This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.mft
File:                     4A21846C50E619589B04A94E63EC535C6F77C010.mft (raw, json)
Hash identifier:          hcAA9YbOwgtq8hjuemI4fcpyqR+P0g3Ux3fNegtacDk=
Subject key identifier:   5D:41:A6:8C:CE:D1:9C:4F:1E:94:59:0A:9C:CF:FB:98:84:89:BE:FE
Authority key identifier: 4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10
Certificate issuer:       /CN=4A21846C50E619589B04A94E63EC535C6F77C010
Certificate serial:       280F8EF921A93F27984F8CFE33ABFD433342C21E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.mft
Manifest number:          0144
Signing time:             Sun 21 Dec 2025 16:14:21 +0000
Manifest this update:     Sun 21 Dec 2025 16:09:21 +0000
Manifest next update:     Sat 27 Dec 2025 04:01:21 +0000
Files and hashes:         1: 323830303a3366303a343030313a3a2f34382d3438203d3e203135313639.roa (hash: y7ybzOG9sXhswXsVyLDl62kKC7P/TVoC1eOr9V3zZLk=)
                          2: 323830303a3366303a3a2f33322d3438203d3e203135313639.roa (hash: dBKXmZ4saljquSB4qLOEZEq1blfmMIQStMtbDD/TPw8=)
                          3: 323830303a3366303a343030343a3a2f34372d3438203d3e203135313639.roa (hash: iOBn6qhB6Ghq6ZWy3g5atL2rLvBebxHriJrmeWS0bG0=)
                          4: 323830303a3366303a343030323a3a2f34372d3438203d3e203135313639.roa (hash: maF0mIUNpfqA88b32ZdcKXIpIBEj+2r4Z5eTkH1dbQg=)
                          5: 4A21846C50E619589B04A94E63EC535C6F77C010.crl (hash: C8QuBlIztSzgD/YYguaRAnAQX4gBj1O2qj5xEcdSPag=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0f:8e:f9:21:a9:3f:27:98:4f:8c:fe:33:ab:fd:43:33:42:c2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A21846C50E619589B04A94E63EC535C6F77C010
        Validity
            Not Before: Dec 21 16:09:21 2025 GMT
            Not After : Dec 27 04:01:21 2025 GMT
        Subject: CN=5D41A68CCED19C4F1E94590A9CCFFB988489BEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:4f:71:a3:ea:9a:2a:6e:ee:3d:34:f8:ac:
                    9f:ed:4e:75:5a:ed:5e:52:25:81:74:53:44:8a:23:
                    4f:a4:58:b5:53:97:a5:58:c9:cd:51:e2:b6:84:51:
                    a7:11:a1:9e:f7:42:43:32:cd:c5:41:03:92:97:3c:
                    13:5e:5e:74:92:ae:88:da:65:3b:52:ec:48:fc:af:
                    90:83:e1:65:cc:26:30:30:cb:6e:ad:8f:ad:7e:4d:
                    fb:4f:ef:47:a2:2b:87:0b:4c:75:06:56:d2:86:1b:
                    27:63:58:07:33:39:57:df:f7:39:10:5e:9d:0c:59:
                    20:0e:da:74:64:f2:b5:d1:26:a9:bd:00:b0:f9:42:
                    a4:5c:32:55:59:5e:2a:da:8c:e2:48:e4:58:0a:0a:
                    b2:94:87:0f:d9:85:2f:cb:7e:9d:ce:98:5d:64:1c:
                    ab:e4:f5:d3:3e:b1:c5:18:89:29:34:55:93:2e:ce:
                    8d:7f:1a:c1:cd:6f:57:0c:ee:5f:15:92:a1:11:9f:
                    9d:65:9a:1e:ac:ed:eb:cb:a9:cc:10:53:39:02:f9:
                    a5:36:66:cf:11:52:0b:30:25:dd:04:7e:43:0f:42:
                    2b:03:9d:70:da:81:91:f6:83:27:15:27:b7:26:44:
                    6f:fe:3b:fa:22:a6:04:fa:4f:72:38:38:4b:99:45:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:41:A6:8C:CE:D1:9C:4F:1E:94:59:0A:9C:CF:FB:98:84:89:BE:FE
            X509v3 Authority Key Identifier:
                keyid:4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0a:cf:75:6f:4c:0e:1f:a5:2c:db:2f:65:aa:02:63:0a:2b:
         95:90:e2:a0:5b:c5:fd:ac:60:c1:bd:d4:b0:78:57:87:a1:6e:
         c3:05:91:2d:c5:75:8b:5c:e1:61:ab:6e:35:be:b3:2a:d0:c1:
         04:95:5d:c5:13:2b:70:ad:d0:3c:21:7d:90:aa:d1:bd:5b:d7:
         68:e3:11:37:cb:74:ae:17:22:85:41:dc:02:ea:e8:95:0d:6e:
         f5:f3:81:f1:8c:3d:8d:8c:f1:2a:db:6d:8d:3e:61:54:f0:f6:
         fb:c9:f2:8e:5a:a2:21:2a:a2:51:f1:1f:fc:f3:00:de:ed:66:
         77:7b:88:70:da:c8:d2:8a:aa:6c:49:71:22:51:f7:67:58:39:
         57:71:6c:70:75:82:7e:05:53:1c:a4:f9:9a:9a:67:4d:5a:76:
         3a:94:29:e5:73:74:ca:38:3f:9b:d5:a1:ff:54:e1:17:d3:23:
         bb:f5:ef:69:42:b9:51:07:69:84:bd:7e:33:47:ae:9c:c4:2b:
         76:a3:7c:7f:fc:a1:11:03:28:a9:e2:a3:94:05:cd:a0:31:da:
         78:c1:d2:fa:c0:a2:24:3c:c3:41:bd:9d:5b:37:56:32:98:db:
         40:aa:fa:2a:c9:99:67:ad:42:1a:d3:71:a8:0d:86:14:20:46:
         13:d3:62:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----