This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft
File:                     0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft (raw, json)
Hash identifier:          4uQ4KVu4zJUSGLvppEhUE2bsVGhH8kPblaYxMbY5GNc=
Subject key identifier:   8A:DC:4E:4C:D8:3A:A7:46:D4:ED:CC:20:4A:FF:88:0C:8F:0A:FE:47
Authority key identifier: 0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78
Certificate issuer:       /CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
Certificate serial:       665EEF6BB913A92E5F4C2FF76CE323B10A77B558
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft
Manifest number:          0154
Signing time:             Tue 30 Dec 2025 04:22:25 +0000
Manifest this update:     Tue 30 Dec 2025 04:17:25 +0000
Manifest next update:     Sat 03 Jan 2026 21:32:25 +0000
Files and hashes:         1: 3138392e3132372e3133362e302f32342d3234203d3e20323730303038.roa (hash: /Pef5lNY+CedlAfewPIYk4pbarZ/NqC59hWj8bJXu5U=)
                          2: 0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl (hash: aX/gSFUqbnA/GwDA/YFX5yQcnw3H/Z1x+4Nhxw6H980=)
                          3: 3230302e32332e3134302e302f32342d3234203d3e20323730303038.roa (hash: Do3EW/kaxtiLK9duxsddjCfNMZ9iRxFH+m3EW9MS3ok=)
                          4: 323830333a383965303a3a2f33322d3332203d3e20323730303038.roa (hash: 3viU1D+HCnwgWJijWczm9DvUPihHk64a6YWePh2GJPY=)
                          5: 3138392e3132372e3133372e302f32342d3234203d3e20323730303038.roa (hash: kXvHiEAf1vtoPraQly5Dcahlpqvxpdv4dK/Si05OKbg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 Jan 2026 21:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5e:ef:6b:b9:13:a9:2e:5f:4c:2f:f7:6c:e3:23:b1:0a:77:b5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
        Validity
            Not Before: Dec 30 04:17:25 2025 GMT
            Not After : Jan  3 21:32:25 2026 GMT
        Subject: CN=8ADC4E4CD83AA746D4EDCC204AFF880C8F0AFE47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8c:5d:70:0f:75:50:ff:7b:5a:26:1f:fc:0e:
                    6f:91:d3:3b:b6:51:6f:79:f1:42:50:e8:99:89:4f:
                    ca:d4:82:39:f6:65:87:dd:e2:c3:83:55:32:e2:b7:
                    cf:9d:1e:9f:83:19:9e:6a:46:85:91:42:78:bb:0f:
                    0e:d3:59:69:f1:49:a6:b0:c6:af:c8:67:92:f7:8e:
                    6d:44:0c:ba:07:24:48:31:6e:49:a0:6d:f3:f9:4a:
                    fa:c2:ad:04:f6:74:0a:5b:93:07:6b:a7:c2:3c:42:
                    24:17:e9:34:c4:98:83:02:2d:ca:d7:c5:85:e8:ab:
                    99:14:eb:b9:c4:6e:9e:a9:fb:d5:b2:a2:e9:fc:bf:
                    1f:72:ad:d7:d2:20:f0:c4:34:27:21:d7:d2:1e:9f:
                    a3:b4:90:8f:10:2c:95:a2:b9:99:ed:44:75:e1:79:
                    3a:89:e0:40:6f:6f:b6:5b:d5:91:26:8e:f9:ab:12:
                    1d:37:c0:0e:ac:81:de:5d:f0:6f:19:86:7f:15:3b:
                    40:10:10:c2:1e:c8:ec:85:27:bb:c5:ce:a3:c6:89:
                    21:82:2f:58:52:78:6a:21:4a:84:31:c4:b5:f2:31:
                    23:17:cb:68:ec:10:18:2c:a0:57:b8:f7:cd:e2:d1:
                    ef:16:2c:30:e7:52:ff:17:ce:bd:56:a8:eb:87:f8:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DC:4E:4C:D8:3A:A7:46:D4:ED:CC:20:4A:FF:88:0C:8F:0A:FE:47
            X509v3 Authority Key Identifier:
                keyid:0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:35:a2:f0:0f:e3:9c:e5:86:98:f3:43:d6:a1:41:a4:7d:
         bb:a5:32:e0:f6:87:42:a5:5f:2b:20:ee:a1:b7:43:ea:c7:7e:
         cf:51:8a:a7:2c:e1:52:eb:e4:cc:6d:d2:7b:c9:a5:70:cb:3d:
         44:41:92:ed:90:43:33:eb:49:ec:f6:cb:9a:ab:1f:a0:a8:96:
         02:dc:dd:27:7e:56:12:52:63:72:1c:0a:70:3a:52:c8:1b:3e:
         88:d0:6d:01:bc:a5:49:71:6a:9b:3f:73:be:11:86:13:d8:99:
         39:b7:ff:b5:90:03:63:fc:8f:5c:d8:37:a2:bf:5f:d5:dc:c9:
         b4:a2:bc:ae:d6:99:5f:ae:27:20:8b:91:6e:d8:74:b8:f2:71:
         e4:89:a2:d4:bc:a8:51:6f:71:3a:6b:9f:b9:be:f6:39:c7:d0:
         ef:66:2e:84:a5:e0:6f:8a:7b:ab:a8:69:0f:d3:f2:60:b0:55:
         8e:4f:82:78:91:29:9e:1d:19:4a:06:dd:f9:88:37:11:64:42:
         3b:0e:e2:4f:c5:a3:86:8a:12:ec:27:11:c4:4c:0e:e4:09:12:
         9d:23:9e:30:87:21:b9:d5:d8:4f:e9:d0:7c:42:37:38:8c:08:
         0f:6b:b8:ea:95:94:e4:15:8a:37:7c:f6:8e:8e:c7:e4:d8:0b:
         f9:72:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 12:33:25 2025 by rpki-client