This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft
File:                     42088D6FEC3FD14B71DEDB78860C90D825571466.mft (raw, json)
Hash identifier:          tHyZmw4yRohWV7kh2mPNK20Sdk+N/E4PIiJFjC1GqkY=
Subject key identifier:   74:F6:DA:F8:56:7A:14:34:AB:5D:7D:D7:59:C3:04:F2:A3:09:5A:15
Authority key identifier: 42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66
Certificate issuer:       /CN=42088D6FEC3FD14B71DEDB78860C90D825571466
Certificate serial:       6F7F57CECAF61BE2CC8C68CA4FE469F46675C82F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft
Manifest number:          D4
Signing time:             Sat 06 Dec 2025 07:15:30 +0000
Manifest this update:     Sat 06 Dec 2025 07:10:30 +0000
Manifest next update:     Thu 11 Dec 2025 14:45:30 +0000
Files and hashes:         1: 34352e36382e36362e3139322f32362d3236203d3e20323732333935.roa (hash: UMqoVEKWsXNdN3xTorC81JObSDlswi7Kzr8iTa2vsJU=)
                          2: 34352e36382e36342e302f32342d3234203d3e2030.roa (hash: PtJNVhKAsQHl8OW37WersJq9ecFeXjuCNsId+DsCvZk=)
                          3: 34352e36382e36362e302f32342d3234203d3e2030.roa (hash: JGyFZ4BFGttL53UZz0PgEcnVxp1/VLsh3fd6AanA0ko=)
                          4: 323830363a3432343a3a2f34382d3438203d3e2030.roa (hash: 6Q4UTM/CnQ4mGgBP9DUCUOtuweIp69Hx7WcVfpINFCI=)
                          5: 42088D6FEC3FD14B71DEDB78860C90D825571466.crl (hash: 253xPDbBPEWzH4oS+t1DEEBqfnSin00MF2fYJGrdbOg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7f:57:ce:ca:f6:1b:e2:cc:8c:68:ca:4f:e4:69:f4:66:75:c8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42088D6FEC3FD14B71DEDB78860C90D825571466
        Validity
            Not Before: Dec  6 07:10:30 2025 GMT
            Not After : Dec 11 14:45:30 2025 GMT
        Subject: CN=74F6DAF8567A1434AB5D7DD759C304F2A3095A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:5a:2e:6e:fd:00:9c:54:1e:82:6a:b2:33:
                    58:a4:7b:38:22:88:c0:79:ac:2b:fe:2d:70:d0:d7:
                    6d:70:cb:63:11:2a:91:b3:02:83:45:83:67:21:85:
                    94:6c:62:d7:51:02:8f:ac:96:6c:1c:5e:62:3b:e2:
                    2e:2e:f3:51:7b:5d:a2:0b:de:0b:08:c2:f9:d3:d4:
                    6a:19:37:2c:bd:5c:31:b1:f7:b7:1f:08:73:86:16:
                    8a:c7:5a:5d:d5:ae:a5:88:c8:3a:56:02:17:6e:45:
                    1e:ac:13:e1:af:44:76:7b:80:6f:f4:63:41:6f:a4:
                    b5:8a:14:ca:94:6e:eb:45:78:52:d3:0c:58:84:99:
                    a1:20:87:ef:4c:9f:57:07:0f:a4:7d:36:60:5e:4a:
                    b4:ea:ea:41:be:f4:71:bc:77:38:70:58:b4:21:06:
                    4c:67:f9:db:30:80:d3:08:77:ee:bb:54:6c:2f:b3:
                    bd:08:b7:b6:4c:35:71:1b:5c:ef:d6:d5:a9:53:79:
                    50:da:12:26:40:33:12:6d:85:ad:8d:29:79:93:2b:
                    69:c5:b9:ba:35:8b:7d:22:39:b3:89:ed:6f:a8:ba:
                    ff:25:d3:ec:d6:8c:7e:10:ba:80:0b:f0:41:2e:c2:
                    96:df:2f:55:10:82:ae:86:80:c8:96:b4:d3:46:b4:
                    24:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F6:DA:F8:56:7A:14:34:AB:5D:7D:D7:59:C3:04:F2:A3:09:5A:15
            X509v3 Authority Key Identifier:
                keyid:42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:8a:70:a8:5b:96:26:3f:7b:42:d9:c2:50:ed:98:63:2d:
         e2:2b:21:d1:ac:52:79:da:98:4e:e2:ac:f3:05:72:97:79:b5:
         66:00:a0:05:9b:69:54:1a:32:56:da:7a:9d:75:bd:d5:ca:66:
         23:81:31:cb:02:d0:c7:19:be:a7:e2:d4:bd:74:b1:ee:90:2b:
         47:4e:02:e4:f2:9d:c3:81:09:84:ac:4b:92:bc:59:61:57:05:
         ad:2b:17:6a:a9:82:94:c9:e5:46:36:61:40:f8:29:69:b0:1c:
         a4:62:b2:13:20:0a:7f:43:9f:c4:51:3b:a7:81:6d:77:b4:0b:
         c5:a6:1d:e4:c7:3b:ea:b6:45:cd:0d:f7:dd:cd:f5:4b:aa:47:
         6d:59:ab:58:35:db:3f:f3:45:db:af:95:e3:a2:8b:3a:0d:1f:
         a5:9f:f5:bb:a9:9c:f6:58:64:21:56:28:49:ff:ed:41:94:ea:
         45:9e:61:dd:1c:08:e8:12:9f:42:75:22:cc:c8:83:4e:60:85:
         22:cc:1d:29:ab:9f:4b:a2:c4:42:30:72:fe:ae:c3:80:cf:b4:
         6d:db:c1:b4:1d:0f:82:ab:42:67:0d:73:7d:e2:3e:51:11:77:
         a3:9f:f2:a0:6e:65:8e:5f:a7:7b:45:1e:b2:f0:88:26:24:45:
         1d:13:9b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:25 2025 by rpki-client