This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft
File:                     899F313321C13B5591ABC1D56B271A1F6BB60E12.mft (raw, json)
Hash identifier:          iOE60NWKOQ01FJx7oqHdAMabB7hCu+vjHMoSfNMNlx0=
Subject key identifier:   01:66:43:45:8D:A4:59:38:52:27:48:90:D1:B0:6F:B7:1A:56:7B:DC
Authority key identifier: 89:9F:31:33:21:C1:3B:55:91:AB:C1:D5:6B:27:1A:1F:6B:B6:0E:12
Certificate issuer:       /CN=899F313321C13B5591ABC1D56B271A1F6BB60E12
Certificate serial:       3972EA8B55223E326F19BB667E0BED8006881ABF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft
Manifest number:          0143
Signing time:             Thu 04 Dec 2025 23:27:27 +0000
Manifest this update:     Thu 04 Dec 2025 23:22:27 +0000
Manifest next update:     Wed 10 Dec 2025 02:37:27 +0000
Files and hashes:         1: 3230312e3232302e32392e302f32342d3234203d3e203532343633.roa (hash: xAMiS5i8k4F4Xi8yiRESUmhHV16f78fzptXBIfxHBRY=)
                          2: 899F313321C13B5591ABC1D56B271A1F6BB60E12.crl (hash: V2BjM4bRNMTC7bOyjq6QKxT3Ckr4Hs2il+XHHuVWJ4k=)
                          3: 323830313a31653a383030303a3a2f34382d3438203d3e203532343633.roa (hash: qBxpt9I/moNmLOdo3bArmcRqtfOXLfEDmvJlApfmUjA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 02:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:72:ea:8b:55:22:3e:32:6f:19:bb:66:7e:0b:ed:80:06:88:1a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899F313321C13B5591ABC1D56B271A1F6BB60E12
        Validity
            Not Before: Dec  4 23:22:27 2025 GMT
            Not After : Dec 10 02:37:27 2025 GMT
        Subject: CN=016643458DA4593852274890D1B06FB71A567BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:3c:fa:e7:e0:de:46:e3:fd:1c:cc:d4:ab:
                    1e:4f:de:c2:60:85:47:b7:9b:ea:97:16:e4:1e:3e:
                    6f:eb:60:ca:83:fb:39:db:29:e7:01:66:97:c4:48:
                    7b:b3:9b:c8:41:3a:7b:e5:ab:91:3b:6f:ae:10:c1:
                    c7:27:5b:80:e0:b7:f8:2c:4b:b6:75:97:11:a5:80:
                    8e:a2:ee:a6:33:71:5b:ef:e4:52:df:c5:73:af:e2:
                    2e:f9:1c:1c:b8:ee:6a:c5:aa:e4:ac:08:31:76:6b:
                    2e:3d:d4:13:1b:c3:a3:81:1e:6e:08:f3:da:f1:e2:
                    1d:a9:c5:62:10:e2:d7:3d:b2:c8:c9:99:c4:83:44:
                    70:4b:21:2f:f4:51:e3:b2:46:e6:8d:89:a1:e9:67:
                    0c:c7:f9:94:5a:4e:6a:97:62:e4:b2:75:e4:fc:75:
                    3e:65:34:9f:e3:fb:4c:24:c2:6b:72:79:d5:55:ae:
                    c9:af:2b:b5:33:ed:9b:2e:5d:05:f5:56:f1:2c:43:
                    f8:a9:d0:a2:8b:93:7d:a7:68:38:a3:6b:7a:35:92:
                    c9:f3:91:e0:7a:30:b7:7f:2c:dd:87:81:2f:29:88:
                    0a:57:5b:e2:3b:5f:a4:33:b2:9d:4f:f0:56:d8:83:
                    2f:0d:5a:4e:7f:dd:5d:b9:a4:16:fc:68:7a:98:b5:
                    90:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:66:43:45:8D:A4:59:38:52:27:48:90:D1:B0:6F:B7:1A:56:7B:DC
            X509v3 Authority Key Identifier:
                keyid:89:9F:31:33:21:C1:3B:55:91:AB:C1:D5:6B:27:1A:1F:6B:B6:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:af:fd:24:d7:d0:bf:dd:47:3f:67:be:1d:91:43:c1:f5:31:
         c0:17:65:d6:96:7c:fa:19:a2:b3:44:39:8c:1e:8c:3e:d2:15:
         44:02:da:f3:73:0b:4f:aa:7a:bd:8a:d0:6b:a9:d7:fd:5a:18:
         0d:46:58:2d:5c:f0:27:26:21:72:10:dd:e6:1c:69:0e:25:a0:
         7b:10:d9:6d:b0:ce:92:b7:89:79:29:fd:74:ae:db:3b:b1:5e:
         bf:ed:45:ef:01:ca:11:bc:74:92:70:50:96:5a:06:f3:f1:0b:
         f9:36:a7:d6:ba:6e:ba:c2:30:be:b3:3c:75:bd:b5:ef:ab:52:
         b8:4f:22:45:58:34:45:d9:a9:9f:ab:b8:db:55:ea:66:d5:f5:
         29:c1:87:c9:c9:77:b2:22:d7:26:2e:ea:09:2a:a6:98:5f:d1:
         cc:94:f0:0f:03:ac:6d:0b:1c:97:4f:23:cf:f9:58:2a:7c:2d:
         f7:a9:89:5d:b7:80:a7:a2:fa:f9:2e:4a:10:a2:a8:f6:17:8a:
         70:ed:f2:4c:20:0f:68:8d:e7:79:bc:70:6f:7a:39:2c:9d:f7:
         2a:2a:6f:22:5e:34:52:f5:ed:7c:62:58:b7:a3:90:0c:b1:b5:
         aa:ec:9c:4f:db:f8:6f:92:31:9d:f9:e6:24:39:72:f2:8f:04:
         1e:84:a6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----