This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft
File:                     2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft (raw, json)
Hash identifier:          B7lpLD5wlK4bn8/XvxueXS9ZkVdySXRZpfmTW4/E2xY=
Subject key identifier:   0B:44:77:31:F0:30:BF:8B:90:F5:C3:13:9F:7B:46:2F:B1:81:25:79
Authority key identifier: 21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3
Certificate issuer:       /CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
Certificate serial:       49E121300870372723CC51CDA6FFC9A1F6F330E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft
Manifest number:          0150
Signing time:             Mon 22 Dec 2025 14:53:59 +0000
Manifest this update:     Mon 22 Dec 2025 14:48:59 +0000
Manifest next update:     Sun 28 Dec 2025 13:16:59 +0000
Files and hashes:         1: 2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl (hash: 83YokmgFUHAydkzOIJuXPVUSZ0C9F3vE1PDhyOb9nrQ=)
                          2: 34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa (hash: Geoz43FH3G0KObZ+Q8JC16GEeZbW4v5B53g+jiuxEac=)
                          3: 323830363a3330383a3a2f33322d3332203d3e20323635353536.roa (hash: /kQaBwilv0ri685lZejpdpXCYYogLmMC/nAHy3CMwyc=)
                          4: 34352e3136342e3133362e302f32322d3234203d3e20323635353536.roa (hash: TO7zD2brLMB0uuSWWWYzcTbzCkpCH7sN4nUyUFyKP5k=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Dec 2025 13:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e1:21:30:08:70:37:27:23:cc:51:cd:a6:ff:c9:a1:f6:f3:30:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
        Validity
            Not Before: Dec 22 14:48:59 2025 GMT
            Not After : Dec 28 13:16:59 2025 GMT
        Subject: CN=0B447731F030BF8B90F5C3139F7B462FB1812579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:45:41:ca:fc:9b:2d:61:b1:36:fc:01:e7:
                    97:bc:47:48:13:52:51:bc:da:db:9f:f1:da:c1:0e:
                    9b:5a:4c:8a:7b:7a:75:44:7d:74:40:c5:1b:5f:7c:
                    26:6e:05:d9:88:50:08:ef:da:ca:3d:a5:fd:6d:cf:
                    cc:7b:9c:63:c4:31:3a:33:2f:97:96:93:92:74:92:
                    1f:91:c0:b5:1e:49:ed:7d:54:f9:af:ff:fb:1c:96:
                    6b:50:39:0e:66:8f:e7:d9:58:86:8a:34:32:19:6e:
                    9a:69:96:47:af:54:ec:13:d6:76:76:02:37:23:f4:
                    da:f0:ac:1e:3f:51:c1:ac:c2:23:48:b8:16:1a:2e:
                    af:4d:fd:e4:42:92:54:2c:8c:5f:4a:bf:41:27:f0:
                    08:8e:5d:14:49:6a:45:48:b2:86:cd:cf:bd:31:d8:
                    15:7b:3f:a4:a8:15:0e:c9:b1:9e:93:73:3d:80:24:
                    92:85:60:f0:ec:e7:7c:3c:76:16:94:35:8e:8c:6d:
                    74:53:04:2d:47:6b:db:62:01:fb:9c:02:d8:cd:4c:
                    e2:7c:05:b6:1f:41:29:cd:c9:3e:e1:fc:31:48:d3:
                    b4:6b:c5:19:c4:01:69:96:05:a4:f6:da:85:0b:12:
                    e4:92:88:27:c2:b3:73:48:fd:f0:61:36:e5:23:76:
