This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
File:                     21412A097D724851BE961D093E8521CC77A7B163.mft (raw, json)
Hash identifier:          xnE8lPnSBWYi0ug36oAj4wH9mDH+S/ykHs8zBR3p+ZA=
Subject key identifier:   1A:54:B3:94:0E:E0:04:09:11:DE:25:94:01:D6:77:6B:07:06:34:49
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       04C2FAF8533D1E3F4EBCA9D9AFF5408014A0E81C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
Manifest number:          0138
Signing time:             Tue 25 Nov 2025 18:20:49 +0000
Manifest this update:     Tue 25 Nov 2025 18:15:49 +0000
Manifest next update:     Sun 30 Nov 2025 23:49:49 +0000
Files and hashes:         1: 3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa (hash: 0KM2apHpvohErBzrhHKqwd9/QyiLiK5zUIRgohsjxcM=)
                          2: 323830333a633863303a3a2f33322d3332203d3e20323634373736.roa (hash: MRclYfYyx5c25qVGDjWe7bi9mQ83ApsdpQAOmsF+Iqg=)
                          3: 3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa (hash: OM7nkYOV8AFf6j6MrkYx0VlnmQOoRMvsIXJgHfikKLg=)
                          4: 21412A097D724851BE961D093E8521CC77A7B163.crl (hash: IyXrt8zkCmJgMetZE4MJMn2O+RyUbtiIvRNUYiNgzPQ=)
                          5: 3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa (hash: lYDTn5iGQlXU/kc+dTk7jVowLAQEqyCq36Bb6fOYEs4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Nov 2025 12:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c2:fa:f8:53:3d:1e:3f:4e:bc:a9:d9:af:f5:40:80:14:a0:e8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Nov 25 18:15:49 2025 GMT
            Not After : Nov 30 23:49:49 2025 GMT
        Subject: CN=1A54B3940EE0040911DE259401D6776B07063449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ee:de:58:4c:86:5b:04:30:3e:ea:f7:b6:39:
                    0b:05:f0:62:93:dd:b1:39:99:f6:35:90:32:15:03:
                    f9:2e:fe:ad:dd:57:14:79:6a:44:3f:16:8a:37:0b:
                    3c:b6:86:e4:ba:e4:62:50:88:3c:03:38:45:2b:be:
                    78:64:33:9d:78:83:95:dd:3f:79:bc:a1:2d:15:c4:
                    66:de:3b:f5:df:e3:f3:5b:b8:8d:04:77:65:57:84:
                    8c:2d:0c:22:64:e3:be:39:d9:9b:ca:53:92:c4:4f:
                    ee:45:de:4d:02:2c:a1:ea:f5:37:b6:78:1e:e4:71:
                    f6:e8:f3:80:01:f7:5f:6c:9d:72:b2:45:0c:93:21:
                    99:8c:71:a2:d8:56:77:df:51:4a:90:bc:42:a0:95:
                    16:ef:52:a1:05:97:05:3d:0f:4f:58:3e:e9:c5:e4:
                    f7:a8:6c:78:b1:dd:14:54:91:df:2b:b6:03:0c:54:
                    76:7b:6e:dc:0b:f1:74:42:fc:f3:4f:aa:84:82:51:
                    d8:05:97:60:55:5a:79:e3:35:28:7e:a8:0a:c8:e4:
                    72:e2:a9:20:b5:ae:fb:ae:5a:aa:a6:d1:da:30:06:
                    12:3a:f3:23:e0:f0:34:2b:11:a2:a9:9d:10:db:5e:
                    cb:fc:01:7b:4d:6a:5b:c7:d8:02:df:49:33:40:96:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:54:B3:94:0E:E0:04:09:11:DE:25:94:01:D6:77:6B:07:06:34:49
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c7:03:e7:54:ee:de:4b:40:6d:77:57:a6:c5:d6:78:ac:9a:
         85:22:1f:c0:d3:82:56:c9:60:29:69:7f:97:07:7a:70:3b:19:
         cc:48:73:25:f3:dc:f8:0c:e6:41:80:77:69:1d:01:6b:a4:1e:
         d1:cb:7a:98:d2:eb:07:16:9c:d0:ab:9d:63:28:9a:d0:5a:ca:
         3d:5a:c5:5d:10:41:28:f9:ac:0d:a7:10:61:34:02:37:fa:04:
         08:6b:d1:94:97:f2:88:44:7c:f2:ef:80:3f:55:33:cc:34:ab:
         98:22:a5:f8:50:e2:1b:8a:54:1b:27:5d:ce:11:b0:4d:61:71:
         d7:fe:c1:5c:49:70:e3:a2:42:60:26:d2:d6:35:f6:6a:98:32:
         3c:e8:80:f0:43:fa:fd:f9:4a:3a:19:0f:a5:96:59:db:c7:73:
         4f:c0:a5:56:5e:e6:00:70:9b:39:b5:82:b3:2c:c5:73:c0:e1:
         a6:2d:fc:0b:11:a5:74:a3:78:e4:24:85:ef:8d:87:12:8a:39:
         7c:6c:e2:36:25:77:f5:84:4b:f3:6c:aa:9a:f6:98:6d:5c:13:
         2c:2f:cb:b6:f1:04:ed:9b:c9:57:50:fe:7a:75:c4:79:91:fa:
         ce:64:5e:98:b7:3a:07:b4:16:e7:da:19:09:d4:d7:c8:5d:ad:
         15:3e:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----