This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.mft
File:                     866D14BD6DA5743F22A65FD4E6C0003D7610C986.mft (raw, json)
Hash identifier:          ayQJKacEFiuNTOpT+ArZH1eXnPF5ummPcGTdfOnDLRo=
Subject key identifier:   2C:57:95:1E:0A:D5:92:23:C1:A9:6A:60:07:43:01:7D:53:A4:56:84
Authority key identifier: 86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86
Certificate issuer:       /CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
Certificate serial:       C7AE3BB0B21A6F821595674C1C5100B5B82B51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.mft
Manifest number:          0149
Signing time:             Fri 19 Dec 2025 07:54:29 +0000
Manifest this update:     Fri 19 Dec 2025 07:49:29 +0000
Manifest next update:     Wed 24 Dec 2025 10:02:29 +0000
Files and hashes:         1: 866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl (hash: aSU7xhnkzKJbymokH7gGbGDP+35mXQ70LywGlQ9b5ww=)
                          2: 3136372e3235302e34392e302f32342d3234203d3e20323633373637.roa (hash: Ynw9eJDyFYPeE4hgS+FGw8BaEk0+hx7tEAROCKtf1Y8=)
                          3: 3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa (hash: M7O6D9HK57KeUd/jGqXWjFnWsrGVS8vtbTmEqAc+zeI=)
                          4: 3136372e3235302e34382e302f32342d3234203d3e20323633373637.roa (hash: hS6ax3Ak/v3W1MnN5JPfHSRqD/0qApvQZh8sTgTy1IU=)
                          5: 3136372e3235302e35302e302f32342d3234203d3e20323633373637.roa (hash: 7ov5/iffzXcBUW2liggTR5mTYpd2r5OJBcb8a5dZYIU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c7:ae:3b:b0:b2:1a:6f:82:15:95:67:4c:1c:51:00:b5:b8:2b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
        Validity
            Not Before: Dec 19 07:49:29 2025 GMT
            Not After : Dec 24 10:02:29 2025 GMT
        Subject: CN=2C57951E0AD59223C1A96A600743017D53A45684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:38:47:c7:3d:10:d1:30:f0:68:3c:9f:64:
                    8c:09:d6:f7:7d:79:ef:29:c6:d0:81:a2:18:a0:4c:
                    01:0f:24:2e:74:ad:28:35:be:5a:10:7c:10:f7:72:
                    81:72:6d:86:46:e0:69:c5:77:05:39:29:b6:8c:2d:
                    40:72:56:27:9c:d1:fb:8e:db:00:f9:b0:78:a5:f4:
                    b7:94:38:a3:18:66:cb:07:6c:f3:8a:26:73:4c:c4:
                    56:2a:10:c9:bc:70:c1:dd:75:18:3f:43:c4:de:00:
                    b1:1f:be:21:a1:da:b2:8b:d6:6e:1e:59:03:d1:6e:
                    ce:e6:d8:4f:19:0d:f5:33:69:9c:61:33:68:af:bf:
                    8c:c9:ff:ab:50:91:3b:f0:6a:dc:3f:b3:7e:46:ea:
                    81:50:96:b7:bc:d2:89:df:14:30:83:39:d6:55:4e:
                    28:26:7c:a6:73:f8:9c:df:72:df:70:f8:69:98:af:
                    96:92:d2:0c:f2:a5:b3:17:71:db:62:d0:4e:f7:17:
                    69:6b:32:a8:54:77:9f:a8:38:fa:9e:ec:30:ff:d1:
                    6f:3c:b7:76:01:00:a2:a6:b8:95:80:a4:f8:58:ea:
                    45:a7:b7:d9:fa:31:3b:ec:38:de:4c:53:7a:7a:e0:
                    9c:5f:62:72:92:f7:0f:d7:05:f2:6e:69:7c:09:50:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:57:95:1E:0A:D5:92:23:C1:A9:6A:60:07:43:01:7D:53:A4:56:84
            X509v3 Authority Key Identifier:
                keyid:86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:12:43:54:54:7b:37:10:d1:fb:40:95:2a:6e:46:f6:cf:04:
         9c:dc:1e:af:f8:c6:27:e0:c0:c2:71:03:ac:87:d6:6a:65:c5:
         0e:ea:fa:3b:00:a5:0c:4b:bd:65:c7:bb:aa:84:ac:bd:73:18:
         fb:ee:a8:44:3d:ce:c6:bf:9f:fb:f2:46:6f:9c:ec:b2:50:90:
         c2:29:80:ab:ec:bc:03:32:58:a6:f9:ec:a9:ff:1d:0b:2c:3f:
         e9:2c:4a:9c:70:22:7d:86:e3:2b:92:d0:a1:a5:02:d2:34:db:
         a1:f6:4f:fb:07:eb:23:75:e7:c0:d8:fd:16:a2:b8:07:43:ff:
         bc:77:e4:44:14:f1:9d:97:de:52:22:89:5e:62:7c:7e:21:00:
         43:c5:78:48:4d:6c:25:92:e3:14:6c:f3:bf:eb:9b:41:a6:fe:
         cf:0d:3b:3c:f1:36:c2:cb:0c:e6:de:ce:f9:26:c7:58:16:bc:
         71:01:38:0b:ff:5d:ec:59:38:34:c1:2b:55:2f:66:79:1e:79:
         dd:a2:55:bb:2e:f2:a0:3b:77:3a:03:f1:f0:ad:28:9a:f9:46:
         c1:a6:b0:cd:7b:dd:a3:e1:69:e0:d0:f8:a3:ce:51:55:2f:42:
         58:0c:56:b4:9e:ac:af:66:60:0e:cd:e5:8d:52:70:d7:fa:71:
         db:c4:8f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----