This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
File:                     28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft (raw, json)
Hash identifier:          8PHENLXiETJnrSww/gMmpC90EuEauXIMusHk8Z73StU=
Subject key identifier:   3A:2A:76:E5:0A:C1:80:38:B1:2C:B8:77:5C:1D:F1:BA:96:39:0C:8F
Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A
Certificate issuer:       /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A
Certificate serial:       7279153D054A38257231F84B2BABEBC38E97EF24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
Manifest number:          0145
Signing time:             Fri 26 Dec 2025 11:31:39 +0000
Manifest this update:     Fri 26 Dec 2025 11:26:39 +0000
Manifest next update:     Wed 31 Dec 2025 16:06:39 +0000
Files and hashes:         1: 323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (hash: Tv46jSL3jD0k1NXV0T/tAaiSDTR6TBPS4SWa9rtammU=)
                          2: 34352e3233362e3134382e302f32322d3234203d3e20323636383132.roa (hash: pt90BIyyUSHlZlm4AKVLe1Z6Moz1dZPbV9t+YfaClY0=)
                          3: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl (hash: wwcQk1HemjjHOkhFVhJQlUB0x8vbqQAj5FSXx4qcNuc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 16:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:79:15:3d:05:4a:38:25:72:31:f8:4b:2b:ab:eb:c3:8e:97:ef:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A
        Validity
            Not Before: Dec 26 11:26:39 2025 GMT
            Not After : Dec 31 16:06:39 2025 GMT
        Subject: CN=3A2A76E50AC18038B12CB8775C1DF1BA96390C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:46:0c:5d:85:90:30:ad:80:0e:50:1d:2c:
                    2e:be:8c:8e:ed:b5:26:6d:45:8e:80:50:4e:89:f2:
                    15:da:90:1a:5c:c9:fd:3a:5f:30:07:82:82:37:be:
                    82:05:e8:58:3f:7e:9b:b1:85:a9:18:1d:08:fb:6c:
                    6b:80:f4:75:98:73:7d:b1:2d:25:c0:b8:97:f8:08:
                    47:c1:e0:44:28:e1:ef:39:4d:5a:83:c5:32:05:55:
                    ed:25:63:19:2d:e5:f7:bc:3b:ba:54:5e:14:f1:24:
                    e6:69:bb:e6:60:47:d1:5b:4c:c9:82:c5:11:a4:63:
                    40:85:45:36:34:78:a8:86:e9:fb:8a:04:af:a4:d6:
                    e0:71:ad:e1:9a:2a:72:3f:97:ce:d8:fc:0a:c3:26:
                    43:da:ab:79:d9:f8:ec:5c:52:6c:11:a9:56:46:09:
                    e9:aa:96:4d:c1:d7:92:e0:34:7a:ae:8c:c1:47:df:
                    2e:5c:a2:c9:0c:07:45:2f:7d:d4:b0:4d:b6:c2:f4:
                    65:41:95:cb:07:59:8a:ff:b9:df:25:4c:c8:be:7a:
                    dc:74:52:2b:d5:a0:63:0b:61:c9:36:d8:49:03:ab:
                    91:07:a2:c5:b7:89:b4:87:7b:f7:b3:a7:4b:8d:bd:
                    6b:d5:bd:93:e2:c8:38:eb:87:5d:f4:a5:ce:ba:8a:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2A:76:E5:0A:C1:80:38:B1:2C:B8:77:5C:1D:F1:BA:96:39:0C:8F
            X509v3 Authority Key Identifier:
                keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:af:38:33:b3:7f:09:47:e7:1f:39:04:e6:20:d0:ca:d3:ba:
         cd:98:8e:69:0a:1a:e9:2d:99:46:ce:51:ff:87:af:ce:84:20:
         d9:17:30:b3:42:c6:53:b1:66:91:6a:47:a3:98:29:11:19:b0:
         45:36:ff:33:fc:d2:13:8d:4e:8c:77:10:1c:c3:aa:b9:5e:99:
         fe:fc:6d:21:71:c4:64:6c:49:94:dc:66:1d:1f:3c:f1:01:c5:
         9a:26:a2:8e:79:b8:b0:1d:dc:8f:c9:8d:1d:29:18:fc:da:ac:
         c6:ca:64:07:95:bb:5a:13:f9:4b:83:0f:9f:b1:e4:5b:fa:14:
         64:1d:4c:1e:1d:60:79:e9:3e:b2:8f:fa:79:be:d9:81:53:d4:
         63:50:28:3d:7b:92:f6:f7:79:e4:2e:d7:11:16:2e:84:d2:0a:
         b5:3d:e9:94:54:52:08:ec:e0:c2:a0:c1:3a:29:c3:14:63:ad:
         c0:96:0a:ce:b6:56:59:85:2b:bf:1e:47:e0:df:ab:65:71:76:
         3f:b1:bf:94:40:48:bf:b6:08:0d:0e:1b:81:a7:eb:a0:3d:29:
         4e:c8:87:33:4d:2c:35:22:89:b9:1a:0d:a3:2d:07:7e:32:23:
         e3:09:80:c8:6c:fc:e9:e6:fb:10:83:9b:44:6f:4f:79:14:55:
         73:fa:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----