This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
File:                     D8D44DD84F3FDBD732870581DB91456D40862FA2.mft (raw, json)
Hash identifier:          UghV3lRwtX21En6QUt88fGcFt+65zfVlSyE3daFE1A8=
Subject key identifier:   99:E1:27:49:6E:04:FF:D4:2A:3A:04:79:36:5E:79:FB:9F:EE:75:83
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       39B90D90BC3228702971D44980119BB36469D621
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
Manifest number:          0147
Signing time:             Sat 06 Dec 2025 03:28:04 +0000
Manifest this update:     Sat 06 Dec 2025 03:23:04 +0000
Manifest next update:     Thu 11 Dec 2025 15:36:04 +0000
Files and hashes:         1: 3230302e33312e3234302e302f32302d3234203d3e203532343139.roa (hash: +7ZT4IxPU3KQDNqsxh75NbK5B83dfZdVwC6wjHsLXZI=)
                          2: D8D44DD84F3FDBD732870581DB91456D40862FA2.crl (hash: 5LsrwADncrcA/KvyLBOjA2EDSg/ATCPyRhG9e/kgVk0=)
                          3: 323830333a333438303a3a2f33382d3338203d3e203532343139.roa (hash: tGyjAUcwRgzP4j9y1aD5z4mdH6ndlrdk3VB5uQzOkOU=)
                          4: 3138312e3139322e36342e302f32302d3234203d3e203532343139.roa (hash: FGrpmTM3XleMEavBe1JWut8jPhQ5Bfe2lg3+PxqwFjY=)
                          5: 323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa (hash: 9/+SvF2tdKKJtHn13w4wYH74oN6nuNoKMtv/KOAzrJU=)
                          6: 323830333a333438303a3a2f33322d3332203d3e203532343139.roa (hash: PY+fkUppUCAZ1gvSPscLpC9yOfR3nIAcmTn10X6hT0Y=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 09:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b9:0d:90:bc:32:28:70:29:71:d4:49:80:11:9b:b3:64:69:d6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Dec  6 03:23:04 2025 GMT
            Not After : Dec 11 15:36:04 2025 GMT
        Subject: CN=99E127496E04FFD42A3A0479365E79FB9FEE7583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:b0:2e:20:37:69:40:50:7e:7a:f7:71:47:
                    fc:bb:e5:07:35:4f:4a:bb:b9:11:5e:24:b9:ce:58:
                    a8:ec:35:e4:f8:36:67:ab:6e:87:51:10:61:a5:9a:
                    3c:b8:02:eb:83:ca:f7:98:88:7d:d8:97:24:0d:ec:
                    84:3a:c0:3d:0a:95:20:28:5d:68:b0:13:59:a1:70:
                    bb:b3:b4:9d:67:39:cd:57:81:8e:cb:f2:3c:ab:f8:
                    a2:12:cc:83:27:49:72:85:fa:79:52:3f:8c:41:65:
                    25:06:cb:b8:55:fb:8a:ae:57:2b:00:ec:e9:0b:73:
                    aa:e8:8b:21:16:cd:dd:84:88:47:0a:e5:7c:3a:7d:
                    8f:a3:24:d0:59:55:78:79:79:dc:69:4a:38:ca:8e:
                    c2:2f:62:29:48:e2:65:46:38:99:97:6d:a5:d9:d4:
                    61:d4:84:1d:81:c2:8f:8b:23:60:5c:6f:4d:7a:3a:
                    3f:6b:ad:da:18:73:c4:c3:61:e2:15:96:c9:9d:15:
                    7f:d7:1b:02:53:28:f6:a0:af:a9:d2:82:b9:17:7e:
                    11:db:78:89:8e:17:6d:e3:52:05:b0:1f:0e:0a:b2:
                    ad:7b:2f:74:01:49:63:28:7e:7f:44:29:f2:f7:56:
                    74:b4:af:cc:05:39:c7:67:f6:00:4f:b3:76:78:cd:
                    d7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E1:27:49:6E:04:FF:D4:2A:3A:04:79:36:5E:79:FB:9F:EE:75:83
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:10:54:08:61:99:e3:06:84:2e:e1:ae:fc:ee:24:76:a1:41:
         19:1e:36:66:d3:4a:4b:a4:25:b2:f2:b8:5d:42:0a:1a:11:b6:
         d9:8d:6a:9b:20:c5:05:78:d3:f7:54:32:56:39:37:f4:16:08:
         25:c6:0b:09:36:d8:e9:54:2d:16:53:1c:9d:69:8d:df:9b:de:
         97:1d:f4:2e:b8:92:e0:fc:f5:87:51:73:f2:5e:33:5b:b7:8a:
         12:f7:95:7a:71:0f:0f:d5:c6:da:6c:fc:9a:c0:d3:25:98:55:
         93:39:c7:8e:b1:69:9c:4d:0b:9e:af:e0:a9:63:22:ae:56:f3:
         a7:22:b0:e4:d1:0f:58:07:55:bf:fc:d9:38:b4:7b:14:c3:cb:
         a0:ec:22:df:50:9d:67:75:a3:86:22:76:23:c0:de:60:da:30:
         1b:0d:b8:50:6f:0c:87:29:a5:e4:58:7a:60:9f:1c:9b:6a:fa:
         0c:da:5e:4a:b0:f7:2b:59:1d:f3:ca:5e:a2:23:0d:7c:dc:ba:
         52:ff:50:64:50:dd:d2:8f:8b:37:9c:1c:73:b9:41:9e:36:46:
         f2:e7:7b:ab:e5:2c:5a:84:9e:ed:cf:b6:a3:e9:b4:63:4c:93:
         f9:23:0c:8d:cb:ba:c1:89:e8:53:6b:3f:1a:a2:9b:dc:cb:4d:
         2b:61:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:03:09 2025 by rpki-client