This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
File:                     5408B30DE5B83D183566781EE9CE33FDF27A8870.mft (raw, json)
Hash identifier:          6EIuBlpyyPVsIPwwgZK2LZYF6AOzF48ZbEKIbqzO8wE=
Subject key identifier:   06:0C:56:DB:9F:64:EC:32:55:03:78:ED:CE:49:16:ED:8A:D0:AF:88
Authority key identifier: 54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70
Certificate issuer:       /CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
Certificate serial:       36603F9B05F3B706FADAFB5361E7E4D19E1AF284
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
Manifest number:          014D
Signing time:             Sat 20 Dec 2025 04:37:09 +0000
Manifest this update:     Sat 20 Dec 2025 04:32:09 +0000
Manifest next update:     Thu 25 Dec 2025 15:24:09 +0000
Files and hashes:         1: 5408B30DE5B83D183566781EE9CE33FDF27A8870.crl (hash: SlZVayM+k15TGSED3IpC5Vm13HPt4rIQYcwJhnSWdqQ=)
                          2: 3139302e39332e33372e302f32342d3234203d3e20313734.roa (hash: TI3Q/bRoWy4eQt1CH2Oq9KtQkg1K65bhi3eASsLoUls=)
                          3: 3139302e39332e33362e302f32342d3234203d3e203532343333.roa (hash: Hd4tiLdhTr19rOa+0WYoNRnZvxqx4/Rpt7n+JeuMPlc=)
                          4: 3139302e39332e33382e302f32342d3234203d3e20313734.roa (hash: hSUmhzZqHyI6Gn/BzgFuCp4VxRXKw3qepwH6PV6Gk/4=)
                          5: 3139302e39332e33392e302f32342d3234203d3e203139383633.roa (hash: sfJDz7kna8h1AvIsmy8CoZ629qt9bD9LgaSJIa7KSRg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:60:3f:9b:05:f3:b7:06:fa:da:fb:53:61:e7:e4:d1:9e:1a:f2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
        Validity
            Not Before: Dec 20 04:32:09 2025 GMT
            Not After : Dec 25 15:24:09 2025 GMT
        Subject: CN=060C56DB9F64EC32550378EDCE4916ED8AD0AF88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:3e:55:f2:02:4b:2e:5e:67:19:b6:ed:cb:
                    72:10:05:a2:a0:e4:59:3b:88:02:2f:26:e2:9c:ca:
                    b9:cf:ce:89:61:19:0a:5e:a3:62:2b:96:da:68:5a:
                    b4:95:02:90:8c:e0:95:8f:b9:c4:bd:91:70:ee:26:
                    97:b8:c4:5c:f5:da:4f:32:76:12:2f:e1:01:62:c9:
                    ae:98:23:36:0c:d8:e8:07:5a:d6:01:a7:f1:bf:95:
                    f3:61:7f:90:ab:70:67:3a:60:97:4e:8d:be:14:62:
                    0a:53:19:cd:f5:29:a5:54:c3:77:20:73:e9:f4:f4:
                    ba:40:36:66:85:b7:7a:47:8a:f7:e9:f7:0c:64:a5:
                    9d:b7:ec:fe:c4:75:48:57:ed:76:3b:7c:91:fd:0d:
                    57:cb:ad:1d:0f:0d:ba:d4:59:b5:6c:d8:c0:2a:2a:
                    62:62:85:c8:f4:82:ec:c3:6f:1c:16:c9:1c:a7:35:
                    d9:83:ba:5c:79:97:62:75:b8:21:50:99:eb:6f:12:
                    37:d3:f4:35:14:01:04:05:58:1e:65:9e:9b:a9:8d:
                    15:0b:91:c2:3e:b7:3c:fd:c1:6a:c8:b9:ea:cf:af:
                    57:e8:84:c2:14:ed:82:c7:fe:f9:d8:60:f2:e0:e3:
                    f2:1e:10:1f:7a:ba:d3:b8:84:30:ff:0e:84:9a:b9:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0C:56:DB:9F:64:EC:32:55:03:78:ED:CE:49:16:ED:8A:D0:AF:88
            X509v3 Authority Key Identifier:
                keyid:54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9d:76:9f:8f:a0:b8:4a:bd:0a:89:03:21:c1:95:f6:f3:b1:
         31:5c:34:69:fb:72:17:b2:59:9e:7b:2d:a7:7a:6f:09:f5:3f:
         f0:f3:5b:3c:1d:f5:01:7b:17:33:65:13:57:3c:0a:64:51:72:
         43:3b:85:1f:66:51:de:4e:99:4e:bd:48:0c:da:48:c0:b8:94:
         ab:18:b2:1f:27:d6:fc:fb:6c:e7:09:5c:4a:d3:10:7d:ba:ca:
         14:79:27:22:4e:3c:5f:98:64:8e:37:95:26:69:6b:72:b1:29:
         f4:8c:ca:ce:2f:b4:04:7b:59:f4:74:bc:58:b8:ea:e5:5e:c0:
         80:18:29:06:5c:2b:05:10:61:e6:e3:78:11:4f:e5:1b:d1:ac:
         36:45:e4:ad:9e:52:b1:ea:e2:e9:4e:c6:af:c1:cb:56:6f:9c:
         3c:a7:25:44:3e:08:48:47:08:fe:63:57:5e:6a:ea:03:4f:30:
         ea:9f:6d:8c:1e:59:c7:b1:b7:a1:e5:1b:1f:a8:6f:63:16:23:
         77:6b:eb:68:25:85:6f:64:b9:2a:04:24:97:d4:e3:e8:5f:52:
         7b:fd:ee:d0:28:03:35:d6:c5:20:cd:c2:d0:cc:4e:d3:14:ab:
         9a:6d:4c:80:e3:d8:e3:0b:5a:79:0c:83:8e:84:22:6d:6d:92:
         32:9b:d1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----