This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.mft
File:                     FA5E9CD998130E98AA017D66E79F3521D1D83EE9.mft (raw, json)
Hash identifier:          u+q7lTwkbOzV2SCq6HjP8YqfU60H43N9HdpUMLan5xM=
Subject key identifier:   2C:8C:F0:39:23:44:D4:E7:B0:24:14:86:D9:97:24:22:44:DB:E6:0E
Authority key identifier: FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9
Certificate issuer:       /CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
Certificate serial:       2DA68254DE0DF9D5D8199F5430D650D024F9B9EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.mft
Manifest number:          0149
Signing time:             Sat 06 Dec 2025 12:58:43 +0000
Manifest this update:     Sat 06 Dec 2025 12:53:43 +0000
Manifest next update:     Fri 12 Dec 2025 01:52:43 +0000
Files and hashes:         1: FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl (hash: FFQ448t4nXQa/7oCB/euhb8G7qWmvdfU/nBX6izBjJk=)
                          2: 3139322e3134312e31302e302f32342d3234203d3e20323634383336.roa (hash: VCGwNc6ZAz0McKkcF8vfDJLMoPowTa8b+pQBKIGB2mU=)
                          3: 323830333a656663303a3a2f34382d3438203d3e2033353439.roa (hash: RUYuSqL41mh6JLc6A/Lgzm6//aNMRYvEkAlcQhccqxM=)
                          4: 3139322e3134312e31312e302f32342d3234203d3e20323634383336.roa (hash: 8w9BXU5nwQl1t/eZrIh6rFMA0B5+GCftx4ap8XpEXi4=)
                          5: 3139322e3134312e382e302f32322d3234203d3e20323636363634.roa (hash: V5B310Io9OWT2Keb39OU2zW9c8mtHc295RxaecWT9c0=)
                          6: 3139322e3134312e382e302f32342d3234203d3e20323634383336.roa (hash: R4SrrpaT9jq8yc6pUH4hPRedyJUkqvR1E94RRb6ef+Y=)
                          7: 323830333a656663303a3a2f33322d3438203d3e20323636363634.roa (hash: ZvgYHTw8fk3QLzVK0G8q4yoLxKxPMJCxO2Ne8g6OaK4=)
                          8: 3139322e3134312e392e302f32342d3234203d3e20323634383336.roa (hash: 3IRGBjeBJUpMRpmnufsTmJwVnx8+wq+V83prxLZrXdQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a6:82:54:de:0d:f9:d5:d8:19:9f:54:30:d6:50:d0:24:f9:b9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
        Validity
            Not Before: Dec  6 12:53:43 2025 GMT
            Not After : Dec 12 01:52:43 2025 GMT
        Subject: CN=2C8CF0392344D4E7B0241486D997242244DBE60E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:45:2f:3b:e0:f1:ec:d2:59:f4:ee:b6:d2:
                    53:ff:07:ac:0b:ab:c8:1b:6d:7f:c8:91:2e:b1:45:
                    64:c7:23:0e:54:34:74:1c:3d:d0:fe:84:21:ec:73:
                    02:1e:ef:1e:67:9b:3c:69:19:0c:dc:30:af:b5:c5:
                    7b:04:47:55:2c:95:b1:3a:86:0c:17:2b:53:91:2e:
                    cb:17:b9:e8:9d:b7:24:d9:7e:ac:8d:46:5e:f3:4a:
                    02:88:14:f9:9e:4a:32:f5:b0:46:6f:3a:aa:d3:b5:
                    6e:c3:4e:90:dd:18:97:80:21:55:00:94:f8:c7:84:
                    3f:07:1d:ef:7e:0c:14:3d:83:f8:19:de:3a:f4:52:
                    5a:be:fb:e6:bf:da:aa:38:69:69:aa:68:cd:f1:17:
                    83:0e:77:3f:76:9e:bf:2d:e0:75:b2:f4:9a:35:64:
                    c3:e6:0b:f4:f8:8a:66:41:94:c4:3c:35:bf:1c:e4:
                    11:71:43:4c:95:7d:5c:71:28:3a:63:44:e9:ce:e9:
                    b0:67:27:dc:33:60:1d:d6:ec:ec:69:24:86:31:30:
                    f8:75:75:c3:84:96:37:dc:1e:92:8a:7d:26:06:e1:
                    5d:6f:35:de:b5:ac:1c:b2:49:2e:fc:e2:af:75:5e:
                    c3:15:3e:4c:2e:d1:58:9e:3c:52:7d:4a:28:2b:59:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8C:F0:39:23:44:D4:E7:B0:24:14:86:D9:97:24:22:44:DB:E6:0E
            X509v3 Authority Key Identifier:
                keyid:FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:63:d1:4f:98:5c:d5:b2:1c:8f:70:b7:a9:20:c7:8b:8e:e7:
         18:be:79:9e:4f:03:4b:a9:77:72:09:1d:34:fb:38:95:f9:2a:
         e3:6a:32:c5:32:d2:d5:7b:f1:10:d7:c8:7c:01:e5:cc:d8:be:
         24:28:e2:17:7b:74:61:39:ac:fc:d4:09:bf:62:e6:98:a8:29:
         b3:cc:7a:03:87:c0:10:be:7a:d7:27:3c:4b:d2:c6:b2:cf:9d:
         eb:84:71:ac:f4:b9:16:44:0d:8d:5d:f8:7c:78:8b:8a:a9:c9:
         3c:bd:10:a5:d2:27:2b:3f:69:c4:8d:ee:f3:7d:4b:0d:0d:c0:
         77:4f:c3:93:76:5c:25:15:20:d0:36:2c:01:ca:56:be:29:21:
         5e:5d:85:2b:e0:15:c2:90:b6:2b:48:c6:cf:34:7c:55:67:7c:
         40:aa:9d:ee:25:0d:d0:4f:82:f6:ed:3a:9b:7a:7f:02:e0:e6:
         65:bb:4b:e0:79:0c:db:4f:04:27:03:f1:d3:e8:0e:c5:76:f5:
         99:2d:bf:69:b9:ea:4a:c9:7d:95:0f:cf:07:09:33:14:0e:8b:
         89:15:74:4f:c7:dc:53:fb:87:73:19:54:b0:e5:c1:9e:68:23:
         7f:00:9b:a7:fa:b2:21:03:4a:a8:92:d0:ec:bb:4e:67:e7:dc:
         92:d3:d2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:14:51 2025 by rpki-client