This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
File:                     8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft (raw, json)
Hash identifier:          QAya5JoxVp/jJLKahi3cV9oxuZA3ijwE7qewyhPG0JE=
Subject key identifier:   AF:9B:C8:83:02:86:DF:B6:02:E7:EF:25:18:7A:C7:D9:F9:98:E7:EB
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Certificate issuer:       /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial:       1411896DC6BDE95AD9CBE91FB4492CCDD19E88A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
Manifest number:          0147
Signing time:             Fri 05 Dec 2025 16:27:08 +0000
Manifest this update:     Fri 05 Dec 2025 16:22:08 +0000
Manifest next update:     Thu 11 Dec 2025 12:25:08 +0000
Files and hashes:         1: 34352e3233392e34342e302f32322d3234203d3e20323636383538.roa (hash: odM7zbtJXl9RM8ZkLhjcgrYnToyisA/RjF53i3W/C5I=)
                          2: 34352e3233392e34342e302f32322d3234203d3e203532343638.roa (hash: W1P0JJHyVrkCN2RvwUkvswikCLB04L6FchuhIvxucGI=)
                          3: 34352e3233392e34342e302f32322d3234203d3e203631353132.roa (hash: pR11TWw7KwD32ZjkppNjXF7VhBow5upeJmBppmcB+rA=)
                          4: 8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl (hash: MRmbaFFZU9O7KrOLd+yZXPvR+k6kD0dU5fTt4CV+DaY=)
                          5: 34352e3233392e34342e302f32322d3234203d3e20323633373137.roa (hash: delOFgSRNeHIObr57AoKhUMDVOIzwRzEkeje0U8nQRE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:11:89:6d:c6:bd:e9:5a:d9:cb:e9:1f:b4:49:2c:cd:d1:9e:88:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
        Validity
            Not Before: Dec  5 16:22:08 2025 GMT
            Not After : Dec 11 12:25:08 2025 GMT
        Subject: CN=AF9BC8830286DFB602E7EF25187AC7D9F998E7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6a:59:39:f5:11:dd:a5:22:e3:7e:b6:26:9b:
                    c9:03:fc:00:1d:e1:3b:b6:f6:d7:77:6f:a1:dd:1d:
                    0c:7a:4d:e0:38:46:11:b9:07:b8:ae:ef:ad:32:87:
                    64:ce:90:9b:9b:5b:e1:a3:49:c6:25:b6:ec:eb:fc:
                    7b:3e:5f:73:00:45:14:ee:4a:9b:8f:0c:69:b8:fd:
                    54:ae:48:7c:0a:db:10:2f:75:63:9c:49:35:09:fe:
                    95:58:88:be:3c:41:bf:13:af:5f:50:a5:d1:26:2c:
                    66:a6:0f:83:65:7c:95:02:90:55:e9:43:08:58:39:
                    ca:88:84:06:b6:44:47:bb:b1:0f:24:65:a8:36:b6:
                    da:78:56:66:0f:ee:7e:c2:94:be:60:e3:cf:55:65:
                    17:93:39:b7:85:bf:9c:6d:3a:37:3d:60:ef:06:5b:
                    57:1a:ac:20:3d:a7:e0:2c:e8:5c:bc:c1:51:ca:54:
                    70:61:1d:2b:4d:2a:6f:c6:7d:d2:e0:fd:d1:65:f2:
                    5c:3a:4d:53:89:4d:3a:e3:f7:12:aa:52:43:fc:5c:
                    85:2e:57:a9:79:86:46:b1:af:24:28:82:da:d6:4c:
                    19:94:8c:30:41:0c:27:d4:62:5b:f5:19:37:39:29:
                    6a:b1:7f:d5:7e:1f:29:37:c2:09:8a:d1:f3:85:8c:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9B:C8:83:02:86:DF:B6:02:E7:EF:25:18:7A:C7:D9:F9:98:E7:EB
            X509v3 Authority Key Identifier:
                keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:bb:39:de:bb:b3:49:f8:dc:e4:8d:46:ad:ac:90:71:9d:14:
         8f:17:de:69:66:75:a1:32:e2:fc:c1:98:e7:ba:05:fa:2c:78:
         28:1e:f5:45:e5:fb:3d:71:98:c8:8a:06:f4:51:16:56:30:04:
         bb:ee:7f:d4:ba:5f:18:fa:f5:4f:f7:d8:a5:70:f9:6f:95:fe:
         8b:cf:72:a9:3d:dd:7f:c6:b6:ac:6f:aa:9c:92:39:0b:c4:9c:
         b8:a0:5b:d9:2e:ae:ca:93:c8:d7:88:7b:9f:41:e8:05:03:23:
         38:b5:e4:4b:12:12:4d:09:ee:fb:a2:05:be:25:20:86:36:5d:
         91:17:e3:ab:fc:54:bd:75:95:21:67:53:8d:75:70:68:66:a5:
         18:0c:72:41:f5:eb:7b:3c:50:87:5d:68:db:19:3a:27:5e:cc:
         2d:0e:67:d2:c6:83:5f:5e:45:f4:29:f3:60:79:6c:07:94:60:
         dc:f6:23:b5:3b:97:53:fc:5b:64:e7:c3:89:44:ea:72:65:a3:
         13:56:41:29:d2:2e:ca:0a:82:84:d7:07:3a:e0:9a:f2:c2:8f:
         06:87:85:9d:d3:1f:56:34:fc:36:63:ae:cc:34:da:5c:5f:9e:
         b1:e3:15:6a:17:b3:2c:d5:57:b8:2c:1a:2f:9a:12:1c:ca:42:
         ca:86:75:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----