                    15:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:44:77:31:F0:30:BF:8B:90:F5:C3:13:9F:7B:46:2F:B1:81:25:79
            X509v3 Authority Key Identifier:
                keyid:21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:87:cd:4f:55:cd:9b:1a:5d:f4:78:15:cb:1e:33:47:2d:
         c6:5e:39:7e:c0:d5:82:60:08:b1:18:94:a7:34:83:a0:24:bc:
         9d:1c:c2:28:9e:8b:a8:63:ad:67:70:d9:f1:73:17:91:8d:9a:
         26:10:07:20:a8:c3:0c:3f:9a:c8:ca:28:c1:b0:8e:30:33:29:
         76:c0:d3:6c:ef:58:03:04:53:88:37:b5:1b:70:86:c0:5d:2d:
         d8:29:53:a9:59:4f:33:cc:a7:3c:b6:5d:4c:71:67:3d:26:6f:
         33:81:cf:84:38:85:5d:bb:3b:f7:ae:02:9f:fc:07:14:30:bd:
         b7:b0:49:f0:bc:72:1b:fa:34:48:13:74:16:f5:a3:ae:d2:bf:
         4e:f5:98:a8:ce:02:bf:e8:54:c0:e3:49:bc:7e:f5:6d:de:fb:
         eb:50:e6:df:a0:1c:3b:9d:b8:ad:a6:5e:fe:98:2f:57:a5:3b:
         1d:9d:e4:9c:08:f4:96:83:b1:12:70:7e:4d:43:c1:a1:6a:5e:
         bd:26:32:5d:de:5c:bb:f5:74:f4:2f:62:52:f0:79:c9:f8:57:
         80:22:28:f3:fc:05:ae:b4:cb:1c:c1:e3:6b:f6:a3:4d:e7:56:
         35:23:b0:be:9f:3a:af:08:2c:1c:9e:64:f0:f0:e7:47:97:c9:
         e1:aa:dd:8c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUSeEhMAhwNycjzFHNpv/JofbzMOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE1NUQ4OTlGNTcxMjE1NkQwQjRFODdBM0ZERkM2QTBF
MUEzRkFDMzAeFw0yNTEyMjIxNDQ4NTlaFw0yNTEyMjgxMzE2NTlaMDMxMTAvBgNV
BAMTKDBCNDQ3NzMxRjAzMEJGOEI5MEY1QzMxMzlGN0I0NjJGQjE4MTI1NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+kVByvybLWGxNvwB55e8R0gT
UlG82tuf8drBDptaTIp7enVEfXRAxRtffCZuBdmIUAjv2so9pf1tz8x7nGPEMToz
L5eWk5J0kh+RwLUeSe19VPmv//sclmtQOQ5mj+fZWIaKNDIZbppplkevVOwT1nZ2
Ajcj9NrwrB4/UcGswiNIuBYaLq9N/eRCklQsjF9Kv0En8AiOXRRJakVIsobNz70x
2BV7P6SoFQ7JsZ6Tcz2AJJKFYPDs53w8dhaUNY6MbXRTBC1Ha9tiAfucAtjNTOJ8
BbYfQSnNyT7h/DFI07RrxRnEAWmWBaT22oULEuSSiCfCs3NI/fBhNuUjdhWJAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUC0R3MfAwv4uQ9cMTn3tGL7GBJXkwHwYDVR0j
BBgwFoAUIVXYmfVxIVbQtOh6P9/GoOGj+sMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNDYxRTVBRDJBQjkxNUYwMzc5ODBBODQzRENFMzk5RjA5
MjIzNjFENzFGMTU3QUY4NjJGM0UzOUUwMjhEMzY2LzAvMjE1NUQ4OTlGNTcxMjE1
NkQwQjRFODdBM0ZERkM2QTBFMUEzRkFDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTU1RDg5OUY1NzEyMTU2RDBC
NEU4N0EzRkRGQzZBMEUxQTNGQUMzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTQ2MUU1QUQyQUI5MTVGMDM3OTgwQTg0M0RDRTM5OUYwOTIyMzYxRDcx
RjE1N0FGODYyRjNFMzlFMDI4RDM2Ni8wLzIxNTVEODk5RjU3MTIxNTZEMEI0RTg3
QTNGREZDNkEwRTFBM0ZBQzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5fofNT1XNmxpd9HgVyx4zRy3G
Xjl+wNWCYAixGJSnNIOgJLydHMIonouoY61ncNnxcxeRjZomEAcgqMMMP5rIyijB
sI4wMyl2wNNs71gDBFOIN7UbcIbAXS3YKVOpWU8zzKc8tl1McWc9Jm8zgc+EOIVd
uzv3rgKf/AcUML23sEnwvHIb+jRIE3QW9aOu0r9O9ZiozgK/6FTA40m8fvVt3vvr
UObfoBw7nbitpl7+mC9XpTsdneScCPSWg7EScH5NQ8Ghal69JjJd3ly79XT0L2JS
8HnJ+FeAIijz/AWutMscweNr9qNN51Y1I7C+nzqvCCwcnmTw8OdHl8nhqt2M
-----END CERTIFICATE-----
Generated at Wed Dec 24 16:41:22 2025 by rpki-client