This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft
File:                     648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft (raw, json)
Hash identifier:          q4esse3BZ77lR0hMozWVOxGWTFqe8OJ/CVnxt8tCr0Y=
Subject key identifier:   8E:38:B6:46:90:F2:B2:51:47:89:F5:42:1D:06:C1:DB:EF:99:38:73
Authority key identifier: 64:8F:B5:35:ED:8D:F4:46:D0:27:D2:3B:A0:4E:6A:CF:6A:CB:FB:7C
Certificate issuer:       /CN=648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C
Certificate serial:       11A1C6AA98E307D607A15BEB985959D9ADF28C23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft
Manifest number:          07
Signing time:             Thu 18 Dec 2025 23:53:24 +0000
Manifest this update:     Thu 18 Dec 2025 23:48:24 +0000
Manifest next update:     Tue 23 Dec 2025 14:33:24 +0000
Files and hashes:         1: 323830363a3432643a3a2f33322d3332203d3e20323732343039.roa (hash: uN6tty7mkQaQxkU5KfULDNMRU1kOAAd04903zpBkwZs=)
                          2: 648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl (hash: WKTdiSGoj6MdEIMat1M9QONUikYC03k/TIba7MCIv8A=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 14:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a1:c6:aa:98:e3:07:d6:07:a1:5b:eb:98:59:59:d9:ad:f2:8c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C
        Validity
            Not Before: Dec 18 23:48:24 2025 GMT
            Not After : Dec 23 14:33:24 2025 GMT
        Subject: CN=8E38B64690F2B2514789F5421D06C1DBEF993873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f2:44:34:c6:8a:49:20:d1:c2:e3:e0:a7:b2:
                    08:44:f8:1b:80:51:00:6a:ca:bd:80:d3:41:2a:bf:
                    09:c5:28:ee:2a:06:d6:29:79:6a:36:68:c2:73:36:
                    68:53:9a:2d:11:ca:53:a7:7b:69:b2:e8:2a:14:ec:
                    e1:ec:ff:17:94:10:f8:32:cd:bc:b0:68:81:65:5d:
                    f7:14:de:46:55:88:5a:c9:17:b9:5b:80:d9:24:1f:
                    c6:5a:fd:aa:f7:f4:5c:3a:ec:cf:50:e2:d5:a7:4b:
                    43:ec:2e:4b:9d:91:16:19:de:5e:02:93:b7:0d:c7:
                    ab:c6:ae:25:56:10:c6:ea:a5:d7:bb:c9:55:9b:f9:
                    f1:82:7d:3e:e2:53:23:94:5b:ab:d5:ac:13:e8:fb:
                    45:91:5c:c2:4d:fe:bb:a6:4d:7e:70:17:5d:ad:1f:
                    c5:6d:ed:44:22:5f:d2:84:ec:2f:83:cd:46:92:e7:
                    7a:58:f4:ae:38:65:85:2a:f2:01:46:2a:9f:52:19:
                    7c:9e:a5:b1:f1:94:a5:b2:f6:ef:4d:32:0a:ae:e5:
                    06:0b:75:bb:57:28:1e:39:7c:ea:37:a7:cb:63:cf:
                    e0:01:37:74:d7:33:7f:40:c1:cd:6c:a2:8c:f9:b3:
                    d1:4a:a0:54:12:fb:d4:2f:20:3a:13:f5:b3:d7:a4:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:38:B6:46:90:F2:B2:51:47:89:F5:42:1D:06:C1:DB:EF:99:38:73
            X509v3 Authority Key Identifier:
                keyid:64:8F:B5:35:ED:8D:F4:46:D0:27:D2:3B:A0:4E:6A:CF:6A:CB:FB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1f:62:42:d7:bf:39:4d:cc:95:54:9a:45:51:c8:a6:be:b0:
         6c:af:88:cc:96:6a:11:0f:65:80:0b:1a:f5:56:70:89:85:68:
         2f:91:06:e2:23:3c:02:f1:a8:13:f7:0f:b7:a8:59:5a:95:b6:
         57:8d:f7:8f:2d:4b:e5:1b:00:2a:f4:c3:28:62:d0:97:75:41:
         ac:59:7c:4e:3e:a6:2b:4a:da:f2:e0:fe:f3:90:c5:56:c0:36:
         06:eb:89:15:86:16:61:1f:75:10:2c:52:84:4f:ee:5d:c4:f6:
         ef:3d:00:26:ea:22:6c:a2:f9:1b:2e:61:92:7a:38:cb:42:0d:
         f0:7e:d7:4a:bc:62:54:dd:84:9b:52:9e:1a:e7:f2:c4:5b:ed:
         41:c6:2b:26:bc:55:8f:5a:5b:4c:74:6a:b0:89:f2:f4:12:ff:
         95:e4:bc:95:b5:f0:4b:6e:91:93:d8:44:6c:4d:2a:e8:27:f1:
         a8:72:64:ec:8b:94:a8:1e:7b:bb:c8:d4:ce:9b:79:6f:97:26:
         94:11:b3:bb:3c:8b:44:3f:b5:c1:ab:04:3e:86:14:28:db:80:
         50:0c:39:1d:c0:02:47:1d:60:71:44:ca:0b:07:03:07:65:c8:
         5d:45:3e:30:5f:56:96:a2:69:55:ff:af:cb:55:bd:03:5c:a9:
         b7:74:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----