This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20C52FD9C8338B92EFC8C72DE9E312056149538CA91A3CE8B522AA24F8B3E089/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.mft
File:                     1D32D00C2D1039ACFF94E62E5DAD943213407952.mft (raw, json)
Hash identifier:          nB7mGQ4YPpvKS3IBaVxUIrUT9DHCKQMEy7w76LFrH54=
Subject key identifier:   D2:26:F6:42:F6:21:B6:8C:27:2A:88:75:0C:EA:B5:F8:51:2E:60:01
Authority key identifier: 1D:32:D0:0C:2D:10:39:AC:FF:94:E6:2E:5D:AD:94:32:13:40:79:52
Certificate issuer:       /CN=1D32D00C2D1039ACFF94E62E5DAD943213407952
Certificate serial:       080E8C50CB37B2BB5ECD5F35CB079879766E636D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20C52FD9C8338B92EFC8C72DE9E312056149538CA91A3CE8B522AA24F8B3E089/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.mft
Manifest number:          0143
Signing time:             Sat 06 Dec 2025 06:35:07 +0000
Manifest this update:     Sat 06 Dec 2025 06:30:07 +0000
Manifest next update:     Wed 10 Dec 2025 14:34:07 +0000
Files and hashes:         1: 34352e3136332e33312e302f32342d3234203d3e20323637363833.roa (hash: gwvZ8wFV7+bn39gZ61RYbNUVpi+uNolI1SVy/tO9mLM=)
                          2: 1D32D00C2D1039ACFF94E62E5DAD943213407952.crl (hash: 8xHwQWIGcFNb+/GJlbxVd4DyHNX27wIeFfzH1toVAYg=)
                          3: 34352e3136332e33312e302f32342d3234203d3e2033333536.roa (hash: vHCHdjsGt0go3b76Kw5djbiAYrHPlrquMnZGrhCOwzo=)
                          4: 34352e3136332e33312e302f32342d3234203d3e20323033.roa (hash: sJWubr7adFJFLkjzWZM7QGDSIuNAsaERYS+M7oHk9ow=)
                          5: 34352e3136332e33312e302f32342d3234203d3e20323032.roa (hash: ekNMKlfbZKRgniiB+AqsRrEyoXlPvAC2X+EBTC4wLHI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20C52FD9C8338B92EFC8C72DE9E312056149538CA91A3CE8B522AA24F8B3E089/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20C52FD9C8338B92EFC8C72DE9E312056149538CA91A3CE8B522AA24F8B3E089/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 14:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0e:8c:50:cb:37:b2:bb:5e:cd:5f:35:cb:07:98:79:76:6e:63:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D32D00C2D1039ACFF94E62E5DAD943213407952
        Validity
            Not Before: Dec  6 06:30:07 2025 GMT
            Not After : Dec 10 14:34:07 2025 GMT
        Subject: CN=D226F642F621B68C272A88750CEAB5F8512E6001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:84:a4:1d:6e:e2:bd:dc:3e:f5:7b:ea:49:
                    60:b6:bf:c9:9d:a3:37:87:98:d7:9d:99:03:b0:c2:
                    a6:be:73:ac:34:51:7f:56:f2:17:10:96:9f:bd:03:
                    81:b9:c1:20:31:9d:8d:e4:9c:74:ad:0f:30:a0:fa:
                    6c:6c:8f:82:7f:30:dd:e8:1a:a2:8e:c6:4f:9e:4c:
                    cd:d0:9e:f7:27:ac:f3:30:07:de:c9:d1:9f:5a:f6:
                    4c:b6:4d:b2:3d:c6:b1:9e:4c:59:55:da:cb:73:33:
                    b1:0c:ed:98:9d:29:f9:3f:6c:95:43:19:95:95:b5:
                    ed:d0:ef:0c:24:4a:c2:6c:66:8c:9e:15:59:f8:f3:
                    26:e1:a0:f6:a6:27:b1:c2:37:84:2d:b3:38:c1:a8:
                    d4:09:52:c5:e6:9c:ab:c0:c3:de:82:c6:bf:50:2e:
                    c7:75:00:b7:07:c6:ab:47:54:8c:4e:09:1f:60:de:
                    ee:cb:62:ef:0d:d6:f6:a7:f9:01:8c:ad:54:51:71:
                    81:ae:91:b6:3e:b8:68:c2:4c:21:8d:fe:9c:82:28:
                    56:98:34:21:4c:dd:ae:f1:85:f1:b0:17:8f:c8:d8:
                    73:05:14:d8:a9:5b:99:c0:c1:d3:fb:cc:0e:ef:aa:
                    5a:59:7a:72:54:97:95:9d:e7:73:ca:56:8f:4a:71:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:26:F6:42:F6:21:B6:8C:27:2A:88:75:0C:EA:B5:F8:51:2E:60:01
            X509v3 Authority Key Identifier:
                keyid:1D:32:D0:0C:2D:10:39:AC:FF:94:E6:2E:5D:AD:94:32:13:40:79:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20C52FD9C8338B92EFC8C72DE9E312056149538CA91A3CE8B522AA24F8B3E089/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20C52FD9C8338B92EFC8C72DE9E312056149538CA91A3CE8B522AA24F8B3E089/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:33:2f:8e:4a:86:65:da:ca:d8:df:5e:c5:b4:c6:25:33:e1:
         30:d2:6c:be:ce:c4:c4:f2:13:f6:d9:30:b8:6f:72:0b:c7:6e:
         3f:d8:fa:89:4b:a8:24:6d:7a:3c:9d:f7:72:04:01:27:69:a4:
         0d:1a:45:5e:c9:37:28:42:b1:c0:98:fa:0e:2e:61:92:18:4b:
         bf:d9:ce:fc:92:bc:00:82:03:a5:2e:d3:fd:b6:04:fe:f7:e1:
         62:7b:47:ab:c5:dd:0c:8c:88:2d:31:20:38:ee:7f:62:8a:af:
         28:b3:ba:ea:c2:fa:21:39:8f:a5:f5:24:89:74:05:50:f3:42:
         c6:c5:23:28:e8:9c:bd:e4:e9:48:f1:eb:00:52:a7:74:94:b7:
         d4:6d:b7:2e:20:24:e6:72:68:d7:f6:f6:5d:74:16:01:fe:43:
         5e:2a:5e:6d:55:22:f1:61:48:6f:cb:bd:9d:d1:e3:43:ab:14:
         60:8f:8e:fd:e6:7f:7e:dd:eb:a3:99:1e:54:c0:93:cd:80:5f:
         ed:f8:e1:01:63:30:4e:39:02:76:21:19:c7:63:11:f6:38:26:
         85:60:a2:2a:17:5f:81:34:fa:35:e9:0b:7a:82:95:2b:62:4e:
         16:dc:02:04:4b:fc:94:8d:01:0b:e9:a1:f9:40:59:f7:c7:31:
         33:b1:86:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:24:37 2025 by rpki-client