This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft
File:                     621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft (raw, json)
Hash identifier:          HULNiZGu1I3tAHf2b/cfYBAgWiZuBlWvujsidHPwvfg=
Subject key identifier:   8B:85:54:89:F1:18:4D:F0:42:EA:AD:BA:B4:28:96:81:DF:CF:7A:EB
Authority key identifier: 62:1B:61:96:7B:5E:DE:ED:D5:BD:F8:BD:FD:1E:FE:F9:70:FC:27:47
Certificate issuer:       /CN=621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747
Certificate serial:       3D49096CFBA696B8A346A214ED26D98F51056D7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft
Manifest number:          08
Signing time:             Sat 20 Dec 2025 00:23:49 +0000
Manifest this update:     Sat 20 Dec 2025 00:18:49 +0000
Manifest next update:     Thu 25 Dec 2025 22:04:49 +0000
Files and hashes:         1: 621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.crl (hash: xnAIY0roOB70aHdV7Ses3DxAF1VV7Fnp705DAwB+Ga4=)
                          2: 323830333a643835303a3a2f33322d3438203d3e20323733313138.roa (hash: Vk5dQOyxye3KHA3x3MvKS5O63/jL9KItFEHccy/7IAQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.crl
                          rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:49:09:6c:fb:a6:96:b8:a3:46:a2:14:ed:26:d9:8f:51:05:6d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747
        Validity
            Not Before: Dec 20 00:18:49 2025 GMT
            Not After : Dec 25 22:04:49 2025 GMT
        Subject: CN=8B855489F1184DF042EAADBAB4289681DFCF7AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:cd:e3:64:9c:bd:17:1f:5c:21:d1:e2:f6:
                    d1:6e:52:cc:ac:e2:b6:cf:aa:db:02:da:24:7c:10:
                    85:dc:46:2d:1a:da:ea:c3:de:70:af:4d:f4:75:47:
                    d9:5a:1d:67:33:90:15:5c:4b:30:eb:8e:49:14:cf:
                    8f:6e:0a:8b:b4:88:1a:95:1a:93:9c:1c:95:1d:1d:
                    02:e3:2c:be:1c:53:75:54:df:6d:ca:53:97:77:23:
                    8e:66:fc:1e:69:4d:44:ee:8e:d3:27:16:2d:a1:30:
                    fb:2e:be:07:af:55:09:12:2e:b5:57:c9:04:08:cb:
                    67:cf:38:6f:09:a7:a5:3c:a7:e0:e4:c7:13:1c:a9:
                    d4:e2:c3:d0:5c:ea:47:1b:d4:5b:97:45:e7:ca:1a:
                    b4:32:5c:0b:77:57:67:83:96:41:8b:80:d4:b0:53:
                    65:30:68:d2:28:9d:e2:a4:ef:48:dc:73:3d:fe:33:
                    d2:33:fc:8f:53:8e:62:52:47:5b:48:84:ce:aa:97:
                    47:8b:c6:5d:71:ca:fa:da:ed:7d:f0:9d:a5:7b:bc:
                    42:cd:e3:7c:4c:37:6e:c6:d0:cb:41:55:db:7b:28:
                    f5:55:97:d0:89:3f:e2:ec:d0:6a:c9:53:cd:e6:cb:
                    f8:f9:7d:28:28:38:d2:7c:04:29:66:61:d5:8d:dd:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:85:54:89:F1:18:4D:F0:42:EA:AD:BA:B4:28:96:81:DF:CF:7A:EB
            X509v3 Authority Key Identifier:
                keyid:62:1B:61:96:7B:5E:DE:ED:D5:BD:F8:BD:FD:1E:FE:F9:70:FC:27:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:35:f6:46:a1:a7:91:9e:3f:7d:27:a8:d9:2c:cb:77:3e:66:
         58:2a:c7:a2:15:bc:2c:57:25:e3:8e:fb:2e:7c:c9:0b:7d:c6:
         df:6d:40:31:42:92:71:c7:92:ee:11:54:57:31:98:af:26:22:
         cd:40:db:d4:14:d0:17:7b:bf:db:ca:61:b2:53:ed:ae:61:cd:
         86:b7:f6:03:c6:22:b4:2c:10:96:72:bc:b0:1d:bc:8a:cf:f2:
         1e:11:fe:34:3a:c7:2f:cb:16:8a:72:5a:e7:af:92:f6:32:e9:
         f5:ec:7c:2d:2c:a7:60:f4:0f:00:59:85:64:b8:1a:98:2f:17:
         87:92:e9:fb:df:2b:4e:ad:c0:da:f9:57:c7:34:54:44:71:5f:
         fb:58:8b:0e:84:e7:62:67:32:e2:63:df:58:38:28:41:72:3e:
         45:cf:62:63:76:17:c1:af:69:65:29:01:f3:fa:60:2b:f7:75:
         85:ff:83:fc:a8:4b:5f:fd:2c:4d:40:de:d5:63:10:62:1c:87:
         58:29:d8:32:bf:64:d1:c1:f6:22:82:d7:e8:64:fa:12:99:a0:
         e5:92:72:4d:67:2f:1c:49:83:ba:23:61:52:de:3e:0b:8e:5b:
         48:ac:64:3d:f9:db:08:25:63:14:d5:c1:29:3c:47:1f:0c:f5:
         36:5d:67:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----