This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.mft
File:                     84B320834CA10CE018169848F7AE0810EB3E7C5D.mft (raw, json)
Hash identifier:          4Xa4wMjGd7BI+SP93KSVN+DvxMON4phbCNHLyWFujC8=
Subject key identifier:   99:72:54:39:DC:4E:E4:57:C3:BD:DE:3F:33:F2:15:02:D2:BA:C3:FE
Authority key identifier: 84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D
Certificate issuer:       /CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
Certificate serial:       60A3CB4D8229F3C385606BB91C0E61A347238BDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.mft
Manifest number:          0153
Signing time:             Fri 19 Dec 2025 01:19:16 +0000
Manifest this update:     Fri 19 Dec 2025 01:14:16 +0000
Manifest next update:     Wed 24 Dec 2025 18:17:16 +0000
Files and hashes:         1: 323830333a343261303a3a2f33322d3332203d3e20323636383531.roa (hash: sqxohOwNLN8BqnXQG7n1ES42eap5Nn1AuWLEs9lNY40=)
                          2: 34352e3137302e3130302e302f32342d3234203d3e20323733393733.roa (hash: bvRs3jp6Uo1leEQec8UdQhEiINYxayNwPNNI3nwngb0=)
                          3: 84B320834CA10CE018169848F7AE0810EB3E7C5D.crl (hash: yqBhrixCAu9KjxVHrXBDIHpxWhY8bcz3cvukU2+yySg=)
                          4: 34352e3233382e3137392e302f32342d3234203d3e20323733393733.roa (hash: 8UPCS1dzoF98UBOHNteXNqE+w2sm6F1+2SY/j4Pf0HE=)
                          5: 34352e3137302e3130312e302f32342d3234203d3e20323733393733.roa (hash: bCrVHMXIhzB0wvFF95fX7hY4JbjSVR21KCqR+3FpkBo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 18:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a3:cb:4d:82:29:f3:c3:85:60:6b:b9:1c:0e:61:a3:47:23:8b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
        Validity
            Not Before: Dec 19 01:14:16 2025 GMT
            Not After : Dec 24 18:17:16 2025 GMT
        Subject: CN=99725439DC4EE457C3BDDE3F33F21502D2BAC3FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:52:f2:7f:77:c3:16:64:b2:15:56:d4:18:da:
                    d5:1f:80:b2:23:94:a3:6f:b5:04:14:6b:43:71:c1:
                    ed:fd:7b:8c:64:fd:35:2f:47:7d:d2:b1:2a:50:79:
                    ef:48:5f:62:95:a4:2f:6f:b6:84:cd:2e:26:b3:5b:
                    b4:6f:77:fa:38:f7:0b:aa:16:96:3e:0d:91:54:d3:
                    d8:77:bd:17:cc:7b:e9:6c:16:90:c3:10:4b:e6:5c:
                    aa:92:c4:50:c2:e6:38:eb:b1:c4:6d:62:fa:ce:11:
                    56:00:2f:7a:4e:3f:f0:af:44:ac:a0:36:83:13:96:
                    f1:54:e5:8f:d7:c0:df:ce:f8:df:f3:e5:fd:75:30:
                    0e:31:d9:62:7a:e4:42:b1:a3:ac:90:08:2b:e1:d1:
                    2b:57:f3:03:3d:b8:86:ec:40:76:8a:a3:ac:59:29:
                    8a:51:86:96:1f:e7:93:9f:9d:5f:77:0d:7b:a3:5e:
                    10:d7:0c:e1:b8:f0:e7:6d:01:c8:ba:ec:cf:af:bd:
                    85:7c:c4:79:f5:97:0c:70:33:1a:ee:33:0c:f4:cf:
                    0f:9e:0c:df:bf:b6:3c:89:4a:04:c9:b8:6b:b6:dd:
                    17:94:7e:68:bb:85:d9:77:fb:4d:f6:72:fb:4c:a9:
                    37:72:0a:7d:10:06:e2:07:d1:4f:ed:78:94:46:71:
                    1e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:72:54:39:DC:4E:E4:57:C3:BD:DE:3F:33:F2:15:02:D2:BA:C3:FE
            X509v3 Authority Key Identifier:
                keyid:84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e8:7c:50:bc:51:23:e6:f7:cf:19:f2:54:a0:2c:fe:0c:1c:
         c3:b7:da:ac:9c:f9:dc:08:d6:82:4e:a7:b7:d7:10:07:01:5a:
         eb:f3:2d:95:43:af:2f:6c:0a:de:d8:0d:80:34:f5:f1:35:a1:
         4c:c5:78:50:32:8b:3b:27:9f:44:d8:9d:32:82:70:12:8f:49:
         c2:6a:70:12:df:e6:78:51:05:d1:b4:cd:ac:19:23:7e:df:d1:
         3e:d0:91:e3:b4:ff:80:f6:8d:dc:e1:6d:21:96:a4:bb:f0:81:
         e9:76:d3:62:e0:45:14:dc:b1:60:7d:73:f8:df:d0:ff:cd:57:
         a8:6b:d6:7c:9d:4b:9d:05:21:31:84:7c:47:5e:41:d0:a4:64:
         b8:84:51:8d:94:ce:e8:c7:a9:d9:92:85:32:16:14:73:39:92:
         74:0b:48:9f:8d:8a:ed:5b:9f:87:53:48:f8:f2:bd:fe:b7:f5:
         22:ed:00:ec:1a:bc:ce:f6:84:58:1d:25:e2:06:56:f0:9b:ec:
         3d:3f:ef:3d:9d:00:1a:4f:d1:6a:77:7f:04:0d:ee:af:e1:49:
         ff:e0:f6:36:a4:48:cd:6e:28:13:f9:1e:06:8d:39:fb:1b:d0:
         04:86:33:9c:ae:c3:66:1e:06:2b:99:2d:c1:22:4b:68:6b:43:
         6f:21:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----