This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
File:                     CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft (raw, json)
Hash identifier:          8NjirnZgYeeyvU9/z3QSsrl0tXgs36Ctd7/zLya48as=
Subject key identifier:   8A:D7:76:5B:F7:30:4A:97:1C:20:9C:4D:7D:A2:7A:CE:57:11:6C:76
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       51DBE0AEF97919B0B55A530CC93D846E36B6924C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
Manifest number:          0152
Signing time:             Sat 20 Dec 2025 08:19:18 +0000
Manifest this update:     Sat 20 Dec 2025 08:14:18 +0000
Manifest next update:     Wed 24 Dec 2025 16:09:18 +0000
Files and hashes:         1: 3139302e3137312e39362e302f31392d3234203d3e203532323633.roa (hash: OdxcYAVFWJ0LXWU4ccY3o3N3bUq6GFK5FchgsDHF/dc=)
                          2: 3139302e3131332e39362e302f31392d3234203d3e203532323633.roa (hash: y02JrXJYNXuWW9UHV3528drFMBQbw38YOOkzJPUFtFk=)
                          3: 3133382e3131382e38302e302f32322d3234203d3e203532323633.roa (hash: +tpnvgwn+fekYn4fFlRp22qfms/lZ40WHjkbzkol9vs=)
                          4: CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl (hash: 7FKUrtb0h5i+WhmxBFAhRV6PzL7S5S9EFcw1g9lj3hs=)
                          5: 3230302e3232392e302e302f32302d3234203d3e203532323633.roa (hash: 15AnM/dZ2cOa4ul8ya6chcuL7wO96O9N5qgUEe0rbqc=)
                          6: 3230302e3130352e39362e302f32312d3234203d3e203532323633.roa (hash: oYkq7+CyDDn/snXLYaYFtH/o41Wi0O+YgxyA71w+48Q=)
                          7: 3137372e39332e302e302f31392d3234203d3e203532323633.roa (hash: s4BvyelKadZMYkpAtLqR0SNsZ2baCRlAZ5NIgSS0Lrw=)
                          8: 3137302e3135302e35362e302f32322d3234203d3e203532323633.roa (hash: FEWS1FF/XF+UlpNr4p4hcjaJzVSq5aKm/ZVtKJXfumQ=)
                          9: 3137302e3135302e35392e302f32342d3234203d3e20313938393439.roa (hash: 7RGpY/XBpOBhxSwzR+Uyed1wlKrIs2uoOjGaM+NmrY0=)
                          10: 3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa (hash: 5bexrapK4q9CZpLcnBFYUUN76MCYRsb04cp3LUHAk/I=)
                          11: 323830333a313330303a3a2f33322d3634203d3e203532323633.roa (hash: rjI4ULmGu6qYjv0FL0k2/1/NMRijEcEzQUkamWFbEsw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 16:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:db:e0:ae:f9:79:19:b0:b5:5a:53:0c:c9:3d:84:6e:36:b6:92:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Dec 20 08:14:18 2025 GMT
            Not After : Dec 24 16:09:18 2025 GMT
        Subject: CN=8AD7765BF7304A971C209C4D7DA27ACE57116C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:d4:46:ca:bf:fa:d4:98:d8:37:d5:32:df:
                    9d:96:34:83:68:7d:8c:ff:00:a9:26:65:b3:aa:07:
                    ac:56:e1:1b:8c:46:94:59:88:c7:ed:72:13:5c:54:
                    3d:85:e5:bc:d9:bd:06:d7:7c:ea:fd:bb:10:c0:ca:
                    30:b8:45:02:04:a9:bd:33:50:52:5e:ab:70:10:aa:
                    80:52:e3:32:14:75:cd:4d:12:c5:de:95:3d:b8:c4:
                    78:8e:12:a5:ad:95:fb:38:e7:9b:7d:2c:ee:fb:6f:
                    57:9b:61:a1:47:d8:0a:22:9b:85:09:8d:6b:24:09:
                    02:3d:c2:44:55:c5:94:2b:48:70:d2:16:3d:21:22:
                    33:5e:95:5a:49:65:86:95:16:43:17:7a:3b:f7:dd:
                    f3:1c:0d:f6:bc:c4:c5:6b:1e:fa:cc:5f:98:00:89:
                    0c:ee:5a:4f:db:92:7c:61:45:1f:43:34:25:98:35:
                    8b:4d:4d:8a:5d:26:25:4a:04:d0:8c:87:8c:ff:d4:
                    66:6f:ed:4f:23:2d:ba:d4:20:4c:87:cf:d5:3c:e6:
                    22:66:35:0a:2d:c9:27:43:9f:52:a1:ed:cb:65:d0:
                    2c:72:a5:24:e0:25:c7:06:59:f8:ea:ce:9a:20:74:
                    f2:b2:e1:db:1f:f8:a1:9c:58:66:c5:1d:20:b9:95:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D7:76:5B:F7:30:4A:97:1C:20:9C:4D:7D:A2:7A:CE:57:11:6C:76
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:3e:41:7c:b6:32:56:23:77:f9:9b:9e:dd:55:b6:b1:fc:7b:
         c9:26:12:4f:9f:6a:48:2e:4e:94:fd:32:d1:d9:e3:79:ec:93:
         22:81:cf:61:e5:02:bb:48:3c:e8:3c:70:42:9e:34:ca:69:48:
         67:3d:e3:47:ad:16:19:a5:58:fc:f8:2a:84:86:41:44:a8:39:
         1e:3c:4d:66:cc:6c:95:85:0d:9b:00:7b:b0:f1:2b:67:76:42:
         a6:67:e3:ab:37:78:93:31:f9:4c:9b:79:86:20:2d:02:bb:66:
         64:34:cd:c0:69:40:62:49:85:1c:07:39:57:ff:49:08:d0:71:
         7e:d1:a2:8f:ee:15:70:56:9e:0c:5f:d3:f9:4b:a6:ea:45:ba:
         72:6f:52:a9:07:88:25:02:ae:a0:28:65:e2:61:6f:40:91:75:
         a5:27:e6:71:b0:55:46:5f:65:2c:de:87:5e:11:26:5e:fb:97:
         a7:9b:d2:23:85:48:b0:b0:49:43:93:8c:d5:16:0c:9b:12:94:
         83:93:8e:7c:38:f7:df:20:cd:24:7c:1e:e2:f7:d2:7c:a6:98:
         dd:54:91:ea:f9:90:5b:27:f3:76:b9:5b:b3:b2:a3:6a:f0:0c:
         56:ce:e0:3e:1a:0a:1f:49:11:23:ac:67:e6:72:7b:ff:cb:3f:
         92:2b:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 16:46:32 2025 by rpki-client