This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft
File:                     AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft (raw, json)
Hash identifier:          ndhEkXuxKFxpmW7UL74ycqt6VlEEvkW+D1C2Jz+22Gc=
Subject key identifier:   3D:B7:C9:09:F8:64:6F:B0:46:D4:B6:48:8A:EF:3B:4D:34:6D:52:29
Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
Certificate issuer:       /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Certificate serial:       08B94F4452B01783C558383B6CA548A3FB19A137
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft
Manifest number:          0140
Signing time:             Sat 06 Dec 2025 00:01:20 +0000
Manifest this update:     Fri 05 Dec 2025 23:56:20 +0000
Manifest next update:     Wed 10 Dec 2025 10:53:20 +0000
Files and hashes:         1: AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl (hash: PXZY8p6A6iNI7lqVDAmg6yhikXd2FIt0FLZqIrbQp80=)
                          2: 3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa (hash: 0k9qDpTmLE2nbCuOYGwHhpQG6NprgyA5OYqIcFmQjes=)
                          3: 3139302e382e3136382e302f32322d3234203d3e20323639373530.roa (hash: UtWNbpcaOx4dXnwvc8FOMHSTl5Fy6LtCAa7z45s6mPk=)
                          4: 3133382e3138362e3137362e302f32322d3234203d3e20323639373530.roa (hash: 1s0hS3AGn6xn/fvJMbGEY5uRH7RcEEHhCEJ/z0p1Vj8=)
                          5: 323830303a6264303a3a2f33322d3332203d3e20323639373530.roa (hash: qhbwBZk9vlgCg+3+LKKtZAbyHyHvM9g+PWDyKgdskwA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 10:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b9:4f:44:52:b0:17:83:c5:58:38:3b:6c:a5:48:a3:fb:19:a1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
        Validity
            Not Before: Dec  5 23:56:20 2025 GMT
            Not After : Dec 10 10:53:20 2025 GMT
        Subject: CN=3DB7C909F8646FB046D4B6488AEF3B4D346D5229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:bb:5d:0d:8a:75:35:c5:1e:43:74:43:ee:
                    42:83:aa:5d:21:53:df:52:41:25:a3:c0:89:e8:80:
                    d2:18:6a:35:4b:b6:d0:0b:8d:82:02:23:dd:1c:00:
                    b9:6a:1a:39:ee:48:26:69:ab:d3:cd:78:2c:40:4f:
                    bf:56:d4:f1:93:62:55:21:93:f5:4e:51:80:1a:1f:
                    95:0e:fe:a5:90:67:a9:f2:76:9c:1e:5b:66:18:c8:
                    89:12:ad:2f:07:64:d4:69:1e:4b:e5:76:43:0a:c8:
                    19:db:59:0e:9b:c8:fd:2d:3a:0a:fd:ea:a3:c0:9c:
                    9a:28:91:80:27:ab:36:e1:fd:82:88:72:0d:57:14:
                    59:fd:a8:ba:c6:43:5c:8e:29:24:fd:aa:bf:ed:ae:
                    99:a5:6e:3b:1c:68:17:d8:20:57:a3:3f:58:f6:6a:
                    f1:a4:a7:8d:ed:48:9e:66:27:5a:81:90:92:dc:1d:
                    e4:49:d4:fe:71:7d:67:c0:60:50:80:e5:7f:59:04:
                    f5:c3:82:b8:5b:ea:dc:55:e3:67:8a:40:5e:e1:88:
                    c2:d8:16:f6:5c:91:eb:10:ac:61:7c:91:f6:87:b4:
                    0d:57:a3:d7:16:38:db:4b:17:26:11:2a:44:65:4c:
                    b8:ba:80:b0:7d:ca:de:3c:78:87:01:4f:5e:f6:3e:
