This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft
File:                     3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft (raw, json)
Hash identifier:          dS5NI2vdsiGgdjgy9tchx4m6irGox/ndjdoE2CRUA5o=
Subject key identifier:   2C:12:7D:DC:4F:65:E8:EA:B3:99:6F:D9:E2:16:5C:67:6E:C5:AB:3B
Authority key identifier: 39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4
Certificate issuer:       /CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
Certificate serial:       5DE9587EB96FFDD02DF5F923DC9131520AE15F3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft
Manifest number:          0143
Signing time:             Fri 19 Dec 2025 09:30:20 +0000
Manifest this update:     Fri 19 Dec 2025 09:25:20 +0000
Manifest next update:     Thu 25 Dec 2025 06:48:20 +0000
Files and hashes:         1: 323830333a626332303a3a2f33322d3438203d3e203532343638.roa (hash: Q0i/zOTswJRhVWnXpsI9uzLqXEiTYaGogd4Sq3B39Uw=)
                          2: 34352e37302e3230322e302f32332d3234203d3e203532343638.roa (hash: NhXC2XFptE5F7f1ErKcgpjLw0GNiSGZ9Eu25dOSIKD0=)
                          3: 34352e37302e3230322e302f32332d3234203d3e20323634363638.roa (hash: fBGq6m2Su3LkyrbP6VT0PBf2hinXIlC+oNxD3lr1LNE=)
                          4: 323830333a626332303a3a2f33322d3438203d3e20323634363638.roa (hash: LlYRCGv4cYNauwTR+MZt9LkbYE6yPEcujCYcp9Bz46I=)
                          5: 3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl (hash: PMsdt+J0YKk1dZUB1RN1V1ymjBOR1LcrYo3g85zAbO4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e9:58:7e:b9:6f:fd:d0:2d:f5:f9:23:dc:91:31:52:0a:e1:5f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
        Validity
            Not Before: Dec 19 09:25:20 2025 GMT
            Not After : Dec 25 06:48:20 2025 GMT
        Subject: CN=2C127DDC4F65E8EAB3996FD9E2165C676EC5AB3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:2d:31:78:73:63:fe:62:09:de:d8:df:dd:
                    7f:a7:25:25:66:50:f7:c6:12:c7:92:e8:72:b6:e9:
                    e2:d8:e0:12:39:82:ad:5e:37:37:2a:ce:1e:d2:95:
                    b7:d0:76:c8:22:8b:32:12:f4:1d:4c:02:dd:d5:70:
                    46:ea:4c:97:e4:be:92:e7:4a:6d:0f:e8:2e:75:70:
                    3b:53:4d:64:79:42:83:37:0e:9e:fe:56:5e:18:e1:
                    29:da:f3:61:a6:d4:e2:22:0c:ec:fe:aa:eb:93:02:
                    67:37:73:7a:39:40:16:6f:71:f5:e3:24:fe:bb:db:
                    cc:6e:09:31:ba:1f:ef:e0:c3:5d:76:00:ad:45:54:
                    83:d2:a0:2e:fd:76:a2:7b:f7:43:6b:ed:73:69:c9:
                    81:13:17:21:93:b2:ed:61:1f:c6:58:84:4c:05:10:
                    fb:76:55:0d:19:53:f3:bb:d8:20:95:eb:2a:ea:0e:
                    d6:4b:89:c2:81:32:4a:35:19:fc:b8:d9:38:36:a8:
                    fb:a5:ff:41:ce:35:5e:4c:1e:d9:1f:8a:ff:7d:6d:
                    6e:60:1a:e2:78:16:4a:a8:3a:1a:7d:36:ea:c3:dc:
                    6b:58:4d:78:f3:3a:84:13:00:37:3c:20:bb:36:19:
                    f8:d0:11:8b:12:48:fe:d1:a6:7c:09:c6:c7:98:52:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:12:7D:DC:4F:65:E8:EA:B3:99:6F:D9:E2:16:5C:67:6E:C5:AB:3B
            X509v3 Authority Key Identifier:
                keyid:39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:60:1c:f1:cc:09:91:f7:10:5e:36:72:84:15:8a:fd:49:83:
         40:f1:7f:cc:68:b9:2c:c4:2c:3f:b1:d5:3a:31:43:dd:c9:f9:
         a8:23:7b:87:30:9d:62:a5:7f:3e:a8:e0:26:d0:65:55:ba:c3:
         00:35:9a:d2:bc:46:42:a3:97:18:31:20:37:6a:bb:30:94:88:
         d1:ef:47:df:1f:a2:a0:fa:a6:ef:a4:61:42:5c:64:51:20:c3:
         b4:a2:74:c0:74:83:22:9b:63:e9:bf:f6:07:6e:aa:d2:02:46:
         45:5b:6d:cf:0a:b9:3f:18:57:cc:82:9a:a5:bc:ba:d6:88:b0:
         4e:61:3e:65:b2:f2:93:31:ef:08:c7:42:b1:4b:de:a3:6c:b0:
         ec:c8:76:5f:f1:fc:69:6b:3d:36:0b:41:6f:d6:b9:16:46:25:
         d1:e1:be:05:d9:5c:03:e2:e4:97:1b:be:c2:82:4e:56:b0:27:
         8e:42:5c:55:8d:7b:33:76:05:42:f3:eb:d6:fa:3c:4e:1b:57:
         5f:3d:e9:27:8e:65:9f:70:09:22:15:64:21:80:1d:46:4e:0e:
         1e:fc:2c:a0:f1:6c:a3:ca:1e:5b:21:ef:86:04:b8:b1:cf:6d:
         2b:2d:cc:c1:66:b9:20:cf:21:5e:fe:42:d1:59:fe:1b:81:b2:
         7f:08:6c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----