302f32322d3232203d3e20323635353137.roa (hash: JKRuQwbGbNvXmdZCd90zRGtSyxVwO8jjcBw6RXXgFoQ=)
                          4: 3134332e3235352e34302e302f32342d3234203d3e20323635353137.roa (hash: gUYtvwgj4yHsU1l4q5TQXVa9l7/+Q431JF9iux5SQKg=)
                          5: 3134332e3235352e34332e302f32342d3234203d3e20323635353137.roa (hash: 7coloHkaUAGGkUaWI37BhVI66ysgKvBmhRGWzRK04GU=)
                          6: 8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl (hash: xZ60VQP+rgCPCDNAfbAyPqmmqafOImVSSoMI4x4NgBI=)
                          7: 3134332e3235352e34312e302f32342d3234203d3e20323635353137.roa (hash: ICMO6LdM7k7tUwwFN0x18CUrnGZzUhg1F4yWKEjeOWg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1c:6e:5a:89:f7:ec:d4:ef:ee:c2:e0:95:3d:5f:41:65:06:fa:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
        Validity
            Not Before: Dec  6 16:25:35 2025 GMT
            Not After : Dec 12 04:24:35 2025 GMT
        Subject: CN=19BC88ED5094AF43A8A97C9F5EA227864A97989C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:54:40:90:84:8d:5c:eb:bc:38:52:14:c6:
                    9d:96:63:ae:6d:b0:a5:d2:b1:36:8f:0e:80:64:cb:
                    4c:80:52:1e:90:40:1a:69:ce:60:83:2d:d4:60:d7:
                    a4:76:2f:60:03:83:62:10:4a:af:1d:f4:12:bb:96:
                    4d:e4:c0:b4:e4:ff:66:8b:16:29:93:e3:4e:04:cb:
                    ae:7d:f6:93:5c:86:f5:a0:05:ce:61:92:47:3b:0e:
                    13:0d:7f:9c:9e:c6:f8:51:95:72:e0:d0:a3:7c:2b:
                    43:fd:5f:43:d8:47:7d:31:87:ee:51:6f:61:85:a0:
                    e1:d4:01:06:15:dd:83:17:a9:d1:95:86:3b:11:5b:
                    36:41:00:b7:24:32:8c:7c:94:4c:2a:8d:ae:1f:cf:
                    c0:3a:47:31:e5:73:50:8c:17:79:96:8c:c3:f6:2c:
                    3b:26:03:dc:a8:0c:f1:06:a3:f9:f1:0f:dd:9f:e4:
                    2b:0c:ae:8e:1f:e3:80:37:26:8f:3f:60:df:90:9f:
                    49:55:47:26:b0:81:ec:fb:5e:c8:ac:a1:c4:9c:42:
                    37:8d:95:bc:06:e3:fe:2e:61:3f:9d:a1:ea:94:40:
                    00:df:22:1b:34:99:8e:35:12:21:83:6f:06:4b:48:
                    88:b2:f4:94:90:76:62:e1:aa:01:2a:ae:86:38:4c:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BC:88:ED:50:94:AF:43:A8:A9:7C:9F:5E:A2:27:86:4A:97:98:9C
            X509v3 Authority Key Identifier:
                keyid:8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:92:d1:7e:87:5d:ea:ec:ca:0d:82:f3:3e:04:22:61:fe:ed:
         1b:2f:d6:48:6e:b1:9f:ad:99:cc:08:fd:18:79:33:73:dd:90:
         9c:a0:28:ae:9c:41:95:ca:a0:e9:b4:ec:45:8c:58:14:13:22:
