This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.mft
File:                     D9A7BE89544C8816011A928E90C51CB503A4D5CD.mft (raw, json)
Hash identifier:          BHx3WYXKsNgkTiXZZyDbWEXvDsygiZG+FXh8hVV1+IQ=
Subject key identifier:   9F:99:5B:97:79:39:F3:5B:6D:03:E6:B2:5B:7C:D3:1F:E6:3E:DC:E8
Authority key identifier: D9:A7:BE:89:54:4C:88:16:01:1A:92:8E:90:C5:1C:B5:03:A4:D5:CD
Certificate issuer:       /CN=D9A7BE89544C8816011A928E90C51CB503A4D5CD
Certificate serial:       700E86529939D063DA94F5D1A67A3570FE66A3C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.mft
Manifest number:          0147
Signing time:             Sat 20 Dec 2025 15:48:46 +0000
Manifest this update:     Sat 20 Dec 2025 15:43:46 +0000
Manifest next update:     Thu 25 Dec 2025 17:55:46 +0000
Files and hashes:         1: 323830363a3363373a3a2f33322d3438203d3e20323730313538.roa (hash: hDgCnl0PYRszKuhumfnh7cWoaSDKY068swldWYKjIW4=)
                          2: 3137302e37382e3230382e302f32322d3234203d3e20323730313538.roa (hash: MOKPdxZ96OIR54Deoa+6bxBJdG88IT+M8ASguMJxJkc=)
                          3: D9A7BE89544C8816011A928E90C51CB503A4D5CD.crl (hash: gnjWRBkCxdZC7dYrLkWvEBbzvCgtVQDMYR7sbq8nSuA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0e:86:52:99:39:d0:63:da:94:f5:d1:a6:7a:35:70:fe:66:a3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A7BE89544C8816011A928E90C51CB503A4D5CD
        Validity
            Not Before: Dec 20 15:43:46 2025 GMT
            Not After : Dec 25 17:55:46 2025 GMT
        Subject: CN=9F995B977939F35B6D03E6B25B7CD31FE63EDCE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:08:4b:ae:fa:a3:f7:e2:fc:cb:27:3f:bf:
                    9b:92:bf:fd:07:72:ea:9a:96:91:31:85:79:ed:9a:
                    b6:fb:0d:f4:08:77:a5:23:83:2d:ea:5d:b9:82:b0:
                    f3:76:3d:52:cd:36:e1:ac:81:68:fc:75:ef:ce:5b:
                    f7:29:3f:ac:5e:5e:34:01:69:bc:85:4c:09:63:73:
                    52:14:9f:17:37:de:a3:32:f4:7a:b3:6c:32:7c:22:
                    6a:ee:04:92:66:91:da:5a:3e:27:0a:4c:13:e5:e9:
                    20:7e:a4:cd:a4:f8:0a:6d:5d:a7:94:31:cc:3e:97:
                    d6:c9:75:c8:23:4e:68:16:cc:48:c6:09:a1:38:cf:
                    58:5c:d4:36:0d:0a:97:0d:c9:9d:e7:b1:66:c2:4b:
                    1f:26:31:02:52:47:b0:52:ce:7c:3d:6b:f4:88:d3:
                    7d:f7:f3:fe:19:89:ec:a0:45:96:5b:3c:07:de:73:
                    d2:bf:7c:a8:23:c0:47:fd:fc:5c:64:53:0a:e1:3b:
                    43:54:02:a3:f6:c6:85:ea:a8:a7:32:df:42:c3:ba:
                    83:58:60:4e:68:5f:ae:58:e2:ef:6a:18:c7:b1:dd:
                    22:e9:38:63:55:87:22:91:1b:96:b1:c7:76:96:83:
                    10:ad:6d:6f:30:48:6f:bd:6f:69:2b:c9:13:f2:10:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:99:5B:97:79:39:F3:5B:6D:03:E6:B2:5B:7C:D3:1F:E6:3E:DC:E8
            X509v3 Authority Key Identifier:
                keyid:D9:A7:BE:89:54:4C:88:16:01:1A:92:8E:90:C5:1C:B5:03:A4:D5:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:84:14:e2:a6:53:d1:bd:c3:32:40:d2:9c:a8:7d:7f:c6:61:
         1a:34:08:ab:24:85:5a:e1:21:04:a0:4d:bf:7b:00:19:0b:2a:
         d3:ce:16:56:85:98:a5:60:b8:a1:1e:ae:75:0f:15:5b:4d:87:
         85:f4:4c:4d:30:ed:f2:91:0f:18:7e:02:74:12:a4:6e:b3:86:
         05:82:cb:c6:03:b1:f4:b7:00:b4:3e:bc:04:29:81:d2:9f:85:
         8c:ca:57:1e:01:c4:47:6a:a0:ef:e6:9b:50:32:13:dd:b1:17:
         26:a6:45:ef:3c:7f:cf:2b:2b:93:0c:9c:db:d4:2b:31:2e:db:
         66:2c:1f:39:20:60:31:16:33:46:3d:8d:8f:37:5b:5a:51:2a:
         22:51:2f:ee:d8:9e:5e:16:4b:5d:94:3a:65:bb:c8:0d:d5:a6:
         c0:40:8e:1e:36:21:d7:fd:18:df:9b:7c:65:8c:d6:8a:95:d7:
         9d:5a:d1:9c:ea:e4:05:a9:32:18:dc:62:01:33:d9:9b:b0:3d:
         bc:f1:1b:67:5b:33:46:3b:8f:c4:17:06:8e:bf:f3:77:6b:f7:
         91:27:3f:57:25:d1:69:e3:cf:da:e1:16:03:10:ad:65:12:44:
         2a:aa:54:fb:45:d0:c2:8f:09:80:92:8b:73:22:c5:84:6b:5f:
         ec:15:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----