This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
File:                     3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft (raw, json)
Hash identifier:          TPIyRBRpzEs0dAvLFFSu4eCpgPDzfBsc4Zf1nN7fQII=
Subject key identifier:   29:9F:8B:1C:AB:A8:D4:46:A6:A4:85:54:4B:44:B0:48:F7:03:A6:FE
Authority key identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
Certificate issuer:       /CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Certificate serial:       2559A2C6D23C36F95133862F71FFE3F3E9B9CEDC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
Manifest number:          014B
Signing time:             Sat 20 Dec 2025 13:27:13 +0000
Manifest this update:     Sat 20 Dec 2025 13:22:13 +0000
Manifest next update:     Thu 25 Dec 2025 13:50:13 +0000
Files and hashes:         1: 323830313a31383a353830303a3a2f34382d3438203d3e20323732313430.roa (hash: RmKEwQbfcsWn5R2wHHVzndU8+69HzL8akYJDXU4u40Q=)
                          2: 323830313a31383a353830303a3a2f34382d3438203d3e203631343638.roa (hash: MqwMNFGJ7UgbOVEQWxbU5hVaghWE/1a37kKoRYuarpU=)
                          3: 3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl (hash: s8qkJi3iNwMGkl3HbZmWlXNAyCSjYv6+kOMt2b+Wg9I=)
                          4: 3139302e3130332e3139312e302f32342d3234203d3e203631343638.roa (hash: TwENXE9MINDzJxezpU6RLWqWFSi6cvkXDAa+XXkISdY=)
                          5: 3139302e3130332e3139312e302f32342d3234203d3e20323732313430.roa (hash: ZFz+ldthdpJDmo4FmWZ0CAydFmaLOh635KqcOcyn6Co=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:59:a2:c6:d2:3c:36:f9:51:33:86:2f:71:ff:e3:f3:e9:b9:ce:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
        Validity
            Not Before: Dec 20 13:22:13 2025 GMT
            Not After : Dec 25 13:50:13 2025 GMT
        Subject: CN=299F8B1CABA8D446A6A485544B44B048F703A6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:ad:ad:be:8f:75:b4:3b:0a:f3:10:fb:80:
                    14:f4:d4:0d:31:0a:48:4d:47:60:81:19:b6:34:d2:
                    8d:83:4b:b4:45:78:c4:46:d7:a3:ea:40:a2:2e:21:
                    6b:2b:f0:e3:66:aa:97:cf:49:2a:3b:2d:da:2b:40:
                    5f:1c:f2:3a:d8:c8:10:c0:b4:63:e1:f9:40:28:bc:
                    5b:4c:79:c5:b8:db:60:91:6e:00:ae:19:83:5b:7b:
                    13:4d:14:d9:60:7f:31:6a:a8:1c:f7:8d:71:15:c7:
                    dc:42:08:fb:25:20:6a:37:09:c0:7e:7b:f9:12:8d:
                    85:4a:a4:16:cd:35:46:d7:c0:03:2c:23:a4:e9:b3:
                    60:c8:54:bc:ed:67:7d:84:28:f7:89:b1:36:88:a3:
                    af:8f:8f:c7:af:d1:f7:ea:ce:f4:22:72:b9:e8:68:
                    4a:88:2a:6a:88:ad:ef:83:06:96:33:2a:01:2d:24:
                    e2:1d:e2:c2:0e:ae:a8:d0:24:43:69:f0:44:f2:e3:
                    6e:e1:ca:25:04:dc:d5:cc:3f:1b:b6:1c:19:ae:e1:
                    be:5a:6e:89:43:0d:e9:4d:7d:d1:93:7b:fa:d9:57:
                    e5:c0:d1:91:37:9d:97:54:5d:97:6f:86:c1:2a:c5:
                    53:62:5e:37:37:17:1d:d4:8d:c2:ee:7a:6c:78:26:
                    af:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9F:8B:1C:AB:A8:D4:46:A6:A4:85:54:4B:44:B0:48:F7:03:A6:FE
            X509v3 Authority Key Identifier:
                keyid:32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:10:6b:ba:ce:3d:11:44:f5:42:e4:7b:b9:51:34:d3:91:c2:
         80:00:cc:49:8e:48:fc:e3:7e:8e:59:a5:29:9d:15:c1:68:d9:
         88:48:fc:75:09:d1:e3:ea:04:85:a1:9a:be:4e:d6:29:e5:9c:
         05:24:d6:62:ef:ba:de:ad:3c:34:59:f4:88:2c:76:71:72:90:
         5d:9f:17:05:a1:13:33:9f:e6:30:84:1f:6b:79:07:5b:11:db:
         ed:1e:28:3d:66:70:09:b9:57:30:a5:7b:49:a6:c7:61:53:26:
         b5:a8:df:6c:c9:1f:7d:29:c9:b1:b2:d9:0b:1d:8f:8d:fb:30:
         1f:f2:88:b3:13:7b:01:34:b6:7e:84:e6:0d:e1:80:69:b8:d8:
         d8:c3:c0:6a:2d:13:1e:59:80:31:e6:d6:a7:b7:71:04:3c:18:
         97:69:8f:3e:b3:8f:48:e9:38:23:c5:85:92:45:1d:c7:62:7e:
         35:92:94:03:2e:23:0f:da:00:17:4e:ad:56:78:59:e4:45:62:
         66:50:3f:94:85:a4:f8:55:64:43:0a:be:6c:0d:18:e2:15:4d:
         b6:68:96:87:e7:c9:22:ed:03:c7:d4:ea:26:2f:34:ce:e6:a4:
         49:dd:4f:34:94:ad:f9:32:c8:9d:ed:dc:1a:24:f3:15:4e:b0:
         ac:3f:98:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----