This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
File:                     21412A097D724851BE961D093E8521CC77A7B163.mft (raw, json)
Hash identifier:          NAJN5VCbWtBUuIdrvnPpmqtydX+gctfBtHrbcjIMy18=
Subject key identifier:   12:19:2E:D4:18:B5:EC:6D:81:46:05:E4:E9:A4:3B:DA:3A:7B:C6:78
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       6D02F1CA7B4FAAB6B9F196568CD4B11C7FFDB69F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
Manifest number:          014A
Signing time:             Tue 30 Dec 2025 05:58:26 +0000
Manifest this update:     Tue 30 Dec 2025 05:53:26 +0000
Manifest next update:     Sun 04 Jan 2026 11:58:26 +0000
Files and hashes:         1: 3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa (hash: OM7nkYOV8AFf6j6MrkYx0VlnmQOoRMvsIXJgHfikKLg=)
                          2: 21412A097D724851BE961D093E8521CC77A7B163.crl (hash: UPuxAG/8jIsdXJMYQizNxQ9xCdhVUsmvy9ieiD4ekXs=)
                          3: 3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa (hash: 0KM2apHpvohErBzrhHKqwd9/QyiLiK5zUIRgohsjxcM=)
                          4: 323830333a633863303a3a2f33322d3332203d3e20323634373736.roa (hash: MRclYfYyx5c25qVGDjWe7bi9mQ83ApsdpQAOmsF+Iqg=)
                          5: 3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa (hash: lYDTn5iGQlXU/kc+dTk7jVowLAQEqyCq36Bb6fOYEs4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 Jan 2026 11:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:02:f1:ca:7b:4f:aa:b6:b9:f1:96:56:8c:d4:b1:1c:7f:fd:b6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Dec 30 05:53:26 2025 GMT
            Not After : Jan  4 11:58:26 2026 GMT
        Subject: CN=12192ED418B5EC6D814605E4E9A43BDA3A7BC678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0a:5f:fc:3b:45:1e:ac:2e:fc:a0:79:47:38:
                    67:c5:7f:08:f8:79:1b:22:ac:23:ee:23:fb:8d:48:
                    94:a2:29:f4:cb:58:e7:e8:65:29:db:91:29:ef:88:
                    d7:bc:9d:98:e7:54:7a:1d:22:d9:ad:15:77:6c:c2:
                    cd:b2:b8:77:d2:35:f1:00:52:e0:e9:26:71:73:5c:
                    de:42:6c:05:96:12:d6:49:39:b2:ef:89:42:2b:f7:
                    fe:57:16:4a:a4:0f:6a:58:c9:53:48:43:a7:72:37:
                    51:ac:9b:d4:81:aa:ed:fc:79:38:db:32:e0:f4:6b:
                    8e:31:66:5a:17:5d:d0:e2:68:c6:c0:fd:e6:dd:33:
                    9c:df:92:cd:ea:f8:ee:c3:a1:d5:7e:a4:7f:5d:09:
                    1c:0d:14:6e:00:fa:ed:80:14:b7:06:71:5f:3b:dc:
                    b9:2a:ab:e2:13:37:59:27:6a:90:c2:ef:02:d9:54:
                    28:5f:f2:e3:23:4b:ae:b5:2a:22:d8:17:91:a5:36:
                    a0:6f:56:54:05:b3:c1:2b:fb:3d:72:ea:78:12:db:
                    ba:e7:aa:ad:f0:31:ad:e3:5c:3d:5e:b4:eb:f7:57:
                    8e:96:b3:31:d1:56:31:d7:13:71:d3:d8:11:c6:b0:
                    7b:16:d9:d2:a0:80:3f:a8:83:2f:95:b2:86:41:61:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:19:2E:D4:18:B5:EC:6D:81:46:05:E4:E9:A4:3B:DA:3A:7B:C6:78
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c4:9c:4d:c5:7c:07:ae:90:6f:1c:7e:ec:b8:06:16:77:b4:
         73:dd:c2:fe:43:c5:2a:88:b8:fb:d4:ea:7a:7f:54:97:3b:48:
         b1:99:79:13:50:47:d6:a8:a3:de:e9:5a:ab:77:89:79:78:2b:
         98:07:8c:92:88:95:84:50:26:d7:74:6e:d9:70:bc:39:05:e5:
         1e:2a:4b:79:41:7e:e1:eb:c8:95:ea:49:f7:19:6f:0a:07:f4:
         b6:21:c0:6e:5b:ee:16:e3:8e:c4:d9:98:e5:06:32:4b:a9:f9:
         f8:e4:84:fb:8a:03:8d:64:64:e0:25:5f:2e:be:02:07:e6:92:
         9f:59:a1:ba:8d:d1:1a:de:90:bf:d3:1d:f0:cc:76:db:a6:08:
         e3:54:8f:e0:67:e2:5b:09:ce:88:0d:6b:2d:df:b4:a8:17:51:
         e3:d8:6c:db:4d:b2:83:61:b6:66:2d:6b:b5:6f:e5:be:29:5f:
         21:75:0e:3a:4a:00:04:5c:1a:61:0f:5a:b1:75:eb:ab:77:4b:
         75:df:e2:69:a1:33:c7:52:7a:a6:17:ed:4e:64:64:41:63:65:
         5b:db:d8:f0:59:a1:c0:4f:f9:7d:aa:57:b8:a1:62:dc:6a:1c:
         2f:16:29:23:82:b2:80:c7:c5:c2:c7:bb:23:8a:a4:c5:6e:b8:
         bd:e8:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 06:21:59 2026 by rpki-client