This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
File:                     6243575DF1F667D5FC35E515D93014D37B684DA3.mft (raw, json)
Hash identifier:          /7aQDd21mKcx7Fy8DVYnaqdA21Z4Jy+2KDTFVhfGZEo=
Subject key identifier:   32:0F:0B:45:59:B5:AD:BB:49:C8:80:3C:B2:77:A9:9F:8F:F9:03:F9
Authority key identifier: 62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3
Certificate issuer:       /CN=6243575DF1F667D5FC35E515D93014D37B684DA3
Certificate serial:       63D40A9F170B053ACF6C8188C1A8164903A71D80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
Manifest number:          0145
Signing time:             Fri 05 Dec 2025 18:53:26 +0000
Manifest this update:     Fri 05 Dec 2025 18:48:26 +0000
Manifest next update:     Wed 10 Dec 2025 13:07:26 +0000
Files and hashes:         1: 3138312e3232342e3230342e302f32342d3330203d3e203532343132.roa (hash: vJCxX+g4DT+LZ9DSKkn2RniTa4KASLI/jyWEpGDZ2nA=)
                          2: 3138312e3232342e3230342e302f32322d3234203d3e203532343132.roa (hash: aRYl82Rv8JKEkKlq/9V9WSeOsyxorzWkTJy5GgjvJvA=)
                          3: 6243575DF1F667D5FC35E515D93014D37B684DA3.crl (hash: PkutsmZXUClrZ1h6rAaLPEC17/j4uTXXHfqjC4xFrfI=)
                          4: 3138312e3232342e3230352e302f32342d3330203d3e203532343132.roa (hash: FgeLlkgYzs1mkO84lkykq51unA8y5AQLf38+dbLb9tk=)
                          5: 3138312e3232342e3230372e302f32342d3330203d3e203532343132.roa (hash: dksWCkS1P7DxqVa36YIfgdb6QTnHQ4LmXfySVSECx+E=)
                          6: 3138312e3232342e3230362e302f32342d3330203d3e203532343132.roa (hash: 7enFo58yNDykcAb3b76Z6V1XPZ8Bzyvx32WiCRzHVdg=)
                          7: 323830333a643939303a3a2f33322d3634203d3e203532343132.roa (hash: 9LU9XyjPPOdbyOuzD/VEGx2MU8RrVrPr4K/YaOFhDp8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 13:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d4:0a:9f:17:0b:05:3a:cf:6c:81:88:c1:a8:16:49:03:a7:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6243575DF1F667D5FC35E515D93014D37B684DA3
        Validity
            Not Before: Dec  5 18:48:26 2025 GMT
            Not After : Dec 10 13:07:26 2025 GMT
        Subject: CN=320F0B4559B5ADBB49C8803CB277A99F8FF903F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:4f:90:d7:88:3d:0a:67:46:cc:58:9e:1c:
                    8e:cb:3a:42:6d:02:12:b3:c9:b6:b1:af:48:c4:5b:
                    f6:6b:40:8f:70:02:64:48:60:32:6c:48:49:6a:10:
                    21:fc:95:d2:fd:d8:79:f2:53:4d:b2:66:00:3b:f6:
                    3f:77:43:4f:6c:aa:a0:e8:86:fc:f1:b6:46:d8:80:
                    3e:02:0b:29:e3:5e:11:2f:29:d6:9a:8e:d7:48:c8:
                    73:0d:ce:ad:b1:c9:21:f6:00:48:8e:cb:e6:d2:8e:
                    e1:c5:8d:72:cd:d3:b8:84:e9:6a:1f:d6:64:9b:4d:
                    cf:ba:bb:42:2f:3e:5c:d1:5d:eb:c4:0f:9a:40:ee:
                    b1:ce:52:d1:75:9a:fc:98:c9:cd:d1:46:ec:68:73:
                    13:ba:0d:3b:51:62:3b:e6:87:8b:c1:80:a7:09:6a:
                    b7:40:a9:da:57:47:50:0d:71:72:90:c5:47:40:5c:
                    59:d8:20:5b:f0:bd:57:ee:ef:a3:a1:38:2c:a9:3a:
                    e3:ae:6d:2c:c4:b1:2a:d8:6c:0a:55:ba:d3:6d:62:
