This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
File:                     86A5D10A30ED805BDE337515CB0F580086111558.mft (raw, json)
Hash identifier:          ngn+rcgyOwyTAY3bvffGXTkqAhZ4t5zWD/IIKsKpl98=
Subject key identifier:   64:2E:FA:5B:07:B1:73:01:F4:9C:C4:F8:95:55:8B:4C:3F:57:33:7F
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       2CE5AF57895174857F98081CBE6B2186703682B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
Manifest number:          0150
Signing time:             Fri 19 Dec 2025 08:24:43 +0000
Manifest this update:     Fri 19 Dec 2025 08:19:43 +0000
Manifest next update:     Tue 23 Dec 2025 20:34:43 +0000
Files and hashes:         1: 3138362e302e3135322e302f32322d3234203d3e20323033.roa (hash: /2YzcpL+zbZ/HOojoI6SfUsIOaF0b9Gg1wOatVdcruQ=)
                          2: 3138362e302e3135322e302f32322d3234203d3e2033353439.roa (hash: XYEJuqHBP5I3H3vnyxVhqnKXipLh7lpLPXrkvTMQwkI=)
                          3: 3138362e302e3135322e302f32322d3234203d3e20323032.roa (hash: 1wxGWZ0ctYk/wFZSCMD27MHsKMycX7OUGO18cY3jC+4=)
                          4: 86A5D10A30ED805BDE337515CB0F580086111558.crl (hash: GZDuwjveDkgNfeVJR9SCeITMHbNs7cHduXbKvXp4KsQ=)
                          5: 3138362e302e3135322e302f32322d3234203d3e203139393035.roa (hash: kvkorhOrX+jZT4TQUlDe1CcZf+5MbA/dWMc5P0WYIYM=)
                          6: 3138362e302e3135322e302f32322d3234203d3e203131333932.roa (hash: 4BVHQHQ654pki4SqE7CRMY6rfA2Z7iQfJPz/dhZ4vvE=)
                          7: 3138362e302e3135322e302f32322d3234203d3e2033333536.roa (hash: HLs4vs9EuGNu+9Zi6IW0euZVvm6Jg9q5ozELysTd/dM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 20:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e5:af:57:89:51:74:85:7f:98:08:1c:be:6b:21:86:70:36:82:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Dec 19 08:19:43 2025 GMT
            Not After : Dec 23 20:34:43 2025 GMT
        Subject: CN=642EFA5B07B17301F49CC4F895558B4C3F57337F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:8d:10:a5:ba:d0:81:d6:5b:ba:8f:36:f1:
                    f7:0f:06:0f:f0:e9:c5:db:bf:4e:c2:ad:79:82:3d:
                    1d:83:5a:75:ea:9f:45:71:a9:28:53:94:fd:40:0d:
                    4a:4b:fa:e4:8f:84:37:f9:9b:06:a0:36:70:34:d2:
                    57:5f:51:61:ce:de:56:b7:05:a5:81:55:de:23:8a:
                    bf:76:dc:79:fa:11:37:91:e6:89:81:57:f9:74:55:
                    28:fb:ac:99:cd:96:32:0e:c9:b4:b8:31:13:10:9e:
                    b2:1c:80:92:f2:56:ec:4a:0b:27:56:2b:33:74:1a:
                    2e:da:e4:0e:47:43:9f:c3:2c:67:a5:35:6e:a1:cf:
                    10:ed:1f:c5:35:ec:f9:d4:52:08:73:e5:07:81:31:
                    27:28:6f:70:57:88:0e:f5:55:4c:18:e2:62:ab:d4:
                    cc:b1:19:3f:1c:c8:a7:58:66:35:5f:59:5e:5f:b4:
                    dc:4f:b4:12:98:b5:ba:23:c9:7a:17:91:5d:0d:75:
                    4d:ac:bf:cc:d1:81:f8:69:da:19:55:cc:64:d6:ac:
                    53:25:93:d8:24:b3:c3:c4:79:be:a1:7b:20:fb:97:
