This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
File:                     A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft (raw, json)
Hash identifier:          wrD0+VhuapbY/C4eegXLEGw6a5rb0J9u2bVyEtMxuEU=
Subject key identifier:   A0:16:CB:3B:EB:48:FE:18:D9:AD:93:CD:A4:5D:0F:13:B5:98:F4:12
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       67F2F1909DA4A8800D269968AD3992D90CD5FE51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
Manifest number:          014A
Signing time:             Sun 14 Dec 2025 17:40:05 +0000
Manifest this update:     Sun 14 Dec 2025 17:35:05 +0000
Manifest next update:     Sat 20 Dec 2025 06:51:05 +0000
Files and hashes:         1: 3139302e3139362e3233342e302f32342d3234203d3e20323634363838.roa (hash: dwNE+n7bb1yq2/4r/hiHptnNP2+H759Fq434ABGhVkA=)
                          2: 3139302e3139362e3233322e302f32342d3234203d3e20323634363838.roa (hash: X0YfrPA6i9qxKibVrmp1RqTGUBC9/8sQS5XuxZuv1MM=)
                          3: 3139302e3139362e3232352e302f32342d3234203d3e20323634363838.roa (hash: 2TFE70+p1JQKJLzLrXAyTv9HO85R9Mfe4hSX5Q9jt94=)
                          4: 3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa (hash: 3+MB7T99p5y/DbLUKMNTwR+mP2J9sn/36EU7/BWt8GI=)
                          5: 3139302e3139362e3233372e302f32342d3234203d3e20323634363838.roa (hash: G7clLSagF4ZFY3UOqd/LMAm0xWpmmQZXUuBeX6E1lTU=)
                          6: 3139302e3130372e3234312e302f32342d3234203d3e20323634363838.roa (hash: cD9LXuzFSJ2oTzbP0NfoKkxzEaZn8dDCVM4/TScf+Cg=)
                          7: 3139302e3139362e3233382e302f32342d3234203d3e20323634363838.roa (hash: XDghWvZnsgd+bJLWBJ2STuSdO/2LC8KaVaqS1TodWJQ=)
                          8: 3139302e3130372e3234302e302f32342d3234203d3e20323634363838.roa (hash: 1j4uRf3L/kKfymd1EmQhNp+CY6krJ1DsWMrSkSCmzqY=)
                          9: 3139302e3139362e3233352e302f32342d3234203d3e20323634363838.roa (hash: gp5wz2zWJSezvWFcg/XRUcRf5PZ+g+9nyKiEKxWTUjw=)
                          10: 3139302e3139362e3233362e302f32342d3234203d3e20323634363838.roa (hash: UdUs/1gD9446L4zajJf4Di9FtULzLibnVKe+WLHpDHQ=)
                          11: 3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa (hash: Kda5YUOvvoTLfwR6WoxpVf9fEhgVwBUSpqzBkxGItZk=)
                          12: 3139302e3130372e3234352e302f32342d3234203d3e20323634363838.roa (hash: dfUdLR1ZD0V6GW0ff7cXlsz5CZtAHoB2qKEN/CpR/Lk=)
                          13: 3139302e3139362e3232362e302f32342d3234203d3e20323634363838.roa (hash: BFiQYA14v2OjJTSpnvCoTa3KdMKR6Baq2E5HxBZflZY=)
                          14: 3139302e3139362e3233392e302f32342d3234203d3e20323634363838.roa (hash: u0REvgyxhTaxrTnqM1+o8UZS/ZFSwTOQkHCEsdzjZMU=)
                          15: 3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa (hash: mRyq8lxw3rWpBho/mYhSeCJ8uufErPCjhN28UIxJVms=)
                          16: 3139302e3139362e3232342e302f32302d3230203d3e20323634363838.roa (hash: XGZp+7yWszc41l8aCWKKaQUUmP6eT13WEZjdjMq5z08=)
