This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
File:                     84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft (raw, json)
Hash identifier:          LSfylPD8RoRD0+ljcGW2YO6BlKU5uo+g3mO8wBRMjfw=
Subject key identifier:   43:5D:3A:D0:A6:9C:3C:60:E7:83:AF:76:C1:26:8B:FB:8A:A2:BD:BA
Authority key identifier: 84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E
Certificate issuer:       /CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
Certificate serial:       1191ECF9AFA20CA1DF63FC6FF203BFD8E8BBC5A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
Manifest number:          014C
Signing time:             Fri 19 Dec 2025 22:22:37 +0000
Manifest this update:     Fri 19 Dec 2025 22:17:37 +0000
Manifest next update:     Wed 24 Dec 2025 16:53:37 +0000
Files and hashes:         1: 323830363a3333633a3a2f33322d3438203d3e20323635353837.roa (hash: 7xiCWr2aOsqXzAqRAqwNIT4EL+ITgtVmg+wIDJZUubc=)
                          2: 84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl (hash: M6Kq+c0XzVQ5OQEWPBsx4V607g9RsvEnZMbvRkMuWOw=)
                          3: 34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa (hash: 0yX7u6biszxE6RR/9ymdpIsRGp4J89CZIfVvJYcKuVo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:91:ec:f9:af:a2:0c:a1:df:63:fc:6f:f2:03:bf:d8:e8:bb:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
        Validity
            Not Before: Dec 19 22:17:37 2025 GMT
            Not After : Dec 24 16:53:37 2025 GMT
        Subject: CN=435D3AD0A69C3C60E783AF76C1268BFB8AA2BDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:57:6f:10:eb:64:d3:a1:23:20:ae:af:ff:
                    35:06:35:ae:7a:61:c8:9c:e9:d2:38:d3:a2:4f:cf:
                    f5:ae:b4:c5:8e:66:bf:da:6b:53:71:15:21:5d:b9:
                    d1:1d:94:f2:80:f2:a8:1c:c5:89:ca:69:c2:76:cc:
                    38:f3:6c:fa:00:1c:c9:30:a9:75:ac:9a:4f:4c:00:
                    af:eb:b3:61:04:5c:c9:9c:c3:83:da:f0:b9:64:58:
                    5e:cb:f5:3b:c8:a2:af:85:9c:42:41:8b:ee:84:ab:
                    4f:d8:37:59:e2:e2:db:1a:2c:40:73:8d:d5:a3:5f:
                    9f:c0:26:5a:8a:29:91:6e:ff:3c:68:75:a3:9f:f1:
                    d1:a8:cd:07:92:f6:dc:93:08:c5:2c:d6:99:ed:e7:
                    99:84:39:7a:db:f0:84:f7:8b:eb:46:b8:b0:74:bc:
                    88:ef:39:14:96:81:2b:c6:56:08:93:e4:2b:9e:47:
                    dd:b4:29:95:79:85:90:ac:3c:f1:41:df:31:e0:c0:
                    07:51:29:7a:ac:e0:86:74:21:29:c8:94:c8:82:96:
                    ff:32:7a:32:51:4a:aa:4e:21:e3:64:ee:c1:d4:a4:
                    2b:b6:8e:5a:4f:af:01:ee:3e:d5:c3:9f:b6:40:18:
                    c7:bc:eb:f5:9d:65:98:48:f3:0a:cb:63:e1:06:54:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5D:3A:D0:A6:9C:3C:60:E7:83:AF:76:C1:26:8B:FB:8A:A2:BD:BA
            X509v3 Authority Key Identifier:
                keyid:84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:41:15:b6:d9:fd:b6:16:1a:aa:54:da:72:8b:89:12:8f:9d:
         cf:92:00:ee:b7:25:1c:65:1f:52:23:fe:26:e3:32:01:a0:af:
         a7:2a:59:80:9e:39:c6:04:bf:09:6b:b6:7a:f8:58:f5:8b:6f:
         af:44:ad:2f:92:cf:65:bf:76:e3:f1:fe:37:b0:88:5a:6c:a0:
         fc:c2:f5:43:28:7e:44:bb:75:2d:93:ab:c2:0a:72:fc:a4:68:
         f8:3c:c7:d1:3c:ec:d3:07:15:08:7e:cc:38:93:31:a7:4c:45:
         cf:3e:47:e1:35:ca:d3:eb:5d:d9:0d:d8:1c:cc:cd:9b:70:67:
         26:c2:cd:2a:2b:05:47:6a:61:60:fb:47:32:b4:4e:11:5e:eb:
         27:f9:ca:f1:d4:17:8c:9d:eb:83:b4:d2:1d:8a:af:9b:a3:d4:
         d0:d7:ed:b0:c1:df:e2:e1:33:f4:e9:20:1e:89:f8:f4:ec:f6:
         5e:80:9d:f9:b5:ef:71:ec:57:2b:dd:92:00:34:e1:54:56:81:
         df:fc:66:c5:1a:cc:e8:51:1a:5a:61:15:59:de:d3:cc:05:ca:
         60:bd:d4:58:52:50:89:a3:96:cb:9c:47:7d:46:dd:76:d4:a5:
         f4:b4:a6:a1:ea:ff:92:da:a6:10:ee:32:8a:ab:b0:60:3e:ef:
         cf:36:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----