This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
File:                     991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft (raw, json)
Hash identifier:          eZRHXkxBzTUGQmwh4ojZIklKe4k3s/ME0qmU6wK/I0o=
Subject key identifier:   35:F0:38:BB:76:11:F3:2B:CD:C1:25:D7:51:35:89:EC:75:B1:8D:ED
Authority key identifier: 99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3
Certificate issuer:       /CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
Certificate serial:       2BADE712EA574E474538A93769BDF1C6E062D332
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
Manifest number:          013D
Signing time:             Thu 27 Nov 2025 17:32:44 +0000
Manifest this update:     Thu 27 Nov 2025 17:27:44 +0000
Manifest next update:     Tue 02 Dec 2025 11:31:44 +0000
Files and hashes:         1: 3230302e35392e36342e302f31382d3234203d3e203130363137.roa (hash: f53pT77amDTuBArH+WEzU3OCsT9epXBysx2Y5ijj/2U=)
                          2: 323830333a393738303a3a2f33322d3438203d3e203130363137.roa (hash: su9GtQXbBXrz37TvNSJHGLO5vBj8F9pU0VVKdSmDqgY=)
                          3: 991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl (hash: 7J2X2+BgcdEDKZhkV4YRQXB8fDKVQqSRqhLPpJB6Q6A=)
                          4: 3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa (hash: wNzC8NdV3FAhY0BGfmsh0OAVAzwxh9+cJwEUEYLWMok=)
                          5: 3230312e3232312e39362e302f32302d3234203d3e203130363137.roa (hash: e/qUkjsYKIECphv86PRHW0nXTVHje+GfAmlVABgKAWQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Dec 2025 11:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ad:e7:12:ea:57:4e:47:45:38:a9:37:69:bd:f1:c6:e0:62:d3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
        Validity
            Not Before: Nov 27 17:27:44 2025 GMT
            Not After : Dec  2 11:31:44 2025 GMT
        Subject: CN=35F038BB7611F32BCDC125D7513589EC75B18DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:e6:b1:14:0c:83:99:87:bb:a2:30:14:30:
                    b3:6f:62:84:bc:c9:8e:a8:34:ad:12:5c:fa:3a:09:
                    5e:81:e7:0e:35:05:4b:ff:8d:b4:84:78:b3:98:b1:
                    f6:32:1f:f0:91:a4:08:8b:23:6c:2f:0b:f7:c6:73:
                    07:2b:c2:82:70:d5:95:ea:f3:2b:de:dc:a6:b2:8b:
                    4a:10:2c:53:7b:ea:d0:75:df:7f:ab:b6:28:05:65:
                    47:a0:c5:1a:9b:c7:04:f5:cf:e2:ae:0f:b8:d2:9a:
                    a0:3a:cb:0a:df:08:b0:e1:7a:2f:42:a1:b7:cf:87:
                    b3:5c:a1:52:36:12:2c:4f:39:29:ea:f7:e1:f3:83:
                    c0:3a:c9:76:28:03:d4:bd:41:02:b6:3e:5d:82:57:
                    d2:13:22:18:c4:f5:00:bc:4a:db:97:b6:79:ab:b2:
                    76:f8:31:a1:71:b6:d3:d2:50:a8:f7:ea:ca:b5:bb:
                    76:63:bf:ec:d7:65:a8:b9:33:ed:b8:01:10:91:f1:
                    60:da:82:cd:82:f2:a2:c1:58:6e:93:23:31:d3:1d:
                    11:8e:84:fb:30:d4:14:15:ca:8d:90:50:ad:fb:a4:
                    b9:c6:ca:d0:bc:31:d1:ab:03:8d:50:03:72:c2:f8:
                    a3:97:5a:a6:37:22:d6:90:2f:ae:9e:2e:da:83:0c:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F0:38:BB:76:11:F3:2B:CD:C1:25:D7:51:35:89:EC:75:B1:8D:ED
            X509v3 Authority Key Identifier:
                keyid:99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:18:4c:5c:b0:f2:74:d6:59:53:b4:be:c0:0a:2f:59:e5:15:
         a9:f8:1d:55:26:1e:98:c3:b1:5c:c2:4e:dd:a3:d2:5b:af:f1:
         45:78:f5:0f:81:08:a8:b3:1e:dc:98:b0:8b:3e:c8:d5:12:f6:
         ad:7d:19:d3:e1:ce:7f:3e:ee:a9:16:3c:48:37:d1:6c:b9:34:
         76:b8:ee:87:e6:aa:6e:2a:80:27:ba:8b:4f:22:68:20:17:61:
         50:7c:cd:62:67:af:72:e3:37:06:e3:18:c1:61:5a:3b:0a:eb:
         d1:8e:18:db:83:c9:f1:42:75:2e:12:ab:47:e4:cf:15:c1:09:
         e2:d2:d1:8a:1a:b6:8d:35:97:d7:89:5e:e1:72:70:db:08:a2:
         ce:40:17:64:ca:e0:84:fa:48:22:25:7b:39:3a:e3:ff:00:a2:
         93:59:c4:7a:3c:e7:c0:90:48:76:be:a4:29:10:5b:23:0f:e2:
         92:26:04:42:cd:c5:cd:ff:17:2f:c5:4e:fc:62:9b:26:56:5c:
         81:b7:b3:7f:4e:aa:ae:e0:62:1f:c8:9c:3c:5d:dd:e6:00:bf:
         b8:b9:e7:f2:a8:5c:5f:8d:b5:05:52:f5:88:b2:af:6b:d6:93:
         c4:43:b5:6e:25:a4:1b:2a:cd:55:a0:3e:19:e2:c7:20:44:8e:
         62:40:db:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----