This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
File:                     D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft (raw, json)
Hash identifier:          0CXISiGk+o6p3Y4aZu/NA3FEojCCz3svCnqtcO4vO7o=
Subject key identifier:   60:53:C1:CC:85:56:4F:B5:AD:32:F4:74:DF:69:32:C2:88:68:FD:51
Authority key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B
Certificate issuer:       /CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
Certificate serial:       4495A4D6DE4ECE7FD167F810C03D6A904CF66211
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
Manifest number:          0147
Signing time:             Thu 04 Dec 2025 06:27:50 +0000
Manifest this update:     Thu 04 Dec 2025 06:22:50 +0000
Manifest next update:     Wed 10 Dec 2025 04:26:50 +0000
Files and hashes:         1: 323830333a623230303a3a2f33322d3438203d3e203532333636.roa (hash: XKA1MlyxnJrXu8kNyuF9oL4/BFd9LVJobp86M1utvUE=)
                          2: 323830333a623230303a3a2f33322d3438203d3e203532323431.roa (hash: 3On1XVpEl3GN2nuqEyHkkVcnUfGWvNLDTKqn000MRF0=)
                          3: D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl (hash: Y2AsPvKUNyU8Ubm1dzW4Y8yWbNF6weeAPwMiRUUI1t0=)
                          4: 3139302e39392e39362e302f32302d3234203d3e203532333636.roa (hash: c7Jd2Hfbf5O72dBsGLHG8rBE6OFkyBn9EV8Lu0DYYmc=)
                          5: 3139302e39392e39362e302f32302d3234203d3e203532323431.roa (hash: O/46B4/u/eHOyJFeGsRSsHAhdDpnVI0nukknP3HeWiE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 04:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:95:a4:d6:de:4e:ce:7f:d1:67:f8:10:c0:3d:6a:90:4c:f6:62:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
        Validity
            Not Before: Dec  4 06:22:50 2025 GMT
            Not After : Dec 10 04:26:50 2025 GMT
        Subject: CN=6053C1CC85564FB5AD32F474DF6932C28868FD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:6f:4c:46:04:66:78:9b:74:b6:71:f5:36:
                    86:11:44:bf:7c:d5:3e:bf:ff:04:e1:c0:8a:2f:06:
                    f4:87:9c:c8:ee:e5:b4:50:1c:4d:7f:2e:db:ae:08:
                    e4:1a:dd:e5:7e:48:c8:14:b2:ab:78:ce:24:6a:4d:
                    f3:54:2d:72:72:66:e7:7f:d0:61:92:cc:cc:f9:63:
                    9f:c4:55:a4:cf:8f:25:c5:21:42:e8:74:a0:7a:c6:
                    1d:55:67:14:c6:27:fe:a4:52:f6:ce:18:1b:2d:ce:
                    6e:31:fa:25:8c:29:f4:2a:39:20:bd:72:42:45:72:
                    08:99:07:d6:60:d9:a3:6a:9f:0a:14:f5:2f:d6:c0:
                    00:2d:50:a7:df:f0:f8:8a:99:89:97:30:78:a1:14:
                    55:03:9e:97:10:9f:e7:fc:b8:21:1b:c6:75:bc:85:
                    d4:38:81:cb:f1:25:14:39:41:8d:92:72:9c:cd:d9:
                    e8:f6:ab:09:3b:16:9f:7b:0e:b4:49:0b:06:e8:dc:
                    44:2c:a2:e7:b1:0e:1c:34:fc:c6:e5:b5:99:e8:6e:
                    ee:70:2d:88:e3:7a:f6:38:18:ce:dd:db:5a:e6:57:
                    a6:0e:a5:4f:da:96:d0:a4:88:c9:ea:54:f3:0f:d6:
                    ea:0a:8d:43:dc:4c:33:e5:b8:3c:50:dd:80:24:c4:
                    6f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:53:C1:CC:85:56:4F:B5:AD:32:F4:74:DF:69:32:C2:88:68:FD:51
            X509v3 Authority Key Identifier:
                keyid:D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:11:70:da:f9:cd:08:f9:9b:b5:b0:91:17:9e:e4:d1:ab:37:
         83:b2:fd:c6:57:65:a5:f8:cc:4e:b2:06:ad:86:e6:b6:a7:24:
         c1:51:1a:80:ff:1b:08:da:db:e5:11:74:86:01:fe:7a:ba:be:
         ae:18:78:91:1b:67:a0:74:2b:f5:4b:4b:64:40:66:ed:c4:a0:
         ec:2f:4f:1a:69:a9:e3:b9:8d:40:04:a2:8c:5e:26:1c:1b:de:
         65:27:4c:2c:75:89:07:25:bb:85:d1:6c:d1:70:42:a5:de:66:
         69:9d:89:86:73:f6:7c:04:c3:f0:f8:fb:67:37:b1:35:ce:e6:
         65:91:6a:d4:e6:de:64:ab:a4:e4:55:b6:21:3a:34:b0:b9:85:
         87:40:95:a8:73:1a:41:a3:d6:41:21:09:93:03:86:19:ab:a5:
         1e:27:79:2b:22:0c:32:35:d9:4c:2a:ad:3a:1a:48:44:b2:8d:
         93:81:c7:9d:6d:12:c6:5d:9b:fd:f8:29:dc:f8:c6:24:ff:3e:
         f5:28:6b:64:84:99:e0:9a:c9:bd:38:ff:4a:28:98:39:d8:56:
         b1:bd:78:64:b3:b1:cf:85:78:37:d5:03:6c:fe:13:91:dc:df:
         d1:27:f1:6d:03:6e:1a:bc:70:43:68:97:60:04:45:4e:e7:7f:
         be:e7:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----