This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
File:                     85939B22368B791C18889C114876582A293716F4.mft (raw, json)
Hash identifier:          iOvwlai/lO6zynE7G2/F7jBmUYOhSIbMJ+aumhPrHtU=
Subject key identifier:   77:FE:68:D5:6F:3A:E4:90:2C:4C:1B:12:05:65:ED:DD:39:77:7E:5D
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       0C6C2829C77A9CFB5F8843EDE4A70B82F665ECF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
Manifest number:          0149
Signing time:             Fri 19 Dec 2025 14:28:03 +0000
Manifest this update:     Fri 19 Dec 2025 14:23:03 +0000
Manifest next update:     Wed 24 Dec 2025 22:41:03 +0000
Files and hashes:         1: 3139302e3131322e36302e302f32342d3234203d3e203532323731.roa (hash: Kqtp9VL4k7ZLHSw/1EWsT9bNL1Um/eW047qKHZyOfu0=)
                          2: 3137302e3233392e34392e302f32342d3234203d3e203532323731.roa (hash: 4Kv6rHmD2RSR0fZ2C4iBZPBKF53UnVkrXwOsFooOtmA=)
                          3: 3139302e3131322e36332e302f32342d3234203d3e203532323731.roa (hash: dR8nEidxTvy4DwoGhBC0+Y3kqJrAmFww1wwSDdDrs9M=)
                          4: 3139302e3131322e36322e302f32342d3234203d3e203532323731.roa (hash: f9FxH7F8/lWyh81jN6bGq0hoaNcODO/+1bAqZlF4exs=)
                          5: 3137302e3233392e34382e302f32322d3232203d3e203532323731.roa (hash: DCw7XFLRxHy02pLdzrFooFLckvBrkR/bkXvlJM9/NrQ=)
                          6: 3136372e3235302e3230382e302f32322d3232203d3e203532323731.roa (hash: BMzf8pZG7o4c5T9+keP7FEhMi2tMb1vF2pMNoN/nges=)
                          7: 85939B22368B791C18889C114876582A293716F4.crl (hash: G8OWsSez1cICojVqBuwF547FNCaWCgyJS4aduE6204E=)
                          8: 3136372e3235302e3231312e302f32342d3234203d3e203532323731.roa (hash: OJF+asrmDhkU5aLiDMX93XQrKKawL7DSef2KjCZZHoo=)
                          9: 3137302e3233392e35312e302f32342d3234203d3e203532323731.roa (hash: RM4h/pktghbA3kGgJaireVEE3CceSYNDKhhblSPfM5A=)
                          10: 3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa (hash: IeifnMfKWdOafCZaD5UzDSSKPZtdREpRdrw6obeJZg0=)
                          11: 3139302e3131322e35362e302f32312d3231203d3e203532323731.roa (hash: x4Ds2NeShW9XgVQGWE/B5Ui8oR1RTYlOp+LqJqsm79s=)
                          12: 3137302e3233392e34382e302f32342d3234203d3e203532323731.roa (hash: AMNilptHeDxVwLLusegjFrGirZIhlMwryvJBNnpZKWo=)
                          13: 3139302e3131322e36312e302f32342d3234203d3e203532323731.roa (hash: vBjyIjMKt5YMNYW1GSDlezMof/HQUqgbIpFr/Ow0VOU=)
                          14: 3137302e3233392e35302e302f32342d3234203d3e203532323731.roa (hash: q0HfJ3nuUBeZrLNcBnLkTaqSiT8wF9td5qMD90G9lgA=)
