This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.mft
File:                     97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.mft (raw, json)
Hash identifier:          1qxgHGldgdAVV3B40eZbqrS47cGiM7Kc7t7r3qaQpvE=
Subject key identifier:   BF:A4:74:F4:CE:D1:24:7A:17:EB:1F:29:9C:13:56:11:DA:98:AF:71
Authority key identifier: 97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB
Certificate issuer:       /CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
Certificate serial:       3020642A2883E1FDDC178F98AD80F4D3580C0AC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.mft
Manifest number:          014A
Signing time:             Tue 16 Dec 2025 00:03:24 +0000
Manifest this update:     Mon 15 Dec 2025 23:58:24 +0000
Manifest next update:     Sat 20 Dec 2025 11:22:24 +0000
Files and hashes:         1: 34352e3232352e34332e302f32342d3234203d3e20323636363535.roa (hash: Bpd+GlFWnDqaG6j34WPalZdCeH3C6e2dku4hZ6kliG4=)
                          2: 34352e3232352e3133322e302f32342d3234203d3e20323636363535.roa (hash: cRN+q720nYBJ8kt65wpJB6kdCB0ta90m6HDtu6QL1MU=)
                          3: 323830333a633132303a3a2f33322d3332203d3e20323636363535.roa (hash: FYrQv1lqz6oANweUG45BPVBi1vttHaNG/ytKBQ82DnA=)
                          4: 34352e3232352e3133332e302f32342d3234203d3e20323636363535.roa (hash: AJwXcXx263NgBRjfbstTuYv6aggP2dObEzstEPIDYYA=)
                          5: 97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl (hash: nbuMqhOPxupo13jlFxVgsQLr1Touk7Zg+V28CTIcJp8=)
                          6: 34352e3232352e3133322e302f32332d3233203d3e20323636363535.roa (hash: 2Btgex9BtXYYUTydh5XtTdiwyqH/hRLTpVXcz6xG3yE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 11:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:20:64:2a:28:83:e1:fd:dc:17:8f:98:ad:80:f4:d3:58:0c:0a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
        Validity
            Not Before: Dec 15 23:58:24 2025 GMT
            Not After : Dec 20 11:22:24 2025 GMT
        Subject: CN=BFA474F4CED1247A17EB1F299C135611DA98AF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e1:dd:39:f8:5c:c7:d0:9c:02:cc:bf:aa:de:
                    65:2c:04:21:3b:6a:fd:94:69:b5:66:8e:64:ef:00:
                    54:10:ff:84:fe:62:d6:32:a9:cb:74:01:62:bd:3e:
                    c6:e0:90:53:8a:32:4f:03:d8:7d:48:11:a2:64:78:
                    fc:97:36:77:a2:7f:33:63:bf:68:80:8c:02:71:d6:
                    5d:60:9d:87:5a:87:3a:1b:51:97:66:a9:a7:b8:83:
                    85:f6:0c:2d:ef:0d:8a:e2:6e:6c:6e:9d:8e:fd:fc:
                    dc:1b:2e:34:99:87:86:f5:85:40:ba:30:e5:02:46:
                    c3:87:5a:8b:6c:2a:a4:33:aa:fb:af:8d:07:a7:d9:
                    4f:0a:93:c2:1c:09:cd:ea:e3:61:4f:30:e1:f8:36:
                    2b:07:2d:07:67:cf:18:8a:16:56:30:bc:41:97:24:
                    38:b6:6f:1d:3a:6d:45:a2:ec:88:98:e8:75:6b:e5:
                    96:10:0d:4c:6c:7c:9e:19:e7:1d:fb:67:7f:a2:c1:
                    67:87:36:4b:3b:0f:b7:2b:c6:6e:7b:66:3b:f8:6e:
                    20:69:c7:d0:ec:d3:82:9e:ef:4a:6c:5c:af:b1:e8:
