This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
File:                     D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft (raw, json)
Hash identifier:          o30V8TL75l497qteuTCr4GLGUYgUObk73JotcfdQ0E8=
Subject key identifier:   B5:BA:4D:91:9D:14:13:3B:FF:E5:E7:A5:D6:D7:7B:31:2F:16:E5:B5
Authority key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B
Certificate issuer:       /CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
Certificate serial:       508E7DC18375B6F6D6C92B856216AE12FD86B72D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
Manifest number:          014A
Signing time:             Wed 10 Dec 2025 06:42:56 +0000
Manifest this update:     Wed 10 Dec 2025 06:37:56 +0000
Manifest next update:     Mon 15 Dec 2025 11:44:56 +0000
Files and hashes:         1: 3139302e39392e39362e302f32302d3234203d3e203532323431.roa (hash: O/46B4/u/eHOyJFeGsRSsHAhdDpnVI0nukknP3HeWiE=)
                          2: 323830333a623230303a3a2f33322d3438203d3e203532323431.roa (hash: 3On1XVpEl3GN2nuqEyHkkVcnUfGWvNLDTKqn000MRF0=)
                          3: D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl (hash: kyvIjl0tCZfhLPpW9C2KYQiU17fZ3CRACzWOZWtUWoc=)
                          4: 323830333a623230303a3a2f33322d3438203d3e203532333636.roa (hash: XKA1MlyxnJrXu8kNyuF9oL4/BFd9LVJobp86M1utvUE=)
                          5: 3139302e39392e39362e302f32302d3234203d3e203532333636.roa (hash: c7Jd2Hfbf5O72dBsGLHG8rBE6OFkyBn9EV8Lu0DYYmc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 08:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8e:7d:c1:83:75:b6:f6:d6:c9:2b:85:62:16:ae:12:fd:86:b7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
        Validity
            Not Before: Dec 10 06:37:56 2025 GMT
            Not After : Dec 15 11:44:56 2025 GMT
        Subject: CN=B5BA4D919D14133BFFE5E7A5D6D77B312F16E5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:24:53:ac:37:37:31:ad:9b:fe:3f:8a:c3:
                    ce:c0:ac:c6:e1:99:7a:65:a2:8a:2c:be:82:be:2d:
                    95:01:2a:cf:22:de:98:62:54:10:5f:57:65:e4:8e:
                    2f:4b:09:4f:70:0e:2a:27:ed:18:78:4d:9c:dc:28:
                    4e:e6:9d:cd:97:97:c9:6a:a8:0c:a3:f2:ba:f3:6d:
                    c2:6a:b1:59:75:9e:fc:19:68:86:dc:d8:ee:85:9d:
                    f2:5b:2e:d0:f6:3e:2a:90:44:28:ca:49:a1:81:67:
                    f8:16:5a:33:63:7c:27:79:e2:79:75:ae:1f:33:b4:
                    47:f3:43:93:42:ca:19:fa:1b:95:6e:35:65:2d:80:
                    11:46:69:da:e3:d5:65:97:f3:d1:7d:c2:72:0a:1c:
                    49:e5:8d:95:58:db:db:c7:17:c8:8e:6e:75:d8:1d:
                    84:65:bc:1d:e7:6d:fc:ae:43:5d:8d:8d:38:f8:74:
                    cd:fd:78:13:d6:02:9d:a2:2b:e8:1e:94:12:95:11:
                    4d:3a:87:ed:2e:07:e0:f9:0d:dc:aa:4c:21:98:3c:
                    6b:ad:59:48:1a:1d:d3:1e:7a:bb:3c:38:fd:07:fd:
                    38:96:4d:30:74:3d:ea:54:0e:2e:4d:fa:1e:e4:d6:
                    21:9b:cc:05:5b:81:f0:e7:b3:6d:01:55:30:43:14:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BA:4D:91:9D:14:13:3B:FF:E5:E7:A5:D6:D7:7B:31:2F:16:E5:B5
            X509v3 Authority Key Identifier:
                keyid:D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:85:fd:a8:b6:c8:72:e5:8a:53:a0:13:20:96:6e:aa:7c:7f:
         3e:f3:56:ad:d5:92:db:af:c1:ac:f5:59:61:b7:c3:aa:25:dd:
         6e:8b:91:4a:a3:8e:e8:7e:d8:5e:f8:cf:5d:1b:07:13:5c:b6:
         cd:7c:06:2c:f5:13:a9:a6:46:3b:ab:33:21:ba:07:b5:8d:02:
         43:a3:7f:3f:60:b4:2b:4f:1a:d9:eb:11:8e:b0:04:0e:84:a8:
         d7:b5:43:a8:1b:83:df:45:60:07:84:c9:86:05:a9:89:32:b3:
         e4:4d:35:cf:30:9a:9b:dd:c6:e6:26:9d:5c:0a:1e:79:4f:bc:
         cc:6e:3c:ff:6c:70:f1:54:9a:4f:0e:3f:0f:20:3d:5b:e4:4c:
         7c:05:92:7a:da:10:43:6e:05:ba:e9:7e:2b:f8:bd:10:4d:1e:
         dd:aa:9f:40:9a:fc:8c:09:3e:63:e7:52:ea:02:02:00:30:fa:
         77:22:58:a3:82:cf:65:95:82:4e:ff:77:bb:7f:f3:8d:d0:b3:
         e5:be:99:79:58:5e:d0:6b:1b:18:d3:39:d0:72:ca:f5:ff:39:
         2e:c7:8f:44:bb:7e:f9:5e:0c:b2:23:74:b0:ae:b9:9d:0c:8c:
         60:a2:7a:6a:48:10:8e:6e:0b:f3:75:50:c2:71:3e:b8:15:c3:
         87:1f:5e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----