This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.mft
File:                     8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.mft (raw, json)
Hash identifier:          SWYuw25DDdl+W23BNz2z00XG3oUpUYGpQ4iDwPt6kWw=
Subject key identifier:   A4:72:1F:A2:56:C4:DC:9D:6D:19:33:EC:8D:FF:48:A3:53:34:85:29
Authority key identifier: 83:34:A3:FB:4A:FA:5A:2B:29:BE:AD:E3:3F:59:57:C1:DA:DE:51:18
Certificate issuer:       /CN=8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118
Certificate serial:       0BAF49DE5F84C5E63466D5FDA1299A57C267CAA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.mft
Manifest number:          0143
Signing time:             Sun 07 Dec 2025 03:11:38 +0000
Manifest this update:     Sun 07 Dec 2025 03:06:38 +0000
Manifest next update:     Thu 11 Dec 2025 11:31:38 +0000
Files and hashes:         1: 3230312e3232302e302e302f32302d3234203d3e203237373831.roa (hash: zGSid6y66iyW/K/RONpXOKXqOeYkwuU19OFORXhy/8o=)
                          2: 323830303a3238303a3a2f33322d3634203d3e203237373831.roa (hash: ACXKH5fK2hrWrHqNTZ3hEWzySwsvAT8rdTsN6g8HiaI=)
                          3: 3230312e3232302e31302e302f32342d3234203d3e203230393430.roa (hash: uqGPRtBgzdtgJAcD+zEbBC/WwpY862fb/9euzweoPlg=)
                          4: 323830303a3238303a343030313a3a2f34382d3634203d3e203230393430.roa (hash: Ak3aiIjbHstdY8wf0OR2sAtyBePoMtwQHUEGnMrNtJg=)
                          5: 8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl (hash: Nkx72EKwt1GqvgFU0B4eg/WBAsa4y2rl3WZx1TOZxAU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 11:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:af:49:de:5f:84:c5:e6:34:66:d5:fd:a1:29:9a:57:c2:67:ca:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118
        Validity
            Not Before: Dec  7 03:06:38 2025 GMT
            Not After : Dec 11 11:31:38 2025 GMT
        Subject: CN=A4721FA256C4DC9D6D1933EC8DFF48A353348529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:61:e3:d4:d9:24:14:14:9f:61:3e:3f:8b:
                    74:f4:91:4a:c5:ee:cd:e4:42:6d:b6:e8:e8:46:bd:
                    ae:d3:39:aa:81:6c:92:32:41:58:6c:95:93:c1:44:
                    d2:3d:c4:be:80:e6:55:d0:f2:99:2f:e2:10:76:30:
                    ad:81:b4:8e:60:71:79:96:f3:0c:26:64:9f:59:d6:
                    46:8c:77:bd:4c:4c:ba:7a:df:b4:f5:22:6f:69:d5:
                    ba:aa:d5:c9:24:d2:86:aa:80:3d:72:14:e1:a8:57:
                    76:67:97:fd:73:0a:ad:41:28:8c:87:ee:f3:73:1e:
                    d8:1f:61:8c:79:70:7f:75:58:36:8b:0f:1c:c0:02:
                    32:6d:de:d5:ca:ec:89:58:35:fe:47:e9:72:c5:ad:
                    76:04:26:25:b8:30:c2:ad:2b:97:bb:91:98:4b:5d:
                    be:aa:51:3e:13:56:24:7c:72:53:bd:92:44:e9:04:
                    95:d3:87:42:be:de:10:38:d0:6d:3c:98:96:fe:9c:
                    e0:0b:0f:97:8c:c4:92:00:ed:c6:37:65:1f:13:f6:
                    6a:61:25:9f:b9:98:ca:46:5a:5d:1e:23:cf:fc:aa:
                    c0:e6:cf:66:95:a9:7e:b4:a7:2a:dd:a8:51:ba:8f:
                    e0:dc:13:09:ab:df:6a:2d:35:c7:73:db:cf:78:6c:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:72:1F:A2:56:C4:DC:9D:6D:19:33:EC:8D:FF:48:A3:53:34:85:29
            X509v3 Authority Key Identifier:
                keyid:83:34:A3:FB:4A:FA:5A:2B:29:BE:AD:E3:3F:59:57:C1:DA:DE:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2c:03:fb:ff:63:94:fc:eb:9f:03:0d:c4:95:8a:1e:25:00:
         93:10:c9:1a:70:15:ea:11:40:c0:d3:4b:88:39:57:b2:83:61:
         a3:b4:e9:32:6d:3b:d3:5a:46:be:1b:af:fa:56:e2:37:4a:10:
         62:95:6b:c8:46:f4:4f:52:79:53:fd:61:76:7c:4d:90:5e:1c:
         1e:e2:28:2d:94:6c:d7:df:74:a4:16:b4:7c:38:9d:5b:71:ba:
         05:78:9c:24:82:f9:40:5a:03:0b:54:39:0c:9c:40:0f:7c:a3:
         ae:67:f5:fa:e7:2b:3f:59:2c:d3:02:17:ee:e3:2e:57:77:75:
         c2:15:3b:77:ff:e9:97:97:b1:6f:8c:0d:4e:83:a8:88:d8:0e:
         2a:7a:b5:83:5a:74:10:38:e8:b3:1a:f0:8c:e5:99:05:93:6a:
         0e:89:90:f8:9e:45:ed:99:4e:b6:7c:40:28:b4:90:49:a2:33:
         8d:d1:c7:e5:61:31:24:31:14:90:51:af:2f:2e:bf:53:8f:0f:
         f1:63:5a:f8:31:47:ad:dc:13:c2:9e:0f:67:10:7f:4d:e9:8c:
         f5:86:0c:ad:54:a3:00:45:01:02:74:61:62:43:d1:fe:7a:91:
         3c:1c:c4:c4:93:37:17:a6:51:52:2d:5d:22:4b:85:88:78:a3:
         5d:4d:18:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:09:44 2025 by rpki-client