This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
File:                     31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft (raw, json)
Hash identifier:          5ENE4oJantRHdTz1Ggn3k1RakWlGvObtP762wED1jM8=
Subject key identifier:   99:64:4A:EF:56:38:0A:03:6C:28:05:00:2E:34:A8:AF:B2:80:58:E6
Authority key identifier: 31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9
Certificate issuer:       /CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9
Certificate serial:       18B9695DE9B3EE6A0CCC612C78D1B73132D08971
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
Manifest number:          0150
Signing time:             Sat 20 Dec 2025 04:57:21 +0000
Manifest this update:     Sat 20 Dec 2025 04:52:21 +0000
Manifest next update:     Wed 24 Dec 2025 17:43:21 +0000
Files and hashes:         1: 31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl (hash: 9KHNuxVOZUjJELj0/aU50nlk9ifajTTxh21hGN6j77U=)
                          2: 323830333a633339303a3a2f33322d3438203d3e20323733303133.roa (hash: lDnjpbO7/tGbG8jh0+fryDKYSvl34wfFaaYjg+KmMs0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 17:43:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b9:69:5d:e9:b3:ee:6a:0c:cc:61:2c:78:d1:b7:31:32:d0:89:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9
        Validity
            Not Before: Dec 20 04:52:21 2025 GMT
            Not After : Dec 24 17:43:21 2025 GMT
        Subject: CN=99644AEF56380A036C2805002E34A8AFB28058E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:da:71:9c:af:26:61:a9:63:0f:18:1f:ad:52:
                    e7:ce:0a:27:bc:09:be:de:82:37:db:d3:d5:ef:c1:
                    97:de:7f:b4:80:fd:22:7f:90:d5:fd:35:4b:2f:18:
                    7b:bb:61:df:bd:bb:b0:f6:e5:dd:07:0e:9d:0a:36:
                    64:57:01:e7:82:df:e9:f4:fb:2b:a8:1d:76:5c:e1:
                    65:aa:53:0f:0f:5b:28:7d:42:b3:36:bf:b3:13:52:
                    24:31:07:17:cc:27:25:32:b3:9a:9d:2a:32:0d:c2:
                    de:d9:ec:5b:c6:ba:78:8b:b5:bb:79:51:da:ab:6a:
                    b9:3b:59:a5:fe:28:72:1c:97:68:b1:5a:29:79:e7:
                    28:ad:e1:be:99:d8:b9:f3:e9:a6:79:03:6e:58:b3:
                    e7:c6:9b:7c:b1:fa:8d:d2:f7:cf:09:c7:1d:3c:1d:
                    c3:fb:93:26:83:25:08:d6:69:be:08:87:94:c1:6f:
                    4e:c4:78:ce:20:69:89:f6:0c:6d:02:65:a3:af:78:
                    76:20:a1:67:0c:d2:09:1d:48:74:13:89:2f:9b:e0:
                    05:96:5d:ef:84:50:eb:1a:c4:1d:c1:3d:5c:89:6e:
                    64:c7:1d:ed:8b:e3:81:1b:16:21:76:f7:b0:e9:58:
                    19:b9:25:c2:02:f3:24:ad:ad:d6:3c:89:ae:9e:2f:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:64:4A:EF:56:38:0A:03:6C:28:05:00:2E:34:A8:AF:B2:80:58:E6
            X509v3 Authority Key Identifier:
                keyid:31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:66:de:f6:26:2a:eb:05:8a:86:50:32:c1:4e:26:65:5e:4f:
         2a:11:73:9b:4b:7b:62:58:10:a6:38:53:eb:b7:91:45:cb:d7:
         e0:3a:3f:56:c4:2c:54:6d:d6:cc:fd:5f:7a:cd:46:f8:2f:60:
         63:b0:d0:a3:1f:99:60:73:3b:71:eb:4f:1c:05:7f:14:c3:02:
         11:77:f2:65:95:d1:76:76:b6:bc:af:bc:2a:e9:dd:cb:6a:4d:
         d4:dd:00:b0:fd:6d:1a:43:26:40:40:b6:73:1a:74:f9:77:ae:
         11:f6:3f:05:06:d0:ad:8e:dd:a6:81:8d:fe:a2:5a:b1:b8:6f:
         23:a4:f0:af:ee:8b:c4:67:1a:7b:2c:7e:bf:4f:5c:61:43:a1:
         6b:d2:42:ee:2c:49:08:0f:3a:24:73:b1:44:eb:dd:80:d0:71:
         cf:a5:43:97:91:74:ba:ef:0c:db:70:c5:1f:e2:49:8d:78:d3:
         21:4d:b8:98:c3:a7:cb:71:bf:63:cc:bb:6d:c5:5f:c8:75:a7:
         a4:71:b4:a7:fe:c1:e6:37:80:52:65:cd:30:4e:2c:cc:ee:6d:
         ab:99:f7:ac:36:e3:2a:e1:96:3e:8c:6a:a0:91:9c:2c:00:cd:
         a4:db:20:12:5f:61:ef:44:31:be:85:08:4f:19:77:97:41:5a:
         56:26:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----