This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
File:                     42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json)
Hash identifier:          1R0qSzzvRIWfELcQ/HKUJIgD6M8BKPgPH5vL6udL8OU=
Subject key identifier:   08:C2:CE:90:8A:DB:D2:1D:5A:82:E5:E4:79:44:50:66:B4:85:45:FA
Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9
Certificate issuer:       /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9
Certificate serial:       6476A925651E48F0C7D87D678959D64FFF917603
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
Manifest number:          014A
Signing time:             Sat 20 Dec 2025 00:28:52 +0000
Manifest this update:     Sat 20 Dec 2025 00:23:52 +0000
Manifest next update:     Thu 25 Dec 2025 00:09:52 +0000
Files and hashes:         1: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: kPAAds2trx5F6ZapYeAW8u2l9QiUq7mmsnMnQy4f1Uo=)
                          2: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: aEjGzC9WyQcaAq/pDczNBjuThFt4XEwbTDLIcE0Y+Vs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:76:a9:25:65:1e:48:f0:c7:d8:7d:67:89:59:d6:4f:ff:91:76:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9
        Validity
            Not Before: Dec 20 00:23:52 2025 GMT
            Not After : Dec 25 00:09:52 2025 GMT
        Subject: CN=08C2CE908ADBD21D5A82E5E479445066B48545FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2c:b8:b4:aa:d9:b2:8e:8c:6a:ef:df:b8:a5:
                    39:59:dd:8b:61:58:ee:cb:14:c1:5f:23:09:3c:d7:
                    9c:9b:37:44:69:51:04:19:aa:d4:72:b9:6a:f4:3d:
                    67:b1:cf:f1:d3:5f:11:16:04:f8:b2:3f:14:97:30:
                    0d:49:21:4a:18:91:0f:3f:00:a0:98:01:db:f3:65:
                    b3:fe:a7:e1:66:5b:52:39:2a:ca:ca:78:d0:4f:8c:
                    ff:fe:96:12:e0:9c:1a:4d:6a:c8:ce:aa:5e:2c:5f:
                    c3:15:52:96:52:f6:80:a2:59:2b:82:4c:40:19:02:
                    48:7b:b3:8f:ce:ee:2a:7a:7f:0b:b1:70:46:80:64:
                    bf:9d:f1:a2:ee:a0:aa:60:30:b0:2a:98:f2:89:29:
                    49:21:e8:97:35:6e:96:b6:69:91:3f:a6:26:11:d2:
                    ff:be:82:a1:c2:a3:00:98:74:2d:81:d6:65:c0:9f:
                    ea:46:8f:74:f9:a1:07:ba:bb:ae:7e:f8:72:f7:52:
                    a6:26:dc:db:64:67:2a:8a:5f:77:cb:9f:c1:18:22:
                    c9:49:a6:c2:e5:9b:b4:78:d1:56:0f:4e:70:c2:71:
                    0d:0c:56:de:a6:d9:4f:66:09:23:a8:d7:2f:d0:59:
                    4e:ae:68:23:d7:0c:bf:3e:1c:24:a1:ac:b3:f0:5c:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C2:CE:90:8A:DB:D2:1D:5A:82:E5:E4:79:44:50:66:B4:85:45:FA
            X509v3 Authority Key Identifier:
                keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f4:59:f1:4b:5b:b5:74:d5:de:f0:31:de:69:2f:9e:1d:19:
         fd:59:5a:f1:a5:c2:ca:2e:aa:63:c5:c7:55:9f:45:3a:53:6e:
         00:d7:70:2b:f2:32:71:a7:29:fc:9d:63:eb:47:6f:2b:bf:31:
         ac:b6:2a:d2:62:00:63:5f:1b:5a:55:d1:38:e1:f9:54:2e:46:
         37:86:33:33:eb:10:c5:53:8f:4f:9d:70:e8:76:9a:1b:7d:fe:
         d7:44:fe:d1:d4:e6:85:01:ad:3d:61:ae:92:52:f2:17:23:56:
         4d:80:7f:38:29:15:7c:e7:de:db:d5:19:06:72:b7:2e:48:dc:
         f3:01:f2:07:df:d5:74:e1:b1:d7:86:18:a2:23:85:59:6e:91:
         27:d3:8b:b0:07:f7:de:d3:10:fe:9d:57:09:30:c0:e6:82:42:
         42:14:b8:0b:4c:3b:13:ab:3b:e2:be:1c:56:c7:bb:6c:b1:8b:
         22:6e:4b:17:ee:5f:a8:d4:53:dd:a6:35:85:f0:a1:57:44:cb:
         89:16:04:2f:78:9a:50:47:b5:d8:4b:73:b4:73:3f:d2:47:e4:
         26:01:17:8b:89:c3:5b:31:d2:f9:cb:39:1a:5c:47:a2:88:b1:
         09:da:bb:00:4e:a3:d5:00:95:b9:7c:41:5e:85:c2:4a:ce:85:
         13:99:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----