This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
File:                     991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft (raw, json)
Hash identifier:          1o4yWBinLQztF5YFcoVJq0W1SLqws8uHACbionjeUl4=
Subject key identifier:   C8:C2:8B:CA:55:B3:0A:E2:1D:8E:AE:1D:6C:6A:57:49:B4:D3:29:4F
Authority key identifier: 99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E
Certificate issuer:       /CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
Certificate serial:       0193EB7579F94B159FE10418C1F688646A211058
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
Manifest number:          013C
Signing time:             Mon 24 Nov 2025 01:32:34 +0000
Manifest this update:     Mon 24 Nov 2025 01:27:34 +0000
Manifest next update:     Sat 29 Nov 2025 04:28:34 +0000
Files and hashes:         1: 3137392e302e32302e302f32322d3330203d3e203532343730.roa (hash: 8rUcU657m71mniNtmrWC6Tz2lvD/AWBUWeAsHChNH+0=)
                          2: 3137392e302e32302e302f32342d3235203d3e203635313035.roa (hash: FietV4nbBzl7X/sLCaoYfKb5JaXsEimaJMWPWhtL+mA=)
                          3: 323830313a31373a383030303a3a2f34382d3438203d3e203532343730.roa (hash: xPYVqeDjnmrZgF0SZSLtYMqwOiEa2rOuiwcFmIM8KbI=)
                          4: 3137392e302e32312e3132382f32362d3236203d3e203635313034.roa (hash: 7e7SjP+DzRspvItk28lOzGdL+gXXXte2TT99PaBgJ3w=)
                          5: 3137392e302e32322e36342f32362d3236203d3e203635313035.roa (hash: R6mtpzoUA60V397hZKWJBQadz8Qws4PYXH9aRFRMeKs=)
                          6: 991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl (hash: fJGCtFgzWiguR3eaDdVPbOpKIa8EshVwyhXNdxYKocY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Nov 2025 04:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:eb:75:79:f9:4b:15:9f:e1:04:18:c1:f6:88:64:6a:21:10:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
        Validity
            Not Before: Nov 24 01:27:34 2025 GMT
            Not After : Nov 29 04:28:34 2025 GMT
        Subject: CN=C8C28BCA55B30AE21D8EAE1D6C6A5749B4D3294F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:75:10:33:81:4e:5f:61:1a:19:ac:30:3f:
                    3d:77:98:9f:0a:8e:38:e2:44:a6:06:b7:76:e0:a4:
                    01:da:5b:c0:5c:85:4d:73:3f:78:ec:7f:4d:59:95:
                    6f:37:80:f0:61:2b:43:51:e9:84:24:9b:c9:0d:9d:
                    96:58:dc:8c:26:52:e1:c4:e8:30:20:46:ee:d7:28:
                    8a:9e:c5:ef:7a:bf:8d:27:8c:fd:b0:4a:2c:f8:4a:
                    40:07:61:3c:2d:a1:b9:55:ea:eb:78:19:d6:c2:62:
                    19:b7:fc:18:70:6a:14:64:08:7d:58:5c:bb:46:46:
                    97:af:58:16:5c:8e:55:4a:15:08:8c:45:62:3c:67:
                    6c:79:0e:73:30:2e:af:b4:eb:71:cd:63:66:53:62:
                    49:c8:91:26:b7:b9:50:77:f1:73:08:5b:85:b8:b7:
                    6b:94:5e:21:2f:94:22:ff:32:83:b4:48:89:d4:a7:
                    88:cb:36:d6:f7:52:82:f7:3b:ab:73:58:a9:62:3f:
                    2f:80:54:cd:7f:2d:63:48:0f:94:d1:d4:a5:3e:f3:
                    6d:28:17:41:dc:2d:39:1a:77:85:91:8f:58:cf:2f:
