This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
File:                     87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft (raw, json)
Hash identifier:          NSmOXWoIYJVKd0tR+vCOGL8aaD37Bmrfq6WRSx6Xqiw=
Subject key identifier:   2A:22:60:67:A8:94:58:37:77:5E:91:82:9E:6E:7F:D7:A5:0A:B2:FD
Authority key identifier: 87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
Certificate issuer:       /CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Certificate serial:       2775C7DCB7383170725EA46DB0DC7D8FA7284E51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
Manifest number:          0151
Signing time:             Mon 22 Dec 2025 09:56:04 +0000
Manifest this update:     Mon 22 Dec 2025 09:51:04 +0000
Manifest next update:     Sat 27 Dec 2025 03:22:04 +0000
Files and hashes:         1: 323830333a3661303a3a2f33322d3332203d3e20323636383834.roa (hash: qYhb8x8oqlQ6pvcLzqdt0ZcUfZUCw9q7dAj5kJxa0+I=)
                          2: 87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl (hash: oDf8Fw/nfSkGAWZtD916Z7r30zD49Tgh1po3QLfGmqo=)
                          3: 34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa (hash: VzKudr+ieFKJgOjwccj2C2am6TlsyHznqYbeTqVEoTI=)
                          4: 34352e3136302e3230322e302f32342d3234203d3e20323636383834.roa (hash: fcQQVwgjwAK65rUiK+6ZAey9cVNaHcmhq1VrdQz9ANQ=)
                          5: 34352e3136302e3230302e302f32322d3232203d3e20323636383834.roa (hash: NHYLG/rtj3qB+Nv69TAJCsyV+ij9AF+9Ne706ZWzaZk=)
                          6: 34352e3136302e3230332e302f32342d3234203d3e20323636383834.roa (hash: bujUp7BJREwfFYcwzVYofSIcOCNVaUMdrVM2qo2m7Eg=)
                          7: 34352e3136302e3230312e302f32342d3234203d3e20323636383834.roa (hash: r9qoTXS4P/UF5C7L4DilGTBMU1vqPmN4JkObMwByVSY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 03:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:75:c7:dc:b7:38:31:70:72:5e:a4:6d:b0:dc:7d:8f:a7:28:4e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
        Validity
            Not Before: Dec 22 09:51:04 2025 GMT
            Not After : Dec 27 03:22:04 2025 GMT
        Subject: CN=2A226067A8945837775E91829E6E7FD7A50AB2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:92:ee:56:09:a1:1c:b1:5c:2a:d7:45:bb:
                    ff:0f:ef:dc:ad:42:bd:82:ea:0a:bb:fd:e3:05:8e:
                    8d:39:c2:5e:90:08:b1:68:d4:83:4d:96:d9:06:5b:
                    50:81:fc:f5:37:97:47:fa:0c:c9:33:8c:4c:08:03:
                    30:25:18:91:d1:13:bb:80:24:ba:b7:be:8d:ba:78:
                    00:d9:13:a9:5b:ec:96:67:d8:c7:56:f1:ae:e8:27:
                    3e:a6:dc:62:cb:9b:6f:9a:4f:e6:1c:e9:ce:04:ad:
                    4a:7e:75:ba:f0:d1:16:15:b5:35:95:16:9c:42:40:
                    29:4c:83:43:b7:b2:29:2e:7d:5d:1c:55:59:2c:e6:
                    4d:bf:f0:93:fe:b0:d9:d7:0a:d9:03:59:eb:87:1d:
                    8c:d0:35:23:b8:68:d6:70:53:e7:19:d9:c7:bb:ff:
                    00:46:78:c5:07:ed:bc:c8:be:e4:94:f4:ca:72:69:
                    2e:f4:ba:e7:a5:db:21:bd:c4:d0:37:7b:fb:ac:a9:
                    f6:b1:cb:fc:d8:c4:27:e3:41:f5:77:00:36:fa:56:
                    4c:9f:be:29:4f:94:fc:68:89:46:5f:d2:15:ce:95:
                    c1:b9:ea:bd:61:44:bd:7d:70:a8:be:2d:7b:09:81:
                    22:b2:10:24:69:d7:59:d2:5c:e5:01:f7:d1:70:e9:
                    37:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:22:60:67:A8:94:58:37:77:5E:91:82:9E:6E:7F:D7:A5:0A:B2:FD
            X509v3 Authority Key Identifier:
                keyid:87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:22:91:88:6e:4b:09:6a:4a:2e:09:28:c4:ea:57:fc:94:3e:
         b7:e6:c1:fe:eb:9d:9a:a8:1f:b0:23:2d:0e:51:24:28:84:40:
         36:5a:b0:00:39:d5:50:fd:d4:63:3b:9b:bb:96:80:db:a4:1d:
         93:20:bf:75:06:6e:4e:a9:5d:19:b4:69:ea:30:58:df:8c:07:
         b0:44:2f:2a:ad:86:1e:d6:4f:b0:4d:2d:2f:68:52:35:17:32:
         ce:48:20:13:72:e5:21:ad:e8:5d:43:b3:59:67:c3:34:d5:72:
         30:d5:8e:cb:a7:12:07:e5:b3:52:3e:be:07:6f:d2:4b:a8:2f:
         1c:2e:69:b7:51:3b:83:58:c2:ab:59:df:eb:de:7f:5f:e8:2e:
         e3:ed:b3:f6:13:4b:35:51:46:2d:65:81:2e:4a:47:68:78:c2:
         3b:d7:9a:19:0c:50:ab:9c:57:d3:32:78:b8:7d:cc:61:80:98:
         ab:73:5f:41:2a:d4:c2:74:5f:2e:7b:d5:2a:b5:ed:20:36:33:
         0f:db:de:62:90:b2:12:52:aa:91:40:59:47:79:5b:58:44:bd:
         10:a7:cd:fc:20:51:be:62:af:6c:4f:24:36:f2:5c:3d:d4:38:
         09:54:87:95:5f:c9:66:b2:20:1b:cb:8d:0c:ec:98:00:f5:92:
         39:bd:0d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 00:31:06 2025 by rpki-client