This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
File:                     209A4B66D92052DAA8A5358DB465449F02D52BAB.mft (raw, json)
Hash identifier:          YQXDa5WOAex2QGFl99MKiL2WUkI8HLqiB4Uxj0ZtsRg=
Subject key identifier:   1A:23:EF:B7:3D:8D:72:E8:E3:E9:53:BC:EA:05:CA:D7:D2:15:F6:E2
Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
Certificate issuer:       /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Certificate serial:       1D5A0A78729E8F153E7EC6C105DD4B36755AAA1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
Manifest number:          0154
Signing time:             Tue 23 Dec 2025 16:29:41 +0000
Manifest this update:     Tue 23 Dec 2025 16:24:41 +0000
Manifest next update:     Mon 29 Dec 2025 06:49:41 +0000
Files and hashes:         1: 3138362e3135392e3132342e302f32342d3234203d3e203532333731.roa (hash: 5dsf4hX0TZDPvBoN40dwgZfcow7Us3qJgeuLLriY/0U=)
                          2: 3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa (hash: XZCPYZansHH8pQplKmG06znAEblG1rjfxBWlD//B4BA=)
                          3: 3138362e3135392e3132352e302f32342d3234203d3e203532333731.roa (hash: 8+boctzqfyfnVa1UI5DKkkyWZd7W2yDzp24h4BvgrKM=)
                          4: 3138362e3135392e3132302e302f32322d3234203d3e203532333731.roa (hash: dv2gwDXuAYLH5yjpY40LpucgqLAz9M8RQBrZW0KPQfo=)
                          5: 209A4B66D92052DAA8A5358DB465449F02D52BAB.crl (hash: K+r4xaW+Y+MRexemWwDcnc7JkZQu5uSTs9+FcKdEchU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 06:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5a:0a:78:72:9e:8f:15:3e:7e:c6:c1:05:dd:4b:36:75:5a:aa:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
        Validity
            Not Before: Dec 23 16:24:41 2025 GMT
            Not After : Dec 29 06:49:41 2025 GMT
        Subject: CN=1A23EFB73D8D72E8E3E953BCEA05CAD7D215F6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:57:43:51:9c:9f:26:e2:7a:9f:f9:94:bb:64:
                    fd:76:11:96:6b:8c:f4:fb:6a:45:07:c4:50:b3:c2:
                    b0:e5:00:e7:70:a4:bf:a1:60:43:d9:73:e1:79:f7:
                    68:be:f1:f9:41:0f:e5:4f:5b:c9:e1:5c:14:84:86:
                    47:91:52:c6:8d:5d:e4:53:b7:08:fd:fd:d6:f9:f3:
                    d4:ef:6a:c0:97:8a:04:63:c0:94:6c:5f:3c:2e:b0:
                    04:5a:e3:31:d7:80:09:f6:d5:b5:09:56:13:3a:8f:
                    bb:33:8c:e2:48:34:f9:09:58:bc:46:2e:66:b4:f1:
                    33:c7:0a:29:3b:58:28:37:7e:02:19:f7:70:0c:0c:
                    cc:1a:d4:33:5f:df:22:d9:2f:c0:33:de:c5:80:bc:
                    29:f3:08:92:82:77:5f:fa:04:7b:6a:c8:ba:0d:71:
                    1c:eb:4a:d9:7e:5a:e6:b5:2c:64:8a:27:ab:b5:c1:
                    23:87:94:48:bf:53:47:61:59:40:82:21:85:ec:d4:
                    51:fc:73:ae:a9:d7:87:63:f8:aa:d7:b0:96:ad:22:
                    fe:ee:d0:9e:c5:2b:4c:01:7f:2b:0d:40:79:7a:d3:
                    f0:00:a8:05:80:03:01:bc:a0:18:71:67:a9:55:bd:
                    89:74:90:a1:d3:ff:88:73:6b:cb:9a:43:38:37:62:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:23:EF:B7:3D:8D:72:E8:E3:E9:53:BC:EA:05:CA:D7:D2:15:F6:E2
            X509v3 Authority Key Identifier:
                keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1a:a1:0a:9f:9d:63:07:84:f4:6d:48:20:28:40:1a:e0:20:
         be:57:f6:1a:d3:ca:b5:7f:11:ca:2d:94:26:65:03:dd:3e:95:
         0b:08:de:41:63:6c:e6:b5:06:57:cc:98:1e:da:82:4a:1b:d0:
         2f:79:51:05:30:fb:19:ba:84:e1:33:f8:04:30:43:3a:24:8f:
         de:91:b0:34:02:d2:96:6e:90:4f:86:1c:b1:ae:57:98:0c:78:
         12:85:74:42:f9:03:5e:7e:96:b5:de:d0:1a:8a:0a:46:2e:eb:
         3a:76:22:06:af:19:d8:98:c3:42:67:82:99:b9:10:7a:8d:da:
         3e:69:2d:5b:46:5a:b0:67:6b:cc:a3:9c:94:f5:cb:b0:5c:4a:
         b3:fd:f5:fc:82:ba:02:5e:29:24:c2:91:70:e2:53:0c:f9:94:
         4c:d0:dc:e4:98:ca:2e:96:88:02:64:fc:34:0f:dd:e5:44:05:
         35:44:b5:f0:20:18:10:2d:ed:68:bf:b0:2f:98:32:24:03:4a:
         1b:ad:01:20:32:4a:bf:0d:0e:1b:1e:b1:ba:fd:d7:eb:ae:e6:
         c5:8f:c5:85:a9:2c:2f:c7:36:4d:9f:f3:31:89:6a:49:c9:66:
         ad:46:96:09:50:bd:5f:aa:08:f4:77:0e:aa:08:d0:86:10:a9:
         2f:97:d3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:40 2025 by rpki-client