This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft
File:                     21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft (raw, json)
Hash identifier:          d4ZP3iNGjKKdUdz2sQky1XOPbWoTmdVbvSlYV3JiNpo=
Subject key identifier:   40:C4:91:B0:6E:3A:84:CE:44:75:03:1A:FC:35:E4:89:21:78:C0:48
Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D
Certificate issuer:       /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D
Certificate serial:       7494368F10D93A6C0FF9830C52F5821B72243424
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft
Manifest number:          013D
Signing time:             Fri 05 Dec 2025 23:31:01 +0000
Manifest this update:     Fri 05 Dec 2025 23:26:01 +0000
Manifest next update:     Thu 11 Dec 2025 14:44:01 +0000
Files and hashes:         1: 3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa (hash: Axfi1vgCv2D0D6QqnuJcrPN9fByY9W/ouznL3Xg+MfY=)
                          2: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl (hash: 5Ysfa/Nb2W4lijd/oHat5cwdAPC3WY3Isz06uegLWdY=)
                          3: 323830333a323231303a3a2f33322d3438203d3e20323731383936.roa (hash: adCs36QNzm3GUXnrmgFT4GEFYY5rriy/pu2JadFfnwA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:94:36:8f:10:d9:3a:6c:0f:f9:83:0c:52:f5:82:1b:72:24:34:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D
        Validity
            Not Before: Dec  5 23:26:01 2025 GMT
            Not After : Dec 11 14:44:01 2025 GMT
        Subject: CN=40C491B06E3A84CE4475031AFC35E4892178C048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:c8:e8:3f:d9:c3:1c:76:42:50:ce:56:81:
                    6c:df:4d:a7:cc:ae:ef:82:74:39:13:7c:6b:73:00:
                    d2:40:78:fd:67:0e:75:90:a8:19:dd:3d:65:28:1c:
                    99:46:28:e2:60:23:de:c6:c1:d1:a1:08:be:5c:f2:
                    b7:fb:51:86:fc:db:7d:94:de:be:34:e8:52:b4:18:
                    15:b5:f1:cd:65:34:4e:91:7a:7f:e5:9a:99:58:7b:
                    7b:ec:f0:ca:55:e2:dd:fd:53:4c:9e:43:fc:c8:18:
                    6a:6d:17:72:33:59:5e:5b:9d:65:6a:fb:e3:0d:58:
                    6d:f2:4b:42:9b:17:e4:3f:dc:c3:45:90:58:70:20:
                    04:4c:d9:c4:08:b9:03:c2:90:ed:9d:56:9b:7c:db:
                    92:71:51:59:01:53:3d:32:6c:3d:8a:fb:d8:94:e0:
                    0e:41:32:d8:a3:c3:76:c1:7d:9f:85:3f:e4:65:e6:
                    57:7d:5d:2d:36:72:99:ce:ea:ec:72:42:da:8f:4a:
                    a5:30:e4:0c:7f:3b:52:f0:cb:0e:02:b6:93:30:03:
                    00:47:a3:7e:a5:e9:26:6e:01:73:af:2a:a8:25:5e:
                    5e:f1:2a:90:1a:e0:d2:dd:a3:d5:a2:80:ee:93:b9:
                    f8:39:22:88:18:d6:86:16:46:a0:16:40:e0:a2:3d:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C4:91:B0:6E:3A:84:CE:44:75:03:1A:FC:35:E4:89:21:78:C0:48
            X509v3 Authority Key Identifier:
                keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8b:a4:38:6e:a5:54:43:1c:20:e4:45:9d:80:b2:97:13:3d:
         c7:98:98:be:fb:6f:42:f4:06:cf:e7:74:85:16:77:f1:48:64:
         c7:ab:69:93:c2:22:76:95:43:1c:25:7b:29:25:3f:0a:40:05:
         e1:2d:59:34:a1:88:e3:8d:28:b3:3a:53:69:bd:8c:3e:b6:5c:
         1a:de:df:d8:18:f5:05:a9:e1:a9:eb:f9:1e:9e:61:63:f5:37:
         c3:d6:ed:98:fb:0a:4e:13:ec:56:47:8a:23:db:f9:b5:0b:fc:
         d1:09:d5:6b:63:89:93:5e:40:4e:56:6c:6f:dc:79:01:57:7d:
         19:d3:b5:2d:59:a8:93:cb:a7:63:09:95:85:e2:83:e1:a4:1c:
         7a:60:93:d9:e3:60:d8:ee:47:6a:7b:65:63:80:59:41:4f:34:
         67:19:a1:ff:f4:5a:73:4d:da:bd:46:cc:d2:d1:f5:4d:e7:41:
         3a:34:d3:36:47:89:2f:58:bc:7c:37:47:7e:20:06:5a:08:0a:
         dc:ad:8c:8d:5b:5b:c3:f8:8c:2e:13:9f:86:07:71:9a:dc:73:
         e4:5e:b8:94:65:4e:d3:3a:92:a0:7b:2d:5b:cc:b2:3d:85:1b:
         f6:97:cc:6d:d0:3d:87:e1:a8:41:27:b5:ab:28:3b:12:57:64:
         96:d8:dc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:18:12 2025 by rpki-client