This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft
File:                     21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft (raw, json)
Hash identifier:          d4Z/uNA328uykWfn5WZBNguS45h0ri5E7728m2MmsRo=
Subject key identifier:   C4:BE:59:53:39:38:95:B9:9F:B1:B0:73:1F:5E:D7:2A:82:54:14:C4
Authority key identifier: 21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6
Certificate issuer:       /CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6
Certificate serial:       057EE888325B1002E4A9D3F84816F1581F9F0142
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft
Manifest number:          0129
Signing time:             Sun 07 Dec 2025 02:06:00 +0000
Manifest this update:     Sun 07 Dec 2025 02:01:00 +0000
Manifest next update:     Fri 12 Dec 2025 09:47:00 +0000
Files and hashes:         1: 323830333a386135303a3a2f33322d3332203d3e20323733313735.roa (hash: 52CkrWIeh3/WtMUuKWKH8nsK+HsC8V+k1+vyMgSvhdE=)
                          2: 3139302e3131302e3232352e302f32342d3234203d3e20323733313735.roa (hash: uWEhrGLqJXMAoZTZyyMFW1p7Iz6/t6HLsdeX2wpttRM=)
                          3: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl (hash: nSfiSBp4WplJrLmJfM4NiCuWNExeR9AjbLNMXkXrhE0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Dec 2025 09:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7e:e8:88:32:5b:10:02:e4:a9:d3:f8:48:16:f1:58:1f:9f:01:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6
        Validity
            Not Before: Dec  7 02:01:00 2025 GMT
            Not After : Dec 12 09:47:00 2025 GMT
        Subject: CN=C4BE5953393895B99FB1B0731F5ED72A825414C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:e5:d3:59:3c:a0:ff:9b:48:20:0e:a9:7b:
                    6e:2c:d0:23:6c:a7:c4:15:5f:1c:03:9f:25:65:64:
                    c9:9d:32:eb:5d:d7:61:65:70:4c:de:dc:bb:df:d6:
                    7f:a3:e6:db:c4:c0:64:06:bd:53:0b:2e:b0:a2:98:
                    1f:c2:f2:de:2e:86:97:ac:0a:43:a4:f7:1f:82:f1:
                    21:b8:10:f9:a0:a1:4b:e4:d1:7a:13:cc:25:aa:3e:
                    42:e4:8f:e5:fa:bf:f8:99:ba:e9:13:d8:89:49:1a:
                    1e:c9:b4:0c:d1:b8:95:55:1b:72:8f:a6:6a:85:2b:
                    ca:7b:b1:ce:42:83:a9:8a:5f:61:17:f2:3a:3b:1d:
                    69:47:74:03:27:a6:b6:86:05:2f:fd:e0:5c:1c:17:
                    a2:70:36:43:8f:c4:58:b3:8a:a7:1d:01:8e:06:b1:
                    dd:a1:d3:1d:b0:07:1c:9f:7f:cd:d4:8f:e1:6b:66:
                    c9:59:5d:d7:b6:91:f2:2a:87:1d:9e:cc:1e:ae:cd:
                    14:7a:54:aa:d5:60:f7:c6:45:b8:f0:5e:2f:b5:53:
                    73:34:fe:24:3e:13:01:7d:77:ee:60:f9:f6:bb:45:
                    e6:d6:38:b2:18:12:b9:cd:10:62:50:93:42:8c:6b:
                    da:84:f5:13:1f:e7:44:9d:9c:81:0d:cf:66:1c:53:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BE:59:53:39:38:95:B9:9F:B1:B0:73:1F:5E:D7:2A:82:54:14:C4
            X509v3 Authority Key Identifier:
                keyid:21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e8:4e:0b:88:3f:1a:01:58:be:0b:88:7f:3b:53:c8:26:d0:
         81:69:46:38:a6:8e:7a:70:a4:1f:d3:9d:e9:c3:39:c3:72:b5:
         9f:f7:08:19:4f:25:0e:85:07:16:a3:f4:50:dd:c7:1b:e3:52:
         8d:06:72:f1:85:8e:3a:25:27:7d:6b:87:49:ac:99:b7:55:31:
         74:d1:a5:a9:dc:8d:b4:ea:96:32:7a:96:1e:6d:f5:eb:e8:e8:
         fa:9c:14:0a:47:43:bd:67:53:84:22:f6:51:ed:e3:04:4e:cf:
         6a:02:b2:4b:40:d4:6b:81:27:82:82:c8:52:2f:3e:b0:bb:47:
         56:de:5e:3f:29:4c:69:38:a1:34:96:62:e0:dc:39:73:fd:81:
         9d:78:29:b8:f5:f8:5a:28:62:14:a4:44:d6:39:be:0e:4f:82:
         4c:37:62:e8:fd:40:6b:10:34:13:66:4a:a6:f5:05:a9:d3:e9:
         21:66:56:c9:f3:19:bb:3f:1f:ba:a0:7b:1c:84:a7:1e:ab:63:
         de:a7:1b:d7:a4:b7:7e:19:a0:da:a0:93:00:62:57:37:5b:a4:
         b8:60:7e:db:55:f6:64:be:28:ec:da:35:71:51:48:a6:e8:f2:
         e3:2d:3e:48:e3:25:0e:e5:1b:5c:cd:a3:28:e1:2c:68:df:0f:
         10:d3:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----