This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft
File:                     43D716CDB565EBE33B24F995BFB74FBBE1493099.mft (raw, json)
Hash identifier:          lumW+tLI31DEAz4ktvlAIFFLyuNJpMEXBCcUZs3CjmM=
Subject key identifier:   AF:5D:2A:21:02:85:D5:CC:86:91:9C:16:77:8D:21:1E:C3:7A:F0:81
Authority key identifier: 43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99
Certificate issuer:       /CN=43D716CDB565EBE33B24F995BFB74FBBE1493099
Certificate serial:       2B02FD58B120A01257937129B4548FE21F2ACBCA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft
Manifest number:          0145
Signing time:             Sat 20 Dec 2025 08:39:31 +0000
Manifest this update:     Sat 20 Dec 2025 08:34:31 +0000
Manifest next update:     Wed 24 Dec 2025 15:37:31 +0000
Files and hashes:         1: 3137302e3234362e3234342e302f32322d3234203d3e203532333439.roa (hash: J45kKvVRbVFGvXQJRhJgZxQ+A3b0+v6EsaEG5wh0sXs=)
                          2: 3133382e302e382e302f32322d3234203d3e203532333439.roa (hash: 3lWJAlL8h6r5w9Oh9o+B3p8GjRe+qF8ONSUBNN+QXZU=)
                          3: 323830303a3963303a3a2f33322d3438203d3e203532333439.roa (hash: +HKy7QHg8LVI140z1meymaNZyTSJRfkd9Hz0FK2QTLE=)
                          4: 3138362e3134382e3234382e302f32312d3234203d3e203532333439.roa (hash: m2JeXhgRytA2Lq6Cp0jcH0rg3kdQ8d2b2W9tlCTGZVc=)
                          5: 43D716CDB565EBE33B24F995BFB74FBBE1493099.crl (hash: A/jQLWzDWqx+IHoBojHL2fwFRRr50++BZOeVl7VeMy4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 13:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:02:fd:58:b1:20:a0:12:57:93:71:29:b4:54:8f:e2:1f:2a:cb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43D716CDB565EBE33B24F995BFB74FBBE1493099
        Validity
            Not Before: Dec 20 08:34:31 2025 GMT
            Not After : Dec 24 15:37:31 2025 GMT
        Subject: CN=AF5D2A210285D5CC86919C16778D211EC37AF081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:02:62:cc:6c:17:05:1c:66:33:4e:48:3b:8d:
                    2b:7e:32:6e:b5:4b:ef:07:f6:b2:19:08:09:0b:4a:
                    4f:de:42:f3:dc:25:4a:86:6a:08:15:07:67:ad:ca:
                    d1:9d:eb:dd:1a:c8:4f:6a:33:28:9b:85:a2:89:50:
                    14:4b:df:67:45:15:bd:f0:a4:da:d3:c2:e8:53:f2:
                    e4:fd:64:83:3e:f4:58:5d:b6:51:ad:79:11:0e:99:
                    2e:2f:30:5d:55:ad:d2:e1:b9:e4:72:ef:22:d8:39:
                    14:23:1a:f1:c6:f6:87:f6:4c:82:1a:39:33:69:34:
                    ef:c8:07:cb:40:2d:5c:73:86:c8:b8:30:04:ba:fa:
                    39:63:c4:fb:10:4b:46:38:57:e7:c2:6c:b5:2c:f5:
                    61:96:0c:97:1c:58:19:d6:c6:ab:18:9c:75:b7:f2:
                    f4:70:41:1a:35:64:31:63:51:b2:67:89:7a:bb:c1:
                    78:80:47:e8:70:66:0c:7f:a6:03:fd:06:2f:ea:79:
                    9d:0a:c7:35:9f:a3:25:79:27:6a:10:01:69:1f:d9:
                    c4:b2:d3:d6:ab:7a:69:a7:8b:02:a2:ec:9e:0f:97:
                    11:b2:ef:03:62:63:e8:22:c2:76:d2:82:da:6f:4f:
                    d6:de:ad:4d:a8:a6:21:47:3a:28:91:d1:96:28:f7:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5D:2A:21:02:85:D5:CC:86:91:9C:16:77:8D:21:1E:C3:7A:F0:81
            X509v3 Authority Key Identifier:
                keyid:43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e5:92:f4:e2:29:03:33:22:a3:b1:4d:51:0e:02:d1:f4:18:
         93:d9:e0:ef:cc:77:3e:6a:58:0f:52:6a:59:2d:0a:18:77:46:
         6a:06:0f:d8:95:2a:08:97:29:b1:b2:34:80:57:fa:5b:d2:3f:
         f1:20:2e:73:00:a2:b0:1f:08:c4:67:5e:52:4a:87:ef:9f:99:
         1f:17:6a:5f:a7:f5:1e:0a:1e:90:45:d8:13:43:32:4f:0f:08:
         d7:4f:4c:9a:71:b7:2e:5e:b8:d1:30:27:ec:46:26:ae:ac:f8:
         81:93:fc:ba:40:84:1d:de:a8:d2:a7:a6:35:8d:0f:1a:e5:f3:
         91:7a:45:61:85:9e:40:a8:b3:46:cc:cf:19:d6:7d:89:12:92:
         4a:74:44:c3:95:81:0a:a8:43:c4:c2:1b:af:7b:ba:f0:e5:95:
         62:37:64:8e:33:f1:cf:f8:38:63:a3:f6:a4:43:43:95:35:d6:
         15:be:88:a4:e3:d6:3b:5a:cc:1d:b2:36:26:b9:8e:ce:1d:78:
         62:47:14:a9:3a:54:02:11:11:8e:ff:54:bf:bc:2e:3d:e6:9a:
         df:bd:3e:4a:ac:00:ce:37:aa:c0:eb:cf:ae:12:c6:03:cc:85:
         a6:2d:80:a0:05:02:2c:de:8d:d5:72:af:d0:b2:e8:35:3b:27:
         bd:f9:37:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----