This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.mft
File:                     1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.mft (raw, json)
Hash identifier:          djOPTY/aWkTYhU9AxwzlbVTYdmZvmneTi+wmS/jiElY=
Subject key identifier:   96:1E:D3:10:AD:B1:39:5B:81:12:F4:69:B9:59:91:26:31:44:5C:6A
Authority key identifier: 1A:DC:8F:78:5D:1F:AD:0C:E5:D6:E3:7B:7C:9B:05:C5:42:5B:E9:27
Certificate issuer:       /CN=1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927
Certificate serial:       3C7E7AB6A5B069F3CD6CBC3A6D2F10DA3F317BAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.mft
Manifest number:          13
Signing time:             Fri 19 Dec 2025 18:40:31 +0000
Manifest this update:     Fri 19 Dec 2025 18:35:31 +0000
Manifest next update:     Tue 23 Dec 2025 19:09:31 +0000
Files and hashes:         1: 34352e3136302e3231322e302f32342d3234203d3e20323636383831.roa (hash: 3AERF0xtq4JvGc7bM/Jiq8Q1fMik+d/Gvz/M+6n6dsY=)
                          2: 1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.crl (hash: SgOQ9u/NqBJ5GbmsOWDAHgurNOmY0/fhLbRATWipbkU=)
                          3: 34352e3136302e3231332e302f32342d3234203d3e20323636383831.roa (hash: /aWJf3oxk5mlSW0Ju0GODFNggapAARflWK2T5KdiZ6Y=)
                          4: 323830333a376161303a3a2f33322d3332203d3e20323636383831.roa (hash: eSvPjP/CTFoMGbbW6LPp73FJkwu9v9hxwDstLccHAM0=)
                          5: 34352e3136302e3231342e302f32342d3234203d3e20323636383831.roa (hash: m8t0QmjLcHnbMQpXcC+90WycGx/rB6yX734bKPeE534=)
                          6: 34352e3136302e3231322e302f32332d3233203d3e20323636383831.roa (hash: S5MisSq3xOq3Ad3sAV8CdVt3VsQRfgWACcsMtfLMgYc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 19:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7e:7a:b6:a5:b0:69:f3:cd:6c:bc:3a:6d:2f:10:da:3f:31:7b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927
        Validity
            Not Before: Dec 19 18:35:31 2025 GMT
            Not After : Dec 23 19:09:31 2025 GMT
        Subject: CN=961ED310ADB1395B8112F469B959912631445C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:fe:7d:fb:33:ce:b6:17:89:1f:fb:96:bb:
                    b5:f2:29:d1:4a:d8:76:25:bb:50:2f:d3:78:83:6a:
                    8a:ac:72:fa:de:5a:1d:e9:97:d2:21:4d:cb:f9:80:
                    e7:3d:79:61:7f:73:b0:f0:23:67:14:6e:e7:77:0b:
                    53:e3:92:15:97:9e:e7:06:28:f7:e0:ee:5f:90:c0:
                    b5:ca:ba:62:92:a4:05:6c:54:11:5c:ec:60:c9:37:
                    aa:51:1e:eb:31:46:99:58:a7:fe:38:4b:f6:57:e0:
                    89:2f:4f:03:47:a9:4b:60:70:f1:7c:e9:eb:ff:e0:
                    46:44:92:57:28:b7:0f:4d:f5:f2:e8:39:f5:52:0f:
                    9f:da:7b:ea:7c:f5:f7:20:42:66:4c:78:7b:10:66:
                    07:a8:e7:55:ba:ba:79:b1:94:85:05:25:59:2f:2d:
                    f7:cc:66:a1:9f:30:07:a1:ee:12:35:63:3f:0f:b8:
                    41:33:05:32:12:a2:ac:e0:97:2e:33:b2:87:4c:0e:
                    b7:2a:8c:e2:d4:72:ad:1e:96:e3:25:46:3e:d2:69:
                    13:1f:80:d9:1a:6f:c4:69:aa:4f:1a:55:6a:4c:5b:
                    c6:f8:d1:0a:bf:8d:03:44:c4:6e:d2:48:84:02:a9:
                    56:ef:2d:07:95:d2:9e:fc:8f:6d:62:25:3e:f5:54:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1E:D3:10:AD:B1:39:5B:81:12:F4:69:B9:59:91:26:31:44:5C:6A
            X509v3 Authority Key Identifier:
                keyid:1A:DC:8F:78:5D:1F:AD:0C:E5:D6:E3:7B:7C:9B:05:C5:42:5B:E9:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:5b:8f:92:bf:8e:8d:e2:d4:28:07:5f:78:a6:b2:1d:2d:6a:
         a3:d0:68:84:0d:a9:2a:87:57:c9:97:0f:03:63:a1:bc:3e:b9:
         5c:2d:17:0a:bc:21:91:cf:b4:d5:fa:46:b6:ca:18:09:79:78:
         90:84:f5:ae:1b:3b:41:ab:65:4d:5c:e4:52:a8:18:8b:b6:fc:
         09:d8:61:ff:bf:9f:0a:86:ef:1b:d6:21:8b:5c:dc:0c:3e:89:
         b1:60:c4:57:4f:3e:94:1d:44:80:62:f0:d8:2c:63:5c:1f:12:
         d0:98:fb:dc:d3:e7:77:0c:57:09:48:75:92:3b:dd:e9:0f:c7:
         17:77:af:0f:8d:55:38:b0:e4:0e:47:b2:e5:28:30:38:e1:3b:
         a4:58:f9:3b:4f:b4:59:aa:70:59:e6:40:7f:e1:69:60:7b:c4:
         32:85:5b:a2:ca:ce:7e:fc:23:cd:92:80:8c:7a:16:38:2b:42:
         1e:8e:ff:41:a7:de:0f:7f:89:b2:40:dd:e0:16:c2:a2:a7:00:
         48:39:d2:44:c5:bb:0f:30:47:f3:b8:60:8b:74:aa:1b:f2:ca:
         a1:a2:84:f4:e7:d6:c4:b3:69:0c:44:a1:51:21:03:33:bf:4b:
         cf:2a:5c:3b:9b:48:e8:94:2d:fc:c8:08:6c:f6:7a:1b:27:1d:
         96:72:9d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:09:16 2025 by rpki-client