This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
File:                     21412A097D724851BE961D093E8521CC77A7B163.mft (raw, json)
Hash identifier:          +LvTWehvomGSITsCZFXlup0a808CmsJ/KWvrYPko0KY=
Subject key identifier:   01:0F:46:52:D4:E7:33:7F:5E:F1:2B:F4:59:C2:0A:B7:87:94:BC:7D
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       2E3B45DF8BE0D5EA398C030A7A59C9F59501DC56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
Manifest number:          0135
Signing time:             Tue 18 Nov 2025 21:21:30 +0000
Manifest this update:     Tue 18 Nov 2025 21:16:30 +0000
Manifest next update:     Sun 23 Nov 2025 20:56:30 +0000
Files and hashes:         1: 323830333a633863303a3a2f33322d3332203d3e20323634373736.roa (hash: MRclYfYyx5c25qVGDjWe7bi9mQ83ApsdpQAOmsF+Iqg=)
                          2: 21412A097D724851BE961D093E8521CC77A7B163.crl (hash: JwyySD2uVvqqL6NFAGGiokjBrLoDgn7HfxB3s/7TSWQ=)
                          3: 3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa (hash: OM7nkYOV8AFf6j6MrkYx0VlnmQOoRMvsIXJgHfikKLg=)
                          4: 3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa (hash: 0KM2apHpvohErBzrhHKqwd9/QyiLiK5zUIRgohsjxcM=)
                          5: 3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa (hash: lYDTn5iGQlXU/kc+dTk7jVowLAQEqyCq36Bb6fOYEs4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Nov 2025 16:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3b:45:df:8b:e0:d5:ea:39:8c:03:0a:7a:59:c9:f5:95:01:dc:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Nov 18 21:16:30 2025 GMT
            Not After : Nov 23 20:56:30 2025 GMT
        Subject: CN=010F4652D4E7337F5EF12BF459C20AB78794BC7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:18:d4:cd:7b:f2:da:34:5b:48:8f:35:eb:57:
                    65:f3:e6:99:9e:0f:75:f6:8f:1e:c2:cc:f4:9b:a9:
                    d0:69:35:c3:06:91:d1:bc:3a:f4:c6:68:77:e2:81:
                    08:ce:7f:3e:d8:74:38:d1:bd:f4:c5:13:f1:b8:ca:
                    6e:e1:56:9b:d7:87:1d:fb:cd:c7:7b:dd:f4:f2:c5:
                    7c:5d:da:71:b5:e7:89:68:9c:11:6a:2f:77:6f:66:
                    03:a2:e3:09:84:f2:d7:53:de:d7:2c:c8:00:1e:7e:
                    6c:3b:80:69:ab:5a:60:d3:29:58:c6:96:f3:43:6b:
                    c0:5b:63:a6:aa:70:66:71:45:57:61:79:34:83:af:
                    69:45:76:c6:70:06:3a:25:e9:d6:9a:5c:2d:dd:73:
                    db:ff:b0:61:0f:bd:4f:a8:52:04:b2:8b:75:c0:97:
                    fe:97:8d:84:38:1a:e9:62:70:c3:1f:96:40:07:26:
                    ee:bc:d2:9c:81:92:d2:89:bf:5b:38:71:24:49:9a:
                    23:46:c9:8a:24:22:b2:25:96:47:de:da:78:8b:24:
                    b7:63:87:d2:df:f1:a8:3e:a9:13:af:9f:fd:6a:ec:
                    c3:32:78:2b:cc:e5:8f:5d:dc:d1:4f:61:de:86:e8:
                    9a:cd:71:88:78:26:dc:f3:35:db:75:1f:71:3f:ae:
                    25:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0F:46:52:D4:E7:33:7F:5E:F1:2B:F4:59:C2:0A:B7:87:94:BC:7D
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3e:4f:e3:1a:1b:7f:7f:85:ab:7d:a1:c0:02:8d:a7:ae:86:
         de:e6:e7:92:35:c7:3c:35:b9:70:72:43:5d:99:c5:36:72:31:
         d6:16:47:3f:f4:70:af:dd:07:24:5c:2c:5a:40:47:02:f3:40:
         76:b6:1b:b8:66:ab:f2:08:03:ed:34:79:76:b3:44:a0:d7:e1:
         3d:e1:98:14:a3:65:5d:02:58:aa:4e:01:78:8d:85:68:c0:d2:
         da:ef:37:40:47:89:8b:c2:ab:eb:6c:e4:b9:47:b0:fd:41:7b:
         45:f1:e7:b2:d5:ca:af:f1:3c:4a:cd:50:15:7e:94:a2:c7:8e:
         8c:c4:1c:59:7c:a6:f2:e9:91:92:18:bb:a0:b9:3a:2d:51:6b:
         35:af:c1:b9:58:62:02:be:4a:7c:a2:ff:9b:93:22:f4:84:03:
         d4:ff:ec:40:97:96:0a:b3:ee:4a:6a:6d:57:9a:45:1c:e5:91:
         d9:d4:23:10:2c:f4:45:3e:21:f7:45:d6:72:c3:af:a1:c4:67:
         6e:b5:ed:62:81:70:a3:02:be:8d:ea:77:9c:86:1d:df:bb:6b:
         aa:eb:b2:d2:69:bb:0c:ff:c2:e9:01:07:12:70:c4:2c:b3:04:
         cd:d1:0c:e5:5b:54:27:ad:84:71:8c:ce:cd:49:9d:ec:f6:d9:
         01:ff:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 23:18:03 2025 by rpki-client