                    65:ff:49:da:cd:ef:75:fa:5a:0d:90:94:47:24:de:
                    15:d2:e3:f6:04:70:8e:56:c2:18:d6:99:7e:dc:94:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C2:8B:CA:55:B3:0A:E2:1D:8E:AE:1D:6C:6A:57:49:B4:D3:29:4F
            X509v3 Authority Key Identifier:
                keyid:99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:cd:37:fb:9e:00:e0:3f:c7:2a:ee:c7:83:1d:29:86:7a:3e:
         15:8e:d5:9e:07:9b:8d:32:73:02:1e:49:4b:4b:9f:19:73:e7:
         de:6f:80:a5:af:81:5d:a8:52:9f:08:9e:5b:1d:63:eb:22:75:
         34:73:9a:4a:b0:81:1a:3c:14:2b:29:d1:5e:40:2f:fe:08:7a:
         4c:34:01:7e:33:a1:60:7c:34:5e:3f:cf:d9:72:b1:38:ce:71:
         e8:21:95:b0:bb:b4:ad:26:6b:4a:7f:54:e1:1b:b6:f3:30:24:
         44:95:6a:5e:35:d0:8d:91:12:f5:ed:2f:09:61:a6:1a:84:41:
         c0:78:c8:27:24:62:52:09:bc:5d:a8:9a:01:08:5f:68:f8:8c:
         57:22:22:18:c0:0e:51:c5:e5:00:08:ed:fd:da:52:f4:88:6c:
         ca:17:63:2b:fc:8e:9d:c0:23:16:2e:05:69:87:0a:42:53:4a:
         42:7b:35:8d:c4:60:09:c0:e0:31:6b:17:47:45:0a:e1:02:dd:
         96:82:2f:6d:a5:a3:f8:56:38:56:31:76:be:dc:b8:6b:89:af:
         61:4c:8a:89:18:f6:79:19:23:11:22:ec:90:64:11:10:42:44:
         05:30:61:64:ba:b2:fe:a8:3b:5e:f5:d3:37:9b:58:f0:fa:9f:
         32:b2:8e:72
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUAZPrdXn5SxWf4QQYwfaIZGohEFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkxRDU4OEE4NkY4N0IyMjRDOUNEQUVBRjlDOTZDNjU1
NUU4MDM4RTAeFw0yNTExMjQwMTI3MzRaFw0yNTExMjkwNDI4MzRaMDMxMTAvBgNV
BAMTKEM4QzI4QkNBNTVCMzBBRTIxRDhFQUUxRDZDNkE1NzQ5QjREMzI5NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98HUQM4FOX2EaGawwPz13mJ8K
jjjiRKYGt3bgpAHaW8BchU1zP3jsf01ZlW83gPBhK0NR6YQkm8kNnZZY3IwmUuHE
6DAgRu7XKIqexe96v40njP2wSiz4SkAHYTwtoblV6ut4GdbCYhm3/BhwahRkCH1Y
XLtGRpevWBZcjlVKFQiMRWI8Z2x5DnMwLq+063HNY2ZTYknIkSa3uVB38XMIW4W4
t2uUXiEvlCL/MoO0SInUp4jLNtb3UoL3O6tzWKliPy+AVM1/LWNID5TR1KU+820o
F0HcLTkad4WRj1jPL2X/SdrN73X6Wg2QlEck3hXS4/YEcI5WwhjWmX7clGE1AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUyMKLylWzCuIdjq4dbGpXSbTTKU8wHwYDVR0j
BBgwFoAUmR1Yiob4eyJMnNrq+clsZVXoA44wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QTFDOTcyMjM5MUI5MzRFNThCNzg1RTdDQjQzQ0U0QjNG
MzU1NjY4NkQzOTZGQkE2MUZFMDZFQzRDQ0QxRTRDLzAvOTkxRDU4OEE4NkY4N0Iy
MjRDOUNEQUVBRjlDOTZDNjU1NUU4MDM4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTFENTg4QTg2Rjg3QjIyNEM5
Q0RBRUFGOUM5NkM2NTU1RTgwMzhFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEExQzk3MjIzOTFCOTM0RTU4Qjc4NUU3Q0I0M0NFNEIzRjM1NTY2ODZE
Mzk2RkJBNjFGRTA2RUM0Q0NEMUU0Qy8wLzk5MUQ1ODhBODZGODdCMjI0QzlDREFF
QUY5Qzk2QzY1NTVFODAzOEUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxzTf7ngDgP8cq7seDHSmGej4V
jtWeB5uNMnMCHklLS58Zc+feb4Clr4FdqFKfCJ5bHWPrInU0c5pKsIEaPBQrKdFe
QC/+CHpMNAF+M6FgfDReP8/ZcrE4znHoIZWwu7StJmtKf1ThG7bzMCRElWpeNdCN
kRL17S8JYaYahEHAeMgnJGJSCbxdqJoBCF9o+IxXIiIYwA5RxeUACO392lL0iGzK
F2Mr/I6dwCMWLgVphwpCU0pCezWNxGAJwOAxaxdHRQrhAt2Wgi9tpaP4VjhWMXa+
3Lhria9hTIqJGPZ5GSMRIuyQZBEQQkQFMGFkurL+qDte9dM3m1jw+p8yso5y
-----END CERTIFICATE-----
Generated at Mon Nov 24 20:32:56 2025 by rpki-client