This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
File:                     D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json)
Hash identifier:          NuwX071NT8+/SB1P9Fr+5l4wdLzRhJf5exRhwfUM1VY=
Subject key identifier:   3D:89:64:37:16:24:A7:87:6F:84:2E:57:2F:DE:45:E6:7E:0D:DA:87
Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9
Certificate issuer:       /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
Certificate serial:       458B90B0EA36C5F1A806429A15848CDB8D90F0EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
Manifest number:          0140
Signing time:             Mon 08 Dec 2025 09:55:25 +0000
Manifest this update:     Mon 08 Dec 2025 09:50:25 +0000
Manifest next update:     Sun 14 Dec 2025 03:59:25 +0000
Files and hashes:         1: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: uKlYknlH6eACUcPldvmZgtLq4BGG754AwHjUVlk6W6w=)
                          2: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: mBKhXxYsc1vM9qDvar5UCFnx02/AKC+zK1K7wPk+Ot0=)
                          3: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: USDTRKhfPEmdSWxnfbjrHvUmKoxXeaHPHeZMyAXgdM0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Dec 2025 03:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8b:90:b0:ea:36:c5:f1:a8:06:42:9a:15:84:8c:db:8d:90:f0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
        Validity
            Not Before: Dec  8 09:50:25 2025 GMT
            Not After : Dec 14 03:59:25 2025 GMT
        Subject: CN=3D8964371624A7876F842E572FDE45E67E0DDA87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f6:10:cd:76:86:7c:7c:47:1f:3d:1f:49:6d:
                    da:94:fc:0a:a1:09:ea:f1:50:3f:77:64:36:a7:e1:
                    cc:0d:4e:ad:80:99:ee:63:18:ac:6f:a5:b3:63:88:
                    41:3c:4d:5f:6a:1e:dd:fb:87:a1:3d:86:90:b9:14:
                    55:19:0b:b2:b5:32:df:78:90:09:d4:36:41:94:0d:
                    b0:7c:96:6b:c6:3b:e1:27:39:24:75:7f:dc:08:41:
                    20:67:73:2e:4d:d8:cd:d3:47:b7:2f:46:e1:d3:ef:
                    4d:d1:a5:d7:5e:16:2c:55:aa:a0:46:aa:3c:a1:37:
                    b8:f3:58:12:29:cb:1a:8b:83:9c:91:b4:6f:85:76:
                    1f:3c:e4:30:99:0c:76:22:99:96:a7:97:88:09:4d:
                    90:62:d2:56:21:b5:d4:2d:26:a2:9e:2e:45:2d:ce:
                    d2:80:3c:8b:20:3e:05:d8:ca:39:96:10:d7:0a:ec:
                    d3:1e:a0:fc:b7:c9:11:13:ff:53:c3:8a:58:c0:7d:
                    78:a6:34:3e:a4:e2:d7:04:b3:08:3e:7b:88:76:b3:
                    f2:76:e8:2d:60:d0:8f:7b:3a:49:25:17:1c:3f:35:
                    85:1a:41:95:b0:bb:23:53:9c:31:d7:b7:77:fc:9d:
                    4b:04:7e:2f:e5:f7:d8:60:95:b2:37:cb:29:b3:2f:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:89:64:37:16:24:A7:87:6F:84:2E:57:2F:DE:45:E6:7E:0D:DA:87
            X509v3 Authority Key Identifier:
                keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c0:a2:8e:ab:ed:6b:69:53:80:48:02:fb:7a:49:4a:3a:53:
         95:e5:3a:65:6c:83:e6:10:bc:76:d6:76:29:e0:ec:c4:27:6e:
         89:93:7f:f7:ce:f2:95:9e:d3:2c:54:21:d2:1c:f9:ad:19:62:
         1e:3d:22:de:9d:f6:19:87:17:3f:b4:57:95:f0:5e:84:fd:a8:
         d8:66:e6:57:09:9a:b7:c8:64:16:b3:49:bd:e0:aa:17:26:76:
         4a:ac:22:00:06:fb:2f:89:39:66:86:74:7b:9b:5f:30:7b:c1:
         4d:82:87:7c:01:70:1c:fb:22:15:1b:55:dc:81:19:98:ea:ac:
         12:73:32:b5:78:b3:2d:30:0e:f4:11:c0:0f:f2:03:e9:98:77:
         a4:58:eb:1b:ad:ff:82:1d:a0:d7:6c:92:d1:2b:35:be:c4:ba:
         96:41:a3:c3:ed:0a:b6:f4:d6:f7:98:69:21:57:47:0a:2e:fd:
         4f:0d:8c:1d:b7:fe:c2:e6:bd:7d:97:0b:13:9e:49:34:75:86:
         65:c7:16:a6:04:d3:c9:0d:de:2c:33:58:ea:ba:f2:36:a9:c4:
         7a:07:d7:1f:75:7e:32:9f:6a:36:61:ff:5d:c0:42:5e:4b:9a:
         b1:61:8f:1e:c0:23:ee:3b:f6:fd:83:02:7d:9c:45:11:7c:6c:
         eb:90:62:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:17:24 2025 by rpki-client