                    f4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B7:C9:09:F8:64:6F:B0:46:D4:B6:48:8A:EF:3B:4D:34:6D:52:29
            X509v3 Authority Key Identifier:
                keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f2:8f:37:33:c0:3d:04:03:1a:59:87:c8:1e:54:59:13:d5:
         ee:e5:6c:c1:eb:0d:e1:2f:27:46:6e:18:a1:c5:e3:a6:07:9d:
         67:c0:52:ea:43:7d:de:d1:df:8c:65:7a:5f:a1:8d:ce:09:d4:
         0a:93:3a:9d:54:73:16:fe:0b:a5:66:14:ab:ac:09:62:9f:3e:
         bc:fc:6c:0a:e5:2c:ba:55:1f:94:89:17:4b:6d:ef:38:4b:c7:
         83:35:5f:51:d1:84:21:bf:7f:b5:19:f9:77:55:f6:56:db:4e:
         e9:e0:ed:9b:34:38:b0:90:ef:12:82:88:27:eb:98:95:94:b2:
         75:51:b5:a0:8b:f0:66:02:ed:86:14:81:52:b8:f3:d7:de:8b:
         87:cd:f0:ca:45:8f:37:d8:f5:fc:19:a3:1c:c7:49:60:42:b7:
         4a:24:2b:22:70:42:4e:3f:52:dc:36:29:69:ba:5b:6a:75:fe:
         89:28:86:38:c3:ff:30:40:9c:31:1d:c1:a8:c0:79:2b:13:32:
         91:2e:03:1d:5a:4c:4e:fb:0c:3d:57:02:08:d3:73:d8:23:34:
         81:95:3e:ec:27:a6:54:45:55:9d:34:6d:61:4d:5f:be:1d:a3:
         71:77:8c:db:19:50:1c:76:a1:28:ea:1f:92:b8:5b:a1:85:eb:
         23:38:13:59
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUCLlPRFKwF4PFWDg7bKVIo/sZoTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFFRkEzMkU5QjA3N0YwMDQ1RjY2QThDNkIyRUU1ODIw
RkFCMDRDNTAeFw0yNTEyMDUyMzU2MjBaFw0yNTEyMTAxMDUzMjBaMDMxMTAvBgNV
BAMTKDNEQjdDOTA5Rjg2NDZGQjA0NkQ0QjY0ODhBRUYzQjREMzQ2RDUyMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9AbtdDYp1NcUeQ3RD7kKDql0h
U99SQSWjwInogNIYajVLttALjYICI90cALlqGjnuSCZpq9PNeCxAT79W1PGTYlUh
k/VOUYAaH5UO/qWQZ6nydpweW2YYyIkSrS8HZNRpHkvldkMKyBnbWQ6byP0tOgr9
6qPAnJookYAnqzbh/YKIcg1XFFn9qLrGQ1yOKST9qr/trpmlbjscaBfYIFejP1j2
avGkp43tSJ5mJ1qBkJLcHeRJ1P5xfWfAYFCA5X9ZBPXDgrhb6txV42eKQF7hiMLY
FvZckesQrGF8kfaHtA1Xo9cWONtLFyYRKkRlTLi6gLB9yt48eIcBT172PvT5AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUPbfJCfhkb7BG1LZIiu87TTRtUikwHwYDVR0j
BBgwFoAUqu+jLpsHfwBF9mqMay7lgg+rBMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80REJCRTFBNTZGRkQ2MUFGMURGMjZBM0Y0RjQwNzlCOEE1
NjExRUM1MTE1QkJEQzc5NTcwMURDMTQ0NTU4MkJFLzAvQUFFRkEzMkU5QjA3N0Yw
MDQ1RjY2QThDNkIyRUU1ODIwRkFCMDRDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUVGQTMyRTlCMDc3RjAwNDVG
NjZBOEM2QjJFRTU4MjBGQUIwNEM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNERCQkUxQTU2RkZENjFBRjFERjI2QTNGNEY0MDc5QjhBNTYxMUVDNTEx
NUJCREM3OTU3MDFEQzE0NDU1ODJCRS8wL0FBRUZBMzJFOUIwNzdGMDA0NUY2NkE4
QzZCMkVFNTgyMEZBQjA0QzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCR8o83M8A9BAMaWYfIHlRZE9Xu
5WzB6w3hLydGbhihxeOmB51nwFLqQ33e0d+MZXpfoY3OCdQKkzqdVHMW/gulZhSr
rAlinz68/GwK5Sy6VR+UiRdLbe84S8eDNV9R0YQhv3+1Gfl3VfZW207p4O2bNDiw
kO8Sgogn65iVlLJ1UbWgi/BmAu2GFIFSuPPX3ouHzfDKRY832PX8GaMcx0lgQrdK
JCsicEJOP1LcNilpultqdf6JKIY4w/8wQJwxHcGowHkrEzKRLgMdWkxO+ww9VwII
03PYIzSBlT7sJ6ZURVWdNG1hTV++HaNxd4zbGVAcdqEo6h+SuFuhhesjOBNZ
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:19:43 2025 by rpki-client