                          17: 3139302e3139362e3232392e302f32342d3234203d3e20323634363838.roa (hash: dzIrg29PBghrDahTTrEBo9NSnW9+2FEOy/3vkGfW5t8=)
                          18: A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl (hash: bUpV4n4VqNDjlBVVwdijmkFWTsEOSMSlGES7orw6koQ=)
                          19: 3139302e3139362e3232342e302f32342d3234203d3e20323634363838.roa (hash: wPH8lsnnYP5MnPvu/XdW/mCbOi5pewWhshVLa40xqqY=)
                          20: 3139302e3130372e3234372e302f32342d3234203d3e20323634363838.roa (hash: XmEhSFuHVuZM0xaQG4wqUOffljTbarv4gfEdQ1lrYQY=)
                          21: 3139302e3130372e3234322e302f32342d3234203d3e20323634363838.roa (hash: w6F/goUP3ryv9Il23qJ9AB4uDgIvA0K10GpNeWIAwIA=)
                          22: 3139302e3139362e3232382e302f32342d3234203d3e20323634363838.roa (hash: cm+2+l8fDwyxqPwwlVf6aHiMLWm4RzB13GKLbpcixs4=)
                          23: 3139302e3139362e3232382e302f32322d3232203d3e20323634363838.roa (hash: /plBcZTMN5PU/Vpi7/FJb4FKnXQkIvYnO/mJ+lZ1Hlc=)
                          24: 3139302e3130372e3234342e302f32342d3234203d3e20323634363838.roa (hash: 9FMVaQwOvkJe4ejMVwiJFIYqx4JrLbfvB9ImYZ/0AwI=)
                          25: 3139302e3139362e3233302e302f32342d3234203d3e20323634363838.roa (hash: zU04ry1mJqQ/ulBDHk/ZOZN99IwrGZ4IMYmUDtEaKH8=)
                          26: 3139302e3139362e3233332e302f32342d3234203d3e20323634363838.roa (hash: chPWMafWoF9pY4feSFD20cqMCGlpog4pfStajHri3EY=)
                          27: 3139302e3130372e3234302e302f32312d3234203d3e20323634363838.roa (hash: FqOfz0e9z38d44Q/VFPeDgOP6bFZPkzX5d2O/iXvJtc=)
                          28: 3139302e3130372e3234362e302f32342d3234203d3e20323634363838.roa (hash: VraYU4UEQDzyhlSKd5JuJynSlR4ge6NOwJ8fAug+Krg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 06:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f2:f1:90:9d:a4:a8:80:0d:26:99:68:ad:39:92:d9:0c:d5:fe:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Dec 14 17:35:05 2025 GMT
            Not After : Dec 20 06:51:05 2025 GMT
        Subject: CN=A016CB3BEB48FE18D9AD93CDA45D0F13B598F412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:e8:da:af:9d:8e:91:23:ac:6a:dc:50:aa:
                    f4:c5:9c:db:91:87:48:32:2a:5d:81:5a:b1:e4:97:
                    82:21:95:42:43:e7:f2:84:a2:53:50:f8:e4:bc:4f:
                    c0:36:95:86:a9:49:55:ab:04:2d:54:83:ad:98:10:
                    54:83:50:e0:ec:97:0f:a3:cd:44:b8:e2:b3:7a:19:
                    3b:16:2c:dd:79:85:38:97:ef:c8:36:37:b7:ce:1e:
                    ee:ba:ae:78:5d:05:a8:11:50:f1:3e:2d:8b:90:00:
                    b5:15:63:a1:0c:54:68:80:67:a9:50:3c:7b:bd:a5:
                    bf:ff:f4:e2:22:38:88:ca:b1:15:b8:fe:cf:4f:71:
                    c0:ba:91:27:f0:c8:57:56:5c:ae:d3:3b:92:cc:6d:
                    50:4e:67:21:84:bd:da:5c:03:e6:8f:13:db:d2:9d:
                    30:eb:4e:cd:67:67:7f:7b:41:d2:16:5a:00:72:c7:
                    8a:89:bf:18:14:7a:7a:61:81:4a:3c:9f:df:cf:ac:
                    1c:45:7d:26:24:a0:6b:86:9a:01:d9:83:b9:16:65:
                    b0:95:6f:a5:7c:a0:9f:ce:01:ee:9f:76:c2:61:62:
