This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft
File:                     43D716CDB565EBE33B24F995BFB74FBBE1493099.mft (raw, json)
Hash identifier:          NIRvwDTtkt/p41C0vWQRz02hXgyiE5hcGO610O8PZWg=
Subject key identifier:   51:AE:A4:4D:90:72:9F:42:A3:7C:69:39:89:F3:6D:3F:69:4E:D1:77
Authority key identifier: 43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99
Certificate issuer:       /CN=43D716CDB565EBE33B24F995BFB74FBBE1493099
Certificate serial:       6DA6B997F2648518CC1550146CC512C207BED994
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft
Manifest number:          0140
Signing time:             Tue 09 Dec 2025 10:00:19 +0000
Manifest this update:     Tue 09 Dec 2025 09:55:19 +0000
Manifest next update:     Sun 14 Dec 2025 11:19:19 +0000
Files and hashes:         1: 323830303a3963303a3a2f33322d3438203d3e203532333439.roa (hash: +HKy7QHg8LVI140z1meymaNZyTSJRfkd9Hz0FK2QTLE=)
                          2: 43D716CDB565EBE33B24F995BFB74FBBE1493099.crl (hash: XtYED0wp1WOLjLDVM2b+U3l4FD8Rtu15G1ZqYWwXrPk=)
                          3: 3138362e3134382e3234382e302f32312d3234203d3e203532333439.roa (hash: m2JeXhgRytA2Lq6Cp0jcH0rg3kdQ8d2b2W9tlCTGZVc=)
                          4: 3133382e302e382e302f32322d3234203d3e203532333439.roa (hash: 3lWJAlL8h6r5w9Oh9o+B3p8GjRe+qF8ONSUBNN+QXZU=)
                          5: 3137302e3234362e3234342e302f32322d3234203d3e203532333439.roa (hash: J45kKvVRbVFGvXQJRhJgZxQ+A3b0+v6EsaEG5wh0sXs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Dec 2025 11:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a6:b9:97:f2:64:85:18:cc:15:50:14:6c:c5:12:c2:07:be:d9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43D716CDB565EBE33B24F995BFB74FBBE1493099
        Validity
            Not Before: Dec  9 09:55:19 2025 GMT
            Not After : Dec 14 11:19:19 2025 GMT
        Subject: CN=51AEA44D90729F42A37C693989F36D3F694ED177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:98:3e:df:23:d0:95:d6:8f:f6:c5:4f:a6:1f:
                    2b:e3:6c:f4:e5:58:e5:b0:5f:0f:ec:61:b1:58:5f:
                    df:48:6f:43:81:f9:bc:53:6f:7d:76:30:95:b1:6d:
                    6a:fb:b1:69:63:23:11:14:31:8f:e1:4d:33:dd:e6:
                    de:eb:4d:a3:a0:65:6e:f6:12:f7:ae:8e:2f:f9:d4:
                    c4:1a:9e:29:7f:5c:28:58:57:61:6e:2d:0a:e6:48:
                    19:bd:bd:3b:df:6a:16:83:cb:48:76:df:bf:68:d8:
                    ba:58:1c:bd:2f:51:2a:ae:30:62:94:7a:b4:0a:81:
                    59:44:43:37:4b:bc:e5:99:b0:22:0b:4c:38:ed:0c:
                    60:90:2f:4b:fb:b7:49:0e:65:6f:e2:d0:4a:76:76:
                    c6:cd:dd:f1:c9:eb:39:8e:27:54:8f:bd:8f:4a:0d:
                    4a:38:a4:64:11:03:73:54:1d:85:00:fe:3b:ec:ae:
                    99:c6:a6:66:22:04:e2:f3:ce:06:bd:d0:65:ae:87:
                    26:9e:cb:b6:d3:77:e0:72:78:89:a8:60:8a:0a:ce:
                    0b:21:8f:a8:71:f6:9c:96:a8:62:bd:03:c5:da:3f:
                    bc:e9:c9:90:ff:fb:7a:59:51:63:52:78:23:b7:74:
