This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.mft
File:                     A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.mft (raw, json)
Hash identifier:          YmlfXRvnk/zvLR767cMux3/mvfdkPc4SS1DD4Wd+ooE=
Subject key identifier:   8A:D8:BC:91:71:88:BE:42:73:6B:9D:3E:56:DF:DE:58:91:EE:D6:1E
Authority key identifier: A5:CE:25:AA:2B:9F:B1:CE:0B:E5:4F:B6:B3:39:C5:CC:F5:02:CF:48
Certificate issuer:       /CN=A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48
Certificate serial:       162DC7BCA20F1A1FB4D5A7171728C602B43E442A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.mft
Manifest number:          0149
Signing time:             Tue 23 Dec 2025 02:35:37 +0000
Manifest this update:     Tue 23 Dec 2025 02:30:37 +0000
Manifest next update:     Sun 28 Dec 2025 15:39:37 +0000
Files and hashes:         1: 323830333a346138303a3a2f33322d3335203d3e203237383635.roa (hash: Cg89ERLI4y2qDcA1/1gK0V8RJbMwPDCcDnvp6S6TMCM=)
                          2: 3137302e3233392e32382e302f32322d3234203d3e203237383635.roa (hash: PikFhQdK8vP8IJ38VoE5Bf8MxXS/gtERrpPRBqYgM7Y=)
                          3: 3139302e3130332e38302e302f32322d3234203d3e203237383635.roa (hash: AYKY4hnlAgZd7DoPw731u/oS/waPdaSoOEqkNB3iCOc=)
                          4: 323830333a346138303a343030303a3a2f33342d3335203d3e203237383635.roa (hash: 455udySO8xsxKJxiX/a3GyhVlqexURctl/VEapbZO/w=)
                          5: 323830333a346138303a3a2f33342d3335203d3e203237383635.roa (hash: +mvVrV3UcKNNHY0wbjT2cNXpjI4mWW3QkioKI/grbk0=)
                          6: A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.crl (hash: IQuRDaQABgjn4YASQCMiDF+hk3SVZC1lRV847NudjL8=)
                          7: 323830333a346138303a383030303a3a2f33332d3335203d3e203237383635.roa (hash: qbwuvK9VOevEURKZ3ndnXnBLgIY/79El2cR8kGO8s30=)
                          8: 323830333a346138303a383030303a3a2f33342d3335203d3e203237383635.roa (hash: XlJY/9UZwPIHqldl0Czlg0DMWi6fmJwHzIW80et3wzc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Dec 2025 15:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2d:c7:bc:a2:0f:1a:1f:b4:d5:a7:17:17:28:c6:02:b4:3e:44:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48
        Validity
            Not Before: Dec 23 02:30:37 2025 GMT
            Not After : Dec 28 15:39:37 2025 GMT
        Subject: CN=8AD8BC917188BE42736B9D3E56DFDE5891EED61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:b9:14:26:08:11:b6:ac:4f:92:6a:2a:35:
                    62:66:95:ad:fc:10:6f:d0:dd:49:2a:7b:66:70:db:
                    73:2a:ce:6d:69:22:b2:89:27:98:00:df:ab:09:35:
                    11:bd:97:36:2c:37:5a:e5:2f:99:b7:fe:10:b7:6f:
                    b9:69:0e:d0:60:a4:f1:e4:6c:78:6e:31:53:f3:b2:
                    4d:63:82:d1:90:3b:9c:77:1c:12:2f:f9:62:4f:a1:
                    98:4f:f6:13:e1:57:8b:09:70:16:12:b9:f7:8f:3a:
                    8a:10:61:2a:e0:26:3e:02:f1:9d:f0:0b:e9:4f:c7:
                    d2:b1:bd:59:0e:e4:80:76:d0:3c:c6:3b:c4:d1:b8:
                    20:39:a9:2f:81:25:88:eb:5c:c4:e2:17:59:21:58:
                    72:b2:39:8d:73:84:2f:aa:94:06:3d:0e:59:44:0e:
                    92:c0:ea:75:a3:b0:fd:6b:79:81:c9:0c:9c:9d:eb:
                    f3:b8:3d:74:c9:6a:c3:d6:de:af:00:02:95:2a:4c:
                    61:13:5a:7d:06:8b:75:b7:df:b2:be:b2:7a:e1:ab:
                    2e:82:61:df:0c:0c:ed:be:33:4e:8f:b7:10:c9:46:
                    c2:d4:30:4b:84:07:d4:e6:d7:a3:46:2c:e8:0d:3b:
                    8a:ea:cf:e1:d1:30:fb:c3:a3:2d:5f:f1:6f:25:65:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D8:BC:91:71:88:BE:42:73:6B:9D:3E:56:DF:DE:58:91:EE:D6:1E
            X509v3 Authority Key Identifier:
                keyid:A5:CE:25:AA:2B:9F:B1:CE:0B:E5:4F:B6:B3:39:C5:CC:F5:02:CF:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:3f:91:08:e6:69:3b:b1:c1:3f:f4:35:ce:d2:60:ce:7b:
         d7:62:9d:ec:35:21:81:2a:01:4c:ff:d8:cb:dd:e5:a9:fb:e3:
         0d:c5:c8:0c:66:2a:df:84:b8:51:15:1b:c9:b8:ab:27:a3:a7:
         fa:28:7e:5a:70:35:9a:e5:88:af:47:4d:23:85:2b:5f:54:db:
         9d:66:c9:ac:c8:88:ce:7e:d5:67:de:87:14:98:53:08:d4:16:
         d8:55:39:43:78:60:26:17:c5:3f:c4:74:b1:94:49:3f:ab:28:
         28:d0:4e:a3:5b:b3:11:b3:8f:3c:86:72:bb:ce:37:58:81:e1:
         8e:a5:72:c7:e3:21:ec:f6:96:d7:54:e1:62:ad:c0:66:68:2a:
         04:40:3f:86:1c:3d:cb:28:c0:db:d3:4d:45:10:89:25:6b:6e:
         f1:3e:93:7d:1e:66:94:eb:ae:ff:06:1f:44:53:53:35:49:df:
         ba:4d:81:e4:67:5c:71:3d:19:85:af:42:88:5e:bd:9a:6c:58:
         e8:41:fd:df:48:d5:9f:2e:7a:c1:6e:80:bf:84:de:a8:5f:f2:
         c5:2a:89:df:32:5f:d4:de:1c:2e:dc:fb:c3:2f:49:22:71:09:
         64:c7:fe:19:f1:c0:5c:48:42:4e:02:e1:0a:6b:59:19:b8:c7:
         28:17:db:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 13:40:08 2025 by rpki-client