                    49:3f:bb:61:01:b4:3b:10:e6:a6:b2:f4:cc:8c:d8:
                    77:98:78:26:6b:bc:7e:0b:bc:f8:4b:33:a1:3c:ad:
                    c4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:FA:5B:07:B1:73:01:F4:9C:C4:F8:95:55:8B:4C:3F:57:33:7F
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:74:ff:a9:c7:b6:44:a8:7d:48:91:16:3e:08:5f:82:80:a6:
         78:c9:8c:12:5c:de:66:d5:45:89:d0:59:4b:7c:df:64:37:7a:
         56:4f:78:47:1d:3a:f0:0f:1f:3b:48:0e:d5:b5:11:76:dc:b9:
         fb:36:6d:b9:39:96:c6:21:e2:a2:9b:ed:54:c6:e0:f6:3f:54:
         0c:bb:da:b5:cc:78:81:83:e8:70:36:13:65:4e:3e:82:42:52:
         28:5c:74:e9:69:4d:f4:64:d5:9d:fb:72:d4:29:9d:c1:8e:a9:
         b1:93:c9:59:fc:f8:64:1e:9d:c9:36:e1:cc:c4:d2:8c:72:3c:
         3d:f0:72:20:bb:09:03:d8:1a:86:e1:9e:29:47:c6:8a:9e:bb:
         ee:80:a9:8b:53:ec:08:7d:63:a6:94:bb:48:67:74:65:9a:60:
         25:24:e2:79:0c:0e:91:34:57:73:ab:cf:06:b7:07:6e:90:b4:
         18:5f:aa:49:46:97:24:12:f0:d9:fe:2c:04:38:1e:c6:e5:e4:
         5e:ec:33:cc:1c:2b:71:da:b3:89:c6:86:ba:02:b9:25:59:d7:
         73:c0:d3:4c:b1:bd:2a:e2:68:21:40:11:2f:c2:0a:ee:07:7e:
         ae:d1:9e:d5:10:ba:77:e4:21:c4:cc:95:56:f4:e5:8a:5e:c3:
         52:68:cc:4d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIULOWvV4lRdIV/mAgcvmshhnA2grQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZBNUQxMEEzMEVEODA1QkRFMzM3NTE1Q0IwRjU4MDA4
NjExMTU1ODAeFw0yNTEyMTkwODE5NDNaFw0yNTEyMjMyMDM0NDNaMDMxMTAvBgNV
BAMTKDY0MkVGQTVCMDdCMTczMDFGNDlDQzRGODk1NTU4QjRDM0Y1NzMzN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHcY0QpbrQgdZbuo828fcPBg/w
6cXbv07CrXmCPR2DWnXqn0VxqShTlP1ADUpL+uSPhDf5mwagNnA00ldfUWHO3la3
BaWBVd4jir923Hn6ETeR5omBV/l0VSj7rJnNljIOybS4MRMQnrIcgJLyVuxKCydW
KzN0Gi7a5A5HQ5/DLGelNW6hzxDtH8U17PnUUghz5QeBMScob3BXiA71VUwY4mKr
1MyxGT8cyKdYZjVfWV5ftNxPtBKYtbojyXoXkV0NdU2sv8zRgfhp2hlVzGTWrFMl
k9gks8PEeb6heyD7l0k/u2EBtDsQ5qay9MyM2HeYeCZrvH4LvPhLM6E8rcQ/AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUZC76WwexcwH0nMT4lVWLTD9XM38wHwYDVR0j
BBgwFoAUhqXRCjDtgFveM3UVyw9YAIYRFVgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDRBNDZENkE4NURGQTYxNDlDNUY5QTdDREExOENGOTMw
RDM4MkYzMzgyRTE5MjNENTAzRjgyOUFDNDUwRDAyLzAvODZBNUQxMEEzMEVEODA1
QkRFMzM3NTE1Q0IwRjU4MDA4NjExMTU1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NkE1RDEwQTMwRUQ4MDVCREUz
Mzc1MTVDQjBGNTgwMDg2MTExNTU4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjA0QTQ2RDZBODVERkE2MTQ5QzVGOUE3Q0RBMThDRjkzMEQzODJGMzM4
MkUxOTIzRDUwM0Y4MjlBQzQ1MEQwMi8wLzg2QTVEMTBBMzBFRDgwNUJERTMzNzUx
NUNCMEY1ODAwODYxMTE1NTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBedP+px7ZEqH1IkRY+CF+CgKZ4
yYwSXN5m1UWJ0FlLfN9kN3pWT3hHHTrwDx87SA7VtRF23Ln7Nm25OZbGIeKim+1U
xuD2P1QMu9q1zHiBg+hwNhNlTj6CQlIoXHTpaU30ZNWd+3LUKZ3Bjqmxk8lZ/Phk
Hp3JNuHMxNKMcjw98HIguwkD2BqG4Z4pR8aKnrvugKmLU+wIfWOmlLtIZ3RlmmAl
JOJ5DA6RNFdzq88GtwdukLQYX6pJRpckEvDZ/iwEOB7G5eRe7DPMHCtx2rOJxoa6
ArklWddzwNNMsb0q4mghQBEvwgruB36u0Z7VELp35CHEzJVW9OWKXsNSaMxN
-----END CERTIFICATE-----