This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft
File:                     4212A4C43151C156150D9BDED03D7236921BF9B8.mft (raw, json)
Hash identifier:          QkapFmrUCY2x3D4dJJXyT7UjsuZRuTwqLTEXBlBbj9o=
Subject key identifier:   41:FA:AA:71:E9:49:05:48:57:E4:60:6E:E7:5C:E2:1D:CE:4E:8B:B2
Authority key identifier: 42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
Certificate issuer:       /CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Certificate serial:       2D7512D9DA1619820D4F98CBDB1D61DE3E60A1AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft
Manifest number:          CA
Signing time:             Fri 05 Dec 2025 20:14:15 +0000
Manifest this update:     Fri 05 Dec 2025 20:09:15 +0000
Manifest next update:     Wed 10 Dec 2025 21:36:15 +0000
Files and hashes:         1: 4212A4C43151C156150D9BDED03D7236921BF9B8.crl (hash: HvYSrXMIXHPdzZfWe5YDE+3cjhCRyG65ZdtoXO2q9No=)
                          2: 323830333a316265303a3a2f33322d3332203d3e20323733303635.roa (hash: EDnsk6Pe6w45gt7fELta4L5+EE/w3uMbDtLtTK8jGe8=)
                          3: 3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa (hash: dkC8mqPWJaZAh71pFh6lhzs6FuM1DF4GOc7WdBTJMKs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 21:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:75:12:d9:da:16:19:82:0d:4f:98:cb:db:1d:61:de:3e:60:a1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4212A4C43151C156150D9BDED03D7236921BF9B8
        Validity
            Not Before: Dec  5 20:09:15 2025 GMT
            Not After : Dec 10 21:36:15 2025 GMT
        Subject: CN=41FAAA71E949054857E4606EE75CE21DCE4E8BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:a1:68:b2:96:f3:2c:df:a3:9d:e1:88:26:
                    62:b1:b5:22:2c:9e:77:4a:a8:75:f0:52:fd:4b:c4:
                    34:13:93:ea:2e:0a:01:dd:5b:c5:63:10:79:1a:12:
                    2d:f6:9e:20:cc:c4:54:a8:d3:1d:32:11:73:f8:d8:
                    5b:13:4c:e2:85:53:cd:3a:03:79:17:d6:a0:dc:84:
                    3d:32:9a:f3:25:42:1c:c7:bc:dc:d5:51:a3:6a:b3:
                    b3:71:b6:96:24:c5:ab:0e:b4:be:c7:9d:92:19:64:
                    b4:b7:49:98:7a:da:b2:8c:f9:2d:29:07:ed:a7:1d:
                    80:7d:d7:2e:8e:bf:70:ca:7a:00:7f:d5:4c:4b:cb:
                    b5:75:eb:02:8e:a6:ad:a8:14:a2:3f:a0:e5:4c:9a:
                    64:ca:4c:41:a7:95:3f:d2:2f:93:9d:a4:3a:5b:a5:
                    17:40:95:d7:10:5c:0a:32:4b:11:95:8c:cf:19:e3:
                    8d:9c:09:41:57:d3:ff:3e:70:be:64:96:6f:01:e4:
                    a3:fc:b2:ea:7a:cc:2e:e9:d0:dd:04:4d:dc:66:fb:
                    c0:4c:f9:5d:c6:3a:5e:d8:dc:d8:21:c7:75:db:47:
                    04:c1:4c:bf:e9:f0:a0:b0:59:29:66:51:58:5f:07:
                    c7:fc:25:cd:60:42:e9:1b:43:a0:dc:5d:b3:35:a5:
                    43:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FA:AA:71:E9:49:05:48:57:E4:60:6E:E7:5C:E2:1D:CE:4E:8B:B2
            X509v3 Authority Key Identifier:
                keyid:42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6a:9f:d7:6c:66:ae:d6:ca:17:f5:5d:57:43:ee:69:ea:c5:
         a5:76:17:63:b8:4a:df:2f:a1:c2:f7:66:8f:a9:48:31:01:32:
         96:0e:63:eb:95:d0:ec:9f:50:e8:b1:08:eb:48:ad:7a:2e:67:
         c2:98:59:fc:8d:7a:1c:a8:59:37:96:e2:8f:a9:0b:b8:db:c6:
         15:c0:13:2e:d5:5a:f3:e9:b8:df:dc:1e:9a:ec:70:e1:4f:2b:
         10:7c:13:ce:42:cb:36:0e:da:46:02:ef:3a:20:65:c0:e4:49:
         0a:6a:87:2d:c7:89:ef:20:fd:d1:0a:a6:4e:1f:48:4e:e0:5c:
         c0:3a:98:c9:3a:67:88:6a:64:15:ef:5f:60:38:75:39:04:f3:
         a6:a3:0a:97:d7:01:7d:6c:ac:2b:88:f6:a6:f5:7f:20:c5:75:
         7e:81:4c:39:3a:62:76:fb:60:e7:c8:b6:d3:d1:a5:17:2a:84:
         3a:18:b2:3d:57:8a:b5:87:67:0a:4e:13:9a:16:37:2d:99:d5:
         03:da:a8:ef:60:01:7b:fc:5c:a4:12:66:94:32:b4:6d:19:c4:
         80:06:de:b0:59:09:7f:db:38:68:2a:1b:d0:be:ce:3b:77:91:
         a3:0b:db:dd:3e:d4:9e:49:d3:d8:0d:97:a3:f2:38:9b:c7:c0:
         50:06:b5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----