This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.mft
File:                     9F825D61F8FE63A1E801F91110272AA8A180A78F.mft (raw, json)
Hash identifier:          rEwde9P2MwNvhpI6iBNZ4izi2OeTrQaqvBGr3MFoUjY=
Subject key identifier:   A7:7B:B3:A1:4B:1F:C5:03:B2:28:D1:F2:55:10:89:D8:23:C7:48:1F
Authority key identifier: 9F:82:5D:61:F8:FE:63:A1:E8:01:F9:11:10:27:2A:A8:A1:80:A7:8F
Certificate issuer:       /CN=9F825D61F8FE63A1E801F91110272AA8A180A78F
Certificate serial:       4DCAF8B4CB740909696EBF87C16D65FF05335687
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.mft
Manifest number:          29
Signing time:             Sun 07 Dec 2025 03:11:36 +0000
Manifest this update:     Sun 07 Dec 2025 03:06:36 +0000
Manifest next update:     Thu 11 Dec 2025 23:45:36 +0000
Files and hashes:         1: 34352e3137392e3139372e302f32342d3234203d3e20323734313830.roa (hash: DQT67Oirc1FxX542jwkz16RNUgNJBeFSIyV416jR/E0=)
                          2: 323830333a623564303a3a2f33322d3332203d3e20323734313830.roa (hash: UGm+np1qITyZrbfw6cMmW9fW3QQbpNs2ACBhTE+8VJ4=)
                          3: 9F825D61F8FE63A1E801F91110272AA8A180A78F.crl (hash: 1KBdSYxWrOjeKhFUsyqkQb0L2Qmm++g40TDcvkkThrU=)
                          4: 34352e3137392e3139362e302f32332d3234203d3e20323734313830.roa (hash: xs1sFX251ovWK+IacpMr4ZjRBT/W1473QlqRzNgyisQ=)
                          5: 34352e3137392e3139362e302f32342d3234203d3e20323734313830.roa (hash: 8uVu97zY+4NhmvfBQlfZgx6/9uN5G8oMqveeuWGJ1zs=)
                          6: 34352e3137392e3139362e302f32332d3233203d3e20323734313830.roa (hash: BPaL5NjB29nsGyUdYF72RwZIVuXJQd07TVQaaedzQLo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ca:f8:b4:cb:74:09:09:69:6e:bf:87:c1:6d:65:ff:05:33:56:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F825D61F8FE63A1E801F91110272AA8A180A78F
        Validity
            Not Before: Dec  7 03:06:36 2025 GMT
            Not After : Dec 11 23:45:36 2025 GMT
        Subject: CN=A77BB3A14B1FC503B228D1F2551089D823C7481F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:34:e9:90:ba:58:42:cb:46:e1:2b:16:f5:df:
                    32:57:06:c8:59:25:f5:cf:4a:b4:29:d7:1c:25:59:
                    a6:17:f5:f6:a4:bb:5c:c9:54:a0:39:b0:61:cc:8b:
                    c2:8b:60:05:74:95:4a:6c:55:9b:e0:60:b2:6b:bc:
                    89:a2:bf:3d:2b:d0:7e:cd:03:25:dc:33:e5:23:5d:
                    7d:82:30:1a:d2:9f:bd:f8:4f:9f:b0:56:98:b8:1b:
                    d5:76:ab:48:45:8a:d0:12:fd:8f:1a:c2:14:13:eb:
                    8a:ec:dd:46:f2:98:3c:d8:12:40:7f:0d:1f:cd:5e:
                    04:a8:16:aa:f4:06:33:5a:b4:33:2f:aa:39:d3:fb:
                    bc:86:49:fb:c2:eb:2c:78:92:b4:e3:12:4e:14:78:
                    06:c9:0b:9e:d7:02:89:d8:eb:c3:5c:13:9b:26:7c:
                    47:aa:77:58:80:2b:85:01:98:d6:82:4d:d5:7e:f0:
                    1c:4f:14:ae:5c:cd:b3:88:00:28:84:b1:27:b6:06:
                    9f:00:c9:87:91:1c:0a:9c:b8:0d:ff:1d:03:7e:66:
                    5f:eb:00:77:d2:f6:aa:35:bb:63:d9:b7:75:4d:13:
                    17:f3:f0:51:c3:ca:4b:b1:08:f9:6f:3d:08:df:fe:
                    41:65:58:87:44:01:16:25:52:d5:e3:94:82:94:d2:
                    d7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7B:B3:A1:4B:1F:C5:03:B2:28:D1:F2:55:10:89:D8:23:C7:48:1F
            X509v3 Authority Key Identifier:
                keyid:9F:82:5D:61:F8:FE:63:A1:E8:01:F9:11:10:27:2A:A8:A1:80:A7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:64:00:8d:a0:4b:30:a1:a5:fc:91:37:fa:08:c6:15:36:9c:
         25:15:93:96:6b:9b:bd:a6:0e:74:2e:2c:a7:eb:6a:a2:b1:d8:
         df:9d:65:16:32:1c:cb:c1:35:22:2b:c6:68:8a:d4:e9:0b:1d:
         27:7a:79:ae:d8:64:c7:d2:a6:a7:64:d3:87:da:a4:d8:57:52:
         f0:03:7e:9b:5f:10:d8:7b:d5:fb:16:d8:a1:20:96:35:b6:10:
         75:0c:ef:6e:1f:0c:eb:ef:57:5e:30:5c:e1:5f:cb:46:1a:6a:
         03:6f:7b:ef:5e:90:6a:22:86:00:8e:2b:42:52:23:60:54:cd:
         04:cf:0c:b6:86:7c:9c:6d:b9:77:5e:ac:8e:64:eb:8d:d5:7d:
         09:3c:e5:df:85:13:a8:c7:83:5b:2f:af:0f:51:6b:8d:60:da:
         a1:3a:11:1c:51:ba:a7:c1:a3:aa:66:37:f2:d2:8f:35:10:2d:
         fc:71:bf:39:df:11:1b:86:45:5d:96:9e:64:fa:7c:d2:1e:80:
         1f:95:2b:04:7b:cb:3d:f0:2b:7e:07:e9:a9:28:54:c7:74:1d:
         0d:6e:8c:a8:2a:e2:cb:cc:88:c8:76:6c:89:41:cd:39:76:7e:
         d2:3b:90:d1:aa:69:c2:19:35:9a:a8:28:9f:1b:a5:c5:85:72:
         8a:0d:a2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:53:45 2025 by rpki-client