This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
File:                     0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft (raw, json)
Hash identifier:          DGWFnwBjqDU7Er21asj0HoYpdEVQlou7BkaR05OU6xM=
Subject key identifier:   22:6E:30:CA:C9:84:D7:2B:CA:E1:B6:EE:A1:61:FC:60:CF:54:10:AA
Authority key identifier: 0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98
Certificate issuer:       /CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
Certificate serial:       261317CAA447027BA5BA97D2C20C9FC28A03E923
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
Manifest number:          0147
Signing time:             Fri 05 Dec 2025 00:02:42 +0000
Manifest this update:     Thu 04 Dec 2025 23:57:42 +0000
Manifest next update:     Wed 10 Dec 2025 17:17:42 +0000
Files and hashes:         1: 3133322e3235352e362e302f32342d3234203d3e20323633363937.roa (hash: wXk1gBsCKAVBhA0HEaOwZW0Hk29YTL096/qFnG/gfRM=)
                          2: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl (hash: Ac2EuLq7NNlyBJ7QNGVJ6p3uPg3cYvd5oapnuHLPtls=)
                          3: 3133322e3235352e372e302f32342d3234203d3e20323633373236.roa (hash: 4enywTReuztkAZA8QfDVVO/DSjhDY+9zSMoXxSl8TDU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 17:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:13:17:ca:a4:47:02:7b:a5:ba:97:d2:c2:0c:9f:c2:8a:03:e9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
        Validity
            Not Before: Dec  4 23:57:42 2025 GMT
            Not After : Dec 10 17:17:42 2025 GMT
        Subject: CN=226E30CAC984D72BCAE1B6EEA161FC60CF5410AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:bb:84:df:17:27:33:f2:9d:32:eb:56:d0:
                    ef:df:21:a0:93:fa:02:c6:b3:c1:a5:48:4b:b7:71:
                    2c:27:98:86:78:64:a3:9b:b5:83:ee:81:40:74:fe:
                    af:fb:68:55:94:fb:08:57:20:68:30:aa:8c:df:33:
                    02:47:5e:3b:4a:d2:08:4d:9f:0a:f3:0a:b4:00:ca:
                    6a:e6:dc:0c:f9:ca:8d:b0:57:ce:bd:64:5b:85:42:
                    8e:bb:b8:dc:de:81:d1:a7:d5:70:f4:02:31:2f:9d:
                    f8:e0:96:0b:a8:ed:1d:88:23:48:83:d3:7d:c3:94:
                    cc:49:da:90:01:78:da:c2:50:c5:5f:29:42:76:99:
                    6b:95:cd:ca:87:e9:24:ad:c0:f8:6a:f5:c0:a7:22:
                    30:30:9c:4f:eb:e8:b4:8d:d3:7e:b5:25:3c:1c:1a:
                    01:8e:5c:fe:cc:73:c0:af:b0:2f:a1:e0:d5:b7:ca:
                    22:9d:95:05:1e:a9:61:37:9a:f5:36:85:cb:64:5b:
                    e8:b9:67:f8:2b:f7:0d:92:58:7c:2f:14:2e:6c:4e:
                    14:3e:37:14:5a:a3:e1:59:a8:56:4b:c8:6d:ec:3d:
                    51:ad:99:64:cf:9e:db:b6:e2:ea:c6:f3:10:db:80:
                    70:43:9a:01:08:b2:9b:af:17:f5:b1:b4:b6:c4:ce:
                    f2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6E:30:CA:C9:84:D7:2B:CA:E1:B6:EE:A1:61:FC:60:CF:54:10:AA
            X509v3 Authority Key Identifier:
                keyid:0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2f:1d:14:5d:fa:8a:ed:49:94:a8:8e:cf:31:ff:47:4c:60:
         25:26:02:b7:4d:95:c5:0f:a5:ec:48:f1:c8:b8:8c:56:e3:3e:
         a7:b4:de:07:52:1b:44:51:dc:bd:9f:93:d7:d6:e3:2e:24:ac:
         f7:fb:11:2c:92:44:bb:43:d9:71:e7:60:83:ad:e8:69:ac:ec:
         2f:b2:f5:fc:cd:22:b4:7c:47:8b:03:ba:e4:5f:82:eb:cc:5c:
         c4:37:c6:16:4d:7a:c8:0e:3c:e4:fb:98:38:8b:d0:43:0e:9f:
         e9:7a:84:c8:95:cc:ea:ad:31:3e:2f:20:45:0e:d5:1c:20:31:
         93:0d:bb:c1:01:6c:3b:d7:9e:cf:fd:f8:87:5c:23:06:56:c9:
         3c:ce:39:6d:5b:9b:02:f2:69:bd:17:1c:ee:c0:32:6d:79:ae:
         48:d6:34:3d:a7:fd:f2:bc:96:b5:9d:5a:3c:c8:f4:8f:2e:6f:
         3f:cc:e7:5d:67:2f:8a:2c:f5:29:90:14:7c:26:b1:90:aa:71:
         e5:4e:e4:64:7e:7c:cc:d8:12:33:2d:6b:33:8a:79:ed:0b:dd:
         49:b5:17:83:d3:cc:5d:00:4d:ce:26:f5:17:18:5f:f9:a5:3b:
         8a:40:92:87:c7:f3:87:71:13:ea:ef:04:04:86:31:ed:76:e0:
         12:ca:6c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----