This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
File:                     21412A097D724851BE961D093E8521CC77A7B163.mft (raw, json)
Hash identifier:          wMBhHoCyjmCGHB/16bveW3tc1462ajOdtPLxiM9WbUc=
Subject key identifier:   31:D5:8E:3C:BA:8C:FE:72:DE:39:5E:EA:10:06:CC:43:EE:79:D4:D0
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       1E3156AB5375639F06C84A5E7AF9B94843E0A79F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
Manifest number:          0145
Signing time:             Sun 21 Dec 2025 00:24:03 +0000
Manifest this update:     Sun 21 Dec 2025 00:19:03 +0000
Manifest next update:     Thu 25 Dec 2025 04:05:03 +0000
Files and hashes:         1: 21412A097D724851BE961D093E8521CC77A7B163.crl (hash: jwDoNg0AMi2KRddpKtqdJ5WzQ7gJm4zPziwhDRwJgOY=)
                          2: 3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa (hash: 0KM2apHpvohErBzrhHKqwd9/QyiLiK5zUIRgohsjxcM=)
                          3: 3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa (hash: OM7nkYOV8AFf6j6MrkYx0VlnmQOoRMvsIXJgHfikKLg=)
                          4: 3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa (hash: lYDTn5iGQlXU/kc+dTk7jVowLAQEqyCq36Bb6fOYEs4=)
                          5: 323830333a633863303a3a2f33322d3332203d3e20323634373736.roa (hash: MRclYfYyx5c25qVGDjWe7bi9mQ83ApsdpQAOmsF+Iqg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 04:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:31:56:ab:53:75:63:9f:06:c8:4a:5e:7a:f9:b9:48:43:e0:a7:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Dec 21 00:19:03 2025 GMT
            Not After : Dec 25 04:05:03 2025 GMT
        Subject: CN=31D58E3CBA8CFE72DE395EEA1006CC43EE79D4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0f:36:02:c9:7e:f3:18:52:03:2d:64:ec:5a:
                    ce:09:e9:7b:a3:79:64:00:aa:ed:37:09:17:2c:7c:
                    23:76:78:07:3e:58:8f:14:41:9f:52:3b:26:02:97:
                    43:37:93:dd:86:72:b6:8c:58:ab:15:45:f6:09:00:
                    10:34:fb:ab:02:93:c9:21:34:a3:cb:51:1a:44:4c:
                    6d:a6:1d:a6:8b:1e:22:89:d9:45:17:90:93:2c:a6:
                    53:7b:10:6f:a6:49:98:1a:63:f0:15:f1:75:76:1f:
                    15:3d:64:f6:d8:5d:5b:1a:5b:5c:aa:0e:6d:7a:d9:
                    49:d2:40:85:8d:1d:36:75:a5:2d:0e:be:40:97:6e:
                    79:0f:51:92:ae:73:17:3d:44:5c:79:2e:fd:dd:68:
                    d0:78:a0:00:e6:79:fe:a1:8d:c8:61:c6:97:02:0a:
                    59:29:c0:8d:92:d1:15:e2:37:ef:85:73:99:6b:6a:
                    8e:9d:bd:a1:57:6a:75:ca:b1:73:aa:44:c5:24:06:
                    f4:c0:05:90:b9:16:8c:86:12:2e:fb:ab:2b:de:2d:
                    36:9a:bf:4d:a5:72:de:ae:ed:bc:2b:7c:65:d2:36:
                    96:c4:92:3b:96:c9:52:19:aa:9a:c0:a5:62:c6:48:
