This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
File:                     21412A097D724851BE961D093E8521CC77A7B163.mft (raw, json)
Hash identifier:          qxZgJNzuhNpnObir/Xd/br367moeM/UmkighmXkL7S0=
Subject key identifier:   82:25:27:24:AD:8C:4A:C2:62:A5:91:B8:8E:21:07:D0:46:F6:86:6A
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       78E1C256B6CAEDD997F4F58E31148E2711C70432
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
Manifest number:          0142
Signing time:             Mon 15 Dec 2025 10:10:31 +0000
Manifest this update:     Mon 15 Dec 2025 10:05:31 +0000
Manifest next update:     Sat 20 Dec 2025 11:47:31 +0000
Files and hashes:         1: 3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa (hash: lYDTn5iGQlXU/kc+dTk7jVowLAQEqyCq36Bb6fOYEs4=)
                          2: 3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa (hash: OM7nkYOV8AFf6j6MrkYx0VlnmQOoRMvsIXJgHfikKLg=)
                          3: 21412A097D724851BE961D093E8521CC77A7B163.crl (hash: u8z2FOWeHbhy7xmF5A1VsJbnElOBuPjnwdtrLKuofR0=)
                          4: 323830333a633863303a3a2f33322d3332203d3e20323634373736.roa (hash: MRclYfYyx5c25qVGDjWe7bi9mQ83ApsdpQAOmsF+Iqg=)
                          5: 3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa (hash: 0KM2apHpvohErBzrhHKqwd9/QyiLiK5zUIRgohsjxcM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 11:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e1:c2:56:b6:ca:ed:d9:97:f4:f5:8e:31:14:8e:27:11:c7:04:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Dec 15 10:05:31 2025 GMT
            Not After : Dec 20 11:47:31 2025 GMT
        Subject: CN=82252724AD8C4AC262A591B88E2107D046F6866A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:a7:16:be:c3:cc:21:8b:ff:e1:e4:10:9c:
                    5f:38:48:9d:14:e8:fb:e0:a1:b1:f7:6f:42:b9:63:
                    79:b2:80:39:63:6e:1d:db:7b:cd:0d:77:e8:23:42:
                    09:74:cb:f7:66:45:bb:b0:ec:ba:a4:af:b8:05:1f:
                    eb:f7:0b:b9:16:04:e9:a5:d5:42:5a:00:9f:e8:d7:
                    d4:c2:ce:37:9b:2e:b0:87:f7:39:b9:97:e4:dd:92:
                    1e:be:a0:d8:7f:bc:1f:5d:ae:e6:85:36:63:61:b5:
                    db:ad:78:3c:7c:da:19:73:93:af:32:cb:68:80:93:
                    87:72:dd:95:2e:67:40:aa:e8:de:18:83:23:7f:e6:
                    0d:61:5f:a2:1b:b0:5c:f5:89:c5:51:7c:93:65:39:
                    08:40:62:f8:bc:8c:d5:c8:20:00:58:7c:86:a1:04:
                    ff:18:a0:db:fb:43:bc:d2:fc:bc:2d:3c:d3:fb:29:
                    d1:b5:c7:4c:b1:2c:aa:a9:91:d9:08:61:1c:3c:5d:
                    c2:5d:ce:24:cd:d0:2f:87:76:12:48:49:e3:57:fb:
                    f6:7a:80:55:7e:84:86:a6:a7:57:52:81:cc:ea:89:
                    56:93:1c:c4:2c:47:c0:d0:6a:d8:b1:e5:f8:24:ab:
