This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft
File:                     BA56744DBF20010C478D63405BC3FD8408043C5B.mft (raw, json)
Hash identifier:          0Zwv954DebDGr9spy3eEAVD69i5b7LSkA782ntxirOc=
Subject key identifier:   1B:5B:06:03:D3:A5:10:27:D1:8C:F4:69:A8:58:D3:B2:8F:80:25:7D
Authority key identifier: BA:56:74:4D:BF:20:01:0C:47:8D:63:40:5B:C3:FD:84:08:04:3C:5B
Certificate issuer:       /CN=BA56744DBF20010C478D63405BC3FD8408043C5B
Certificate serial:       561629F6AE0FDDB033610552BDE99D7F6F706074
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft
Manifest number:          0150
Signing time:             Sat 20 Dec 2025 22:58:12 +0000
Manifest this update:     Sat 20 Dec 2025 22:53:12 +0000
Manifest next update:     Wed 24 Dec 2025 23:34:12 +0000
Files and hashes:         1: 3230312e3231392e3132392e302f32342d3234203d3e20323635353534.roa (hash: W5oaYj6JaleQIAoM8xboWTZuupgn/Fn/cGFicnFvQzY=)
                          2: 323830303a3239303a3a2f33322d3332203d3e203230303135.roa (hash: ikHPzFpp7bxy6y2vOlwCnW74zSUZqwVYjJ+r5iOn+BA=)
                          3: 3230312e3231392e3133302e302f32342d3234203d3e20323635373035.roa (hash: uM9ZhdVJKNhMFlPwlLvHQcPJ7Tfe/xqL1jdXxaz4V8k=)
                          4: BA56744DBF20010C478D63405BC3FD8408043C5B.crl (hash: 7sIRGtvw4u6KRteS/KCGt8aHCIQZ4sF8u+1xSPET5I8=)
                          5: 3230312e3231392e3132382e302f31392d3234203d3e203230303135.roa (hash: fWrhXhF9scDrwi2L1Q/PPU9PBwyrbb5fCwbqrb9Zs4A=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 23:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:16:29:f6:ae:0f:dd:b0:33:61:05:52:bd:e9:9d:7f:6f:70:60:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA56744DBF20010C478D63405BC3FD8408043C5B
        Validity
            Not Before: Dec 20 22:53:12 2025 GMT
            Not After : Dec 24 23:34:12 2025 GMT
        Subject: CN=1B5B0603D3A51027D18CF469A858D3B28F80257D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:ba:96:3f:11:e9:23:f8:3d:57:12:92:80:
                    01:59:09:1a:61:d2:97:57:8d:03:f5:64:c6:67:42:
                    34:d2:2a:98:54:e3:60:5f:f8:74:cf:27:82:e8:9f:
                    96:1e:35:8b:7e:4a:ee:10:68:66:4e:5a:c4:6a:10:
                    ec:78:07:8f:a9:40:d0:83:3f:21:30:9a:9c:07:1a:
                    d9:de:50:de:cc:68:f2:40:79:fb:a0:d3:20:b9:b8:
                    42:72:04:49:eb:91:31:d7:3c:32:f7:38:1b:7b:35:
                    7d:42:1a:30:af:b6:b6:e3:80:18:b8:af:ec:cd:3c:
                    3f:9a:b1:05:07:a5:84:56:e0:7d:75:b7:db:2e:d8:
                    fc:f8:4e:43:15:2a:10:e7:02:6e:9f:ea:11:80:75:
                    63:9a:78:b0:77:f1:97:00:c0:c9:6d:8c:38:23:d7:
                    08:d3:52:76:73:8b:4e:9f:0e:63:a2:2d:b7:2d:af:
                    80:4d:a0:b9:51:af:a3:1f:71:67:1c:d9:92:51:3c:
                    0d:37:c7:4a:f4:ce:f4:b1:a6:07:2e:dd:7b:fd:94:
                    9e:da:d0:2d:01:fc:f7:2f:e8:0c:c0:6f:5f:c3:5c:
                    c1:df:ae:7f:3c:12:18:ed:82:b0:a8:96:ed:6d:8f:
                    87:86:d4:01:60:c4:d1:6e:27:0c:57:27:ab:df:53:
                    c5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:06:03:D3:A5:10:27:D1:8C:F4:69:A8:58:D3:B2:8F:80:25:7D
            X509v3 Authority Key Identifier:
                keyid:BA:56:74:4D:BF:20:01:0C:47:8D:63:40:5B:C3:FD:84:08:04:3C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ef:bf:3b:5d:44:b5:40:92:4f:0d:ee:5e:9e:54:f1:d2:75:
         d2:0b:09:a0:a8:be:19:77:7d:e4:34:04:d2:5b:13:60:c3:0a:
         48:1a:b5:14:6d:b9:e5:ec:19:db:8f:29:8c:05:04:a1:d2:bc:
         99:7c:3c:01:5c:8a:cf:32:a9:6f:26:d3:fa:9a:eb:4e:65:1d:
         53:45:c1:4a:f8:36:1a:83:97:e1:74:ff:b5:eb:1e:18:87:f0:
         68:64:65:08:6b:d1:b4:ca:ec:06:f9:1a:a5:c3:d4:31:e0:de:
         61:a2:db:d3:d2:b6:a8:b0:77:65:cd:7f:95:d1:e9:03:56:18:
         2d:4b:58:86:01:c8:6d:9d:f0:81:24:b2:e9:9d:6b:a9:83:b2:
         80:e2:92:75:d3:95:fd:b1:79:e0:83:71:46:5f:54:63:b1:24:
         f3:40:fc:2f:58:0d:08:f6:ae:d5:7d:fe:ea:40:6f:df:96:ac:
         a7:36:8b:c4:60:7e:68:f2:63:f0:34:52:cf:bf:c8:8e:e2:2e:
         fe:7c:5c:1e:b5:f7:89:8d:c5:43:16:7f:6b:40:dd:99:2f:cd:
         3c:da:ab:73:1f:fc:d1:ed:8f:a5:4f:c5:99:13:b0:90:11:0a:
         57:af:98:9a:48:da:c8:eb:8a:af:79:83:42:cd:37:69:8d:30:
         50:57:a3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----