                    31:b9:a5:b8:ba:a7:25:a4:99:5b:86:c4:d8:2e:dd:
                    ca:98:88:9a:33:21:c7:96:37:7c:33:7b:8a:1d:3d:
                    f1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:16:CB:3B:EB:48:FE:18:D9:AD:93:CD:A4:5D:0F:13:B5:98:F4:12
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:dc:39:d9:0a:78:f4:51:bf:ed:a9:91:14:dd:6d:ae:f2:
         f4:8a:a6:96:66:e5:95:ac:49:c6:87:4f:e3:7a:1a:ba:06:d1:
         bb:e8:83:14:9a:bb:7c:01:ef:97:b8:bc:20:1c:fd:3b:9e:97:
         f2:10:eb:97:cb:f0:b9:51:ca:7c:50:8f:c0:84:af:b2:69:ef:
         c6:dc:63:48:db:9f:65:7d:59:6d:03:62:a7:a0:cb:1b:bd:73:
         03:8e:b5:a4:7e:8e:84:b1:a2:f5:4a:59:41:41:fe:de:f8:61:
         75:b6:d1:60:c2:c7:ad:d9:92:ef:50:de:32:3d:01:57:15:14:
         6d:61:e5:e9:77:dd:8d:c7:73:7e:ed:40:6d:f3:eb:21:ce:65:
         5a:59:0d:38:98:73:4b:09:eb:d2:8e:3b:dd:0c:5a:38:0c:be:
         11:f7:a3:ab:39:ad:40:60:e3:d9:a4:6f:f5:d9:4e:5b:eb:db:
         a2:bd:94:2c:92:90:d2:e3:11:37:8e:35:07:b7:40:b0:90:3c:
         1c:03:8c:1f:1c:d2:59:d6:a5:37:73:b4:d0:e0:dd:8c:51:2d:
         00:b6:d3:1e:9a:1e:06:3e:dc:5b:eb:a1:d9:73:c3:38:31:26:
         66:46:b4:fe:fd:65:41:84:1b:1c:7d:7b:09:80:bd:03:4a:49:
         e9:9f:a4:2c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUZ/LxkJ2kqIANJplorTmS2QzV/lEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgxNTdCQkYzNTg0NDY5MzE3RUI0MDU4RDFCOUIzNzlE
QzlEMTdEOTAeFw0yNTEyMTQxNzM1MDVaFw0yNTEyMjAwNjUxMDVaMDMxMTAvBgNV
BAMTKEEwMTZDQjNCRUI0OEZFMThEOUFEOTNDREE0NUQwRjEzQjU5OEY0MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCejar52OkSOsatxQqvTFnNuR
h0gyKl2BWrHkl4IhlUJD5/KEolNQ+OS8T8A2lYapSVWrBC1Ug62YEFSDUODslw+j
zUS44rN6GTsWLN15hTiX78g2N7fOHu66rnhdBagRUPE+LYuQALUVY6EMVGiAZ6lQ
PHu9pb//9OIiOIjKsRW4/s9PccC6kSfwyFdWXK7TO5LMbVBOZyGEvdpcA+aPE9vS
nTDrTs1nZ397QdIWWgByx4qJvxgUenphgUo8n9/PrBxFfSYkoGuGmgHZg7kWZbCV
b6V8oJ/OAe6fdsJhYjG5pbi6pyWkmVuGxNgu3cqYiJozIceWN3wze4odPfHFAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUoBbLO+tI/hjZrZPNpF0PE7WY9BIwHwYDVR0j
BBgwFoAUqBV7vzWERpMX60BY0bmzedydF9kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDkzOTREQjAwNzJGQkJENUVBRkM1NEM1QzU2MjE1REY2
ODA3Rjg2NkI0QzcyNTVBODJCMUQ3MkM5RTk3RDZELzAvQTgxNTdCQkYzNTg0NDY5
MzE3RUI0MDU4RDFCOUIzNzlEQzlEMTdEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODE1N0JCRjM1ODQ0NjkzMTdF
QjQwNThEMUI5QjM3OURDOUQxN0Q5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ5Mzk0REIwMDcyRkJCRDVFQUZDNTRDNUM1NjIxNURGNjgwN0Y4NjZC
NEM3MjU1QTgyQjFENzJDOUU5N0Q2RC8wL0E4MTU3QkJGMzU4NDQ2OTMxN0VCNDA1
OEQxQjlCMzc5REM5RDE3RDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJm9w52Qp49FG/7amRFN1trvL0
iqaWZuWVrEnGh0/jehq6BtG76IMUmrt8Ae+XuLwgHP07npfyEOuXy/C5Ucp8UI/A
hK+yae/G3GNI259lfVltA2KnoMsbvXMDjrWkfo6EsaL1SllBQf7e+GF1ttFgwset
2ZLvUN4yPQFXFRRtYeXpd92Nx3N+7UBt8+shzmVaWQ04mHNLCevSjjvdDFo4DL4R
96OrOa1AYOPZpG/12U5b69uivZQskpDS4xE3jjUHt0CwkDwcA4wfHNJZ1qU3c7TQ
4N2MUS0AttMemh4GPtxb66HZc8M4MSZmRrT+/WVBhBscfXsJgL0DSknpn6Qs
-----END CERTIFICATE-----
Generated at Wed Dec 17 05:05:14 2025 by rpki-client