This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
File:                     21412A097D724851BE961D093E8521CC77A7B163.mft (raw, json)
Hash identifier:          mEcrKrLYOUsSk+7I/nT4yQhnm9Y8+Xj0/RTrPH3QCqk=
Subject key identifier:   07:76:DD:FC:1C:FC:15:6B:38:06:E7:D7:10:AB:8D:E5:91:EC:71:94
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       2957FE41FA21877231C5CB24FC15BBD401B07573
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
Manifest number:          0147
Signing time:             Wed 24 Dec 2025 18:15:17 +0000
Manifest this update:     Wed 24 Dec 2025 18:10:17 +0000
Manifest next update:     Mon 29 Dec 2025 20:32:17 +0000
Files and hashes:         1: 3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa (hash: lYDTn5iGQlXU/kc+dTk7jVowLAQEqyCq36Bb6fOYEs4=)
                          2: 21412A097D724851BE961D093E8521CC77A7B163.crl (hash: uF6MyTeO32xMBF1W7vNiC+JlqBQqrwFNe+26UBwiCSA=)
                          3: 3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa (hash: 0KM2apHpvohErBzrhHKqwd9/QyiLiK5zUIRgohsjxcM=)
                          4: 323830333a633863303a3a2f33322d3332203d3e20323634373736.roa (hash: MRclYfYyx5c25qVGDjWe7bi9mQ83ApsdpQAOmsF+Iqg=)
                          5: 3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa (hash: OM7nkYOV8AFf6j6MrkYx0VlnmQOoRMvsIXJgHfikKLg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 01:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:57:fe:41:fa:21:87:72:31:c5:cb:24:fc:15:bb:d4:01:b0:75:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Dec 24 18:10:17 2025 GMT
            Not After : Dec 29 20:32:17 2025 GMT
        Subject: CN=0776DDFC1CFC156B3806E7D710AB8DE591EC7194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:44:9d:c4:f8:7a:d3:69:cf:de:7f:f7:98:f5:
                    5d:59:71:e6:93:c3:7e:c5:25:37:d2:2d:aa:1f:14:
                    98:18:b8:a3:42:03:cf:34:09:c8:c3:4a:ed:5a:11:
                    1d:2b:7d:77:03:d0:ed:e3:f7:4e:c1:5e:e0:a3:69:
                    e1:58:ba:ae:dd:45:93:a7:b5:5c:0d:d4:f1:60:b5:
                    b9:c9:d4:5e:1f:2c:fd:5f:e2:5a:7a:2a:39:1c:3d:
                    4a:7c:62:45:08:61:2d:11:f4:70:ce:ad:1f:b4:65:
                    79:1f:fe:31:66:54:ac:eb:b6:6f:2b:ae:50:27:c5:
                    31:58:44:82:35:47:1b:a2:61:90:1f:26:d0:28:06:
                    a2:35:d3:3c:17:ed:dd:5a:61:59:f7:1c:bc:ea:49:
                    95:f2:2e:1d:c8:69:46:f6:76:10:3c:70:4b:96:ec:
                    2f:1e:41:15:ef:0d:19:d9:20:8b:fa:ac:9c:af:25:
                    7f:2f:e1:a8:ec:66:c7:18:fb:5e:3e:89:4a:77:57:
                    d2:a4:61:bd:99:c1:e2:8f:1f:02:dd:31:cc:bf:2e:
                    bc:ae:ed:c3:dd:7f:6a:f7:b6:72:7f:1c:40:b9:9b:
                    67:e3:67:75:df:f5:1d:88:72:f7:b4:37:a2:a4:6b:
                    7d:13:3f:59:36:c5:e5:42:21:01:b2:36:d2:1b:57:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:76:DD:FC:1C:FC:15:6B:38:06:E7:D7:10:AB:8D:E5:91:EC:71:94
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:d9:ab:a6:36:00:83:63:0d:a6:3b:a3:16:44:3d:15:b9:
         f9:da:6a:d6:d9:ed:dc:ef:72:e1:4c:e4:a3:e1:4d:bd:16:82:
         9b:a6:ef:9f:c6:9f:62:fb:24:0f:3e:82:1e:f3:e0:66:d0:8a:
         b9:9e:5f:41:5c:d8:25:d5:39:46:43:17:16:20:0b:65:bf:eb:
         c2:2a:3a:30:84:2d:d9:57:e4:11:49:58:bd:6c:35:6d:b9:11:
         fc:31:73:e7:10:f0:4d:81:34:90:60:65:72:78:0b:cc:5e:e6:
         73:17:ad:eb:91:05:ea:a8:c0:21:fc:5c:b8:29:83:1a:48:ec:
         f1:6a:0a:42:5e:d2:ac:f5:0f:82:3c:1e:f1:13:a9:bf:00:5f:
         0b:0c:05:3c:db:3f:5b:da:85:e6:80:1c:dd:8b:eb:89:a0:0a:
         9e:12:7d:88:43:9a:33:f8:78:2d:1d:c1:8d:6c:7e:89:74:85:
         2c:0a:50:f0:34:76:6a:de:e6:81:8d:eb:b0:b9:fb:95:7d:6f:
         c5:1a:5f:b2:a3:38:d6:fd:ac:57:82:32:6a:a5:75:04:fb:d9:
         89:42:f9:5d:21:84:1e:ff:2b:fc:b5:be:da:a7:44:59:97:10:
         6c:0f:62:e2:87:26:36:2b:2c:50:17:8b:15:42:c5:96:80:79:
         44:dd:d2:32
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUKVf+Qfohh3Ixxcsk/BW71AGwdXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE0MTJBMDk3RDcyNDg1MUJFOTYxRDA5M0U4NTIxQ0M3
N0E3QjE2MzAeFw0yNTEyMjQxODEwMTdaFw0yNTEyMjkyMDMyMTdaMDMxMTAvBgNV
BAMTKDA3NzZEREZDMUNGQzE1NkIzODA2RTdENzEwQUI4REU1OTFFQzcxOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcRJ3E+HrTac/ef/eY9V1ZceaT
w37FJTfSLaofFJgYuKNCA880CcjDSu1aER0rfXcD0O3j907BXuCjaeFYuq7dRZOn
tVwN1PFgtbnJ1F4fLP1f4lp6KjkcPUp8YkUIYS0R9HDOrR+0ZXkf/jFmVKzrtm8r
rlAnxTFYRII1RxuiYZAfJtAoBqI10zwX7d1aYVn3HLzqSZXyLh3IaUb2dhA8cEuW
7C8eQRXvDRnZIIv6rJyvJX8v4ajsZscY+14+iUp3V9KkYb2ZweKPHwLdMcy/Lryu
7cPdf2r3tnJ/HEC5m2fjZ3Xf9R2Icve0N6Kka30TP1k2xeVCIQGyNtIbV5EpAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUB3bd/Bz8FWs4BufXEKuN5ZHscZQwHwYDVR0j
BBgwFoAUIUEqCX1ySFG+lh0JPoUhzHensWMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMEI0ODM0OTEwNEU0Nzc2ODlGRTM4QTdCOTY3QTUwOTNE
QzgzODhBOTIxNkZDNjE1NjRCM0NBMTRCQTg5Qzg4LzAvMjE0MTJBMDk3RDcyNDg1
MUJFOTYxRDA5M0U4NTIxQ0M3N0E3QjE2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTQxMkEwOTdENzI0ODUxQkU5
NjFEMDkzRTg1MjFDQzc3QTdCMTYzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTBCNDgzNDkxMDRFNDc3Njg5RkUzOEE3Qjk2N0E1MDkzREM4Mzg4QTky
MTZGQzYxNTY0QjNDQTE0QkE4OUM4OC8wLzIxNDEyQTA5N0Q3MjQ4NTFCRTk2MUQw
OTNFODUyMUNDNzdBN0IxNjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBob9mrpjYAg2MNpjujFkQ9Fbn5
2mrW2e3c73LhTOSj4U29FoKbpu+fxp9i+yQPPoIe8+Bm0Iq5nl9BXNgl1TlGQxcW
IAtlv+vCKjowhC3ZV+QRSVi9bDVtuRH8MXPnEPBNgTSQYGVyeAvMXuZzF63rkQXq
qMAh/Fy4KYMaSOzxagpCXtKs9Q+CPB7xE6m/AF8LDAU82z9b2oXmgBzdi+uJoAqe
En2IQ5oz+HgtHcGNbH6JdIUsClDwNHZq3uaBjeuwufuVfW/FGl+yozjW/axXgjJq
pXUE+9mJQvldIYQe/yv8tb7ap0RZlxBsD2LihyY2KyxQF4sVQsWWgHlE3dIy
-----END CERTIFICATE-----