This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
File:                     AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft (raw, json)
Hash identifier:          UeRvfcixpZSv6D9LugVznN+yIDo9TVuAYB25mCrqKHY=
Subject key identifier:   11:AD:A7:16:95:86:13:33:1A:9E:97:EF:81:07:EB:08:F7:0D:4D:3D
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       1ACF286AA5C71E773A2C093E8BBD31ED1288FE0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
Manifest number:          0146
Signing time:             Fri 05 Dec 2025 08:52:50 +0000
Manifest this update:     Fri 05 Dec 2025 08:47:50 +0000
Manifest next update:     Thu 11 Dec 2025 05:39:50 +0000
Files and hashes:         1: 3134332e3230322e32342e302f32322d3234203d3e203237373932.roa (hash: RkicQZt3HFQKsXjR9WqZwJBaILj2KxHS+v5Qc/slrcQ=)
                          2: 3139302e362e39362e302f32302d3234203d3e203237373932.roa (hash: PVP6+Aif2LoGjckv2En5VjHWt+kJjk9EEFLgY48YCS8=)
                          3: 3139302e362e3131322e302f32312d3234203d3e203237373932.roa (hash: YrOx16+iIZvmiEo/ZK0LlKWcOdGc7EJ9RvaPsFWx40Q=)
                          4: 3230302e322e3132302e302f32312d3234203d3e203237373932.roa (hash: D5DMKHlHzw9CvA1rcnA1jSrkcOaXf2GeyYaX/Dm4vgg=)
                          5: 323830303a3561303a3a2f33322d3335203d3e203237373932.roa (hash: fMY9aGGR1i+J3ji8OBR1VAd6K1Ks5NePPEASVBvqcOc=)
                          6: 3138312e3138392e3139322e302f31392d3234203d3e203237373932.roa (hash: iRcxfSfIghebD6QOPTeikJfgyLmeSFqaidY7uqEUWpw=)
                          7: AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl (hash: tzw2ApnmTHbsXw8EaF5bW2QEcc7g0mn2z+48UvJ5WnU=)
                          8: 3137302e38342e3231322e302f32322d3234203d3e203237373932.roa (hash: w4u7sn4Br/SzlJWc1j5+t+BwDZV8XqI+m7Q7xmgOGGk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 05:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cf:28:6a:a5:c7:1e:77:3a:2c:09:3e:8b:bd:31:ed:12:88:fe:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Dec  5 08:47:50 2025 GMT
            Not After : Dec 11 05:39:50 2025 GMT
        Subject: CN=11ADA716958613331A9E97EF8107EB08F70D4D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:cd:47:4d:cb:cf:9f:f9:dc:9e:4e:4f:41:
                    dd:eb:fa:d4:c1:11:b3:35:35:96:d1:e4:fc:4e:33:
                    24:09:c3:ac:00:37:55:13:d1:92:1f:bc:85:bc:68:
                    4f:0c:d3:6e:12:82:39:d2:51:60:f6:36:37:31:69:
                    0c:5e:1e:a8:ad:06:7c:a4:9c:c4:1b:eb:ba:5f:21:
                    79:a8:b4:98:87:fd:95:67:f4:54:e1:86:40:fc:95:
                    88:4e:1b:17:6c:06:47:a3:82:f3:74:6b:c0:6f:41:
                    44:db:c9:f6:a8:27:87:c3:4f:28:49:aa:88:ba:64:
                    43:ce:99:e1:a1:1e:56:22:70:c3:a1:8b:9c:df:2c:
                    73:1e:32:37:65:c2:fc:ae:4a:cf:c5:f3:4c:77:a9:
                    ff:f5:c9:f8:4b:cc:66:96:d9:14:35:b3:39:44:49:
                    e0:04:c4:96:3d:a5:5a:73:3c:e1:4d:fa:4c:d7:82:
                    8f:ff:0e:1e:34:69:eb:01:7d:68:58:4c:d1:1d:df:
                    fb:c2:4e:ab:a7:5d:38:5e:fb:d6:45:45:ed:28:c2:
