This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
File:                     CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft (raw, json)
Hash identifier:          7U+nxkH2oL28zOKwzsp0nL1z6qR94jGl6bg5yLlUsBc=
Subject key identifier:   7F:1F:8C:03:B0:C5:1C:2B:4A:DD:0C:8F:53:91:A0:33:BD:27:DA:48
Authority key identifier: CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44
Certificate issuer:       /CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
Certificate serial:       4E3F976719C57502402536AF4F58AFF5AAA9C4EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
Manifest number:          0144
Signing time:             Sat 06 Dec 2025 18:26:42 +0000
Manifest this update:     Sat 06 Dec 2025 18:21:42 +0000
Manifest next update:     Wed 10 Dec 2025 21:27:42 +0000
Files and hashes:         1: CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl (hash: QLMajPdro4lN1EvGHD4PAUdNk5u/l1i+labdGypyBLo=)
                          2: 34352e342e3136302e302f32322d3234203d3e20323635363833.roa (hash: 9L4l9tcjyGlVuBz9JUU/dbGCbbeUoAKxnO9QTvBf+RI=)
                          3: 323830333a363163303a3a2f33322d3634203d3e20323635363833.roa (hash: HrH9GFNPCxqkxNyi7hl6xepIjEZiZZik5ydHHbTInbY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 21:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3f:97:67:19:c5:75:02:40:25:36:af:4f:58:af:f5:aa:a9:c4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
        Validity
            Not Before: Dec  6 18:21:42 2025 GMT
            Not After : Dec 10 21:27:42 2025 GMT
        Subject: CN=7F1F8C03B0C51C2B4ADD0C8F5391A033BD27DA48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:65:f6:b9:91:da:ab:e5:dd:89:93:f1:d4:
                    3e:94:5c:e6:c4:32:68:28:25:92:76:ba:0c:b1:49:
                    6f:9f:17:a2:84:f8:a0:be:5d:9a:f3:04:b1:d4:a4:
                    db:74:16:2a:30:a4:ca:e5:f3:89:85:aa:8f:bd:b3:
                    43:6e:34:78:de:7b:d7:f6:e9:ce:d4:e8:82:fc:4b:
                    f4:cb:55:d7:6b:b5:c7:1d:40:a6:a6:b4:bd:fd:74:
                    ba:13:ca:16:91:83:fb:df:67:e2:2c:d3:37:67:59:
                    5b:8f:46:6d:2c:8c:cb:2a:95:28:9a:f5:bf:c6:6c:
                    ff:9c:55:b8:b7:96:86:f8:3c:c0:f6:69:54:f6:3c:
                    6e:d3:94:ec:e7:f5:a8:62:52:96:b5:46:5a:c4:e9:
                    0c:85:81:d9:d3:ce:9d:91:30:09:83:84:98:71:88:
                    4a:b9:b6:78:5a:fe:20:0a:da:69:5b:7b:3e:fc:ea:
                    0f:17:85:17:d9:6b:c9:a4:1d:18:d9:ff:60:a8:ba:
                    f1:b3:4b:3b:12:1a:78:f8:d1:ed:0f:c8:30:4d:db:
                    54:87:1b:22:2f:b0:be:03:80:96:bb:10:99:6d:78:
                    76:7c:9a:af:02:b6:77:1a:77:f3:41:87:1e:a6:6c:
                    c7:bd:08:41:da:01:1d:ba:94:a8:e2:0a:d5:62:3d:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1F:8C:03:B0:C5:1C:2B:4A:DD:0C:8F:53:91:A0:33:BD:27:DA:48
            X509v3 Authority Key Identifier:
                keyid:CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e2:7b:87:a3:86:23:45:ff:3b:71:b5:e0:f8:90:8f:eb:b8:
         5d:dd:ea:03:99:1b:99:a9:27:7c:fb:54:9e:9b:8c:dd:8a:1d:
         f9:a8:d9:17:33:02:4e:02:ed:42:6f:85:96:86:98:01:2e:75:
         1a:25:93:a0:89:a7:eb:8b:a1:fe:7f:6d:63:5f:fb:6a:4a:a5:
         fd:b1:d6:cc:ab:33:c2:e7:5c:e5:6b:3a:b3:fd:83:57:6b:46:
         bc:93:86:c9:2a:bd:f2:82:01:96:75:c7:80:c9:4d:68:fa:5b:
         73:4b:da:c9:ca:80:dd:36:f5:fa:4f:1f:45:2c:62:dd:e8:05:
         8d:02:7d:c6:ec:b6:ea:a1:6c:ef:fa:8a:ea:b4:51:40:0d:4d:
         1c:ef:17:32:24:6c:aa:a0:75:af:f2:a8:25:a7:22:cc:8b:89:
         c5:41:df:74:c7:61:a6:c3:4a:af:97:3f:df:cd:c3:a6:8f:8b:
         a6:1f:69:27:38:e9:fa:18:a8:ae:e5:6a:4e:84:10:ab:31:8b:
         d4:10:0b:4e:df:15:02:34:59:17:0c:6e:0d:79:e9:09:f2:42:
         e0:25:88:5b:7d:98:36:6e:bf:a3:6a:03:d6:f6:da:69:aa:c1:
         4a:68:c4:be:11:53:e5:4c:ba:fb:3f:bd:b4:6f:6c:26:1d:92:
         24:c3:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:13:32 2025 by rpki-client