This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
File:                     989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft (raw, json)
Hash identifier:          dcmpBAJ2+LaTE+dF/vJtems47AszlEIPNvG+uciCpi4=
Subject key identifier:   41:6C:0F:7C:EF:8B:72:21:55:1A:AF:AC:B7:AF:09:98:FF:98:3D:5C
Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5
Certificate issuer:       /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
Certificate serial:       1C50DDB8A7547DC23C802BF0C6259EDC037B8143
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
Manifest number:          014A
Signing time:             Sat 20 Dec 2025 06:43:20 +0000
Manifest this update:     Sat 20 Dec 2025 06:38:20 +0000
Manifest next update:     Thu 25 Dec 2025 05:33:20 +0000
Files and hashes:         1: 3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa (hash: H7aEYtu6WVcmBJ/LYyjuVlTRTtiGzazA09PbwXTdxgA=)
                          2: 3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa (hash: AsEHVSdxN/om5UYh7LmOx7ME5F/4rOyHrR6Vp7TmmYs=)
                          3: 3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa (hash: ki3ZXbLXCKJHkqFilvfhr6bdVrQBibKeIAqRvGGaKaU=)
                          4: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl (hash: 4TfQfq09xrxYtnWmshspVdOIezu6vsnMYEwKtjeCgbg=)
                          5: 3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa (hash: yu6Oe96ukjaDp8hbPn99XX1vIiICPSDbRovWaVfLzMY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 05:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:50:dd:b8:a7:54:7d:c2:3c:80:2b:f0:c6:25:9e:dc:03:7b:81:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
        Validity
            Not Before: Dec 20 06:38:20 2025 GMT
            Not After : Dec 25 05:33:20 2025 GMT
        Subject: CN=416C0F7CEF8B7221551AAFACB7AF0998FF983D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:b4:c3:60:d9:f2:73:4b:58:5c:9e:e2:01:
                    b5:e9:93:11:10:91:fe:c9:c4:d4:59:36:6c:8f:f4:
                    96:a9:6e:9b:5b:b6:01:3d:ff:41:58:8f:b9:92:4c:
                    d5:37:f4:0b:1f:21:c5:20:6a:64:96:7e:4f:bd:c8:
                    27:1c:ba:f4:d6:40:2d:3e:34:82:ee:3e:9b:6a:78:
                    e2:79:2f:b7:77:6b:63:fc:94:39:22:1a:5e:17:70:
                    93:d5:67:81:69:58:34:24:53:13:5e:6a:0b:64:51:
                    8f:fc:71:1e:5c:fe:bb:70:77:27:24:88:51:1f:f6:
                    3e:96:20:b0:06:c1:40:a8:a1:f4:30:19:59:c4:c2:
                    5b:44:e2:af:65:3e:ce:7d:94:d1:05:6a:b3:5f:9b:
                    2d:d8:3b:19:ea:26:c1:21:ca:2d:5a:a3:3a:61:cc:
                    4a:ea:80:67:f4:bc:8c:47:f9:6e:fa:a6:b9:fb:17:
                    71:34:f3:9c:9f:28:51:03:88:37:09:dc:44:b7:da:
                    e1:18:d4:08:00:1f:a9:2b:55:d0:3e:81:e1:5e:18:
                    86:31:c0:eb:a4:5c:83:24:92:db:36:2f:54:3a:c0:
                    80:bc:d8:d5:a6:8f:4b:db:a3:87:0a:39:32:f5:7a:
                    17:08:c0:35:b8:85:07:40:4d:b2:1d:0a:51:0d:bd:
                    5e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6C:0F:7C:EF:8B:72:21:55:1A:AF:AC:B7:AF:09:98:FF:98:3D:5C
            X509v3 Authority Key Identifier:
                keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a5:1d:e7:d2:a1:67:85:5e:17:89:b4:a9:c4:23:aa:da:b8:
         5d:22:e5:05:f1:ea:89:3d:00:f8:72:18:13:91:69:a3:9c:f8:
         75:08:2b:1c:01:ca:c3:1f:96:ce:fc:6d:aa:15:98:70:f6:7a:
         93:93:b1:c0:67:01:94:c3:f1:74:a3:83:2e:3c:ac:48:2f:c1:
         fe:34:b9:50:c1:85:73:5b:47:a3:f2:d2:21:5a:e9:9a:bf:96:
         d5:23:15:b9:2b:af:b8:97:82:67:80:8f:ac:2d:48:54:99:d4:
         8f:74:98:b3:ea:8d:70:6c:88:95:cc:14:d4:3b:93:09:48:79:
         cb:69:06:c2:77:9d:93:8f:16:69:ac:25:60:04:4e:52:04:49:
         09:bf:20:8b:e5:35:f0:e0:33:3b:32:37:94:84:a4:d5:31:bf:
         ad:07:51:e0:70:0e:e5:0f:93:7f:b0:89:5b:ca:96:0c:b4:26:
         84:c7:97:cc:45:3a:69:ea:7b:ab:9a:06:74:92:53:d6:ed:07:
         07:9b:e9:c3:64:80:cb:e8:05:c3:89:bd:fa:e7:e1:2e:86:80:
         c1:10:31:e3:42:5a:c4:cb:01:e7:15:38:b9:fe:be:f9:54:6f:
         fe:c0:a4:7a:91:d0:20:b8:c6:27:45:19:51:12:14:7a:07:94:
         0a:5a:48:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----