                    24:6a:aa:4c:2e:0b:16:9c:4b:cc:60:5b:eb:f7:76:
                    19:45:2b:32:0b:f0:67:0c:50:24:ff:9d:99:8e:1e:
                    80:22:f2:b6:a6:42:82:9a:78:7a:52:c1:32:8d:3c:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AD:A7:16:95:86:13:33:1A:9E:97:EF:81:07:EB:08:F7:0D:4D:3D
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4a:18:37:54:df:38:8e:de:0d:7c:38:92:c6:67:d2:9c:93:
         95:dc:5a:96:bf:fe:af:2a:fc:c9:7a:93:98:05:71:1d:38:41:
         d0:f0:d7:3d:58:0f:cb:fe:46:1b:ea:6e:a2:b4:2b:2b:21:d1:
         2c:ef:77:f4:06:95:56:6f:8e:c9:ad:5a:51:f0:56:42:20:4e:
         b5:e7:e1:0b:ef:f7:67:9f:83:88:fd:55:64:29:9e:c9:2f:40:
         dc:ba:e0:bd:64:84:78:11:4b:08:82:7c:6c:9d:68:32:2d:dd:
         43:2c:c9:65:fb:40:f5:94:47:17:a1:eb:70:82:55:c9:7f:82:
         2a:b8:98:b1:06:98:c3:f7:a0:97:c8:e2:70:70:7e:6f:4f:8b:
         86:72:d4:32:da:5e:8b:43:5a:24:bc:9f:90:ce:01:d5:df:01:
         40:40:f3:1b:82:81:c2:1b:0c:87:dc:0a:b0:1a:15:b3:e7:bf:
         94:e7:fc:42:35:0a:49:59:6f:13:08:75:a2:da:d6:e6:75:a9:
         78:dc:a1:c2:a4:53:16:41:62:16:2e:e6:ce:46:ea:d5:02:0a:
         b8:56:54:fe:53:97:f7:5c:46:86:7b:71:7a:59:bf:d0:9e:90:
         3a:59:f9:d7:39:93:39:6a:a9:da:b2:d9:ef:15:71:99:58:7e:
         da:da:22:27
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGs8oaqXHHnc6LAk+i70x7RKI/g4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzRjlBNkJEMTQ5QkIyQ0I3NjI3RjNCMkU1Qjc0MjlD
NTVCN0JGNjAeFw0yNTEyMDUwODQ3NTBaFw0yNTEyMTEwNTM5NTBaMDMxMTAvBgNV
BAMTKDExQURBNzE2OTU4NjEzMzMxQTlFOTdFRjgxMDdFQjA4RjcwRDREM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAc1HTcvPn/ncnk5PQd3r+tTB
EbM1NZbR5PxOMyQJw6wAN1UT0ZIfvIW8aE8M024SgjnSUWD2NjcxaQxeHqitBnyk
nMQb67pfIXmotJiH/ZVn9FThhkD8lYhOGxdsBkejgvN0a8BvQUTbyfaoJ4fDTyhJ
qoi6ZEPOmeGhHlYicMOhi5zfLHMeMjdlwvyuSs/F80x3qf/1yfhLzGaW2RQ1szlE
SeAExJY9pVpzPOFN+kzXgo//Dh40aesBfWhYTNEd3/vCTqunXThe+9ZFRe0owiRq
qkwuCxacS8xgW+v3dhlFKzIL8GcMUCT/nZmOHoAi8ramQoKaeHpSwTKNPPRXAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUEa2nFpWGEzManpfvgQfrCPcNTT0wHwYDVR0j
BBgwFoAUrz+aa9FJuyy3Yn87Llt0KcVbe/YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNUU1MkI3QjJFMzlCMUJFRkQ5MkY2REE1RTBDNUU2NDE0
Mzk2QkQ4QzEzMzVFMjM0MDYyQzI5Rjc2QTM4RjNBLzAvQUYzRjlBNkJEMTQ5QkIy
Q0I3NjI3RjNCMkU1Qjc0MjlDNTVCN0JGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjNGOUE2QkQxNDlCQjJDQjc2
MjdGM0IyRTVCNzQyOUM1NUI3QkY2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjVFNTJCN0IyRTM5QjFCRUZEOTJGNkRBNUUwQzVFNjQxNDM5NkJEOEMx
MzM1RTIzNDA2MkMyOUY3NkEzOEYzQS8wL0FGM0Y5QTZCRDE0OUJCMkNCNzYyN0Yz
QjJFNUI3NDI5QzU1QjdCRjYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfShg3VN84jt4NfDiSxmfSnJOV
3FqWv/6vKvzJepOYBXEdOEHQ8Nc9WA/L/kYb6m6itCsrIdEs73f0BpVWb47JrVpR
8FZCIE615+EL7/dnn4OI/VVkKZ7JL0DcuuC9ZIR4EUsIgnxsnWgyLd1DLMll+0D1
lEcXoetwglXJf4IquJixBpjD96CXyOJwcH5vT4uGctQy2l6LQ1okvJ+QzgHV3wFA
QPMbgoHCGwyH3AqwGhWz57+U5/xCNQpJWW8TCHWi2tbmdal43KHCpFMWQWIWLubO
RurVAgq4VlT+U5f3XEaGe3F6Wb/QnpA6WfnXOZM5aqnastnvFXGZWH7a2iIn
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:49:11 2025 by rpki-client