This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft
File:                     322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft (raw, json)
Hash identifier:          hMX1RIo3XhRJcY5bjC7EPkImPG5JQd3kcz2Vot6/rnk=
Subject key identifier:   24:68:A5:99:9F:27:FD:84:33:8B:B2:4B:BF:B2:25:BE:8A:AB:EA:84
Authority key identifier: 32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4
Certificate issuer:       /CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
Certificate serial:       342C285533D94234CA8892E2A50344DBADC28B82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft
Manifest number:          0143
Signing time:             Fri 19 Dec 2025 18:55:37 +0000
Manifest this update:     Fri 19 Dec 2025 18:50:37 +0000
Manifest next update:     Wed 24 Dec 2025 18:52:37 +0000
Files and hashes:         1: 34352e3138392e3235342e302f32342d3234203d3e20323635363133.roa (hash: rVIiu5WVqu8Y4cV98xhMjmLXT3IdAb8P0MOsNFgJoxw=)
                          2: 34352e3138392e3235322e302f32342d3234203d3e20323635363133.roa (hash: gWqcR/oF+g1Fr8pS+6/53npLiuWDHxOFfad6LX/OY+w=)
                          3: 34352e3138392e3235332e302f32342d3234203d3e20323635363133.roa (hash: Xsgy2qe+wczCeKg+r9ZdI4pcSf+EWqwQZgYPMUyqD6E=)
                          4: 34352e3138392e3235322e302f32322d3232203d3e20323635363133.roa (hash: fpRofg/WkeajogIoXLXx/PRbjxg7qXB0QYj+DCcQ8kk=)
                          5: 323830363a3336613a3a2f33322d3332203d3e20323635363133.roa (hash: eftoFPA5yETSjxepTkhztpW248iEomkfiPi1TNslfAg=)
                          6: 34352e3138392e3235352e302f32342d3234203d3e20323635363133.roa (hash: cG/mNGqly/Dgb1V+TfniMYfR9vSbFZ7r9NAfWI49Q78=)
                          7: 322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl (hash: 0oWF+/K82MvFNDi6pcSQPD+aZiPFklff8gHp6dFJYto=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 18:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2c:28:55:33:d9:42:34:ca:88:92:e2:a5:03:44:db:ad:c2:8b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
        Validity
            Not Before: Dec 19 18:50:37 2025 GMT
            Not After : Dec 24 18:52:37 2025 GMT
        Subject: CN=2468A5999F27FD84338BB24BBFB225BE8AABEA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:17:be:94:ab:1d:e8:b9:1c:69:4f:b2:3a:
                    d3:3e:c1:5f:c8:d7:96:17:79:b7:8f:11:8a:3e:1a:
                    33:27:ca:9e:e8:d2:01:a5:b1:f4:6a:0f:1b:c1:26:
                    f5:86:47:5d:87:49:ce:6b:88:fd:b4:af:8b:10:d6:
                    83:18:62:d8:e2:01:bd:6f:47:1e:7c:6f:61:28:4d:
                    ce:31:3b:2b:cd:f1:8c:12:5c:24:94:0d:5f:5d:87:
                    d6:c4:a0:d7:a0:8f:11:05:84:c4:27:91:10:ac:c8:
                    ca:09:77:4f:89:68:12:19:56:b1:80:01:99:7e:ba:
                    0f:88:3b:51:45:bc:c3:f5:11:a6:8e:80:9f:60:35:
                    50:5e:19:e9:e7:ec:3d:96:a0:ee:e7:88:43:46:91:
                    66:d1:59:bb:08:32:95:9b:0a:90:ad:6e:42:16:af:
                    93:8b:e7:ac:6d:89:93:46:59:64:10:44:0f:7e:83:
                    5c:c5:80:2b:71:ef:01:ff:af:66:c8:58:a5:37:13:
                    d6:30:9a:9a:db:0c:3d:64:d8:f0:4e:d2:4f:68:33:
                    76:bc:49:33:12:b9:54:d8:94:98:72:fa:fc:34:97:
                    36:5f:1a:fb:e9:b7:df:3a:b1:9e:4c:d8:59:d8:9b:
                    88:0e:00:0b:7b:43:a2:7c:6c:9c:ab:c3:5b:0d:c6:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:68:A5:99:9F:27:FD:84:33:8B:B2:4B:BF:B2:25:BE:8A:AB:EA:84
            X509v3 Authority Key Identifier:
                keyid:32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:67:d0:36:62:d4:cc:db:d2:91:ea:56:d9:b1:af:e2:0c:83:
         1d:b1:16:fa:b2:36:05:83:20:4a:b5:b0:0c:ca:fd:5e:36:80:
         39:09:09:1d:59:99:89:03:9f:5b:f3:c5:fa:25:ed:e1:45:16:
         c4:74:9e:41:18:2e:e5:20:d6:dd:01:8f:de:1a:6c:93:72:df:
         b2:ca:25:2b:81:d7:cc:2a:fe:eb:6c:20:09:1c:4f:4f:78:b4:
         71:8e:e1:b6:c2:f2:a5:06:a3:38:55:77:41:0f:57:92:43:92:
         eb:0c:0c:1d:f5:b2:04:38:bb:d9:38:d4:d4:44:db:01:5c:74:
         88:2d:72:32:1f:e3:40:7c:38:53:6f:4b:7b:06:4e:47:ee:45:
         fa:f7:f7:8b:59:34:b6:14:44:b1:ec:e8:d1:12:0a:99:7f:21:
         1a:55:fa:e4:c6:15:be:c4:bd:e5:4f:6b:a5:3e:06:44:ba:9c:
         e8:e0:59:49:70:e7:3d:aa:a6:06:21:67:9f:f5:42:e1:26:a7:
         2a:b9:84:b2:46:99:0a:8f:17:5b:35:c9:13:5b:fd:0d:d7:f3:
         83:7b:75:21:6d:28:62:39:1f:da:90:85:1a:05:58:e9:be:24:
         fc:dd:c9:e7:34:40:d4:af:9f:a2:fb:f8:8b:e4:39:a8:b0:46:
         43:d1:2c:82
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUNCwoVTPZQjTKiJLipQNE263Ci4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIyNDE0RDFEQjk4RkYzRjhDMEMwMDI3MkMwMEIyOTAx
MzJDNUNDNDAeFw0yNTEyMTkxODUwMzdaFw0yNTEyMjQxODUyMzdaMDMxMTAvBgNV
BAMTKDI0NjhBNTk5OUYyN0ZEODQzMzhCQjI0QkJGQjIyNUJFOEFBQkVBODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLyRe+lKsd6LkcaU+yOtM+wV/I
15YXebePEYo+GjMnyp7o0gGlsfRqDxvBJvWGR12HSc5riP20r4sQ1oMYYtjiAb1v
Rx58b2EoTc4xOyvN8YwSXCSUDV9dh9bEoNegjxEFhMQnkRCsyMoJd0+JaBIZVrGA
AZl+ug+IO1FFvMP1EaaOgJ9gNVBeGenn7D2WoO7niENGkWbRWbsIMpWbCpCtbkIW
r5OL56xtiZNGWWQQRA9+g1zFgCtx7wH/r2bIWKU3E9YwmprbDD1k2PBO0k9oM3a8
STMSuVTYlJhy+vw0lzZfGvvpt986sZ5M2FnYm4gOAAt7Q6J8bJyrw1sNxoCxAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUJGilmZ8n/YQzi7JLv7Ilvoqr6oQwHwYDVR0j
BBgwFoAUMiQU0duY/z+MDAAnLACykBMsXMQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOUMxMzkyRUQ3MUI0QjBFRTVCODE1NzExQTQ1QjkzMTgz
NjY3ODU2MjEwQjE3MzdFMTBDOThBM0RDOTUwOTk0LzAvMzIyNDE0RDFEQjk4RkYz
RjhDMEMwMDI3MkMwMEIyOTAxMzJDNUNDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjI0MTREMURCOThGRjNGOEMw
QzAwMjcyQzAwQjI5MDEzMkM1Q0M0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDlDMTM5MkVENzFCNEIwRUU1QjgxNTcxMUE0NUI5MzE4MzY2Nzg1NjIx
MEIxNzM3RTEwQzk4QTNEQzk1MDk5NC8wLzMyMjQxNEQxREI5OEZGM0Y4QzBDMDAy
NzJDMDBCMjkwMTMyQzVDQzQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvZ9A2YtTM29KR6lbZsa/iDIMd
sRb6sjYFgyBKtbAMyv1eNoA5CQkdWZmJA59b88X6Je3hRRbEdJ5BGC7lINbdAY/e
GmyTct+yyiUrgdfMKv7rbCAJHE9PeLRxjuG2wvKlBqM4VXdBD1eSQ5LrDAwd9bIE
OLvZONTURNsBXHSILXIyH+NAfDhTb0t7Bk5H7kX69/eLWTS2FESx7OjREgqZfyEa
VfrkxhW+xL3lT2ulPgZEupzo4FlJcOc9qqYGIWef9ULhJqcquYSyRpkKjxdbNckT
W/0N1/ODe3UhbShiOR/akIUaBVjpviT83cnnNEDUr5+i+/iL5DmosEZD0SyC
-----END CERTIFICATE-----
Generated at Sun Dec 21 14:42:26 2025 by rpki-client