This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
File:                     AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft (raw, json)
Hash identifier:          pFltbNJ8AcerbueJE4gssQILZ74bNAu1z6Dux3kYNU4=
Subject key identifier:   33:A4:B1:3D:AA:54:F2:81:39:81:E2:66:D3:19:42:C4:7C:81:54:B2
Authority key identifier: AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B
Certificate issuer:       /CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
Certificate serial:       41A30AF3AB9F6ABA47A89AE3C76ECC19802AE763
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
Manifest number:          0153
Signing time:             Wed 31 Dec 2025 05:03:03 +0000
Manifest this update:     Wed 31 Dec 2025 04:58:03 +0000
Manifest next update:     Tue 06 Jan 2026 02:23:03 +0000
Files and hashes:         1: 3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa (hash: +0qop7Ilf9Isuak762oOoJinzztVUgOiRadVElgbPMc=)
                          2: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl (hash: 8JgXrPWRnOg1Vh17s5l0Qf7ZgIrkTsL74To7rUITd50=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 Jan 2026 00:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a3:0a:f3:ab:9f:6a:ba:47:a8:9a:e3:c7:6e:cc:19:80:2a:e7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
        Validity
            Not Before: Dec 31 04:58:03 2025 GMT
            Not After : Jan  6 02:23:03 2026 GMT
        Subject: CN=33A4B13DAA54F2813981E266D31942C47C8154B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3e:4f:82:55:0d:ab:46:f1:b8:89:64:90:5f:
                    44:62:98:7e:dd:87:84:bb:ad:1d:45:14:a1:41:1a:
                    f3:bd:91:7d:14:ca:6b:df:80:05:39:68:e3:2a:eb:
                    50:8d:af:ed:00:ad:2a:92:aa:9b:4f:e4:60:ba:e6:
                    c5:a7:f2:a3:cc:e0:47:b0:5f:52:17:95:fe:58:3e:
                    01:82:4d:e8:fa:f8:cd:d6:41:fa:cf:39:f8:5c:f0:
                    8e:22:52:5e:dc:e4:3e:62:8d:44:fd:69:12:5d:74:
                    d1:28:15:95:27:69:dd:6c:33:bd:57:92:a5:43:d6:
                    7a:a8:8b:a6:d5:23:60:0a:d9:8e:1b:90:83:6d:cd:
                    a7:35:8f:d3:c5:db:3c:f9:98:9b:ea:2c:b1:d8:90:
                    cd:fc:ce:d4:da:c8:0d:48:1a:41:cf:17:b4:3f:29:
                    3f:1b:d8:68:c3:ef:33:1c:c4:cd:d1:82:9a:43:82:
                    ee:82:78:9d:02:6c:6f:be:fb:b3:13:76:8e:ea:18:
                    e1:eb:60:c3:30:0f:ff:b5:3e:fc:42:62:9e:ff:ff:
                    28:f3:31:b1:13:db:90:b5:a4:34:d5:5e:64:e8:37:
                    c0:52:85:43:a0:75:55:85:07:14:10:c7:f1:1f:ed:
                    23:8f:f2:5f:8b:b7:c4:78:6f:35:b3:19:22:b8:94:
                    1c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A4:B1:3D:AA:54:F2:81:39:81:E2:66:D3:19:42:C4:7C:81:54:B2
            X509v3 Authority Key Identifier:
                keyid:AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:32:51:97:42:39:b1:d4:c5:b2:98:d0:bb:3b:c2:dc:e5:f3:
         c0:56:ea:e6:5b:31:8f:75:c3:76:bb:57:5c:bf:09:b4:0e:67:
         22:88:6b:e5:a9:2d:a9:ee:29:c8:b5:b6:f9:cc:d1:d9:fb:b1:
         01:f4:ef:33:3a:b6:ca:bf:f7:f2:ed:1b:a3:3f:37:04:de:9c:
         4c:62:ea:d0:6c:8a:82:f4:19:25:2b:48:38:4f:c1:2f:42:f4:
         29:e8:48:1c:55:e9:02:28:53:6a:41:9d:8a:b7:c5:5e:b2:de:
         1f:20:ad:75:ab:f1:b8:9b:fc:c7:88:e1:2e:58:77:18:2f:1b:
         bd:b4:7f:a2:b0:99:bc:cf:13:51:da:82:b4:36:4d:0a:0c:99:
         80:97:72:64:f3:73:51:f3:42:cc:ee:14:9e:f4:d6:1e:bd:5b:
         b8:bf:a7:a5:21:ef:e5:7d:b6:71:42:22:a0:15:ba:bc:11:7a:
         dc:ed:ce:c2:3b:51:b8:f8:e3:cd:2a:df:c5:ec:4d:39:14:4a:
         b5:28:e1:05:3f:ab:7b:f8:13:9a:40:6f:69:e0:69:19:a1:2d:
         3a:6e:c5:91:b3:d6:d5:4d:50:a4:ad:2f:33:b9:f0:cf:ec:55:
         e7:bf:dd:0d:d9:24:bd:09:92:cb:4a:bc:05:67:5e:00:da:f9:
         91:89:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----