                    27:c8:ed:49:04:14:ef:f6:86:be:93:1a:8c:03:e0:
                    7c:b4:45:6c:18:9e:43:14:89:b4:05:18:00:f9:9b:
                    f0:8b:38:95:44:98:14:80:84:11:91:75:2e:ea:d1:
                    d8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0F:0B:45:59:B5:AD:BB:49:C8:80:3C:B2:77:A9:9F:8F:F9:03:F9
            X509v3 Authority Key Identifier:
                keyid:62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d0:f8:27:c4:9e:0d:dc:6f:8c:f8:84:04:67:96:e4:e6:2c:
         47:91:04:e5:34:63:cf:a9:ee:30:8d:56:f6:e9:d4:9d:dc:f6:
         98:8b:31:a9:68:b1:66:8c:09:c1:7f:66:f3:09:34:b7:11:4d:
         1d:dc:58:b9:b8:46:4e:ff:47:72:05:0a:ca:e8:5a:a3:e3:c0:
         7e:7d:98:10:1a:ad:e7:b0:47:fc:3a:e4:e3:48:ae:5d:92:ee:
         18:f1:a3:fb:e8:09:74:14:24:f0:f3:04:98:12:ab:55:2e:ab:
         95:1b:62:09:8e:1f:6a:d9:b0:41:e8:0d:2a:78:76:53:03:ba:
         ce:df:61:20:c5:43:9c:5d:9c:3f:e6:72:f9:7f:9b:4a:b0:8c:
         3c:1a:2c:e3:47:1e:7a:44:72:40:a9:cb:2d:2c:b8:2b:da:de:
         3e:93:ac:fa:cf:da:66:ad:b5:9d:53:db:4c:15:30:77:9c:38:
         9c:18:89:a9:80:eb:24:98:20:9f:20:7e:30:33:d3:99:ff:61:
         dc:77:c6:54:cb:13:58:97:72:bd:4e:89:20:c8:b9:8e:bf:a6:
         1d:80:d6:57:23:1e:f9:87:27:f5:d7:fc:c7:4a:4c:40:cc:7b:
         c6:2e:8b:01:ce:57:8a:85:94:2c:58:e1:9d:ad:24:fd:ab:04:
         1e:14:ad:de
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUY9QKnxcLBTrPbIGIwagWSQOnHYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI0MzU3NURGMUY2NjdENUZDMzVFNTE1RDkzMDE0RDM3
QjY4NERBMzAeFw0yNTEyMDUxODQ4MjZaFw0yNTEyMTAxMzA3MjZaMDMxMTAvBgNV
BAMTKDMyMEYwQjQ1NTlCNUFEQkI0OUM4ODAzQ0IyNzdBOTlGOEZGOTAzRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeSE+Q14g9CmdGzFieHI7LOkJt
AhKzybaxr0jEW/ZrQI9wAmRIYDJsSElqECH8ldL92HnyU02yZgA79j93Q09sqqDo
hvzxtkbYgD4CCynjXhEvKdaajtdIyHMNzq2xySH2AEiOy+bSjuHFjXLN07iE6Wof
1mSbTc+6u0IvPlzRXevED5pA7rHOUtF1mvyYyc3RRuxocxO6DTtRYjvmh4vBgKcJ
ardAqdpXR1ANcXKQxUdAXFnYIFvwvVfu76OhOCypOuOubSzEsSrYbApVutNtYifI
7UkEFO/2hr6TGowD4Hy0RWwYnkMUibQFGAD5m/CLOJVEmBSAhBGRdS7q0djzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUMg8LRVm1rbtJyIA8snepn4/5A/kwHwYDVR0j
BBgwFoAUYkNXXfH2Z9X8NeUV2TAU03toTaMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjNDNzJEOUREMzgwNjY0M0I2RTgwRjcxQkY0OUQ0MDlB
NEVGNjI2ODhEQzNERDY0MUIwQjU4MDlGQTU3NTQ1LzAvNjI0MzU3NURGMUY2NjdE
NUZDMzVFNTE1RDkzMDE0RDM3QjY4NERBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjQzNTc1REYxRjY2N0Q1RkMz
NUU1MTVEOTMwMTREMzdCNjg0REEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0YzQzcyRDlERDM4MDY2NDNCNkU4MEY3MUJGNDlENDA5QTRFRjYyNjg4
REMzREQ2NDFCMEI1ODA5RkE1NzU0NS8wLzYyNDM1NzVERjFGNjY3RDVGQzM1RTUx
NUQ5MzAxNEQzN0I2ODREQTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBV0PgnxJ4N3G+M+IQEZ5bk5ixH
kQTlNGPPqe4wjVb26dSd3PaYizGpaLFmjAnBf2bzCTS3EU0d3Fi5uEZO/0dyBQrK
6Fqj48B+fZgQGq3nsEf8OuTjSK5dku4Y8aP76Al0FCTw8wSYEqtVLquVG2IJjh9q
2bBB6A0qeHZTA7rO32EgxUOcXZw/5nL5f5tKsIw8GizjRx56RHJAqcstLLgr2t4+
k6z6z9pmrbWdU9tMFTB3nDicGImpgOskmCCfIH4wM9OZ/2Hcd8ZUyxNYl3K9Tokg
yLmOv6YdgNZXIx75hyf11/zHSkxAzHvGLosBzleKhZQsWOGdrST9qwQeFK3e
-----END CERTIFICATE-----
Generated at Sun Dec 7 11:08:07 2025 by rpki-client