This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
File:                     FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft (raw, json)
Hash identifier:          DrnicMTB+xC5gN4cy4u0HERvNaoCK1SY5goHvjqgZlc=
Subject key identifier:   58:34:AC:16:6E:0E:98:0C:15:1A:50:0A:CB:18:D0:88:EA:64:49:8E
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       087C3906A749BC12746D9A7C49D6FE44969D6D75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
Manifest number:          FA
Signing time:             Sun 07 Dec 2025 04:17:37 +0000
Manifest this update:     Sun 07 Dec 2025 04:12:37 +0000
Manifest next update:     Thu 11 Dec 2025 10:27:37 +0000
Files and hashes:         1: FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl (hash: l8xL4/hhGUst2ZbiDjUP+DvADKb6hfZwBz0MfcQ9f1U=)
                          2: 323830363a3231373a3a2f33322d3438203d3e203238333934.roa (hash: t8tQAxHK5SM0hJcnJTUNhCO83Gm9y+i54W9HMI+9QI0=)
                          3: 3133382e3235352e36302e302f32322d3234203d3e203238333934.roa (hash: N66mU5uJs32JivTi2W6CcithMD57RUBysR4Giw1J7JI=)
                          4: 323830363a3231373a3a2f33322d3332203d3e203238333934.roa (hash: FXknVxNPT5LYbdPpdHBuWLg+h+5sHKCVghfPHeZGevY=)
                          5: 3230302e302e39302e302f32332d3234203d3e203238333934.roa (hash: dsNqsIRLppipfiK97wDbOfVrZDkGOJmmC7ZfbZLOODI=)
                          6: 3230302e302e39322e302f32332d3234203d3e203238333934.roa (hash: KIAINCVXWi16ODipuPi8LpywZN07lABefP1ISKZluXE=)
                          7: 3137302e3234352e3138382e302f32322d3234203d3e203238333934.roa (hash: kjGxhRSboyoxdVbo+qay7VTDzNqCoExfsGaSS4CipDA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7c:39:06:a7:49:bc:12:74:6d:9a:7c:49:d6:fe:44:96:9d:6d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Dec  7 04:12:37 2025 GMT
            Not After : Dec 11 10:27:37 2025 GMT
        Subject: CN=5834AC166E0E980C151A500ACB18D088EA64498E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:c9:8a:d0:65:af:5d:fb:64:4c:aa:81:be:
                    4a:05:aa:99:22:7f:15:06:e5:d4:25:7e:4d:ce:76:
                    86:f6:46:c6:96:c4:be:56:3a:8a:f1:06:db:b0:ad:
                    25:8d:a9:4a:54:5f:eb:fd:b3:a7:98:21:41:27:31:
                    df:59:b3:39:3d:e2:df:b2:b3:ef:b3:67:32:40:6c:
                    c8:e1:37:2a:13:80:be:0e:c7:2f:d5:f6:96:ed:3c:
                    53:ea:1c:13:ba:e8:3c:95:be:7b:03:f9:a2:1b:03:
                    db:5c:3a:25:83:69:46:d2:99:b1:6e:9c:4d:31:e7:
                    e2:17:c5:66:8f:58:72:68:57:98:2e:a0:00:ec:7a:
                    d2:99:a6:af:9d:f0:2d:0d:a5:a6:d3:e7:17:b8:54:
                    93:b2:7b:8a:0f:a3:5f:79:1c:e1:aa:82:0c:81:dc:
                    e3:2a:12:99:08:73:89:a9:13:5c:40:66:c0:90:44:
                    33:47:8f:52:21:47:d3:52:78:cf:36:a9:1d:20:dd:
                    51:aa:4d:c2:6f:7d:5b:c0:40:64:74:8e:d5:d3:cb:
                    f3:d0:8b:ba:3d:ad:02:c0:39:7c:45:2c:9e:a4:05:
                    22:e2:f6:a9:3c:e7:50:66:49:b1:4f:c8:c5:b9:35:
                    b3:6d:20:34:f0:83:24:31:00:0a:db:17:b4:18:22:
                    7e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:34:AC:16:6E:0E:98:0C:15:1A:50:0A:CB:18:D0:88:EA:64:49:8E
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:36:be:73:71:38:a5:2f:fd:40:ea:2d:ec:99:3a:c2:5c:05:
         de:ab:51:a3:4e:73:cd:03:2c:ff:79:34:94:f3:cd:ca:d9:6e:
         ea:4f:f1:78:60:22:79:43:10:79:ee:25:56:7b:1e:e8:08:f7:
         e4:d5:48:6f:e3:94:bf:52:d5:28:3c:ca:15:50:b0:66:66:92:
         49:4a:67:97:0a:8a:bf:52:a3:c7:97:e8:b0:68:3c:04:24:11:
         72:0f:81:fe:df:92:54:2c:d4:a5:89:02:1e:77:49:1c:51:75:
         3b:d9:02:e3:08:ef:10:fe:f2:61:2a:1a:1a:25:58:3b:47:dc:
         8c:7d:42:10:85:df:aa:9d:c5:82:25:95:56:68:27:fd:86:9f:
         e1:4e:5a:1c:57:0d:3d:0f:be:bb:26:c3:75:f8:d7:78:cc:21:
         fc:17:28:19:c0:d1:65:4a:c9:6f:19:f2:04:c7:da:04:1f:35:
         08:12:d7:9b:7e:28:0e:cf:a0:73:68:a3:f4:a4:36:40:06:af:
         c4:5d:d6:c2:e1:59:48:cc:53:a1:6c:26:e3:ad:a5:f1:7e:d0:
         25:14:b7:d3:36:13:35:ce:87:91:3f:0d:58:dd:fd:c7:cb:9f:
         88:e7:90:c2:80:c8:f1:ce:c1:89:9c:7b:ed:30:0c:53:51:76:
         48:fd:56:d5
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUCHw5BqdJvBJ0bZp8Sdb+RJadbXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1OTFBMTMzMTYzNDZBMkJDRUYwN0Y2REY4RDQ0REQw
MjUwRjg0MTAeFw0yNTEyMDcwNDEyMzdaFw0yNTEyMTExMDI3MzdaMDMxMTAvBgNV
BAMTKDU4MzRBQzE2NkUwRTk4MEMxNTFBNTAwQUNCMThEMDg4RUE2NDQ5OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/cmK0GWvXftkTKqBvkoFqpki
fxUG5dQlfk3Odob2RsaWxL5WOorxBtuwrSWNqUpUX+v9s6eYIUEnMd9Zszk94t+y
s++zZzJAbMjhNyoTgL4Oxy/V9pbtPFPqHBO66DyVvnsD+aIbA9tcOiWDaUbSmbFu
nE0x5+IXxWaPWHJoV5guoADsetKZpq+d8C0NpabT5xe4VJOye4oPo195HOGqggyB
3OMqEpkIc4mpE1xAZsCQRDNHj1IhR9NSeM82qR0g3VGqTcJvfVvAQGR0jtXTy/PQ
i7o9rQLAOXxFLJ6kBSLi9qk851BmSbFPyMW5NbNtIDTwgyQxAArbF7QYIn7FAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUWDSsFm4OmAwVGlAKyxjQiOpkSY4wHwYDVR0j
BBgwFoAU/1kaEzFjRqK87wf2341E3QJQ+EEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Qzk1MkRDMEFDRkZGOTA4QzZGQTE0QzhBN0FBRThCNjMz
MUIzMERBRTA0MTBGMTQ4RTk0Q0YxQjQ3QTgzMkQ5LzAvRkY1OTFBMTMzMTYzNDZB
MkJDRUYwN0Y2REY4RDQ0REQwMjUwRjg0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjU5MUExMzMxNjM0NkEyQkNF
RjA3RjZERjhENDRERDAyNTBGODQxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEM5NTJEQzBBQ0ZGRjkwOEM2RkExNEM4QTdBQUU4QjYzMzFCMzBEQUUw
NDEwRjE0OEU5NENGMUI0N0E4MzJEOS8wL0ZGNTkxQTEzMzE2MzQ2QTJCQ0VGMDdG
NkRGOEQ0NEREMDI1MEY4NDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvNr5zcTilL/1A6i3smTrCXAXe
q1GjTnPNAyz/eTSU883K2W7qT/F4YCJ5QxB57iVWex7oCPfk1Uhv45S/UtUoPMoV
ULBmZpJJSmeXCoq/UqPHl+iwaDwEJBFyD4H+35JULNSliQIed0kcUXU72QLjCO8Q
/vJhKhoaJVg7R9yMfUIQhd+qncWCJZVWaCf9hp/hTlocVw09D767JsN1+Nd4zCH8
FygZwNFlSslvGfIEx9oEHzUIEtebfigOz6BzaKP0pDZABq/EXdbC4VlIzFOhbCbj
raXxftAlFLfTNhM1zoeRPw1Y3f3Hy5+I55DCgMjxzsGJnHvtMAxTUXZI/VbV
-----END CERTIFICATE-----
Generated at Sun Dec 7 10:06:44 2025 by rpki-client