This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft
File:                     643132A8FE5198797F39AACB314EC77EE8C6D84D.mft (raw, json)
Hash identifier:          hXC4jNBQqgCUHycwNRbarAxyUqkL3JDAnPSSPHrLGH8=
Subject key identifier:   79:EB:6B:21:E4:27:5A:42:1A:22:AD:1C:FD:27:AB:9B:7D:4B:1B:5A
Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
Certificate issuer:       /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Certificate serial:       27073CFF56F9C716C790ED55BAEFD94A5C19E7CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft
Manifest number:          0142
Signing time:             Sun 23 Nov 2025 06:26:28 +0000
Manifest this update:     Sun 23 Nov 2025 06:21:28 +0000
Manifest next update:     Fri 28 Nov 2025 16:03:28 +0000
Files and hashes:         1: 34352e3137302e3133342e302f32332d3234203d3e20323635353534.roa (hash: RIgb5icKuHMz9C3jXNywXMn33mp77AfaOYFQYhJomJ8=)
                          2: 643132A8FE5198797F39AACB314EC77EE8C6D84D.crl (hash: w30TDqqtvtPFnwt2+fEv2CCzPIUKIBTa21S8Twf9iRg=)
                          3: 323830333a616261303a323330303a3a2f34382d3438203d3e20323635353534.roa (hash: vz29HZXSnhGXB4jcgjq6M5wxxZl9dHu3+FggQoHspFM=)
                          4: 34352e3137302e3133332e302f32342d3234203d3e20313937393931.roa (hash: 5iStZFuCiYEptjp5cVLWQULMDU2BuSicuIAhGlXBvrs=)
                          5: 323830333a616261303a323030303a3a2f33392d3430203d3e20323635353534.roa (hash: 2Ql7e3hVwH0F3NK+rxzouDkq/Ai85EN7SZR6mWD136o=)
                          6: 323830333a616261303a323230303a3a2f34302d3430203d3e20323635353534.roa (hash: XrwE8xbBK/Ge9x8sWJ5WSN7CFyZ8q9OX3U9qEgzihjw=)
                          7: 34352e3137302e3133322e302f32342d3234203d3e20313937393931.roa (hash: 617gKf8X0ngkdp01rN8fOsSiqnDA7sAMPBNzNtCcVpM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Nov 2025 16:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:07:3c:ff:56:f9:c7:16:c7:90:ed:55:ba:ef:d9:4a:5c:19:e7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
        Validity
            Not Before: Nov 23 06:21:28 2025 GMT
            Not After : Nov 28 16:03:28 2025 GMT
        Subject: CN=79EB6B21E4275A421A22AD1CFD27AB9B7D4B1B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:78:ef:66:20:97:60:43:ad:8e:54:21:a0:14:
                    90:24:28:f2:fb:28:8d:16:44:62:f8:5c:7b:3a:40:
                    97:18:bf:14:fb:d5:71:6e:cc:a1:23:ac:39:37:b9:
                    43:3e:ef:d7:29:a7:c4:ab:f6:56:82:11:e0:6c:a9:
                    49:21:79:96:e1:86:0b:81:d2:4a:f0:69:88:14:c7:
                    6a:48:53:43:5e:4a:2f:a2:98:0f:e8:23:2b:7b:39:
                    fc:3b:69:a2:40:ab:37:04:d2:f8:c0:f1:c9:47:72:
                    d4:bb:8b:59:de:09:8e:bb:b9:64:19:7f:ce:ed:ec:
                    01:88:c6:fc:a6:b8:f3:c8:63:45:ad:49:de:b2:92:
                    c2:8f:af:d3:9d:3b:0e:30:df:e2:d0:53:ab:e7:96:
                    9e:14:a9:aa:6a:5d:30:c8:71:62:77:7f:93:92:7b:
                    a7:8e:01:8b:c2:df:36:65:2c:8f:98:9a:36:01:12:
                    d0:db:26:97:d8:f4:f9:62:e5:77:62:27:75:69:50:
                    dd:7e:f7:6f:3e:a0:18:c0:c7:24:65:02:6d:13:87:
                    ef:8a:5c:a5:b4:09:bc:e6:a4:be:40:16:65:f5:17:
                    9a:ec:18:2b:a6:23:33:f8:1d:85:20:73:d8:56:96:
                    78:dd:d3:41:d5:cf:f2:c1:d2:1c:da:b0:cc:3b:c9:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EB:6B:21:E4:27:5A:42:1A:22:AD:1C:FD:27:AB:9B:7D:4B:1B:5A
            X509v3 Authority Key Identifier:
                keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:17:62:e5:fd:c8:7c:4b:7f:48:02:96:e8:8b:4f:1a:1f:ed:
         4a:a0:90:4c:94:71:f1:9b:61:30:59:1b:01:b7:c6:4e:ec:a0:
         6c:28:0a:83:ba:e2:ff:e8:74:47:fd:bb:80:88:cc:6a:cb:25:
         3c:67:9c:9b:2f:a2:d7:e0:d2:f9:8c:3b:0a:db:6d:15:92:ba:
         76:46:96:7c:7f:e9:f4:ee:f3:81:b4:58:97:16:c2:98:ab:2d:
         21:2d:a4:3d:b7:ae:5a:3f:d9:23:cc:6c:ba:5f:a5:86:7c:21:
         96:cf:1b:16:ec:5b:9a:35:06:5d:3c:e1:18:66:d1:c0:dc:ca:
         61:10:7e:9d:59:52:97:d5:78:5f:e9:69:8d:a7:ad:bf:e1:04:
         0f:25:8a:e8:27:f0:73:f8:52:2e:cb:66:7f:3e:22:fc:00:ac:
         ca:17:c1:3c:96:1d:e0:26:3d:72:c0:4e:04:af:b2:be:80:37:
         79:59:7c:e6:1e:de:2b:ef:b1:c5:11:60:6a:c6:2f:1c:35:dd:
         ec:71:b0:cd:2b:63:36:ed:e0:68:68:b1:89:9d:7d:3f:13:09:
         5d:f5:dd:71:4c:ab:27:ad:cd:19:79:04:be:b2:74:24:83:21:
         67:6c:63:d6:9d:9a:27:4a:17:a2:7c:8c:ad:b4:5c:7c:da:a3:
         87:28:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 12:26:56 2025 by rpki-client