This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft
File:                     C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft (raw, json)
Hash identifier:          EpcD5d9DEfMynxtOfPDMHcGGJpZU6BGWxJy2uTgfJ+o=
Subject key identifier:   D3:5C:68:F6:22:CD:86:08:23:42:BF:5A:C0:13:DC:CD:EF:9A:60:16
Authority key identifier: C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB
Certificate issuer:       /CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
Certificate serial:       46137FC17AC478666A6F9507EC7701E82AF2F7B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft
Manifest number:          DF
Signing time:             Sat 06 Dec 2025 21:08:14 +0000
Manifest this update:     Sat 06 Dec 2025 21:03:14 +0000
Manifest next update:     Fri 12 Dec 2025 10:33:14 +0000
Files and hashes:         1: 3138312e3130332e38302e302f32302d3234203d3e20323733383534.roa (hash: IUpimjvqH2dYMAL1eIXFjM8TTaKYutlKAv30VA0PWmg=)
                          2: 323830333a313535303a3a2f33322d3438203d3e20323733383534.roa (hash: 118R8qhUBEliDEBNREJUh/pVPGn5UrSJnUvasyhqcZo=)
                          3: C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl (hash: zPixRvA7GR5ki1q4/PlYTz+1RlOFecsT9Hvp7Xl5xA4=)
                          4: 3138312e3130332e36382e302f32342d3332203d3e20323733383534.roa (hash: KLibndJisWWSGu9T2QlmHNwMupSWbDHOvNm5JzJqL64=)
                          5: 3138312e3130332e36342e302f32302d3234203d3e20323733383534.roa (hash: myZ3QiGD5CedJIxyEKez4w+aVQLqbflJL3K48IYKhX8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:13:7f:c1:7a:c4:78:66:6a:6f:95:07:ec:77:01:e8:2a:f2:f7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
        Validity
            Not Before: Dec  6 21:03:14 2025 GMT
            Not After : Dec 12 10:33:14 2025 GMT
        Subject: CN=D35C68F622CD86082342BF5AC013DCCDEF9A6016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:10:08:cf:fd:1d:1f:b1:4b:87:d7:6d:67:6e:
                    6b:ff:23:9d:20:24:57:9c:61:ef:f4:23:64:af:98:
                    3a:f8:8a:ec:a9:3e:cf:73:c1:d1:79:f6:47:28:cb:
                    47:67:f2:63:bd:f0:6a:47:ea:e3:e8:ec:88:a0:9f:
                    b8:e6:3b:0b:55:dc:b9:32:9b:9f:ed:9b:86:0b:90:
                    50:4a:8d:c9:cf:fa:9c:4e:26:aa:df:1e:b6:2c:e9:
                    68:f2:a6:c4:f5:62:a0:53:d8:ea:d9:34:c5:fa:ea:
                    52:01:ee:6e:29:e8:6d:d7:8d:d4:85:03:16:6a:87:
                    c8:cb:06:96:71:a5:78:89:ef:f6:ae:92:f2:1d:40:
                    8b:a6:a0:4c:37:34:ea:32:a5:dc:4f:08:f4:a3:8d:
                    23:db:4e:e5:1e:72:4f:31:6a:8d:98:ff:63:be:c7:
                    8c:1d:33:27:1e:b4:fa:82:a0:17:d6:25:5a:79:ae:
                    b9:48:78:bf:38:49:da:f6:45:07:04:cc:8d:c9:c0:
                    67:9b:6b:82:bd:a8:64:bd:3c:a9:21:4a:74:1a:c9:
                    55:c2:a5:9e:c2:02:6f:53:ec:b5:2f:bf:d7:84:14:
                    60:fa:88:24:96:9a:54:9e:aa:da:18:cc:6c:b7:c4:
                    78:a4:64:22:b1:68:5f:05:c6:76:3d:6b:db:c0:a2:
                    0c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5C:68:F6:22:CD:86:08:23:42:BF:5A:C0:13:DC:CD:EF:9A:60:16
            X509v3 Authority Key Identifier:
                keyid:C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:02:c6:f7:54:af:c1:14:15:10:db:8b:2e:a4:3a:9a:0b:96:
         48:81:fb:89:97:55:d4:f3:15:0b:2d:bc:d2:46:70:37:58:86:
         5b:21:1e:43:52:8e:e5:96:8f:73:10:23:df:22:6f:ed:26:08:
         eb:fe:ca:85:28:36:07:b1:f6:ab:00:0a:49:46:31:a8:c0:0d:
         84:65:8f:64:7c:c8:c3:fd:ef:0e:e2:c1:5e:c2:6b:5e:71:54:
         8e:7d:a6:16:81:4f:19:e0:76:d6:a6:de:24:6d:76:95:ee:eb:
         18:a2:58:c8:c5:59:2d:d9:ff:35:43:84:62:aa:5f:4b:1b:f5:
         d2:7c:6e:45:35:3d:45:de:a0:e6:8c:de:e6:d9:ed:f4:e4:12:
         38:7e:00:3f:25:ed:20:df:5e:36:77:6a:9f:7e:dd:ae:38:04:
         6a:b3:aa:a9:20:ba:92:b2:8b:7d:42:bd:5f:71:f2:1a:0d:ea:
         65:01:74:1a:0d:99:6f:65:2c:e6:07:3e:6c:51:bf:06:37:4e:
         ca:ec:ed:ec:89:ac:c1:a5:11:b9:6f:4d:df:08:3d:f7:e6:a0:
         7b:ea:28:c2:2f:d6:7c:0d:07:af:94:f8:07:ab:73:05:74:c4:
         45:be:2e:04:c1:a4:9c:00:c8:38:c2:18:6b:7a:42:4b:a7:23:
         8e:b6:a3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----