                    43:6b:96:a6:ba:6d:a7:fb:21:9e:0e:e5:1f:dd:b9:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:25:27:24:AD:8C:4A:C2:62:A5:91:B8:8E:21:07:D0:46:F6:86:6A
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:53:79:88:ce:7d:69:22:d8:3c:b3:5f:8c:c1:26:02:6e:07:
         ea:ec:14:6a:19:5e:0e:62:bb:86:32:df:55:fe:f4:83:61:2d:
         04:48:f0:f1:4d:6f:97:72:d1:9a:8b:1b:c3:ad:bd:b7:2a:39:
         cb:a0:db:26:7e:76:7c:31:5f:c9:1a:09:29:e9:29:af:b4:21:
         cf:c4:ec:6a:42:27:26:50:76:cc:63:ea:f0:97:62:6e:dd:92:
         c7:e8:5d:17:86:76:4d:41:11:e1:7e:a7:d0:f5:94:c2:6c:9e:
         d3:4b:6a:a0:c3:35:d8:c2:33:44:03:b2:c5:f2:34:4e:9b:d0:
         06:f2:03:29:f4:d4:94:af:2f:8d:37:bc:48:76:dc:35:b0:60:
         64:f3:37:82:05:ec:81:d3:f8:ab:89:94:a9:ee:69:76:a3:56:
         3f:90:55:62:38:88:cc:45:f7:2b:2a:ed:af:84:1f:35:56:b2:
         f2:ac:5d:71:62:21:91:1b:c4:f2:f4:03:c5:60:9a:97:f9:76:
         e2:78:09:13:5c:fd:a6:5e:fd:d9:23:b1:fc:5f:36:f4:1a:19:
         1a:7e:ee:14:65:c7:a1:f9:5d:ef:58:a5:cb:56:36:d2:07:3e:
         57:99:da:d5:94:34:b8:37:7e:68:68:e6:42:6c:f9:b6:cd:ed:
         f8:79:b1:3a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUeOHCVrbK7dmX9PWOMRSOJxHHBDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE0MTJBMDk3RDcyNDg1MUJFOTYxRDA5M0U4NTIxQ0M3
N0E3QjE2MzAeFw0yNTEyMTUxMDA1MzFaFw0yNTEyMjAxMTQ3MzFaMDMxMTAvBgNV
BAMTKDgyMjUyNzI0QUQ4QzRBQzI2MkE1OTFCODhFMjEwN0QwNDZGNjg2NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznacWvsPMIYv/4eQQnF84SJ0U
6PvgobH3b0K5Y3mygDljbh3be80Nd+gjQgl0y/dmRbuw7Lqkr7gFH+v3C7kWBOml
1UJaAJ/o19TCzjebLrCH9zm5l+Tdkh6+oNh/vB9druaFNmNhtduteDx82hlzk68y
y2iAk4dy3ZUuZ0Cq6N4YgyN/5g1hX6IbsFz1icVRfJNlOQhAYvi8jNXIIABYfIah
BP8YoNv7Q7zS/LwtPNP7KdG1x0yxLKqpkdkIYRw8XcJdziTN0C+HdhJISeNX+/Z6
gFV+hIamp1dSgczqiVaTHMQsR8DQatix5fgkq0Nrlqa6baf7IZ4O5R/duZafAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUgiUnJK2MSsJipZG4jiEH0Eb2hmowHwYDVR0j
BBgwFoAUIUEqCX1ySFG+lh0JPoUhzHensWMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMEI0ODM0OTEwNEU0Nzc2ODlGRTM4QTdCOTY3QTUwOTNE
QzgzODhBOTIxNkZDNjE1NjRCM0NBMTRCQTg5Qzg4LzAvMjE0MTJBMDk3RDcyNDg1
MUJFOTYxRDA5M0U4NTIxQ0M3N0E3QjE2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTQxMkEwOTdENzI0ODUxQkU5
NjFEMDkzRTg1MjFDQzc3QTdCMTYzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTBCNDgzNDkxMDRFNDc3Njg5RkUzOEE3Qjk2N0E1MDkzREM4Mzg4QTky
MTZGQzYxNTY0QjNDQTE0QkE4OUM4OC8wLzIxNDEyQTA5N0Q3MjQ4NTFCRTk2MUQw
OTNFODUyMUNDNzdBN0IxNjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBU3mIzn1pItg8s1+MwSYCbgfq
7BRqGV4OYruGMt9V/vSDYS0ESPDxTW+XctGaixvDrb23KjnLoNsmfnZ8MV/JGgkp
6SmvtCHPxOxqQicmUHbMY+rwl2Ju3ZLH6F0XhnZNQRHhfqfQ9ZTCbJ7TS2qgwzXY
wjNEA7LF8jROm9AG8gMp9NSUry+NN7xIdtw1sGBk8zeCBeyB0/iriZSp7ml2o1Y/
kFViOIjMRfcrKu2vhB81VrLyrF1xYiGRG8Ty9APFYJqX+XbieAkTXP2mXv3ZI7H8
Xzb0Ghkafu4UZceh+V3vWKXLVjbSBz5XmdrVlDS4N35oaOZCbPm2ze34ebE6
-----END CERTIFICATE-----
Generated at Wed Dec 17 09:42:15 2025 by rpki-client