                    da:ea:fa:fe:7a:7a:b1:31:67:95:6a:15:84:8d:13:
                    e3:3a:3c:83:1f:8e:b9:4b:e1:b1:1f:ed:bd:ed:30:
                    d6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A4:74:F4:CE:D1:24:7A:17:EB:1F:29:9C:13:56:11:DA:98:AF:71
            X509v3 Authority Key Identifier:
                keyid:97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d1:49:97:50:2f:6f:43:7c:ae:82:55:be:c7:3f:e2:29:7c:
         23:0a:7c:e2:e6:f5:4c:55:77:20:56:4d:98:3e:6d:df:96:58:
         4e:9e:af:d2:5b:3e:6f:da:c5:74:24:ac:1d:8b:f1:1e:72:c9:
         d2:01:26:ae:32:be:a1:2a:3e:93:34:a9:42:db:25:e9:24:83:
         82:be:43:7f:2a:1f:ea:50:fe:7b:de:b7:cb:84:05:c5:19:15:
         a5:33:c3:7f:f0:cc:ba:ba:99:24:3c:2e:77:94:21:87:e2:81:
         9d:31:6d:f4:c0:73:b0:ff:19:7e:c2:25:d0:5b:69:47:cd:24:
         35:f9:f4:1d:5d:b5:c6:26:54:d2:9d:8f:30:32:58:7b:40:bc:
         1e:90:97:37:89:fb:19:e8:1f:27:fc:61:5d:56:04:c6:35:f9:
         0a:cd:ac:41:df:d4:12:4b:7b:56:d0:bc:cf:3a:8d:18:12:78:
         c8:48:bf:13:47:3c:51:b2:d3:59:16:ac:50:1c:8a:4a:5c:2e:
         39:8b:98:fd:fc:8c:f9:d0:62:a0:46:61:59:b6:a0:55:36:09:
         86:e7:3e:4a:70:31:7b:86:a4:5c:3f:31:d9:c9:35:e9:25:27:
         25:76:e8:44:21:c0:73:e2:1c:84:48:e5:84:df:36:19:1b:a6:
         ef:70:cc:39
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUMCBkKiiD4f3cF4+YrYD001gMCsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdEMUU4MUNBRkQ3Q0YxRjVGRUUwODI4NUVBMTE3N0E0
NkFCMTdDQjAeFw0yNTEyMTUyMzU4MjRaFw0yNTEyMjAxMTIyMjRaMDMxMTAvBgNV
BAMTKEJGQTQ3NEY0Q0VEMTI0N0ExN0VCMUYyOTlDMTM1NjExREE5OEFGNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu4d05+FzH0JwCzL+q3mUsBCE7
av2UabVmjmTvAFQQ/4T+YtYyqct0AWK9PsbgkFOKMk8D2H1IEaJkePyXNneifzNj
v2iAjAJx1l1gnYdahzobUZdmqae4g4X2DC3vDYribmxunY79/NwbLjSZh4b1hUC6
MOUCRsOHWotsKqQzqvuvjQen2U8Kk8IcCc3q42FPMOH4NisHLQdnzxiKFlYwvEGX
JDi2bx06bUWi7IiY6HVr5ZYQDUxsfJ4Z5x37Z3+iwWeHNks7D7crxm57Zjv4biBp
x9Ds04Ke70psXK+x6Nrq+v56erExZ5VqFYSNE+M6PIMfjrlL4bEf7b3tMNYdAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUv6R09M7RJHoX6x8pnBNWEdqYr3EwHwYDVR0j
BBgwFoAUl9HoHK/Xzx9f7ggoXqEXekarF8swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODk4N0VBRkIwQzJCN0M0Q0VFMTM4OURGN0E3NUJBOEU1
MTM0QzYwREJCNTMwOTMwMjRFMjQ3MUJEQTY2Mjc2LzAvOTdEMUU4MUNBRkQ3Q0Yx
RjVGRUUwODI4NUVBMTE3N0E0NkFCMTdDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85N0QxRTgxQ0FGRDdDRjFGNUZF
RTA4Mjg1RUExMTc3QTQ2QUIxN0NCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTg5ODdFQUZCMEMyQjdDNENFRTEzODlERjdBNzVCQThFNTEzNEM2MERC
QjUzMDkzMDI0RTI0NzFCREE2NjI3Ni8wLzk3RDFFODFDQUZEN0NGMUY1RkVFMDgy
ODVFQTExNzdBNDZBQjE3Q0IubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBD0UmXUC9vQ3yuglW+xz/iKXwj
Cnzi5vVMVXcgVk2YPm3fllhOnq/SWz5v2sV0JKwdi/EecsnSASauMr6hKj6TNKlC
2yXpJIOCvkN/Kh/qUP573rfLhAXFGRWlM8N/8My6upkkPC53lCGH4oGdMW30wHOw
/xl+wiXQW2lHzSQ1+fQdXbXGJlTSnY8wMlh7QLwekJc3ifsZ6B8n/GFdVgTGNfkK
zaxB39QSS3tW0LzPOo0YEnjISL8TRzxRstNZFqxQHIpKXC45i5j9/Iz50GKgRmFZ
tqBVNgmG5z5KcDF7hqRcPzHZyTXpJSclduhEIcBz4hyESOWE3zYZG6bvcMw5
-----END CERTIFICATE-----
Generated at Wed Dec 17 06:01:02 2025 by rpki-client