This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
File:                     AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft (raw, json)
Hash identifier:          btFwax6kvzEeMafGP7OLDVDRiHmU34fnSbIx65f1BwY=
Subject key identifier:   BF:20:75:9E:34:9F:B9:9F:A3:00:BC:F3:EF:EA:27:EA:2F:67:D1:2F
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       0CFB42913F7DBC6A20D5A72031A0F8B7AB0508E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
Manifest number:          D4
Signing time:             Sun 21 Dec 2025 04:01:06 +0000
Manifest this update:     Sun 21 Dec 2025 03:56:06 +0000
Manifest next update:     Fri 26 Dec 2025 02:07:06 +0000
Files and hashes:         1: 34352e3232372e352e302f32342d3234203d3e2031383030.roa (hash: YMzkOV2W9zteVGbvUwYV4ersUMzSznNRyo4zH+H6D9U=)
                          2: 34352e3232372e352e302f32342d3234203d3e20323636363639.roa (hash: HfOybiIfu235zllloZ80pZ0gdq3lu/Y7tdktYlXwuWE=)
                          3: 34352e3232372e352e302f32342d3234203d3e203138373437.roa (hash: +HBLuVL0tjTd2NEDtVOOZzUoVAZ8SfmExObtH1UZGB4=)
                          4: AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl (hash: yVnLAJZEsg+2QvVsC73SvcP2UFLYYz40BZwhzzWLpiI=)
                          5: 323830313a3135343a3a2f34322d3432203d3e2031383030.roa (hash: UpWBj9ONTa/+9aOYO02DwEhbYSFaq2S3swV8AVaaaDo=)
                          6: 323830313a3135343a3a2f34322d3432203d3e20323636363639.roa (hash: qx6ZrM/CZi2D1yQlfkZHijlcZbSoex48xmP1mELcyPs=)
                          7: 323830313a3135343a3a2f34322d3432203d3e203138373437.roa (hash: Z0KZ+EZtV+PkrkLEgz6j1L1LlhloxfodeQd6NifyECA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fb:42:91:3f:7d:bc:6a:20:d5:a7:20:31:a0:f8:b7:ab:05:08:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: Dec 21 03:56:06 2025 GMT
            Not After : Dec 26 02:07:06 2025 GMT
        Subject: CN=BF20759E349FB99FA300BCF3EFEA27EA2F67D12F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:39:dd:77:08:a5:a1:c2:9a:06:13:9f:2c:
                    07:73:85:a9:c8:b5:17:ca:45:b5:a8:b8:70:69:f5:
                    2c:3d:9a:76:e8:c0:f1:2b:d8:76:26:0a:0e:20:4d:
                    3b:d6:b8:48:ff:b1:84:48:6b:23:ee:97:41:8e:ad:
                    69:46:d6:3a:55:81:32:b7:19:5f:70:cb:7d:59:0b:
                    5b:9f:a3:3b:64:9b:3b:33:5e:90:82:1d:11:c4:1d:
                    de:38:74:1e:92:ff:1c:cd:82:c0:12:09:e7:8c:58:
                    aa:70:27:b3:21:1c:9b:f7:ed:d1:90:f5:d1:91:57:
                    41:a0:7d:01:50:e6:84:0b:a6:95:e9:f7:88:ea:2a:
                    8d:f2:73:14:73:c8:b5:91:45:70:04:97:a7:ea:82:
                    39:1a:5c:92:c0:d7:58:55:60:55:79:e2:23:d1:6a:
                    d5:e5:b3:5e:ad:5d:c1:f5:fc:0e:e8:cc:5e:8f:2b:
                    88:8d:93:54:8c:70:bf:29:f5:0b:49:b8:ab:0d:8a:
                    f5:01:b8:47:f7:4c:06:3b:f1:37:8a:7c:c3:fc:6f:
                    7b:da:a8:26:e3:4c:2f:f0:f9:71:dc:cb:d1:97:c6:
                    c4:f3:87:a0:7e:89:55:98:ee:38:df:c4:01:aa:df:
                    67:d2:d5:85:10:b2:17:0b:5d:93:ce:2a:94:fa:1b:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:20:75:9E:34:9F:B9:9F:A3:00:BC:F3:EF:EA:27:EA:2F:67:D1:2F
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:51:de:4a:d4:9d:bb:4e:e4:bb:b4:ec:c2:18:c2:d6:a0:15:
         13:6c:86:7c:ab:01:3c:19:ae:ca:a8:16:b1:aa:bb:e1:89:22:
         80:49:ca:1b:6c:34:4e:95:c8:e3:b2:7c:2d:7a:33:d7:d1:0f:
         9a:96:70:f0:c6:45:d7:54:01:9e:91:50:29:71:01:50:b4:9a:
         43:c1:03:f2:b6:6e:55:d0:c9:a5:2d:85:6b:dd:b0:10:4f:d0:
         a9:61:48:9a:45:13:6d:67:3a:7e:37:5b:6f:83:6c:71:9d:7b:
         cf:ce:93:92:f5:bf:dc:d5:86:8e:0f:be:28:d3:d6:bf:b0:e2:
         74:de:e7:de:e8:66:d8:54:d1:35:2d:8e:2e:46:72:4e:b9:d8:
         aa:00:98:7a:11:8b:a1:d6:74:95:35:4e:6d:6a:fc:4b:b0:66:
         1f:c3:21:4a:83:87:70:03:e2:da:88:89:d4:08:1b:cd:ca:07:
         c9:30:74:db:c8:52:8c:74:54:c8:bf:02:eb:a5:a0:30:b3:ab:
         3e:60:96:30:b4:8f:b2:a6:7f:71:59:2c:77:f8:c7:cf:4d:ee:
         a0:05:02:26:9d:5f:b5:55:b7:73:90:b1:b0:0f:0c:bc:19:ac:
         df:d7:4e:b6:31:49:a9:a2:bf:a2:e8:0b:6d:4c:8e:a2:ef:ee:
         f7:1d:83:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----