This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft
File:                     3214A9089E97D5F53B714A9F9256A933E4595E53.mft (raw, json)
Hash identifier:          k/Jd+aPHJCsft2JLh743lqt9MocXxNnAkAAR7AZPeb8=
Subject key identifier:   D2:C8:F8:9B:E9:28:6E:3C:37:14:8F:BF:8A:F4:A6:ED:97:DC:13:33
Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53
Certificate issuer:       /CN=3214A9089E97D5F53B714A9F9256A933E4595E53
Certificate serial:       3D13BEED07A76DA9427D523D26CE22CC15F9F730
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft
Manifest number:          0150
Signing time:             Sat 20 Dec 2025 03:50:52 +0000
Manifest this update:     Sat 20 Dec 2025 03:45:52 +0000
Manifest next update:     Thu 25 Dec 2025 17:02:52 +0000
Files and hashes:         1: 3214A9089E97D5F53B714A9F9256A933E4595E53.crl (hash: 6zPsqnA8PIDDr4jkNC5ux3rVOJEhAABnoji42Zi3Xbo=)
                          2: 34352e3137382e33392e302f32342d3234203d3e203232373234.roa (hash: AP7UFP0rpGQbityeHpAmDNcuegyejWrJPgbpZy6kEh0=)
                          3: 34352e3137382e33372e302f32342d3234203d3e203232373234.roa (hash: 0HhnYrRRVi7CHJEvS9xN8EZDppFHk6whkimhveshWDc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:13:be:ed:07:a7:6d:a9:42:7d:52:3d:26:ce:22:cc:15:f9:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53
        Validity
            Not Before: Dec 20 03:45:52 2025 GMT
            Not After : Dec 25 17:02:52 2025 GMT
        Subject: CN=D2C8F89BE9286E3C37148FBF8AF4A6ED97DC1333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:d9:f1:dc:b5:b0:b2:80:cc:65:f3:bb:1a:
                    8b:81:5f:d0:84:d3:ca:bf:b1:9a:d4:c7:48:63:db:
                    71:e8:74:b2:15:5d:e0:e8:56:b9:4c:8e:4f:84:26:
                    2b:3b:40:93:4c:ae:5f:e9:2d:e2:fc:01:b0:39:f9:
                    26:7b:fd:18:bf:6f:12:65:ce:65:aa:7c:1f:77:ca:
                    80:bb:2f:73:b5:db:56:7b:c7:27:ac:97:0c:50:f6:
                    57:36:ba:50:6a:6b:ae:8e:60:6b:fc:9d:52:5c:82:
                    d1:db:7a:53:f2:f6:03:64:90:b6:99:8f:ea:b3:f4:
                    c0:ba:17:09:49:12:f1:2a:a2:2a:25:3e:ce:70:c8:
                    c7:36:87:72:03:bd:3e:a6:01:1e:f0:ec:6d:c7:07:
                    6d:ea:a1:ba:99:3e:75:38:24:ee:31:09:07:65:56:
                    45:6c:c0:1d:41:92:5f:a4:6b:53:ed:6f:db:38:94:
                    ff:7e:38:d3:9b:64:65:08:04:21:f9:57:2b:52:98:
                    0a:b4:48:47:ed:e7:2c:c0:79:72:69:fc:3e:73:6a:
                    e9:78:2c:69:c1:76:71:42:04:9c:46:80:45:b3:24:
                    95:d5:c9:7c:cc:f1:eb:38:d7:27:10:d8:d1:aa:93:
                    3c:b1:5d:b9:89:e2:e8:82:84:1a:dc:f0:04:14:22:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C8:F8:9B:E9:28:6E:3C:37:14:8F:BF:8A:F4:A6:ED:97:DC:13:33
            X509v3 Authority Key Identifier:
                keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f8:b2:49:66:e2:ce:7e:78:d2:f0:05:49:b4:d1:28:f5:86:
         1a:7e:b1:75:96:f9:ce:62:5b:ef:8d:95:af:b1:23:43:4e:8a:
         df:70:05:ee:aa:d7:fa:df:a4:eb:1b:b7:f0:37:1b:c3:71:8a:
         d4:a7:2e:5f:48:f2:81:af:9c:ca:ba:ff:89:7d:5a:e8:fd:6e:
         80:fe:1c:6e:0c:b0:56:88:e6:71:ec:35:33:c4:77:c2:f5:89:
         c6:b2:6b:07:39:53:24:81:95:20:3a:e1:a2:aa:f6:c5:20:23:
         49:f2:84:9a:bb:e6:ae:14:26:31:5e:71:bb:15:60:fc:8f:09:
         40:db:48:37:ed:de:ae:a8:f3:d7:2a:7e:b6:21:08:05:0f:87:
         f1:55:c7:64:95:fb:87:77:27:f5:c0:53:fd:ad:14:3c:9e:5d:
         35:dd:65:dc:93:b7:76:31:91:58:a7:65:9e:f5:48:34:b0:8c:
         1b:ab:6d:85:91:58:37:58:19:e5:3d:f3:22:ed:67:49:d6:b8:
         aa:29:d1:21:8a:dd:7b:65:02:44:ca:d1:b4:b3:3d:e5:11:c9:
         e4:fc:ee:ec:fd:7b:37:2e:ad:ad:fe:a3:45:a3:22:4f:46:99:
         c5:bc:fa:06:5d:0a:eb:89:28:90:4a:48:2d:33:38:dc:57:9d:
         29:d4:85:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----