This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft
File:                     84EB5F447148428DC5D38B48E432E07FB136ACAD.mft (raw, json)
Hash identifier:          VOfMdKTis+YtY3qOnP21+CQU/uwghc0BPvHeXQafFrM=
Subject key identifier:   6A:8D:8A:7A:8A:38:E2:FD:06:9F:01:63:F8:0A:00:8A:05:69:B4:F3
Authority key identifier: 84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD
Certificate issuer:       /CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
Certificate serial:       0FD1CCF48EB7424BB25436DC23E8C46C00F4C00C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft
Manifest number:          D1
Signing time:             Sat 06 Dec 2025 19:32:21 +0000
Manifest this update:     Sat 06 Dec 2025 19:27:21 +0000
Manifest next update:     Thu 11 Dec 2025 06:35:21 +0000
Files and hashes:         1: 3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa (hash: ihG7+liiX9eUYRjDFFSUYHfjljlo8OL/YWDWufS2uaI=)
                          2: 323830333a363365303a3a2f33322d3332203d3e20323730303639.roa (hash: VhNJfdv6GUCbA58APGluJsD/lGlEa8GNtmcFXutAf60=)
                          3: 3137372e36372e3235302e302f32342d3234203d3e20323730303639.roa (hash: BDHMVPU35dgMMv3kTHiNheU6z8O2L/RBsZ8vQcEDeKI=)
                          4: 3137372e37332e3235342e302f32332d3234203d3e20323730303639.roa (hash: g5iK/yGxq+SvpRlQxcKXJ2vuBEsSQNyVoHxK6KZ/c6E=)
                          5: 84EB5F447148428DC5D38B48E432E07FB136ACAD.crl (hash: 90v7X30dqk3uSqa4IVCuMrIN9Xlc74hhCxQfpQfzFD8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 06:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d1:cc:f4:8e:b7:42:4b:b2:54:36:dc:23:e8:c4:6c:00:f4:c0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
        Validity
            Not Before: Dec  6 19:27:21 2025 GMT
            Not After : Dec 11 06:35:21 2025 GMT
        Subject: CN=6A8D8A7A8A38E2FD069F0163F80A008A0569B4F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:62:cb:59:38:04:a8:b7:dd:0e:68:37:fa:
                    62:99:49:82:2a:c7:89:6b:de:dc:d4:c7:d1:9e:00:
                    c1:56:e7:88:6a:11:1a:dd:15:b4:83:ff:26:70:39:
                    1b:af:97:80:ca:09:47:c6:ef:a6:4f:8c:6f:a0:30:
                    51:7a:33:fd:c5:43:8d:3e:1a:53:36:9d:2d:38:2d:
                    3c:97:b1:e4:ec:a8:27:6d:83:35:cb:25:ad:5d:03:
                    1f:bd:75:ef:37:a4:fa:3a:c2:63:8d:cf:1e:16:34:
                    95:d5:01:4e:a2:91:45:df:56:44:1e:fb:ca:a6:28:
                    e0:eb:a3:76:4b:2f:e2:0c:ba:9a:78:1f:0b:28:c1:
                    2e:62:d2:88:12:25:31:85:f7:10:39:07:e4:67:83:
                    ce:44:0b:8f:01:29:8f:21:b1:1e:32:3d:fd:a8:49:
                    ff:b0:da:f3:f6:06:09:20:67:69:4b:a0:76:bf:55:
                    61:54:ff:94:41:f3:d7:0a:90:9a:04:48:37:f6:3f:
                    10:79:51:7e:26:5e:a6:0d:16:07:bf:d9:ea:d3:3e:
                    ec:43:55:32:43:2e:e6:62:28:19:5e:89:9f:12:e4:
                    7b:45:c6:61:cf:24:15:db:3e:00:d4:98:b4:0f:6d:
                    bf:de:dc:08:c5:86:29:92:f2:0f:a3:ee:23:f3:59:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8D:8A:7A:8A:38:E2:FD:06:9F:01:63:F8:0A:00:8A:05:69:B4:F3
            X509v3 Authority Key Identifier:
                keyid:84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:81:a9:c8:3b:44:7b:1e:e8:14:9e:ee:21:45:14:a9:f4:a1:
         d5:ef:52:06:89:3d:c6:5d:6c:d9:65:ca:51:42:59:2a:9e:1a:
         88:16:c9:fb:7a:77:c0:d2:44:90:7e:9f:c7:a0:e8:b2:82:53:
         d6:a9:e1:d5:b1:d8:f3:45:77:9c:90:9e:47:ae:d1:fd:17:e6:
         1c:0b:41:b6:3a:28:ba:c0:99:9d:1f:f5:f6:0f:37:63:b8:88:
         3d:5c:17:c2:b3:85:d9:3f:61:6c:cc:a5:0e:fb:3d:a7:05:13:
         43:4f:0b:11:f6:27:23:46:0f:5b:ee:e7:63:27:8d:90:db:a8:
         be:98:00:0c:e6:73:14:50:a9:d9:f9:e4:fb:c7:11:f2:9e:0a:
         9a:9b:ec:9a:bb:81:83:34:0c:c8:4b:79:f1:20:93:28:ed:c3:
         26:8a:32:c3:14:38:7f:48:c8:df:1b:b9:97:70:53:5d:18:24:
         8e:b3:6a:08:6d:6b:90:e2:4b:bf:e5:6e:97:06:94:d3:d3:40:
         ee:0c:3b:f3:85:96:20:1e:4a:4a:6e:24:9b:dc:9d:fe:5a:8d:
         a3:96:3e:04:9b:e2:72:aa:d8:a9:cb:bc:de:33:ff:b5:5c:cb:
         fa:b7:3c:5b:14:2a:98:ee:65:e4:c5:98:eb:c5:cb:a2:9b:c4:
         5d:29:d2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----