This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.mft
File:                     09A3AC3476BC01A1345B72745540D0D3983BC32E.mft (raw, json)
Hash identifier:          lyIYk4B7+x24BWs/0PJ/EycjKfhT2C0IAwnxyROxNxA=
Subject key identifier:   EE:1D:1B:65:99:8B:57:4E:A9:DA:38:70:35:93:97:A9:B6:05:5C:5C
Authority key identifier: 09:A3:AC:34:76:BC:01:A1:34:5B:72:74:55:40:D0:D3:98:3B:C3:2E
Certificate issuer:       /CN=09A3AC3476BC01A1345B72745540D0D3983BC32E
Certificate serial:       52AF61788241ACA833FD2F5E489A431BA1DFF9C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.mft
Manifest number:          0146
Signing time:             Sat 20 Dec 2025 20:11:29 +0000
Manifest this update:     Sat 20 Dec 2025 20:06:29 +0000
Manifest next update:     Fri 26 Dec 2025 20:10:29 +0000
Files and hashes:         1: 09A3AC3476BC01A1345B72745540D0D3983BC32E.crl (hash: ncGkSq796LjQQ0r012wyySjelh+5ZpGY2bZWzdywLL4=)
                          2: 323830333a363336303a3a2f33322d3332203d3e20323639373933.roa (hash: gancjaKKGr/TtBogMP6cJlcFdJQ/Xz9D2smNFk3y23Q=)
                          3: 34352e3138342e38342e302f32322d3234203d3e20323639373933.roa (hash: SDJonh48aJeZtXxUPo+95dBlk1pWXBa9WM2Ou89cXnA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 20:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:af:61:78:82:41:ac:a8:33:fd:2f:5e:48:9a:43:1b:a1:df:f9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A3AC3476BC01A1345B72745540D0D3983BC32E
        Validity
            Not Before: Dec 20 20:06:29 2025 GMT
            Not After : Dec 26 20:10:29 2025 GMT
        Subject: CN=EE1D1B65998B574EA9DA3870359397A9B6055C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:6b:06:74:89:31:47:c7:4a:8b:bd:6c:e3:
                    4f:27:1f:d2:ec:74:15:f6:ad:02:13:b7:9a:38:79:
                    bb:25:8d:ef:14:1a:f7:9a:0c:59:da:cf:85:6e:3b:
                    02:ed:86:26:68:04:3e:0d:93:e5:c4:bb:64:e5:c0:
                    80:44:84:34:e1:4b:b1:57:f9:16:43:91:14:5f:39:
                    56:cf:fb:2d:f0:4c:a4:82:14:b5:77:eb:04:b4:b7:
                    cf:5b:07:87:41:7f:b7:82:3f:75:f6:5e:60:9e:19:
                    d6:33:05:30:b5:8b:66:7e:b1:dd:08:5d:dd:81:43:
                    d8:05:e7:70:cc:8f:bc:9b:dd:db:f3:eb:0a:e5:c9:
                    10:cf:9c:a7:c5:e3:89:bc:fc:0c:04:ec:1f:5b:fa:
                    e6:d1:8d:27:e8:c4:47:40:2e:b6:ec:c8:2e:9f:a5:
                    32:ee:e0:8c:47:51:27:08:63:f8:fb:fa:28:ab:3b:
                    fb:dd:86:65:80:ed:92:e0:f6:f5:69:bb:0a:b7:13:
                    b7:17:df:cc:8a:31:b7:da:62:9f:75:92:09:7b:85:
                    5b:80:a0:29:bd:83:a5:f2:de:fe:ba:8e:cf:a3:de:
                    b9:5f:32:ec:1d:d3:56:17:97:58:71:9b:79:72:93:
                    88:2b:ba:86:2c:f3:56:48:16:9c:bb:0c:43:58:9a:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1D:1B:65:99:8B:57:4E:A9:DA:38:70:35:93:97:A9:B6:05:5C:5C
            X509v3 Authority Key Identifier:
                keyid:09:A3:AC:34:76:BC:01:A1:34:5B:72:74:55:40:D0:D3:98:3B:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:bd:6d:64:72:81:6d:3c:ec:f5:4e:7c:8d:75:7a:2b:3c:e4:
         ba:0b:3d:f8:04:ea:35:c0:dc:60:91:de:6c:d4:a7:cb:73:f7:
         57:8c:0c:52:0e:1a:ca:50:f2:79:54:e9:97:03:49:c0:49:19:
         2b:a1:3e:31:88:06:8a:05:8f:10:db:05:b3:f6:64:2f:6a:48:
         50:7b:9c:97:4c:d2:1a:3c:3c:2f:ea:9b:f3:ae:a6:9c:98:10:
         0c:63:52:0c:ce:3b:db:8a:b4:7d:ad:ff:48:12:6a:7e:a6:ae:
         9c:66:52:5e:e2:27:32:c1:e9:5e:d1:49:93:eb:a1:92:7a:5d:
         64:e3:d8:fa:8e:74:a0:1b:f9:33:7e:ee:c3:2e:6c:a5:62:06:
         2a:b5:75:d2:ac:02:20:e9:41:0d:87:2e:66:12:b8:b2:cf:bd:
         23:ac:da:6f:8f:87:ba:58:01:96:37:fd:97:05:a0:aa:92:c0:
         57:c4:7e:80:a4:ed:37:ab:3b:61:97:bd:29:66:56:1f:4d:75:
         dd:20:91:76:bc:7a:06:bd:7d:20:73:d4:05:ff:6c:92:01:51:
         2d:f9:f3:4a:47:49:93:61:63:02:bd:af:7a:34:60:be:2b:23:
         9f:d4:01:c0:7c:7e:7f:d7:c7:da:35:2a:9c:d1:c2:39:be:d6:
         31:3c:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----