This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
File:                     A709D75E0BD0199002C071D36971A09E6D5E5F48.mft (raw, json)
Hash identifier:          BGBADMs8wYT9CW5roLshQJakwbBn0EqbndHIiYrw3fI=
Subject key identifier:   C3:F3:C9:22:CB:9A:B2:A4:64:C5:B6:B8:8C:57:1A:45:41:97:1E:DE
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Certificate issuer:       /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial:       14F2BCFAA3CC00ED4F43323082C744B6F3A3E414
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
Manifest number:          0155
Signing time:             Sun 21 Dec 2025 06:53:33 +0000
Manifest this update:     Sun 21 Dec 2025 06:48:33 +0000
Manifest next update:     Fri 26 Dec 2025 04:59:33 +0000
Files and hashes:         1: A709D75E0BD0199002C071D36971A09E6D5E5F48.crl (hash: INnfNjlVdqwo5pz4yqTcKOSYM/qHL4+jtdX2CthrXjk=)
                          2: 323830313a3136353a3a2f34342d3435203d3e20323733303437.roa (hash: UvwXqj6/d86ORD1VtbB72Nu947MNzYkFohM6eGzhJWk=)
                          3: 323830313a3136353a3a2f35362d3634203d3e203238303030.roa (hash: 9SD24NhgRZfAiUlQ2GAGu1vW/yNGEPJw3025GPTcjF8=)
                          4: 323830313a3136353a3a2f34392d3634203d3e203631343938.roa (hash: +4YdrALy+MihiAjwOmVHlW6yvpiamWbuIUy06TZ+hrk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 04:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f2:bc:fa:a3:cc:00:ed:4f:43:32:30:82:c7:44:b6:f3:a3:e4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
        Validity
            Not Before: Dec 21 06:48:33 2025 GMT
            Not After : Dec 26 04:59:33 2025 GMT
        Subject: CN=C3F3C922CB9AB2A464C5B6B88C571A4541971EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:55:fa:31:2b:0f:5c:d8:5f:bb:85:bb:17:f6:
                    82:05:90:f3:47:3b:ec:1a:7f:61:c2:ba:ae:a9:4b:
                    c8:69:aa:08:3d:19:64:d0:d7:38:ee:d5:dc:5d:56:
                    a3:04:be:99:ae:24:9b:4e:87:d0:ac:f9:a7:dc:69:
                    73:51:3b:71:e0:15:b0:23:09:76:62:35:c0:04:64:
                    4c:b6:a3:e6:48:f7:18:6c:ed:5c:01:57:0b:47:6f:
                    2e:6d:a8:ef:18:b2:46:cb:23:7e:d8:13:4a:ea:fc:
                    1a:8e:04:0d:78:07:a9:1c:f2:7d:ec:f9:2b:e1:e5:
                    6f:7b:8b:39:d4:ca:91:a4:14:1a:57:76:d4:6b:be:
                    26:a9:c4:09:e7:0a:d2:87:e7:b1:dc:f4:6f:6a:40:
                    e8:9e:e0:12:d0:89:50:dc:c3:63:20:c8:fa:06:81:
                    2f:ba:f0:20:f2:4c:7a:a9:e6:9d:ca:38:e1:2b:d5:
                    c4:b7:c8:3e:d4:47:a8:7a:a3:6e:59:2f:5f:49:40:
                    de:51:bd:61:3c:e4:25:cc:a8:e1:f1:f1:55:e5:61:
                    d8:30:20:3f:b1:7a:d5:ad:db:f1:f2:62:53:8b:ab:
                    d3:e5:92:8e:6b:7b:77:ee:52:c3:ec:d9:85:34:d6:
                    d9:e1:01:53:0d:68:e0:4f:21:e2:93:97:c5:d1:39:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F3:C9:22:CB:9A:B2:A4:64:C5:B6:B8:8C:57:1A:45:41:97:1E:DE
            X509v3 Authority Key Identifier:
                keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:3f:f8:e3:b1:eb:59:1b:3c:75:38:0e:8b:d5:96:70:2a:be:
         ca:d3:24:37:a9:05:c3:32:26:fe:26:34:54:a7:86:4e:82:30:
         8c:9c:3c:03:0f:bd:6c:e5:6c:1f:5f:e7:0a:b5:61:93:5c:89:
         1f:7d:28:ec:1e:96:d3:e5:f4:23:1a:42:e3:a4:90:e9:38:c6:
         0d:9b:4a:66:21:39:15:95:6a:7a:19:3f:24:01:83:eb:92:65:
         da:0f:31:d4:91:77:36:ad:be:79:f4:01:74:f1:97:20:82:43:
         ac:18:43:23:45:44:ce:62:e0:df:b3:22:c3:36:20:7d:fe:4d:
         13:13:05:24:96:86:a7:68:04:d4:80:87:c9:8a:7c:77:02:e2:
         44:dd:26:a6:3f:85:73:f4:fd:72:3d:07:a2:91:bc:c4:fc:14:
         1f:90:24:79:36:83:41:d2:8f:7a:e7:86:c7:14:7d:13:40:95:
         38:0c:f0:29:f7:8a:7f:d2:e9:9c:28:d4:38:82:13:ce:3b:00:
         21:c8:8a:90:10:ff:0e:91:f3:46:f9:cb:1a:1c:2b:69:f9:21:
         69:1d:7c:16:42:8f:96:a1:d4:da:be:da:8f:c3:6d:3b:36:48:
         9a:b6:43:20:93:42:fa:8d:93:7e:fd:75:75:11:ad:25:fb:3d:
         a9:3d:6b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:14:50 2025 by rpki-client