                          15: 3139302e3131322e35382e302f32342d3234203d3e203532323731.roa (hash: 1T+q18kIMpxN8QIa4cc/9srPuuyhTH0g1TdkksJF3kk=)
                          16: 3136372e3235302e3231302e302f32342d3234203d3e203532323731.roa (hash: 3BJXrX3o6yYxznvJjv2l9gycJ/cWbjf9dtX5JpDATc0=)
                          17: 3139302e3131322e35362e302f32342d3234203d3e203532323731.roa (hash: EH1U8sR/MsGNKrr2i7a7fVSm+bS9vytoxL5rozY6K0w=)
                          18: 3139302e3131322e35372e302f32342d3234203d3e203532323731.roa (hash: 4dB9IMYdApIC8fD7EpzIxSpOCr+JBPXgrGNLpq5gZo0=)
                          19: 3139302e3131322e35392e302f32342d3234203d3e203532323731.roa (hash: ncYpQjXgkYNXWXW2FqsVmLDCegV03duzVoDFfSB/r+Q=)
                          20: 3136372e3235302e3230392e302f32342d3234203d3e203532323731.roa (hash: LyFkmpe1p9r9Xnj9RltPWgkoDpueDJnf/UjCAU/bodo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 22:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6c:28:29:c7:7a:9c:fb:5f:88:43:ed:e4:a7:0b:82:f6:65:ec:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Dec 19 14:23:03 2025 GMT
            Not After : Dec 24 22:41:03 2025 GMT
        Subject: CN=77FE68D56F3AE4902C4C1B120565EDDD39777E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:f2:3a:91:8e:17:08:b7:27:ca:8e:a1:15:
                    f2:93:83:f5:a7:43:aa:40:43:25:46:8a:b3:2f:61:
                    5f:b2:07:09:a1:20:b9:25:10:c8:dd:60:b7:83:c2:
                    99:8a:0c:03:f6:c6:91:70:4b:9e:ff:92:8c:ba:a7:
                    6a:7d:6f:5c:b4:20:65:1d:d8:5d:b6:70:36:9b:db:
                    24:dc:24:14:f8:25:08:2e:0b:73:f3:95:d7:f9:c2:
                    8a:b7:2d:cc:39:15:a0:45:17:e2:73:61:40:f8:2d:
                    6b:6a:f1:f5:93:69:ad:7a:5a:42:19:06:d3:1a:76:
                    75:47:df:3c:d0:a9:0c:26:86:b4:d4:4b:9c:8f:79:
                    aa:e9:29:28:9a:17:03:56:28:36:e3:70:b2:1c:fe:
                    85:ba:b6:32:93:02:8d:d2:ee:2c:11:67:ae:a7:0f:
                    3b:5b:2a:c9:ea:e6:47:3a:4c:19:58:28:8c:4e:7d:
                    f6:d5:b0:c5:f1:60:c3:77:b2:5e:a2:0a:22:4e:1a:
                    92:88:69:25:85:1b:45:24:64:dc:b1:df:e7:ee:80:
                    5e:8a:07:3e:e6:81:23:c5:ae:a3:0e:07:ca:01:44:
                    7f:b5:d2:9d:df:3a:f2:c8:92:e3:03:63:b0:57:bd:
                    f8:82:aa:ce:e9:c7:6f:64:01:9b:76:68:82:df:fe:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FE:68:D5:6F:3A:E4:90:2C:4C:1B:12:05:65:ED:DD:39:77:7E:5D
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ae:8d:b5:dd:06:74:29:75:38:1d:00:41:5a:74:04:aa:8a:
         bb:d4:c0:d9:a6:10:7a:df:71:84:52:ca:a1:3a:ab:d1:4e:78:
         03:f4:00:09:b5:46:f6:3e:9a:58:be:cf:5f:ba:f2:85:91:30:
         e2:e5:c7:ca:2d:eb:50:a6:3a:19:e2:60:a9:2e:60:3c:83:5a:
         97:be:75:a5:be:2c:13:b2:3a:57:9a:58:b5:5c:b7:b9:9c:0f:
         13:5a:bf:00:3d:8b:74:2f:54:be:98:c2:1b:4c:ec:45:b3:c7:
         69:dd:e3:ea:80:16:fc:ef:f8:cd:c0:94:27:6a:a2:bd:da:4d:
         d2:23:3c:9e:96:6e:32:42:a0:d6:85:e8:83:47:e0:d9:8a:53:
         13:0b:fe:15:b7:07:da:c2:55:35:15:89:7b:ab:c0:45:64:30:
         27:40:6e:d4:f0:e8:e6:a1:4d:df:8c:6e:88:33:1f:e7:ce:6a:
         31:78:d7:95:41:4c:de:15:02:e3:fd:39:f8:65:6d:8a:0d:f5:
         7e:1f:4e:bc:ed:00:24:d9:fd:57:30:4d:07:c9:3d:15:a2:20:
         be:90:2b:37:e0:ab:8b:6c:34:8f:d2:98:9d:59:8c:6c:26:f6:
         7a:99:c9:20:13:cf:b9:07:4c:f8:8a:5b:ce:67:fc:38:43:fe:
         4d:a6:e5:32
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUDGwoKcd6nPtfiEPt5KcLgvZl7PQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU5MzlCMjIzNjhCNzkxQzE4ODg5QzExNDg3NjU4MkEy
OTM3MTZGNDAeFw0yNTEyMTkxNDIzMDNaFw0yNTEyMjQyMjQxMDNaMDMxMTAvBgNV
BAMTKDc3RkU2OEQ1NkYzQUU0OTAyQzRDMUIxMjA1NjVFREREMzk3NzdFNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXT/I6kY4XCLcnyo6hFfKTg/Wn
Q6pAQyVGirMvYV+yBwmhILklEMjdYLeDwpmKDAP2xpFwS57/koy6p2p9b1y0IGUd
2F22cDab2yTcJBT4JQguC3Pzldf5woq3Lcw5FaBFF+JzYUD4LWtq8fWTaa16WkIZ
BtMadnVH3zzQqQwmhrTUS5yPearpKSiaFwNWKDbjcLIc/oW6tjKTAo3S7iwRZ66n
DztbKsnq5kc6TBlYKIxOffbVsMXxYMN3sl6iCiJOGpKIaSWFG0UkZNyx3+fugF6K
Bz7mgSPFrqMOB8oBRH+10p3fOvLIkuMDY7BXvfiCqs7px29kAZt2aILf/sfzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUd/5o1W865JAsTBsSBWXt3Tl3fl0wHwYDVR0j
BBgwFoAUhZObIjaLeRwYiJwRSHZYKik3FvQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOEQ0REE2NEE5QzVCMjE5QjdFQkUxMEI4NDZGRjM5NDZB
NzdGNzQyMDQ0ODRFRDVFODVFNjA2NzAwNjM5MzYzLzAvODU5MzlCMjIzNjhCNzkx
QzE4ODg5QzExNDg3NjU4MkEyOTM3MTZGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTkzOUIyMjM2OEI3OTFDMTg4
ODlDMTE0ODc2NTgyQTI5MzcxNkY0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMThENERBNjRBOUM1QjIxOUI3RUJFMTBCODQ2RkYzOTQ2QTc3Rjc0MjA0
NDg0RUQ1RTg1RTYwNjcwMDYzOTM2My8wLzg1OTM5QjIyMzY4Qjc5MUMxODg4OUMx
MTQ4NzY1ODJBMjkzNzE2RjQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJro213QZ0KXU4HQBBWnQEqoq7
1MDZphB633GEUsqhOqvRTngD9AAJtUb2PppYvs9fuvKFkTDi5cfKLetQpjoZ4mCp
LmA8g1qXvnWlviwTsjpXmli1XLe5nA8TWr8APYt0L1S+mMIbTOxFs8dp3ePqgBb8
7/jNwJQnaqK92k3SIzyelm4yQqDWheiDR+DZilMTC/4VtwfawlU1FYl7q8BFZDAn
QG7U8OjmoU3fjG6IMx/nzmoxeNeVQUzeFQLj/Tn4ZW2KDfV+H0687QAk2f1XME0H
yT0VoiC+kCs34KuLbDSP0pidWYxsJvZ6mckgE8+5B0z4ilvOZ/w4Q/5NpuUy
-----END CERTIFICATE-----
Generated at Sun Dec 21 20:04:52 2025 by rpki-client