This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
File:                     D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json)
Hash identifier:          7M199zN9WmPcOJ/GGjVTtoeHEG1OlrE687RE4Qa2Lbc=
Subject key identifier:   E9:68:0C:AF:AC:76:89:44:4E:16:73:51:10:03:D2:EA:69:EE:17:85
Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9
Certificate issuer:       /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
Certificate serial:       681A939584952EB1F5F5EBB43EF2601F574BBAB6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
Manifest number:          013F
Signing time:             Fri 05 Dec 2025 23:56:15 +0000
Manifest this update:     Fri 05 Dec 2025 23:51:15 +0000
Manifest next update:     Thu 11 Dec 2025 09:51:15 +0000
Files and hashes:         1: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: uKlYknlH6eACUcPldvmZgtLq4BGG754AwHjUVlk6W6w=)
                          2: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: mBKhXxYsc1vM9qDvar5UCFnx02/AKC+zK1K7wPk+Ot0=)
                          3: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: mP7g3MkLy3YDIw5M0fm+weJWJp92neC6cK8kqGPYDSQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1a:93:95:84:95:2e:b1:f5:f5:eb:b4:3e:f2:60:1f:57:4b:ba:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
        Validity
            Not Before: Dec  5 23:51:15 2025 GMT
            Not After : Dec 11 09:51:15 2025 GMT
        Subject: CN=E9680CAFAC7689444E1673511003D2EA69EE1785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d8:f3:2c:a1:19:3f:70:40:59:77:86:21:dc:
                    30:10:8f:75:43:34:77:ac:10:df:1f:25:95:93:14:
                    09:7c:ab:a4:8a:62:93:96:5f:8a:a4:21:ce:34:9f:
                    e5:d7:fc:de:65:80:89:5c:59:25:ec:38:e5:c2:53:
                    12:c2:7e:1c:53:0d:6e:b9:76:12:bd:a2:41:96:6c:
                    85:80:21:6c:98:db:1b:89:65:ed:00:b3:01:08:9b:
                    cc:3d:41:95:e0:1c:c4:a6:13:d7:17:ec:e6:43:1f:
                    b0:9b:f0:82:30:a1:1a:55:ea:cd:97:58:a2:40:f7:
                    d4:77:3c:31:04:a0:54:35:10:c5:7a:c5:ee:4a:2d:
                    0d:4c:e0:d3:a0:60:2a:7f:4f:0b:81:cb:68:0d:20:
                    0e:2f:92:4b:1b:39:e5:78:d5:77:9b:5a:18:31:0c:
                    e4:eb:a8:57:ce:ff:1b:68:3f:75:59:87:9f:36:ad:
                    6f:b8:97:6f:f7:a8:a2:4a:8f:12:60:ad:8e:0d:d9:
                    a0:24:59:e9:b0:69:a8:9b:c0:fb:df:5f:5d:f1:40:
                    b7:3d:9d:d1:34:be:7b:0c:24:98:19:88:b3:c8:b0:
                    50:8f:fc:24:77:79:98:84:e2:91:33:9b:34:47:fd:
                    0a:d6:83:79:f8:5a:b4:5c:86:27:64:e4:73:66:d1:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:68:0C:AF:AC:76:89:44:4E:16:73:51:10:03:D2:EA:69:EE:17:85
            X509v3 Authority Key Identifier:
                keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ae:a0:a5:64:3a:c9:cb:da:5d:ce:e6:4b:3e:8d:4a:b0:22:
         95:c8:1a:4b:ae:1f:fd:9e:4d:90:cc:74:a7:6d:6e:1a:ad:47:
         cd:49:64:c1:d8:57:46:64:e1:5e:fd:c6:49:43:2f:79:03:3f:
         1d:4a:c4:96:1a:c8:ff:be:90:ac:28:c4:9a:1b:d2:a3:2c:af:
         d3:b9:64:db:89:68:32:a5:18:06:f9:52:a7:2c:36:2c:a0:ad:
         0f:26:7d:00:80:7b:12:51:16:dc:ff:4c:53:e4:67:1a:54:36:
         ca:36:36:dd:eb:7d:28:b7:2b:71:2c:ee:c7:f9:b6:e4:a3:d9:
         25:3e:9c:27:ed:56:cd:46:5e:6c:07:95:71:74:0f:da:1f:08:
         cc:12:76:df:d6:e3:31:f3:31:8b:8d:b0:6e:d5:94:e0:a3:47:
         a6:70:ec:b1:f2:18:ea:c8:74:23:d7:40:06:96:a9:2f:ec:3f:
         09:9d:14:6a:ec:06:da:88:af:b7:8f:91:c7:61:53:06:ab:09:
         e0:1e:0e:c2:ce:17:6a:3b:97:9a:b5:83:de:54:76:8a:fd:f1:
         e2:52:0e:41:3c:c2:4d:fb:b3:2f:86:f4:e4:fa:46:6b:7b:6a:
         af:f5:d4:39:89:f5:0d:cd:e1:13:98:bb:4b:9b:80:c1:ea:65:
         ea:97:20:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----