This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.mft
File:                     5998B120B3E73E1A83319F353329C3ABD0E1E67C.mft (raw, json)
Hash identifier:          H6g7EpvoZsa6m423HAtc+WHmoKMgmFtRLB0QDGuIkOo=
Subject key identifier:   C2:64:99:F0:75:A4:2C:5F:88:F5:00:E9:61:27:DA:24:85:AA:9B:5E
Authority key identifier: 59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C
Certificate issuer:       /CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
Certificate serial:       62E053926F05B80F0CAC97703B1E0789F7036D92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.mft
Manifest number:          0147
Signing time:             Sun 07 Dec 2025 02:46:24 +0000
Manifest this update:     Sun 07 Dec 2025 02:41:24 +0000
Manifest next update:     Thu 11 Dec 2025 07:12:24 +0000
Files and hashes:         1: 323830333a353563303a3a2f33322d3332203d3e20323635373135.roa (hash: JrSVNgnG5zDj3cCjZVSurPIl2x8zfJ61QOA/Ox3yiEY=)
                          2: 34352e36352e3135302e302f32332d3233203d3e20323635373135.roa (hash: uzWCcSswgAcy0XLr+/Vq8INGXbk53mzATVZ0KAIjEI4=)
                          3: 34352e36352e3135302e302f32342d3234203d3e20323635373135.roa (hash: KTRChOmH8if8DF3FhJ3S0SXie/qSgShP1NaP6RWa1tU=)
                          4: 34352e36352e3134382e302f32322d3232203d3e20323635373135.roa (hash: i1zlPfXsnhNTSyqfkqxObJC+xRbNF5ad302XIqBwc8o=)
                          5: 34352e36352e3135312e302f32342d3234203d3e20323635373135.roa (hash: 3NT/RMNInxXBSAieunFjxTYIzbWrwoXxHTK/KrNpLeY=)
                          6: 34352e36352e3134382e302f32342d3234203d3e20323635373135.roa (hash: /eydrSuXwlF+dVC1+Oz1vot91AupgKMz3HpMuMTft84=)
                          7: 34352e36352e3134382e302f32332d3233203d3e20323635373135.roa (hash: 2tPJtYpcVfkbJHYRpDWibdnzqOXugLG9c5+HxzJzlbo=)
                          8: 34352e36352e3134392e302f32342d3234203d3e20323635373135.roa (hash: eK1zzAxHQeVQYAKzHVv+SxV3ePYFgglIYsAe/0Hyap0=)
                          9: 5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl (hash: vIi6N7BcW8+CV8loBh2fgF+ncE+smesYHmRxoc3Ciqg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 07:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e0:53:92:6f:05:b8:0f:0c:ac:97:70:3b:1e:07:89:f7:03:6d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
        Validity
            Not Before: Dec  7 02:41:24 2025 GMT
            Not After : Dec 11 07:12:24 2025 GMT
        Subject: CN=C26499F075A42C5F88F500E96127DA2485AA9B5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:d1:d9:86:73:84:92:53:a0:92:db:8f:58:
                    10:49:bb:d9:bc:37:02:52:05:15:ca:32:88:58:83:
                    e2:84:49:bf:00:4f:01:a1:f5:9c:52:5e:35:40:dd:
                    8b:87:35:9c:41:00:a8:25:73:dc:fa:fe:41:98:bb:
                    14:5a:96:37:6b:a4:be:2d:d4:9a:3a:17:a7:6c:f5:
                    68:5a:0b:17:9d:5e:ac:af:02:0f:ed:c9:ba:88:f9:
                    ea:a1:61:dd:b8:d1:69:03:8c:3d:fa:06:9b:a8:d6:
                    63:82:67:9a:ed:d1:d5:dd:ef:6c:1d:bc:67:42:4a:
                    46:d6:61:8a:30:9d:3e:6d:24:66:18:86:b7:de:16:
                    a8:f0:65:04:7c:ea:3c:b2:66:a9:81:59:b6:f6:28:
                    44:8c:24:d2:42:03:45:9c:31:8c:f5:96:b7:10:07:
                    79:11:55:58:59:e2:65:1e:94:bf:e4:57:e3:28:d2:
                    b5:aa:8b:76:83:e8:0e:e6:59:ba:a3:f5:4c:11:08:
                    b2:2e:4e:e1:35:fb:7f:b0:ea:7f:d2:c5:8c:43:61:
                    4e:9d:8d:0c:b3:a2:80:60:5d:81:54:f4:98:91:ee:
                    33:bd:23:32:3a:23:71:9f:40:18:f2:8c:0a:e7:fb:
                    e5:c5:0e:41:6c:5b:0f:32:43:1f:3a:38:ad:12:7b:
                    3e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:64:99:F0:75:A4:2C:5F:88:F5:00:E9:61:27:DA:24:85:AA:9B:5E
            X509v3 Authority Key Identifier:
                keyid:59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:26:10:27:41:25:2f:8e:40:0e:1a:e1:60:fc:c8:0a:19:
         db:59:d9:e0:52:49:44:5f:1e:ad:7c:6b:48:5e:30:01:b0:a0:
         de:39:1c:4a:ee:76:d1:73:9a:85:b4:15:0d:73:86:da:d6:16:
         d6:71:81:7e:e7:2e:b0:c7:c4:b2:19:af:1d:e2:6e:85:f4:e6:
         ce:a7:4e:5a:6a:95:40:f4:ab:4d:3f:4f:24:79:a3:5c:58:48:
         2d:18:c8:eb:ef:30:b7:a3:5c:d3:49:bd:24:61:cb:76:36:58:
         6d:09:7a:e5:19:65:e3:43:16:1e:d5:c5:47:21:8c:62:2e:98:
         e8:da:8b:29:22:04:22:a4:64:5f:97:a9:ae:3d:03:2f:7c:a1:
         26:88:62:a1:98:af:dd:5a:19:72:25:72:39:67:ab:f1:73:fb:
         b3:fd:5c:5f:39:10:ef:80:0f:8b:a7:6d:01:c8:90:a8:2b:d0:
         e5:bb:4a:3e:d5:22:ef:6d:16:2d:81:7f:0e:0e:4b:31:08:d8:
         43:fe:07:57:d1:00:16:5d:7b:e0:f4:7d:d2:25:c0:06:b2:a6:
         32:05:8b:b3:6e:6c:30:09:69:e6:99:b2:e9:e9:2d:0f:54:7d:
         10:0b:64:2f:b5:40:e0:d2:70:45:8a:cd:ee:f3:7c:aa:01:e8:
         21:85:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:53:33 2025 by rpki-client