This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.mft
File:                     352876AA3B7BD34529C4806D306052CF8D3D5515.mft (raw, json)
Hash identifier:          dODEa+8yuKnL1KMP3Ea2OOmk1WNEHEW19A+mfJMJfqI=
Subject key identifier:   C5:A9:54:7C:66:4D:F8:6E:6D:F6:77:AA:DB:A8:96:06:FD:C5:D8:EB
Authority key identifier: 35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15
Certificate issuer:       /CN=352876AA3B7BD34529C4806D306052CF8D3D5515
Certificate serial:       1D888A75FD8CDAC9FA936172B0925CD39DD6A995
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.mft
Manifest number:          014B
Signing time:             Tue 23 Dec 2025 21:22:27 +0000
Manifest this update:     Tue 23 Dec 2025 21:17:27 +0000
Manifest next update:     Sun 28 Dec 2025 21:02:27 +0000
Files and hashes:         1: 34352e3138332e36312e302f32342d3234203d3e20323733303233.roa (hash: CibewfQdaN1SHHW1rNI1ZIAWnjJR8QHncyCI5nKKnBs=)
                          2: 34352e3138332e36302e302f32322d3234203d3e20323639373633.roa (hash: 5bIPFDIt0o6zv8/cgCHTmxW3cZLegofjAZ5RNf5Dn54=)
                          3: 323830333a333536303a3a2f33322d3430203d3e20323639373633.roa (hash: kMrg7M0N5ZMR2pjtQSPdZceJR30vKklLAWdg5DgynQ0=)
                          4: 34352e3138332e36322e302f32342d3234203d3e203634313635.roa (hash: DNzGH/bpH24SwCmFFkSBpq78smdVpCAajo7zgV7sa4E=)
                          5: 352876AA3B7BD34529C4806D306052CF8D3D5515.crl (hash: lQLPKJwEOFYWuOgjD0poFr8rvi+p86Sn71t3osbNczc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.crl
                          rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Dec 2025 21:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:88:8a:75:fd:8c:da:c9:fa:93:61:72:b0:92:5c:d3:9d:d6:a9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352876AA3B7BD34529C4806D306052CF8D3D5515
        Validity
            Not Before: Dec 23 21:17:27 2025 GMT
            Not After : Dec 28 21:02:27 2025 GMT
        Subject: CN=C5A9547C664DF86E6DF677AADBA89606FDC5D8EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:82:d3:12:1c:52:3f:37:d2:e0:63:8d:5a:
                    d3:e4:9c:c1:51:af:be:2b:2d:db:3e:48:ac:d0:f6:
                    2c:ed:22:ff:76:fe:14:f3:0a:b6:c0:10:2f:38:ed:
                    50:ad:85:42:88:e6:dc:93:4d:b3:77:97:c1:f7:af:
                    0f:b6:76:06:09:40:11:67:c7:83:7b:a2:82:8a:26:
                    ab:c4:91:29:36:a2:9b:4f:5b:8d:b4:b7:47:82:e5:
                    80:fd:9b:95:d7:ee:5a:1d:43:5f:70:25:ce:46:64:
                    b3:36:37:8a:b3:76:79:fd:f7:bf:93:f9:c1:07:86:
                    a7:10:fe:28:20:7b:d4:68:2d:01:f0:50:59:22:fb:
                    62:dd:80:a1:40:87:2d:5a:09:67:bd:c5:76:00:ec:
                    3a:88:86:9a:70:98:a7:39:f6:d3:f8:57:92:a4:68:
                    ff:6a:7f:c7:b7:20:cb:fb:b6:1a:df:90:ab:79:35:
                    b4:1b:02:e2:71:6b:4a:2e:98:ad:e7:e8:48:07:2e:
                    f0:08:67:0f:f0:f3:2c:ed:6a:c9:5d:de:4b:17:dd:
                    b5:2d:8a:51:86:6c:97:bd:33:6f:e9:e5:d0:29:ee:
                    a2:5c:43:25:bf:ae:34:4b:a1:ff:3c:05:8b:66:91:
                    40:21:1c:2d:9e:ab:a0:6f:0e:1c:ee:ff:1e:23:20:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A9:54:7C:66:4D:F8:6E:6D:F6:77:AA:DB:A8:96:06:FD:C5:D8:EB
            X509v3 Authority Key Identifier:
                keyid:35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:39:ae:a8:00:56:4c:9e:3f:6b:f5:db:ee:58:97:75:ec:54:
         2c:06:ac:9f:be:18:a7:96:f2:b9:5a:4f:81:7c:2c:dc:86:7c:
         7f:9f:0d:96:54:82:bd:2b:b5:79:3e:4b:10:c8:fd:00:96:ee:
         32:34:c5:cf:a5:71:a6:29:98:64:d8:ae:0e:cf:f0:48:b0:9f:
         3f:6a:47:e9:5d:34:08:e2:38:ce:2a:30:e3:e6:0d:6d:ad:4e:
         78:e1:21:05:79:e2:72:46:fe:41:7e:b5:e6:88:6e:ed:0c:aa:
         c1:fe:53:61:ed:dc:8c:9a:e4:af:f6:6f:67:c4:c3:dd:d9:fc:
         3e:1e:71:79:5d:e1:b2:bf:a2:cc:32:6c:e3:37:39:fa:8e:b7:
         2a:94:13:07:b6:7c:9e:96:53:e8:d0:3a:62:d4:59:d5:26:29:
         f6:70:0f:7b:af:38:73:98:21:37:cc:8c:b4:c9:26:b3:3e:59:
         d7:24:c7:91:a4:a8:82:d5:2e:f1:4c:7c:56:52:b0:32:40:c7:
         37:93:4d:7e:4a:02:70:31:70:24:e7:29:77:a2:dc:54:6d:ba:
         f2:62:16:72:41:ac:1e:cb:bf:86:4a:a7:63:ff:22:d0:04:cd:
         32:79:c0:f3:46:ba:61:17:f3:68:a2:ee:4f:6b:dd:1b:42:8f:
         80:64:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----