         84:7e:ef:d1:50:3f:2e:64:fc:b0:3c:94:c8:98:23:5e:8f:0b:
         61:25:d1:22:fc:50:47:0c:30:31:e3:dc:01:f8:06:26:98:66:
         89:48:a7:b7:66:46:28:b8:15:41:d7:3a:7f:4a:98:01:c1:1c:
         b1:e5:ea:4a:82:31:01:bc:93:31:8b:81:d3:11:fe:6a:a1:78:
         6e:44:d2:2f:8c:c8:2c:d9:f7:1f:60:bf:86:90:03:18:52:fb:
         df:87:b3:26:e2:ef:26:2b:c7:f8:76:07:c7:ca:67:36:57:f2:
         a4:cd:cd:08:a0:00:39:2c:0c:f5:d2:0b:da:25:72:18:a9:77:
         bb:a2:c1:fc:f6:cf:43:64:df:31:8d:b4:44:81:29:a7:e3:5b:
         e2:0f:66:a6:cd:fc:ba:8e:0a:0f:65:20:47:8c:c7:36:b2:8e:
         e5:e3:e9:43:3d:61:2a:e2:7a:38:fa:8d:d6:b3:34:a4:4c:9b:
         dd:83:83:45:4e:2b:21:49:43:21:62:87:84:64:b9:07:08:2f:
         54:e8:4e:89
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUSRxuWon37NTv7sLglT1fQWUG+p8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE5MDEzNDlFOURFNDQ2NDZENUVCQjRGQkJEODA4Qjg5
NEQ2ODgyRDAeFw0yNTEyMDYxNjI1MzVaFw0yNTEyMTIwNDI0MzVaMDMxMTAvBgNV
BAMTKDE5QkM4OEVENTA5NEFGNDNBOEE5N0M5RjVFQTIyNzg2NEE5Nzk4OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPi1RAkISNXOu8OFIUxp2WY65t
sKXSsTaPDoBky0yAUh6QQBppzmCDLdRg16R2L2ADg2IQSq8d9BK7lk3kwLTk/2aL
FimT404Ey6599pNchvWgBc5hkkc7DhMNf5yexvhRlXLg0KN8K0P9X0PYR30xh+5R
b2GFoOHUAQYV3YMXqdGVhjsRWzZBALckMox8lEwqja4fz8A6RzHlc1CMF3mWjMP2
LDsmA9yoDPEGo/nxD92f5CsMro4f44A3Jo8/YN+Qn0lVRyawgez7XsisocScQjeN
lbwG4/4uYT+doeqUQADfIhs0mY41EiGDbwZLSIiy9JSQdmLhqgEqroY4TBzHAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUGbyI7VCUr0OoqXyfXqInhkqXmJwwHwYDVR0j
BBgwFoAUipATSeneRGRtXrtPu9gIuJTWiC0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzM1NkQwMUY3NzE5NTA5RTAxNDk2MEQ3MTU4ODFFMkVE
MEY1NUI5QjA2QjQ1NTU5NzYzNDNDOEFERjJFOUUwLzAvOEE5MDEzNDlFOURFNDQ2
NDZENUVCQjRGQkJEODA4Qjg5NEQ2ODgyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTkwMTM0OUU5REU0NDY0NkQ1
RUJCNEZCQkQ4MDhCODk0RDY4ODJELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMzNTZEMDFGNzcxOTUwOUUwMTQ5NjBENzE1ODgxRTJFRDBGNTVCOUIw
NkI0NTU1OTc2MzQzQzhBREYyRTlFMC8wLzhBOTAxMzQ5RTlERTQ0NjQ2RDVFQkI0
RkJCRDgwOEI4OTRENjg4MkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGktF+h13q7MoNgvM+BCJh/u0b
L9ZIbrGfrZnMCP0YeTNz3ZCcoCiunEGVyqDptOxFjFgUEyKEfu/RUD8uZPywPJTI
mCNejwthJdEi/FBHDDAx49wB+AYmmGaJSKe3ZkYouBVB1zp/SpgBwRyx5epKgjEB
vJMxi4HTEf5qoXhuRNIvjMgs2fcfYL+GkAMYUvvfh7Mm4u8mK8f4dgfHymc2V/Kk
zc0IoAA5LAz10gvaJXIYqXe7osH89s9DZN8xjbREgSmn41viD2amzfy6jgoPZSBH
jMc2so7l4+lDPWEq4no4+o3WszSkTJvdg4NFTishSUMhYoeEZLkHCC9U6E6J
-----END CERTIFICATE-----
Generated at Sun Dec 7 10:10:39 2025 by rpki-client