This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
File:                     99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft (raw, json)
Hash identifier:          hRJ7ugMr+mHaNb95l7rhPzVHOmquFPSa5Yd4bdbMZqI=
Subject key identifier:   11:49:C3:73:96:36:3B:CC:F4:B8:42:1D:C2:42:43:DA:9F:5A:C7:4B
Authority key identifier: 99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C
Certificate issuer:       /CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
Certificate serial:       39A600BC56F36B8B90CC8928DED2B9788C5DEBE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
Manifest number:          014F
Signing time:             Fri 19 Dec 2025 08:04:33 +0000
Manifest this update:     Fri 19 Dec 2025 07:59:33 +0000
Manifest next update:     Wed 24 Dec 2025 00:51:33 +0000
Files and hashes:         1: 99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl (hash: /juX+8W8AkEwpb8ckNjf/6dvzKw+abjHcX9tpMuPyGM=)
                          2: 3230302e3132342e3137362e302f32312d3234203d3e203532333134.roa (hash: nvN/gmc3yvZp7f7+19vhy+DTuti2rBAcYhIc+nT4HHo=)
                          3: 3230302e31342e3131362e302f32342d3234203d3e203532333134.roa (hash: YkyfFp5LZfnQcHslAN6Ws7Q0lYqX1IfjfoNa+VRsHLA=)
                          4: 3136382e3232372e32342e302f32322d3234203d3e20323634363833.roa (hash: FGWjwZVYmC9MXpGdci7iOLcp/kh9H0NFIWzVAL/FtzQ=)
                          5: 323830313a303a3134313a3a2f34382d3634203d3e20323634363833.roa (hash: Wt6Jxc4wi6Mq35oXq57s49uJ9gt1DgSCbqpJQ4NarrY=)
                          6: 323830313a303a3134303a3a2f34382d3634203d3e203532333134.roa (hash: 7z+6wyaAqeK8gV9myBMXmZHLCZuwjY9gqWJqfv/xIe4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 00:51:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a6:00:bc:56:f3:6b:8b:90:cc:89:28:de:d2:b9:78:8c:5d:eb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
        Validity
            Not Before: Dec 19 07:59:33 2025 GMT
            Not After : Dec 24 00:51:33 2025 GMT
        Subject: CN=1149C37396363BCCF4B8421DC24243DA9F5AC74B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:07:53:5c:60:e1:64:51:d6:dc:3b:2b:b2:27:
                    d1:ab:dc:05:c3:26:e8:67:11:51:95:28:ff:ba:7b:
                    0a:a0:6c:8a:ad:5a:1d:b8:7f:ca:31:54:df:5a:1d:
                    7c:53:b5:b6:94:2e:d6:21:bc:0c:28:dd:a5:2c:3f:
                    e6:75:00:1b:1c:d5:b8:be:1a:25:0a:d9:a1:6a:a4:
                    9f:b4:4f:81:7d:67:d5:c7:64:f7:2a:3e:21:ea:68:
                    48:61:0a:f1:2b:4d:36:44:e8:ae:0f:59:10:9b:14:
                    aa:fb:b6:77:b2:9c:5d:58:b9:71:6d:b4:04:4a:7e:
                    3d:14:f1:46:4b:05:5c:a6:d8:3c:9f:93:9e:c3:97:
                    3e:e0:d0:7c:5c:1e:f9:38:fa:b1:83:05:41:b3:96:
                    89:f8:fa:03:ef:e7:26:d7:f6:af:96:66:6f:be:20:
                    08:b2:bc:53:1b:c5:eb:26:a3:a1:df:e0:ad:37:11:
                    e5:23:ca:7b:01:08:6e:26:32:36:e9:f7:76:99:4a:
                    5a:66:11:04:85:47:da:43:5a:2a:55:e0:37:16:df:
                    a5:dd:b2:56:c5:95:c6:29:cd:6d:85:67:ae:28:e8:
                    1c:3a:8a:61:33:98:8f:81:89:45:30:53:e3:cc:70:
                    d6:e0:37:66:ef:00:65:63:8d:e2:71:ac:a9:d5:8d:
                    9e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:49:C3:73:96:36:3B:CC:F4:B8:42:1D:C2:42:43:DA:9F:5A:C7:4B
            X509v3 Authority Key Identifier:
                keyid:99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f9:fe:d7:53:78:27:8d:59:09:a8:36:2b:43:c5:2a:39:e2:
         e9:96:03:2f:23:7d:83:9a:19:c3:e6:82:bc:b3:89:ea:c2:72:
         76:b8:41:36:48:8a:bf:63:82:db:c1:11:55:74:57:88:c1:ce:
         7b:d4:d7:3d:36:5b:d9:1d:ca:59:64:48:c6:ce:5c:40:59:d9:
         31:10:48:bc:46:09:5a:f4:4d:38:68:7a:84:38:d2:dd:8c:28:
         24:ed:9d:47:a0:0f:3a:71:a2:51:ac:c4:02:3a:4f:36:72:73:
         36:f3:bf:d7:07:46:0c:61:09:b1:50:16:01:fe:9f:b6:38:e0:
         44:3f:c0:04:3a:8d:92:df:9a:39:cc:f1:83:a3:3e:04:62:76:
         6d:3e:45:b1:17:3a:f0:a5:ef:5e:6c:54:af:b0:f5:84:a3:70:
         53:63:a1:93:90:60:a4:07:9a:9b:9e:04:5d:2b:f4:1b:9b:60:
         2f:82:74:9d:04:96:71:d1:f8:72:0d:ae:95:ac:99:a3:b6:32:
         49:cc:57:11:97:e0:0b:e6:0c:ce:43:68:50:35:0e:39:2f:f0:
         96:14:2b:00:97:fc:da:25:60:87:c6:9e:b6:36:f7:fb:be:f7:
         75:2a:63:5a:89:f5:78:d1:11:42:3e:2d:d6:24:c4:81:e0:cf:
         0a:f2:21:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:04:39 2025 by rpki-client