This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
File:                     31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft (raw, json)
Hash identifier:          VeXQMsRpNshgUnBI3F0l4VOpfWw3MvlvuhxYxW6uxoE=
Subject key identifier:   05:21:BF:8C:D7:F6:5D:47:AD:AE:B0:E1:63:B8:68:D2:1A:A7:3B:33
Authority key identifier: 31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9
Certificate issuer:       /CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9
Certificate serial:       601635404F4C31645020DBE9E26CC363614915D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
Manifest number:          0148
Signing time:             Fri 05 Dec 2025 15:36:42 +0000
Manifest this update:     Fri 05 Dec 2025 15:31:42 +0000
Manifest next update:     Thu 11 Dec 2025 04:02:42 +0000
Files and hashes:         1: 323830333a633339303a3a2f33322d3438203d3e20323733303133.roa (hash: lDnjpbO7/tGbG8jh0+fryDKYSvl34wfFaaYjg+KmMs0=)
                          2: 31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl (hash: 2hk29galSTG6pu+QQtlfeEZoi1XgG3VM7PPqlxMqSN8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 04:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:16:35:40:4f:4c:31:64:50:20:db:e9:e2:6c:c3:63:61:49:15:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9
        Validity
            Not Before: Dec  5 15:31:42 2025 GMT
            Not After : Dec 11 04:02:42 2025 GMT
        Subject: CN=0521BF8CD7F65D47ADAEB0E163B868D21AA73B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6d:f1:a6:23:bb:6c:3f:d7:6f:3a:ab:cb:cc:
                    4b:36:d7:85:0b:3c:c6:73:a8:de:e2:ed:f3:d0:69:
                    0c:ba:0c:40:dd:b3:e7:52:9d:df:ef:ff:e7:5e:e4:
                    93:8f:2d:60:9b:ba:b2:a6:3a:32:8d:98:d9:95:a6:
                    21:01:18:73:bf:9b:b1:fc:b1:cd:69:9d:77:bc:49:
                    4a:45:78:42:36:0e:8f:2b:94:fa:88:4b:b5:76:73:
                    ba:ae:fc:bc:98:4a:de:22:d5:b1:eb:d6:1b:56:56:
                    b1:75:d5:26:9d:13:eb:ea:fe:7d:7e:0c:bd:b5:0f:
                    59:15:7d:ed:f2:6b:ce:b0:3e:be:d1:ef:87:c8:32:
                    3f:71:82:b6:e9:23:4f:19:27:14:a6:4f:8b:5b:e3:
                    72:74:2c:d3:13:8d:d5:6e:ec:fc:77:9e:68:dd:65:
                    8d:c1:d5:79:81:43:98:d0:21:76:96:71:08:1b:31:
                    ea:77:71:0c:87:03:d3:f8:f4:ae:89:b5:ff:79:22:
                    f0:df:4c:1e:a6:3f:20:2a:20:d7:00:ab:26:9f:e7:
                    b6:59:84:5e:03:6b:3c:74:a6:b9:7d:1d:97:a9:2e:
                    db:f5:95:d1:b3:23:fd:9e:34:7a:20:02:75:a5:03:
                    b1:67:0f:60:bc:af:3d:ea:74:73:de:55:6e:f6:50:
                    0e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:21:BF:8C:D7:F6:5D:47:AD:AE:B0:E1:63:B8:68:D2:1A:A7:3B:33
            X509v3 Authority Key Identifier:
                keyid:31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:9a:83:c1:0d:92:f9:69:a8:76:92:04:29:5a:8c:5a:01:f0:
         cf:df:47:9d:b1:14:ca:01:c9:5d:29:fd:f7:1e:61:d4:10:62:
         47:35:6d:97:33:d1:da:c9:66:15:8d:4a:69:a0:a4:55:ad:e5:
         99:aa:ca:a0:c7:1a:14:74:57:03:3a:b0:7b:74:4a:fe:13:5f:
         db:8f:f5:b1:ce:69:0d:31:bf:f2:95:6c:2c:7e:f9:34:62:ef:
         5a:3f:16:22:6a:e5:4a:49:05:e3:43:c9:ce:96:dc:61:76:16:
         0c:b7:39:27:7e:71:b0:61:c7:85:fd:21:f1:cb:1c:ce:a7:a1:
         b5:ee:66:38:b4:64:80:6c:c2:43:49:8a:9f:c3:b5:c3:4f:c1:
         63:8d:38:2f:ca:1c:2b:23:59:c4:99:04:06:d4:36:af:51:80:
         60:51:09:7d:51:29:0d:7f:85:2a:9c:2c:f5:eb:4d:03:70:0a:
         5d:51:2e:46:19:00:63:a8:bc:c0:06:da:08:46:5f:b8:25:d5:
         c8:24:b9:d4:04:39:9d:63:ef:89:95:30:44:6b:b0:4e:eb:b7:
         88:c1:ef:c9:b9:60:0f:86:c8:44:00:7b:51:6e:36:24:c6:63:
         cd:ae:d6:26:b2:8c:90:eb:30:20:d1:d1:cc:c4:c5:a9:0b:d0:
         25:53:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----