This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
File:                     089B798E1BD051786195E5F9D02238D550A5EAD7.mft (raw, json)
Hash identifier:          4Yxo5On5AaPme6X/x+BjjqU9kgYcy8eOB25rP2MnTiY=
Subject key identifier:   31:CF:B6:DF:9C:40:5E:EB:A6:5A:D4:13:84:54:15:C9:90:5A:EA:3B
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Certificate issuer:       /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial:       622BF048E51487F10C8002550DF1928A2A15EAC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
Manifest number:          0143
Signing time:             Fri 05 Dec 2025 03:24:41 +0000
Manifest this update:     Fri 05 Dec 2025 03:19:41 +0000
Manifest next update:     Wed 10 Dec 2025 21:02:41 +0000
Files and hashes:         1: 323830333a396163303a3a2f33322d3438203d3e20323731383832.roa (hash: PC7+F+5JF8mUNajEjRVajzRUMEmcXPL1R8ZIt3aWZoA=)
                          2: 089B798E1BD051786195E5F9D02238D550A5EAD7.crl (hash: Vbic+qFpA5AgTP+16xf9JbNPcPKsLMpvRpXPe6UmUs0=)
                          3: 3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa (hash: nnmiLoLd7bkCU1RUw5Od28HoP+sxRHWZc3jttiVT4pA=)
                          4: 3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa (hash: vJuqMo3FOvAjQjUwkJLglGJUvssmWIzn1UeqJnPQlog=)
                          5: 3137302e3234342e3230382e302f32342d3234203d3e20323731383832.roa (hash: 0OSFx27uPB3bloHdY+39EBrnzcliZh0QgvjmUJFBajI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 21:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2b:f0:48:e5:14:87:f1:0c:80:02:55:0d:f1:92:8a:2a:15:ea:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
        Validity
            Not Before: Dec  5 03:19:41 2025 GMT
            Not After : Dec 10 21:02:41 2025 GMT
        Subject: CN=31CFB6DF9C405EEBA65AD413845415C9905AEA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:a1:19:17:93:10:f6:5f:86:84:bd:6b:b7:
                    aa:38:2b:8d:99:96:02:94:1a:69:05:34:d5:c7:ea:
                    33:4c:09:06:cf:37:59:75:ea:e8:0d:71:80:9b:2e:
                    fe:ae:08:dc:7c:8c:1a:63:cd:40:1a:59:8d:b3:6d:
                    a2:46:5b:ee:e3:5e:4e:eb:29:e5:5c:03:7f:e6:11:
                    9b:f5:0b:68:76:da:72:00:b7:75:f6:c0:c2:b3:37:
                    70:a2:72:59:5d:76:cf:f0:66:39:6a:a8:63:f9:1c:
                    84:0d:88:b4:27:56:1f:1d:ce:99:eb:a6:17:0b:ab:
                    28:8f:f1:fc:30:68:60:21:94:fc:ec:87:bb:29:ba:
                    44:2a:0f:fa:fb:33:97:57:f1:2b:9c:b2:fa:53:7b:
                    b9:eb:22:7c:14:66:25:ed:50:6d:eb:6e:98:80:01:
                    4e:1c:3d:5a:99:fc:3c:3e:f3:24:77:44:f3:6c:60:
                    43:d3:88:8f:4c:54:a3:5b:a8:b5:6d:28:9a:83:14:
                    ec:61:cb:1a:eb:69:52:db:fa:69:05:b6:c0:97:47:
                    21:f5:46:d5:e6:37:49:b0:8f:92:7c:0c:98:21:4b:
                    78:42:6d:e8:1d:66:dc:ab:83:7b:5d:de:fa:b2:3f:
                    e1:89:b9:a8:41:6f:b8:c7:88:dd:96:c8:7a:be:26:
                    fb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CF:B6:DF:9C:40:5E:EB:A6:5A:D4:13:84:54:15:C9:90:5A:EA:3B
            X509v3 Authority Key Identifier:
                keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ea:a8:55:dd:87:51:a1:c4:a8:af:6e:d5:d9:07:82:15:6a:
         9c:3e:3e:82:58:af:05:9d:b9:b8:7b:50:45:cd:6c:2f:ed:11:
         f7:47:b7:c5:fc:d4:3d:85:72:4a:7b:4e:d5:e4:26:1b:46:64:
         eb:d8:09:3b:00:02:89:2b:30:b6:f1:81:5f:4f:8b:98:f5:a8:
         07:1c:5c:08:48:7b:eb:52:7a:cc:dc:9c:4a:9d:d3:5e:85:d3:
         44:18:56:dd:b5:cc:89:8f:df:3c:09:32:1a:45:71:cf:18:6b:
         ad:89:18:48:bb:f1:3d:11:fe:12:15:2f:00:85:35:a1:c0:56:
         b8:16:60:df:cb:89:cd:a2:15:d5:88:bb:be:50:4f:07:7b:b9:
         5d:6a:02:91:b0:14:f6:54:f4:88:42:71:1d:21:f3:cc:7c:b8:
         20:5c:31:2d:7e:a5:ae:03:11:9d:32:34:0f:80:95:5f:58:45:
         9c:81:61:7d:7d:93:68:79:1f:2c:7a:37:49:f0:33:6c:d8:e2:
         fb:02:0c:b5:60:ff:12:ad:20:a5:3c:58:d1:39:79:6f:26:9f:
         f6:72:03:d4:9f:48:0f:61:1f:08:08:08:c2:8a:26:93:d2:b4:
         d8:e0:45:61:bc:2d:29:f4:1c:f8:77:9a:fe:31:d1:8b:e8:ee:
         39:56:43:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----