This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.mft
File:                     319D62645871D3B24C33AF24E8F1C30794A59476.mft (raw, json)
Hash identifier:          saPKGxNRt1xRBFtzJqP38l7T9/ZxowM6XmiLIC47OEs=
Subject key identifier:   C0:FF:73:16:84:4A:33:1B:32:DD:A6:AE:96:E4:E1:31:C1:0A:D2:13
Authority key identifier: 31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
Certificate issuer:       /CN=319D62645871D3B24C33AF24E8F1C30794A59476
Certificate serial:       72F3FF0003CF6312C0B9F83D0E64DB18FBEA9F38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.mft
Manifest number:          0153
Signing time:             Sat 20 Dec 2025 01:19:22 +0000
Manifest this update:     Sat 20 Dec 2025 01:14:22 +0000
Manifest next update:     Wed 24 Dec 2025 11:35:22 +0000
Files and hashes:         1: 3136382e3132312e38342e302f32322d3234203d3e203139383633.roa (hash: fRAklrL1ckxcTa6UDh0U/1UvBKHPKwsaIGy5SKB+ZCI=)
                          2: 323830333a366530303a3a2f33322d3332203d3e203532333938.roa (hash: 8+pLhTtucbPGjE/ZAJMuRkKO1cEi7cq46coKUHzpu0o=)
                          3: 3136382e3132312e38342e302f32322d3234203d3e203532333938.roa (hash: YveZ6WGwGbyHmmkIC/gXfg0AC4AlN90cjuxTZaXlMf4=)
                          4: 3136382e3132312e38342e302f32322d3234203d3e203237373735.roa (hash: kqVCdX0IZFPCOrJP7TLXg7ez7hrIiFiC8An26LrYKx8=)
                          5: 3230302e372e3134382e302f32322d3234203d3e203237373735.roa (hash: 23LXy+vBSjeU2AMcMqIN7ggze3M7KkySakY3ilZ+HQ8=)
                          6: 319D62645871D3B24C33AF24E8F1C30794A59476.crl (hash: RS4h1aP3jw9i7IM5JCWARxN7JjAY+keHlL/9QwvLWMU=)
                          7: 3230302e372e3134382e302f32322d3234203d3e203139383633.roa (hash: CIo2l79nyBM0FlQRyvrWqvoUUum66pTfmO+qhySkHt4=)
                          8: 3230302e372e3134382e302f32322d3234203d3e203532333938.roa (hash: /TqeurXd+mKbc5rPtzmsv2IyEGZFnGqrsvN9dWvIQS8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl
                          rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 11:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f3:ff:00:03:cf:63:12:c0:b9:f8:3d:0e:64:db:18:fb:ea:9f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319D62645871D3B24C33AF24E8F1C30794A59476
        Validity
            Not Before: Dec 20 01:14:22 2025 GMT
            Not After : Dec 24 11:35:22 2025 GMT
        Subject: CN=C0FF7316844A331B32DDA6AE96E4E131C10AD213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ee:c9:5b:21:2c:63:2c:95:f7:d6:cc:5f:d2:
                    03:e2:cd:52:cf:57:ba:6f:cc:bf:30:88:8a:b7:ca:
                    97:4e:21:f0:9d:10:ab:5c:b3:64:d3:11:9e:38:d8:
                    db:15:01:5b:22:11:4c:50:fb:08:81:95:fa:c2:3d:
                    2a:9f:9c:3a:f6:e2:a3:f5:ba:ff:a8:fa:39:e5:f6:
                    aa:ed:3b:e0:90:84:05:31:0f:ea:37:23:5f:98:2d:
                    aa:06:02:07:59:eb:7e:38:06:83:05:b4:b1:7c:1d:
                    e0:fb:59:89:a0:e2:ac:e0:c5:40:ed:bf:7a:92:cf:
                    20:9a:08:54:7b:7c:76:18:6f:31:d7:e7:e9:90:fc:
                    c7:5c:de:82:fc:01:7d:10:64:8a:db:f3:90:08:39:
                    54:7e:af:f9:ca:9b:19:dd:31:59:75:56:68:70:3b:
                    6c:a6:3d:7d:0e:15:ff:7e:e0:83:77:e6:62:5a:1f:
                    df:1b:00:92:40:12:2b:8c:f7:24:61:f6:77:d6:8b:
                    53:e0:b2:10:fa:80:6c:b6:c9:9e:12:ee:83:66:ba:
                    62:94:10:17:5a:aa:7a:50:bb:e0:0e:94:c9:08:1c:
                    e3:7a:68:c2:6e:a8:18:01:4f:21:5b:c0:bc:94:38:
                    cd:e9:bd:02:9f:c9:f7:4e:7f:46:57:0a:9f:16:26:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FF:73:16:84:4A:33:1B:32:DD:A6:AE:96:E4:E1:31:C1:0A:D2:13
            X509v3 Authority Key Identifier:
                keyid:31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8c:b9:0b:39:32:c6:c7:37:59:34:16:bc:0a:8b:c0:0e:53:
         99:49:9b:2d:d6:6c:7e:1a:d0:1e:88:e7:14:b6:aa:41:3a:ed:
         fc:b9:30:67:d2:41:26:95:88:15:7b:ef:cf:e6:1b:c1:25:34:
         bd:3b:4a:d1:c4:ab:3c:3c:e8:cf:c4:61:84:a0:58:00:3c:ee:
         90:6a:a1:19:b2:c6:30:e8:4a:d7:43:d5:28:57:7b:7c:84:dd:
         5c:d5:7a:04:61:c5:43:e7:6b:c2:57:a1:1d:65:3f:6c:0b:96:
         9b:f0:60:d2:7f:b5:a7:0d:27:5d:dd:f2:8c:16:a3:6f:26:34:
         d6:8c:c0:68:fc:73:23:0f:7f:8a:ab:1c:91:2f:ba:a5:29:a3:
         a0:0a:ba:82:3a:19:fb:fb:6f:4b:57:96:26:51:cf:dd:ad:39:
         13:33:05:f1:e0:86:3b:af:12:87:23:51:69:42:10:5a:5b:4c:
         93:94:a3:b6:37:0c:ff:97:a5:7d:da:42:05:9d:39:cc:03:26:
         67:4f:d2:bf:63:2f:7d:e2:af:81:0e:51:52:4e:f7:9e:50:28:
         a5:78:e3:9a:25:03:b7:03:9c:8c:25:56:df:59:4f:39:39:df:
         04:a1:93:de:90:fa:07:b0:a6:b5:8c:63:de:04:51:06:32:44:
         50:d0:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:16:42 2025 by rpki-client