This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.mft
File:                     A9B097CDB61153249E534B2DD5C17C6D093C68E1.mft (raw, json)
Hash identifier:          JntzoL6ETrjg8fZ+B2y8vI8hfz0A0vRkL7FZd3TapSY=
Subject key identifier:   81:E5:C3:7D:99:94:00:7F:B6:8D:35:EB:EF:98:B7:B3:CC:5F:09:D7
Authority key identifier: A9:B0:97:CD:B6:11:53:24:9E:53:4B:2D:D5:C1:7C:6D:09:3C:68:E1
Certificate issuer:       /CN=A9B097CDB61153249E534B2DD5C17C6D093C68E1
Certificate serial:       3456DC37F7B1657D85A70D1C6FE2B9DE554E9B8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.mft
Manifest number:          0149
Signing time:             Fri 19 Dec 2025 10:20:43 +0000
Manifest this update:     Fri 19 Dec 2025 10:15:43 +0000
Manifest next update:     Thu 25 Dec 2025 05:04:43 +0000
Files and hashes:         1: 3230302e31342e3130362e302f32342d3234203d3e203237373636.roa (hash: AcmNPkWr9Qev3zyg05eUs/YDc3XngHIlAFNEkZUnynM=)
                          2: A9B097CDB61153249E534B2DD5C17C6D093C68E1.crl (hash: GwqEIq+Igt8UUMGCMYfVkfSmI1xpX6pJdrCi8x4719o=)
                          3: 3230302e31342e3130342e302f32322d3234203d3e203237373436.roa (hash: 7PlPqpWuGYsD6vHQnKHzhd1gbOEmrFERRSyoIElXFqc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:56:dc:37:f7:b1:65:7d:85:a7:0d:1c:6f:e2:b9:de:55:4e:9b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9B097CDB61153249E534B2DD5C17C6D093C68E1
        Validity
            Not Before: Dec 19 10:15:43 2025 GMT
            Not After : Dec 25 05:04:43 2025 GMT
        Subject: CN=81E5C37D9994007FB68D35EBEF98B7B3CC5F09D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:ed:ac:6e:d7:4f:9d:b9:a7:b4:fa:ee:b9:
                    61:eb:b5:21:c9:e7:92:cc:a9:25:ce:91:65:a5:aa:
                    30:c4:f5:a9:cc:1f:2c:df:82:01:d8:f6:11:5e:34:
                    14:d6:64:36:dd:2e:24:a9:7d:e7:ab:5d:92:1f:5c:
                    2c:d4:f2:b2:e2:bb:38:ad:a7:c2:10:4f:f9:0b:c6:
                    df:94:7b:18:e3:66:13:76:17:97:ae:e5:54:96:52:
                    70:64:68:1f:28:64:d9:57:a9:21:da:f1:f8:60:b6:
                    0b:7e:ba:70:fa:77:82:a8:65:1b:0c:0e:de:39:a1:
                    11:ae:1c:78:0c:60:f5:4c:3c:01:af:27:df:34:25:
                    24:a1:ac:41:77:4d:e2:01:6f:d0:2f:d4:5c:0a:2b:
                    5d:ed:51:1b:ab:c2:75:86:9a:af:d2:89:78:0e:26:
                    b6:c6:c0:00:be:3b:0b:0e:8d:0d:d3:76:6a:89:08:
                    77:eb:bb:31:dd:c1:5c:cd:4c:85:05:ba:b8:1b:f6:
                    ad:c6:1d:79:96:60:1e:96:e6:89:ff:92:d0:47:b9:
                    08:f7:c7:e7:5c:0f:f2:ae:39:0e:d6:6e:af:f2:4a:
                    52:f5:c1:78:58:82:f3:19:e3:ff:7a:af:60:65:ea:
                    5d:58:e6:f0:92:ea:bb:5f:4a:f7:fc:7e:5d:db:51:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E5:C3:7D:99:94:00:7F:B6:8D:35:EB:EF:98:B7:B3:CC:5F:09:D7
            X509v3 Authority Key Identifier:
                keyid:A9:B0:97:CD:B6:11:53:24:9E:53:4B:2D:D5:C1:7C:6D:09:3C:68:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:87:a4:cb:ef:ba:3b:e5:52:4b:6c:4d:63:bd:05:c2:59:c7:
         6d:de:7d:61:e7:52:23:71:69:8a:d9:15:0b:87:34:4f:b5:32:
         cf:e4:1b:7c:49:78:f8:c7:c0:61:37:c0:e3:12:9c:ac:79:77:
         d6:81:f6:83:08:88:f7:d3:fe:73:54:da:ef:0e:8d:b4:b3:12:
         8b:42:5f:c9:9f:a4:ee:bd:3f:1e:37:f1:d6:c4:26:74:54:81:
         c4:41:34:fc:7b:ad:12:19:81:8d:b9:ec:d8:fa:d8:c1:48:39:
         c8:18:e4:2d:66:30:f7:39:4c:48:e6:73:ad:1f:30:00:04:8e:
         6d:2f:7a:01:f6:ff:8c:5b:c1:2d:8f:de:d0:f6:ae:cf:23:46:
         75:1f:eb:72:01:39:27:ca:cd:7e:f4:0f:b7:58:8c:19:f7:2a:
         76:5d:ae:cb:b0:a2:dc:1d:08:d6:9c:1c:14:60:62:24:bc:ce:
         ff:dc:c9:01:c3:36:e2:db:37:40:91:d2:8c:9e:48:91:02:e2:
         3d:3a:78:59:20:f2:45:e4:b9:36:25:e4:b6:45:cc:29:0a:82:
         ff:b1:5c:00:0c:23:3c:de:da:9d:6a:8d:b2:5e:60:9a:b2:91:
         7d:f7:c2:9e:0c:ac:6d:02:10:a9:55:14:5b:c7:1f:96:42:f8:
         7a:c3:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----