This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft
File:                     4F43917327673645BD0B520BF95E9CA235CEFEB8.mft (raw, json)
Hash identifier:          vh9bjonaVWljSC8YBnC29gWiWS/kLOAFmiWkdYwdmMY=
Subject key identifier:   8A:98:92:D3:7A:7F:83:36:58:E4:20:54:08:B3:F6:F7:C7:ED:45:E5
Authority key identifier: 4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8
Certificate issuer:       /CN=4F43917327673645BD0B520BF95E9CA235CEFEB8
Certificate serial:       63282FE2281F34C05BB80F294EC7DA6AC24681C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft
Manifest number:          0150
Signing time:             Sun 21 Dec 2025 07:49:01 +0000
Manifest this update:     Sun 21 Dec 2025 07:44:01 +0000
Manifest next update:     Fri 26 Dec 2025 08:49:01 +0000
Files and hashes:         1: 4F43917327673645BD0B520BF95E9CA235CEFEB8.crl (hash: LoiOEMnodrndw+OwthA7xoYKFdooYFE6ga8EvBnSz3M=)
                          2: 3230312e3133312e362e302f32332d3234203d3e203238333932.roa (hash: haTEj9ueqYD8WuZx2W+M8FJ05lhj9uhBXjSTgJm0OM4=)
                          3: 323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa (hash: kbCnthVz+5MhFCL27+nzQH5/ndQLzG3N64B1JcdRO7A=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 08:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:28:2f:e2:28:1f:34:c0:5b:b8:0f:29:4e:c7:da:6a:c2:46:81:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F43917327673645BD0B520BF95E9CA235CEFEB8
        Validity
            Not Before: Dec 21 07:44:01 2025 GMT
            Not After : Dec 26 08:49:01 2025 GMT
        Subject: CN=8A9892D37A7F833658E4205408B3F6F7C7ED45E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:e2:94:d9:56:d8:d4:a9:8a:d7:83:04:d1:
                    8f:37:ec:7c:c9:cb:9e:72:63:e8:33:a0:44:83:94:
                    ec:fd:68:e2:c5:24:cd:4f:d2:12:16:9c:dd:b1:1c:
                    2e:d8:6d:f0:34:f5:88:f8:a0:42:21:16:4d:95:f5:
                    f5:13:1f:a9:74:28:4d:ec:fe:ef:c1:57:9f:85:6c:
                    4b:5d:ff:d1:46:e5:81:b0:91:94:5e:a7:11:28:11:
                    b7:94:5a:f6:70:98:9f:cb:97:22:3c:fc:f1:57:92:
                    cc:ae:d4:a5:cf:be:0f:fd:be:58:a3:7e:37:a2:e8:
                    49:29:9b:c2:d4:ba:ee:61:32:c2:76:78:c0:4b:fa:
                    3c:a6:32:b4:25:34:97:dc:51:6b:21:61:f6:8c:8d:
                    84:89:f5:01:51:77:e7:c1:1a:8d:a3:d6:0f:ac:8f:
                    79:b4:9e:a3:ba:2c:29:bd:e6:81:13:95:8a:11:b1:
                    8c:bb:83:1f:f3:6e:c9:88:93:ae:f6:80:0e:01:af:
                    e2:d9:e1:57:82:67:f5:59:e8:6c:71:2f:2a:a6:ba:
                    9c:c6:e0:58:4e:c0:ab:16:f6:ab:66:78:ba:98:34:
                    d3:55:6f:7f:a5:25:3e:b5:be:15:61:4d:20:4d:bd:
                    49:90:2c:86:f1:af:af:e9:b2:c9:4d:33:11:3d:58:
                    1a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:98:92:D3:7A:7F:83:36:58:E4:20:54:08:B3:F6:F7:C7:ED:45:E5
            X509v3 Authority Key Identifier:
                keyid:4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b6:31:4e:25:62:58:b5:c2:5f:5c:c4:a3:d1:b5:9a:e4:6a:
         f7:60:43:3c:6b:9e:a0:37:b2:56:93:4c:7f:4b:2b:39:bf:4d:
         6a:d7:eb:49:b0:b5:7e:fc:d0:fa:1b:0c:e8:26:f3:fb:12:bb:
         66:23:04:2c:f9:9f:c8:b2:0a:fc:e5:80:30:1d:d1:5d:b1:6c:
         9e:cf:6e:e1:b6:b7:37:5e:f8:e2:1f:17:0d:cf:90:49:ef:a2:
         b9:c2:f9:49:02:df:d0:90:4c:a3:37:8c:26:25:66:80:31:ad:
         48:39:90:1a:20:ca:c5:20:27:66:3d:58:db:37:67:79:44:f1:
         41:a8:27:e1:84:2f:a4:9f:db:34:89:82:fa:4a:df:a1:84:31:
         70:dd:aa:32:64:fd:70:b6:dd:eb:1c:b4:16:d8:94:3e:ca:53:
         6b:a1:4a:84:19:e1:98:26:39:0d:f5:47:d7:34:67:78:7c:04:
         dc:b8:4e:5f:d0:4b:92:66:23:ff:32:e0:16:a8:b1:cb:a5:1b:
         81:9c:f2:18:8d:96:05:0c:a3:8f:39:6d:40:5c:c1:05:19:1e:
         6c:2a:0f:cc:b5:8a:14:65:92:15:e0:17:6d:c5:ce:bf:71:21:
         d4:e7:0f:64:46:d2:6e:32:ea:3a:3e:a0:a1:bc:9a:e1:aa:00:
         b5:6f:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----