This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/17C10DFC65DA73892644268270EF974D3E2D31A0.mft
File:                     17C10DFC65DA73892644268270EF974D3E2D31A0.mft (raw, json)
Hash identifier:          0a08B4kgaVbSQEFUOTmlm79A6IMd1KiImkDpAvOEKnY=
Subject key identifier:   0F:22:CF:B7:8B:00:93:8B:71:3A:BC:14:C1:3E:8D:D3:A0:47:70:E7
Authority key identifier: 17:C1:0D:FC:65:DA:73:89:26:44:26:82:70:EF:97:4D:3E:2D:31:A0
Certificate issuer:       /CN=17C10DFC65DA73892644268270EF974D3E2D31A0
Certificate serial:       5D04E8D2B6EE59A10570C3B564A5EFE44AE1E0B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17C10DFC65DA73892644268270EF974D3E2D31A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/17C10DFC65DA73892644268270EF974D3E2D31A0.mft
Manifest number:          A2
Signing time:             Thu 18 Dec 2025 17:54:46 +0000
Manifest this update:     Thu 18 Dec 2025 17:49:46 +0000
Manifest next update:     Wed 24 Dec 2025 14:29:46 +0000
Files and hashes:         1: 17C10DFC65DA73892644268270EF974D3E2D31A0.crl (hash: 8LerdW1zs80zbCNSVIWmt6MXHgtMeBprQXBerMFi4Uw=)
                          2: 34352e3233342e36312e302f32342d3234203d3e20323732383734.roa (hash: CIJVWJtqec2YI1C92pCSG4n3eRXjdka3fImeWNOLysQ=)
                          3: 34352e3233342e36322e302f32342d3234203d3e20323732383734.roa (hash: TFsSO8lYTeumyWh7ZMtNgFaTV3YMN/1Hmm8GTxSxyO4=)
                          4: 323830333a386139303a3a2f33322d3438203d3e20323732383734.roa (hash: s5cF45Nv2cxwDG8CeTeGnNAPVBLWbn1Wb35HVyks1BM=)
                          5: 34352e3233342e36302e302f32342d3234203d3e20323732383734.roa (hash: fF4vgqOyNt8ZBvDQ/4WEtz1LhtxG7epq+QiM5R7FpHo=)
                          6: 34352e3233342e36302e302f32332d3233203d3e20323732383734.roa (hash: LojPVE8AcswBw4FXN+aJo8GtHg8jZ7hBSx+VgoliO6Q=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/17C10DFC65DA73892644268270EF974D3E2D31A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/17C10DFC65DA73892644268270EF974D3E2D31A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17C10DFC65DA73892644268270EF974D3E2D31A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 14:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:04:e8:d2:b6:ee:59:a1:05:70:c3:b5:64:a5:ef:e4:4a:e1:e0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17C10DFC65DA73892644268270EF974D3E2D31A0
        Validity
            Not Before: Dec 18 17:49:46 2025 GMT
            Not After : Dec 24 14:29:46 2025 GMT
        Subject: CN=0F22CFB78B00938B713ABC14C13E8DD3A04770E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:b8:be:96:50:ed:be:11:90:5d:45:9e:bc:
                    4e:f3:00:5e:95:4a:dc:3a:6f:8b:41:de:42:db:61:
                    f2:1e:24:82:c2:84:53:b9:35:68:7e:8a:34:1f:40:
                    b2:80:a4:cb:87:2e:e5:6c:a0:29:2c:fa:71:c0:17:
                    46:a4:86:13:2d:f5:31:37:77:d9:fc:3e:a7:1c:25:
                    2d:16:d2:62:09:cc:5c:c6:90:aa:93:21:b3:7e:dd:
                    d8:de:a2:7c:e9:4a:fb:78:0a:be:d2:68:16:b2:04:
                    13:46:57:3e:4a:3c:bb:3c:51:2a:3e:d7:f5:52:88:
                    6b:93:0c:f3:ca:f1:26:8e:fd:a1:5a:2e:d9:77:1e:
                    7d:85:da:51:97:db:61:21:a8:64:0e:75:44:b1:4b:
                    d8:c7:6f:11:61:78:0e:67:29:a0:54:2f:32:78:7d:
                    a6:30:f4:e7:96:00:ac:c9:ac:1d:cd:04:eb:6e:49:
                    39:d0:66:94:9c:6e:b7:0c:1d:67:70:fa:a3:83:25:
                    f5:c0:82:d9:83:e2:5c:49:64:4a:a9:a1:e4:44:87:
                    61:68:61:f1:2f:5c:f1:54:a4:e2:91:60:be:48:0b:
                    9d:7f:63:0f:52:b2:fe:71:04:ac:4b:a6:96:c1:5c:
                    45:74:77:90:c3:dd:64:ec:4b:21:94:11:7f:71:2a:
                    85:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:22:CF:B7:8B:00:93:8B:71:3A:BC:14:C1:3E:8D:D3:A0:47:70:E7
            X509v3 Authority Key Identifier:
                keyid:17:C1:0D:FC:65:DA:73:89:26:44:26:82:70:EF:97:4D:3E:2D:31:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/17C10DFC65DA73892644268270EF974D3E2D31A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17C10DFC65DA73892644268270EF974D3E2D31A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/17C10DFC65DA73892644268270EF974D3E2D31A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8e:91:37:ab:03:ae:35:fe:0b:a1:10:58:30:ac:5f:0c:22:
         56:f8:f7:c2:da:44:61:b9:94:e3:40:b2:7f:ba:27:f5:59:ce:
         e1:8f:7c:e7:e3:62:59:c8:50:f0:2a:d5:fa:8d:4f:9d:23:46:
         6f:06:72:e6:3c:4b:e4:40:74:03:ad:ae:1d:a1:bb:ed:d6:28:
         09:73:48:e2:3d:36:26:b1:a2:3e:6b:94:1a:a0:6a:48:29:4e:
         4f:60:a6:ca:38:f7:7b:f0:e5:bc:a4:a4:03:30:bc:eb:a7:d1:
         d9:18:9e:98:43:bb:17:54:dc:c0:a6:4b:ce:63:d8:a2:aa:f6:
         0f:f3:23:37:7f:2a:4d:a0:89:c9:78:d3:a8:93:c8:7e:24:bc:
         32:ae:ab:cb:72:ce:35:1b:de:9a:34:9b:84:32:be:7c:6e:5a:
         35:49:38:7b:2f:50:56:69:ba:df:7d:a9:6a:dd:34:ac:e1:f0:
         62:bd:83:58:fd:74:40:42:e8:fb:fc:01:33:1b:d8:27:5e:c9:
         c6:e3:75:ae:ae:08:d2:18:ab:e5:63:27:a7:fe:f1:65:9f:e3:
         0f:bb:51:d1:7b:45:d3:48:3b:7b:83:ab:f2:39:3a:d9:fc:b8:
         b4:03:73:16:31:6f:58:80:33:64:64:9e:27:bc:ce:04:b9:0e:
         49:29:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----