                    0a:81:ec:06:62:5d:4d:d2:23:8f:9c:32:70:2f:0f:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AE:A4:4D:90:72:9F:42:A3:7C:69:39:89:F3:6D:3F:69:4E:D1:77
            X509v3 Authority Key Identifier:
                keyid:43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c0:81:5f:e3:17:0a:ab:91:ff:11:ea:80:54:0f:30:0f:a9:
         9d:d0:69:25:7d:8c:a3:c3:5c:6c:91:53:7b:60:39:18:99:43:
         29:88:7b:b0:83:97:ca:e2:84:ff:63:02:31:aa:66:ee:6d:88:
         91:c6:86:c2:22:5a:e0:e4:1d:f5:01:90:f5:8d:e8:dc:79:87:
         74:36:cd:0e:ce:58:99:5b:d8:73:25:fc:2c:63:14:83:b2:8f:
         6f:51:97:94:00:03:b1:a0:98:46:71:18:6a:d7:47:57:57:7b:
         55:c5:28:34:3f:f3:cc:16:c1:cd:eb:bd:4d:80:1c:af:85:06:
         14:91:63:ae:c4:8b:23:87:a8:bc:f0:02:3e:33:00:b5:bb:cc:
         ca:a9:41:16:c8:76:b7:88:f9:cb:7b:a8:27:e2:79:3e:1d:a5:
         59:9c:aa:45:b0:b5:9c:04:78:25:0a:e6:52:fa:3c:a1:08:73:
         4b:7f:ba:83:84:68:6a:3a:93:7d:ca:8c:22:2c:c7:c3:6e:10:
         af:30:92:4f:52:1c:99:ea:ed:e8:a2:a8:da:46:38:4f:01:ce:
         e3:09:cb:a0:46:f4:aa:5a:8b:89:7f:97:7d:62:55:8b:8e:08:
         5f:db:56:c4:68:91:2a:22:46:20:63:42:39:c4:03:a5:86:25:
         72:91:63:21
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUbaa5l/JkhRjMFVAUbMUSwge+2ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNENzE2Q0RCNTY1RUJFMzNCMjRGOTk1QkZCNzRGQkJF
MTQ5MzA5OTAeFw0yNTEyMDkwOTU1MTlaFw0yNTEyMTQxMTE5MTlaMDMxMTAvBgNV
BAMTKDUxQUVBNDREOTA3MjlGNDJBMzdDNjkzOTg5RjM2RDNGNjk0RUQxNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmD7fI9CV1o/2xU+mHyvjbPTl
WOWwXw/sYbFYX99Ib0OB+bxTb312MJWxbWr7sWljIxEUMY/hTTPd5t7rTaOgZW72
Eveuji/51MQanil/XChYV2FuLQrmSBm9vTvfahaDy0h2379o2LpYHL0vUSquMGKU
erQKgVlEQzdLvOWZsCILTDjtDGCQL0v7t0kOZW/i0Ep2dsbN3fHJ6zmOJ1SPvY9K
DUo4pGQRA3NUHYUA/jvsrpnGpmYiBOLzzga90GWuhyaey7bTd+ByeImoYIoKzgsh
j6hx9pyWqGK9A8XaP7zpyZD/+3pZUWNSeCO3dAqB7AZiXU3SI4+cMnAvD5LjAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUUa6kTZByn0KjfGk5ifNtP2lO0XcwHwYDVR0j
BBgwFoAUQ9cWzbVl6+M7JPmVv7dPu+FJMJkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84N0EyOENDRkI4Njg1ODUwQkE5NzlEQzExRDE1OTUyNTI0
QTU0NkNDOTY2NzZERkIwQTA1QUY4QUFBQTJCRDdDLzAvNDNENzE2Q0RCNTY1RUJF
MzNCMjRGOTk1QkZCNzRGQkJFMTQ5MzA5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0Q3MTZDREI1NjVFQkUzM0Iy
NEY5OTVCRkI3NEZCQkUxNDkzMDk5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODdBMjhDQ0ZCODY4NTg1MEJBOTc5REMxMUQxNTk1MjUyNEE1NDZDQzk2
Njc2REZCMEEwNUFGOEFBQUEyQkQ3Qy8wLzQzRDcxNkNEQjU2NUVCRTMzQjI0Rjk5
NUJGQjc0RkJCRTE0OTMwOTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKwIFf4xcKq5H/EeqAVA8wD6md
0GklfYyjw1xskVN7YDkYmUMpiHuwg5fK4oT/YwIxqmbubYiRxobCIlrg5B31AZD1
jejceYd0Ns0OzliZW9hzJfwsYxSDso9vUZeUAAOxoJhGcRhq10dXV3tVxSg0P/PM
FsHN671NgByvhQYUkWOuxIsjh6i88AI+MwC1u8zKqUEWyHa3iPnLe6gn4nk+HaVZ
nKpFsLWcBHglCuZS+jyhCHNLf7qDhGhqOpN9yowiLMfDbhCvMJJPUhyZ6u3ooqja
RjhPAc7jCcugRvSqWouJf5d9YlWLjghf21bEaJEqIkYgY0I5xAOlhiVykWMh
-----END CERTIFICATE-----
Generated at Tue Dec 9 22:17:22 2025 by rpki-client