                    2d:7b:ae:69:6a:8a:b1:73:8a:74:2b:9e:31:6c:38:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:8E:3C:BA:8C:FE:72:DE:39:5E:EA:10:06:CC:43:EE:79:D4:D0
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:77:69:7e:f6:b0:9b:a2:62:39:29:4a:23:d2:e7:ef:3c:
         d2:d9:6d:e7:6a:4e:6e:94:da:98:34:f2:6d:41:8e:5d:04:17:
         47:7d:fa:9a:4c:19:6d:1e:14:a6:a2:c4:a9:b3:41:5f:b4:93:
         0a:e9:b7:ce:13:63:40:eb:cc:e8:9c:7d:c5:6f:bb:29:a0:2a:
         07:06:60:21:d1:46:20:54:74:b5:c8:51:5c:a6:8d:8e:a4:ec:
         e0:d2:b8:d3:72:54:21:0c:8f:15:4e:12:e9:86:70:93:c8:ac:
         82:ca:a0:2a:22:84:a4:ac:a4:16:ab:b4:1f:41:99:4d:90:ac:
         e5:60:f1:37:ef:e6:38:78:85:4f:a9:c4:65:36:3b:97:fb:a4:
         45:23:63:ea:fd:7c:4b:5b:b2:16:a0:6a:78:e7:62:16:af:4c:
         58:46:55:70:47:a9:65:19:86:0d:13:47:e3:a6:d2:97:c1:98:
         58:22:90:d5:49:42:80:a5:12:a9:a8:69:31:c9:b5:54:36:68:
         bd:51:f4:5c:53:16:8e:27:a8:ad:59:87:4f:bb:b8:b3:0d:28:
         8e:3c:07:6a:4e:e9:f5:8c:73:d2:f7:77:b2:8f:bd:c3:19:13:
         f7:62:60:22:4d:f7:e3:3a:bd:a8:40:75:3b:52:bd:50:03:c5:
         08:45:fd:3a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUHjFWq1N1Y58GyEpeevm5SEPgp58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE0MTJBMDk3RDcyNDg1MUJFOTYxRDA5M0U4NTIxQ0M3
N0E3QjE2MzAeFw0yNTEyMjEwMDE5MDNaFw0yNTEyMjUwNDA1MDNaMDMxMTAvBgNV
BAMTKDMxRDU4RTNDQkE4Q0ZFNzJERTM5NUVFQTEwMDZDQzQzRUU3OUQ0RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDzYCyX7zGFIDLWTsWs4J6Xuj
eWQAqu03CRcsfCN2eAc+WI8UQZ9SOyYCl0M3k92GcraMWKsVRfYJABA0+6sCk8kh
NKPLURpETG2mHaaLHiKJ2UUXkJMsplN7EG+mSZgaY/AV8XV2HxU9ZPbYXVsaW1yq
Dm162UnSQIWNHTZ1pS0OvkCXbnkPUZKucxc9RFx5Lv3daNB4oADmef6hjchhxpcC
ClkpwI2S0RXiN++Fc5lrao6dvaFXanXKsXOqRMUkBvTABZC5FoyGEi77qyveLTaa
v02lct6u7bwrfGXSNpbEkjuWyVIZqprApWLGSC17rmlqirFzinQrnjFsOOUtAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUMdWOPLqM/nLeOV7qEAbMQ+551NAwHwYDVR0j
BBgwFoAUIUEqCX1ySFG+lh0JPoUhzHensWMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMEI0ODM0OTEwNEU0Nzc2ODlGRTM4QTdCOTY3QTUwOTNE
QzgzODhBOTIxNkZDNjE1NjRCM0NBMTRCQTg5Qzg4LzAvMjE0MTJBMDk3RDcyNDg1
MUJFOTYxRDA5M0U4NTIxQ0M3N0E3QjE2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTQxMkEwOTdENzI0ODUxQkU5
NjFEMDkzRTg1MjFDQzc3QTdCMTYzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTBCNDgzNDkxMDRFNDc3Njg5RkUzOEE3Qjk2N0E1MDkzREM4Mzg4QTky
MTZGQzYxNTY0QjNDQTE0QkE4OUM4OC8wLzIxNDEyQTA5N0Q3MjQ4NTFCRTk2MUQw
OTNFODUyMUNDNzdBN0IxNjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/fHdpfvawm6JiOSlKI9Ln7zzS
2W3nak5ulNqYNPJtQY5dBBdHffqaTBltHhSmosSps0FftJMK6bfOE2NA68zonH3F
b7spoCoHBmAh0UYgVHS1yFFcpo2OpOzg0rjTclQhDI8VThLphnCTyKyCyqAqIoSk
rKQWq7QfQZlNkKzlYPE37+Y4eIVPqcRlNjuX+6RFI2Pq/XxLW7IWoGp452IWr0xY
RlVwR6llGYYNE0fjptKXwZhYIpDVSUKApRKpqGkxybVUNmi9UfRcUxaOJ6itWYdP
u7izDSiOPAdqTun1jHPS93eyj73DGRP3YmAiTffjOr2oQHU7Ur1QA8UIRf06
-----END CERTIFICATE-----