This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.mft
File:                     1F892BE2BF480CEC044B44BE95FB21F16BB4734C.mft (raw, json)
Hash identifier:          Jg0qMX7WPck3ndgOZC7bkBCHytamBH/v8hse0X76gM4=
Subject key identifier:   A0:7B:EE:FC:6A:EE:91:63:8E:52:45:3F:A3:4C:1B:76:BF:EC:40:68
Authority key identifier: 1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C
Certificate issuer:       /CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
Certificate serial:       7EB4732A7AB72CF6EF8186C2CF679BF3B42D2D4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.mft
Manifest number:          0152
Signing time:             Sat 20 Dec 2025 23:53:44 +0000
Manifest this update:     Sat 20 Dec 2025 23:48:44 +0000
Manifest next update:     Thu 25 Dec 2025 23:24:44 +0000
Files and hashes:         1: 34352e3233342e33322e302f32342d3234203d3e20323636373639.roa (hash: br/Mkq6/wgvxC+8pcjRYq2/WtRs3tANyQJVOF1VJwVc=)
                          2: 323830333a326632303a3a2f33322d3634203d3e20323636373639.roa (hash: w6NIe7TSqos9xcUfSI4KcXdCpfU3Qx7fndCOjqUuqWo=)
                          3: 34352e3233342e33322e302f32322d3232203d3e20323636373639.roa (hash: +14kAeekh2v9+mfTNqoXTPg7MnvvHMwHVJQBxnd40K4=)
                          4: 34352e3233342e33332e302f32342d3234203d3e20323636373639.roa (hash: 0rQqkRnqjxmOr8AaCQFUPM53LSz1mx5/wfNUmNCr3Y0=)
                          5: 1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl (hash: ocTfzwo0vdT/wrWBj6IC6AM4xfRSxDFjjnw+MZnbdEM=)
                          6: 34352e3233342e33352e302f32342d3234203d3e20323636373639.roa (hash: 0KiPRJdELohq7JufJ4naBuoR2Pn6Tbo/IXLxQnpEvgk=)
                          7: 34352e3233342e33342e302f32342d3234203d3e20323636373639.roa (hash: 0smQPbd0iQ++eXsuKugwBd5J7O+8SlocrwZc3Aam1rA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 23:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b4:73:2a:7a:b7:2c:f6:ef:81:86:c2:cf:67:9b:f3:b4:2d:2d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
        Validity
            Not Before: Dec 20 23:48:44 2025 GMT
            Not After : Dec 25 23:24:44 2025 GMT
        Subject: CN=A07BEEFC6AEE91638E52453FA34C1B76BFEC4068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:90:9e:e7:33:fb:0b:ca:21:6e:84:19:8e:
                    e2:cf:6b:3a:23:3f:e6:b1:f6:b2:48:77:1a:ec:4b:
                    1f:02:ae:2e:c7:c6:ce:90:9b:38:5d:b6:9c:bf:b4:
                    9f:ba:6f:72:ab:5b:2c:ed:7d:65:db:01:2a:03:18:
                    d9:be:d1:0a:ca:6e:8c:5d:45:d3:90:92:90:7b:4a:
                    bb:fe:d3:77:09:b4:77:39:5d:4c:c2:c5:f4:ec:61:
                    f0:87:6c:95:70:76:97:74:c3:da:5a:ef:38:e9:ec:
                    91:d8:bc:24:9b:73:10:15:36:20:01:b0:ec:06:94:
                    ea:17:a4:15:b8:5d:23:d9:ca:28:dc:c0:c0:8d:6f:
                    ed:c6:22:a8:c7:16:8d:7d:2a:49:4f:71:c9:14:77:
                    42:b1:d3:6c:e0:4b:e1:82:03:eb:ff:d1:e2:43:2b:
                    46:49:12:b8:68:ab:66:49:28:9c:2b:84:e1:95:ab:
                    6f:91:10:19:63:9a:7c:0e:65:94:19:cb:1e:5d:cd:
                    61:8b:b3:47:a7:bf:91:9a:35:ad:47:15:33:40:47:
                    48:16:db:bf:2f:3d:0b:63:6a:67:7f:18:cd:c6:67:
                    7b:56:61:72:e4:2c:3b:26:f7:a2:db:5a:52:9b:09:
                    37:19:f9:7e:e0:33:66:ac:43:dd:e2:b5:6b:6f:ba:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7B:EE:FC:6A:EE:91:63:8E:52:45:3F:A3:4C:1B:76:BF:EC:40:68
            X509v3 Authority Key Identifier:
                keyid:1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c1:19:f1:80:01:8e:a3:90:b2:a9:15:84:c1:76:39:cc:a3:
         7b:1e:6b:ff:33:02:58:d9:c3:4e:e5:58:eb:65:9d:52:9d:ae:
         ee:de:0d:6f:71:ef:f5:a8:50:c1:1a:15:04:91:20:43:85:0f:
         23:ce:b4:d4:b9:29:0f:6a:1c:cd:1e:4a:70:3b:0e:79:42:b9:
         33:2d:7e:a8:47:c2:38:96:fe:75:70:4d:b0:af:8a:0e:4d:26:
         52:ac:80:36:83:da:e3:51:f7:3f:61:4e:6e:de:1d:1a:d0:90:
         09:f3:eb:7b:b3:8f:da:2b:de:65:db:4f:04:bc:03:25:b2:d4:
         a2:fd:38:63:d0:09:9e:7c:59:19:75:2a:2b:a5:1c:66:68:1e:
         76:e4:29:b8:68:6a:59:4d:5f:c4:2e:7c:2f:15:f3:fd:c5:03:
         ad:16:bd:31:82:0f:80:0c:ed:a2:aa:79:3e:99:7a:2b:fe:fd:
         80:b6:e5:27:5c:83:34:ca:8b:4c:95:7b:a7:24:2b:ef:fd:12:
         ee:9a:d6:ee:38:2c:b2:26:1f:45:39:9f:bd:20:85:7e:cd:cb:
         b1:ba:9c:14:00:48:cb:12:2e:28:72:32:1b:55:24:bf:8e:a8:
         f1:4f:23:b6:20:5c:53:a5:93:b3:f2:a3:7e:d4:ac:62:fd:a7:
         80:56:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 16:50:24 2025 by rpki-client