This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft
File:                     643132A8FE5198797F39AACB314EC77EE8C6D84D.mft (raw, json)
Hash identifier:          iMxtT+scgAGm5zxF4MyoYJ6JdurbUzOwRZ9Fn/IkArY=
Subject key identifier:   7D:10:3B:6F:92:4D:80:EC:0A:23:11:E5:2F:B0:E2:02:79:C4:C5:CD
Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
Certificate issuer:       /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Certificate serial:       2126C7AD89933F8403B2C1A8835B666C9F89A1CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft
Manifest number:          0141
Signing time:             Sat 22 Nov 2025 04:11:52 +0000
Manifest this update:     Sat 22 Nov 2025 04:06:52 +0000
Manifest next update:     Wed 26 Nov 2025 06:23:52 +0000
Files and hashes:         1: 643132A8FE5198797F39AACB314EC77EE8C6D84D.crl (hash: OfNu7NuxEujKdIWxqZbBURTZvc1Kne4RNJOgv0NW+24=)
                          2: 323830333a616261303a323030303a3a2f33392d3430203d3e20323635353534.roa (hash: 2Ql7e3hVwH0F3NK+rxzouDkq/Ai85EN7SZR6mWD136o=)
                          3: 34352e3137302e3133332e302f32342d3234203d3e20313937393931.roa (hash: 5iStZFuCiYEptjp5cVLWQULMDU2BuSicuIAhGlXBvrs=)
                          4: 323830333a616261303a323330303a3a2f34382d3438203d3e20323635353534.roa (hash: vz29HZXSnhGXB4jcgjq6M5wxxZl9dHu3+FggQoHspFM=)
                          5: 323830333a616261303a323230303a3a2f34302d3430203d3e20323635353534.roa (hash: XrwE8xbBK/Ge9x8sWJ5WSN7CFyZ8q9OX3U9qEgzihjw=)
                          6: 34352e3137302e3133322e302f32342d3234203d3e20313937393931.roa (hash: 617gKf8X0ngkdp01rN8fOsSiqnDA7sAMPBNzNtCcVpM=)
                          7: 34352e3137302e3133342e302f32332d3234203d3e20323635353534.roa (hash: RIgb5icKuHMz9C3jXNywXMn33mp77AfaOYFQYhJomJ8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Nov 2025 06:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:26:c7:ad:89:93:3f:84:03:b2:c1:a8:83:5b:66:6c:9f:89:a1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
        Validity
            Not Before: Nov 22 04:06:52 2025 GMT
            Not After : Nov 26 06:23:52 2025 GMT
        Subject: CN=7D103B6F924D80EC0A2311E52FB0E20279C4C5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:37:67:2e:43:8b:e3:66:b7:54:26:cb:b3:
                    f3:82:74:9c:d1:d2:06:a4:22:88:bc:eb:b8:0d:5a:
                    eb:44:c4:e5:c2:f5:f0:97:38:fd:05:f3:0f:f7:56:
                    d7:39:be:b9:fb:e3:66:70:ba:45:db:cf:56:33:64:
                    49:cf:19:06:8c:21:08:26:70:e3:a4:ef:4a:68:e8:
                    c4:3d:07:65:aa:70:52:71:71:1c:be:af:18:bc:61:
                    2c:40:db:6c:17:f4:ee:31:16:d2:0a:69:7b:2b:e4:
                    5e:c6:e6:f6:9b:de:8c:be:4b:25:38:5d:30:c3:bf:
                    38:d3:5d:f8:a0:c8:f3:40:05:61:99:b5:69:38:ab:
                    f0:72:f2:43:aa:e6:b1:3e:f3:77:17:62:4d:8b:db:
                    19:0b:cc:ad:06:5a:61:48:4d:e8:3f:6c:e5:ff:0d:
                    52:40:95:3f:b5:96:ce:ad:9b:f8:fb:d1:8d:c0:42:
                    3c:b4:f6:55:fb:c6:e8:99:48:a3:0f:0b:13:db:b2:
                    08:77:3a:ab:28:bd:9d:d8:f8:6a:e2:61:59:e9:e7:
                    18:21:c4:f4:38:49:a6:14:a8:28:3f:74:35:00:83:
                    64:e2:41:ff:c4:f6:8c:e8:2d:03:a0:0f:64:d3:52:
                    62:4f:98:9a:0d:60:b3:5c:03:41:ec:c7:19:21:f4:
                    64:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:10:3B:6F:92:4D:80:EC:0A:23:11:E5:2F:B0:E2:02:79:C4:C5:CD
            X509v3 Authority Key Identifier:
                keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b8:f3:90:32:aa:a1:ac:12:00:08:ae:a3:ce:1e:6e:7f:48:
         d7:d9:44:3b:61:d9:ee:9d:e7:79:fb:ba:00:79:5b:14:a6:a2:
         8b:c3:7d:34:3f:95:2e:96:82:9e:8e:19:f9:2f:61:b9:76:49:
         54:38:11:59:3b:48:d2:71:32:a4:43:45:78:ea:de:7c:08:16:
         7d:ab:47:f9:54:ef:67:f3:fd:f4:e1:2f:5a:d7:c4:75:d1:1c:
         0a:7e:3e:00:e5:bc:20:cd:c4:44:55:cf:f7:73:c6:e6:6e:81:
         93:d3:34:9f:20:89:5b:58:cf:84:27:2d:e2:5b:7b:95:6a:7d:
         5d:6b:e1:42:af:e0:a8:e7:8c:36:cf:1e:4e:46:2f:98:23:51:
         de:48:0c:b0:b5:68:0e:b6:4f:8d:c0:69:4a:f7:00:1f:02:c7:
         1d:ec:f8:78:90:4a:c9:7b:84:fc:6d:8a:e6:f6:cd:ea:1f:2b:
         30:55:0c:ea:49:1c:09:e8:73:78:d7:f0:97:3e:db:cc:cc:9a:
         2d:7d:c0:b0:66:9d:fc:45:99:d2:69:c1:65:8a:c9:2f:fd:82:
         f2:f9:7f:3c:2f:03:04:9c:2e:80:74:f3:21:6f:47:03:e0:47:
         9f:98:db:af:a2:ad:c9:63:9c:28:19:28:2a:f3:02:f4:36:ce:
         aa:50:f2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 09:07:56 2025 by rpki-client