This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft
File:                     591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft (raw, json)
Hash identifier:          8frxoD0Zf3z3QwqoQIvrPIIOYLeUu0h0a744gf5TBuw=
Subject key identifier:   F6:D4:23:3E:8F:1F:BE:D5:40:0F:DC:19:F1:C7:E2:73:EB:04:10:F8
Authority key identifier: 59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD
Certificate issuer:       /CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
Certificate serial:       03054910103906CB4D870F025455A40558FC8EC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft
Manifest number:          0140
Signing time:             Sun 07 Dec 2025 04:47:54 +0000
Manifest this update:     Sun 07 Dec 2025 04:42:54 +0000
Manifest next update:     Fri 12 Dec 2025 23:39:54 +0000
Files and hashes:         1: 3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa (hash: b8YxkqvS07Ug13v89N0G+aLK9LtmW/IuuGlyZaiXJwU=)
                          2: 591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl (hash: rB8KcbmXt+7jy65/HX00LTgNhmD4EkiS8FC5CPbxe+w=)
                          3: 323830333a626138303a3a2f33322d3634203d3e20323632393332.roa (hash: UxpSUdmfAiB3jZVXZ8+WzGX+9hMfhqHatLQHkEAcSvQ=)
                          4: 3137302e3135302e36342e302f32322d3234203d3e20323632393332.roa (hash: rIjmCU70T43g9YBmzRouwRIY2PleZjtXLiPcyJxg7hc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Dec 2025 10:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:05:49:10:10:39:06:cb:4d:87:0f:02:54:55:a4:05:58:fc:8e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
        Validity
            Not Before: Dec  7 04:42:54 2025 GMT
            Not After : Dec 12 23:39:54 2025 GMT
        Subject: CN=F6D4233E8F1FBED5400FDC19F1C7E273EB0410F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:91:bd:c1:c2:ed:2e:58:2d:cb:0e:23:32:
                    77:9b:17:f7:b4:51:1e:37:75:a2:fe:97:59:0f:cc:
                    e8:1e:d8:fb:5f:2a:e4:58:37:64:12:d8:93:22:8f:
                    02:5c:62:6c:89:78:7c:ee:14:06:3a:3f:62:3e:bb:
                    67:95:4c:ed:33:12:c4:18:97:28:67:2d:a4:49:f3:
                    b5:25:db:a8:a6:1b:5c:82:18:49:a9:b6:b4:de:96:
                    84:4f:ff:85:13:d6:e0:2a:8e:67:30:a7:55:e2:33:
                    68:dc:dd:4e:59:d6:16:9e:03:00:eb:29:30:4a:57:
                    01:af:58:5f:68:e9:f8:96:7b:6f:71:c9:bb:1c:86:
                    ea:05:d8:80:ab:fc:5b:b2:4c:2a:f6:d6:c6:c0:33:
                    74:2f:1f:a7:67:79:f0:cb:30:0d:6f:c8:8e:28:6c:
                    c5:1c:92:bd:1d:1f:39:d7:ed:b8:8d:36:16:3e:ee:
                    a3:00:b1:37:72:dc:7e:59:a0:ea:da:e4:3c:16:f3:
                    ba:eb:bc:5c:82:51:3c:95:70:f5:55:dd:e2:66:d2:
                    de:e7:0b:5e:d7:96:6b:a9:84:b5:71:3d:04:72:f5:
                    8d:e8:9c:8d:44:72:70:d8:b7:48:e5:40:60:83:03:
                    ed:4a:3b:c3:48:fe:db:11:50:04:b8:1d:d1:db:32:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D4:23:3E:8F:1F:BE:D5:40:0F:DC:19:F1:C7:E2:73:EB:04:10:F8
            X509v3 Authority Key Identifier:
                keyid:59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:43:9a:50:ea:a5:0a:38:f2:1e:87:70:5c:53:11:08:3b:cf:
         7d:60:d6:95:24:35:e3:6f:5b:b4:67:0a:e5:36:2c:32:8d:3d:
         51:72:ea:71:ad:d2:05:04:bc:03:a3:54:38:d9:e4:44:14:dc:
         5a:32:4c:6b:f3:12:7b:0f:25:0b:dc:35:02:e5:0c:4e:9b:6a:
         56:d6:ff:03:56:26:0e:04:e9:6c:78:07:ad:95:71:86:cc:fa:
         4e:60:b6:2a:f0:84:2a:5a:84:38:9d:11:10:78:91:54:2b:36:
         23:74:4b:af:7b:2a:e8:45:41:ac:0c:77:e6:b8:1e:15:16:ca:
         a0:0f:42:e7:9c:44:54:fa:fa:68:a5:67:64:45:ad:2c:75:70:
         05:30:24:eb:53:ba:a7:ea:ce:15:08:aa:e5:83:84:ff:fc:a3:
         91:2e:3a:bc:b1:fd:ca:03:ef:45:82:63:ca:23:97:0c:07:dd:
         c7:ca:1d:5e:f6:71:f1:5e:76:44:0f:de:97:53:bb:94:ab:57:
         85:1a:59:dd:47:26:f7:3a:6c:44:bc:26:37:74:ba:be:df:9f:
         d9:fb:59:34:a0:4a:60:e4:51:21:cc:a5:29:fe:f4:48:37:10:
         31:ad:c4:40:c3:dd:7f:da:ab:4e:f8:f2:1e:bd:dc:e4:59:1a:
         0e:91:52:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----