This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
File:                     C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft (raw, json)
Hash identifier:          /Q3xK1gza+55rQJLL+Ctsjy6cX0ZG1vr+kB9/d1GkFU=
Subject key identifier:   24:DC:3D:A8:7C:49:41:6B:CA:56:EF:73:12:02:94:72:7E:7E:0A:FB
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Certificate issuer:       /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial:       1D67F0AD0A5AFCAF8CF5FD47DFF34B25E0F8A1CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
Manifest number:          014C
Signing time:             Sun 28 Dec 2025 23:59:42 +0000
Manifest this update:     Sun 28 Dec 2025 23:54:42 +0000
Manifest next update:     Sat 03 Jan 2026 10:21:42 +0000
Files and hashes:         1: 323830333a396632303a3a2f33322d3332203d3e20323636373830.roa (hash: lGf/40HehSbEHBpChK1MHo9fvFYVZWszKBTsZ5CAIRI=)
                          2: C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl (hash: sNIcsjllBuEdb5kkr8Fx6OszjuQv8D6V+5cpvKDyvOU=)
                          3: 34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa (hash: lEURVICemMAmm2uVPiaZ8QRu10QhkFKhSIbDc9IXzyk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 Jan 2026 10:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:67:f0:ad:0a:5a:fc:af:8c:f5:fd:47:df:f3:4b:25:e0:f8:a1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
        Validity
            Not Before: Dec 28 23:54:42 2025 GMT
            Not After : Jan  3 10:21:42 2026 GMT
        Subject: CN=24DC3DA87C49416BCA56EF73120294727E7E0AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:2f:5c:c6:6a:dc:aa:b0:f5:9f:d5:a4:8e:
                    b7:3d:9c:3d:61:90:13:49:f0:2e:ce:29:39:b6:83:
                    9b:aa:ab:b5:bf:09:ea:34:73:66:1b:b3:13:31:53:
                    1f:4d:ff:68:ac:66:3b:58:20:4e:92:a1:51:dd:b6:
                    8f:09:c8:6c:f3:21:99:bb:70:8f:a5:f1:50:61:38:
                    b8:0c:b7:1b:ce:a3:81:be:52:f0:87:b9:af:6d:60:
                    cf:ec:74:38:f6:b2:92:74:0b:f9:3a:61:d3:70:71:
                    c3:85:65:ef:fd:7f:9c:9f:7b:01:aa:c5:b6:51:2a:
                    81:22:8e:b9:e5:ab:f2:b3:c5:66:3f:56:1f:4e:a0:
                    35:e1:96:75:ae:9f:db:cb:2c:41:21:bf:82:75:b0:
                    ae:ae:9a:b1:96:a4:1d:20:87:1c:f4:ff:cd:31:61:
                    79:af:00:01:d4:68:c5:fe:b3:1a:5b:e8:ff:10:af:
                    91:a1:66:ba:ab:e0:03:9a:e1:df:02:90:c3:59:76:
                    a6:e0:0b:c4:df:30:6d:54:dc:30:3a:65:8f:d8:e2:
                    fb:51:b3:6c:ec:4c:fe:43:fa:84:71:ca:0f:e9:dd:
                    cc:09:1b:fe:8f:ad:92:ae:fe:55:50:b2:13:0c:d2:
                    a7:bc:c9:3e:cb:e5:d2:33:b5:36:ae:15:f8:17:e3:
                    40:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DC:3D:A8:7C:49:41:6B:CA:56:EF:73:12:02:94:72:7E:7E:0A:FB
            X509v3 Authority Key Identifier:
                keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f3:e7:53:a6:39:b4:a1:26:2d:fa:4a:76:aa:5c:6f:a4:87:
         10:3d:bc:21:ee:b5:d9:a3:5a:bc:2e:ff:04:42:1c:df:f3:40:
         bf:69:0c:2f:59:b5:fb:7a:e7:5d:e4:ca:38:4c:69:a3:d7:44:
         dc:cb:95:7b:0e:b4:fa:d1:1c:04:4b:f7:28:fe:c8:25:c6:df:
         84:c1:14:bc:ab:3e:cd:47:ca:35:b2:d3:16:25:2b:7c:6d:87:
         f2:42:58:0a:63:38:5a:a6:35:f5:a6:8e:5f:ae:7d:27:22:6d:
         e8:ae:17:c3:12:52:23:23:61:55:e2:7f:c1:73:81:00:41:b0:
         3d:fb:ba:76:52:7f:c2:33:b2:f2:7a:34:c3:cf:80:f1:6f:ba:
         95:1c:ab:e4:37:c3:49:19:f1:11:c4:f2:f4:2b:ea:51:ec:1c:
         50:ed:da:ed:aa:d1:69:1a:ac:a2:d8:83:27:a7:68:20:dc:58:
         75:cc:c3:37:5b:1c:ab:16:8e:5b:10:5a:94:0b:0b:c8:89:92:
         de:29:22:e9:78:93:79:1c:3a:d8:23:98:49:ee:32:fa:8a:a0:
         0e:5a:55:c7:a9:58:b8:47:f7:22:50:af:2b:f3:19:4e:b0:47:
         d5:7c:c8:4d:21:e1:28:90:7a:72:60:c4:fc:e3:c6:c5:b5:61:
         ae:e5:c4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 08:04:12 2025 by rpki-client