This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
File:                     C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json)
Hash identifier:          nqxOnPDCF0NLUy7mzFd9zv7IVbAeDH50ULxlSXA04pI=
Subject key identifier:   D1:4A:6B:70:8F:89:8E:A6:13:A3:77:30:08:65:7C:D8:28:FE:98:CD
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       4AA8680EE9C3C6038A0421997D372C5A24CDA25F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
Manifest number:          0148
Signing time:             Tue 23 Dec 2025 17:30:12 +0000
Manifest this update:     Tue 23 Dec 2025 17:25:12 +0000
Manifest next update:     Mon 29 Dec 2025 05:05:12 +0000
Files and hashes:         1: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=)
                          2: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: oLwt4cN5vBy0Yz+mlcIKpg1yZOaygBBPGvedyS3l5uU=)
                          3: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: ndtJBpyLaEBaDRumdH4rHIFFRdjvOKocNVl2ZaIVYq4=)
                          4: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: RVIHmIDNCmIP3eyPllQpcbn7ursqn1i4Fz/Qr5n+Mjo=)
                          5: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=)
                          6: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=)
                          7: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: aTo2/+6iPhrQgjeny1Eq8QNGnFjGyq2bLQ3CV8+XMwk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 05:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a8:68:0e:e9:c3:c6:03:8a:04:21:99:7d:37:2c:5a:24:cd:a2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Dec 23 17:25:12 2025 GMT
            Not After : Dec 29 05:05:12 2025 GMT
        Subject: CN=D14A6B708F898EA613A3773008657CD828FE98CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:6a:c6:fa:6d:cb:76:06:6b:8e:ce:3b:f0:
                    49:b6:bf:2a:84:24:3e:09:2a:53:64:68:10:d1:a1:
                    04:d1:a5:5b:76:6c:d2:b0:63:bd:df:7c:ff:c1:10:
                    61:f0:28:6a:c3:d8:77:e4:69:b7:01:4d:0c:57:c8:
                    26:2a:36:a4:e0:d8:5a:7b:1d:8e:f3:19:b0:fc:f9:
                    f1:e5:02:62:d5:21:e4:dd:14:63:65:d3:6e:c7:eb:
                    ff:dc:dc:39:90:f8:2e:c1:f5:d9:98:36:73:9b:d3:
                    41:ce:da:0d:74:02:3d:d4:a9:0f:9e:e3:ff:f8:0a:
                    10:f6:a6:23:43:3b:76:b5:a0:ce:d5:4c:5f:30:00:
                    ac:e4:26:a7:b2:49:c8:ab:4b:61:58:4e:d9:9a:5f:
                    93:a8:d6:b1:0d:2f:b6:b3:d7:c6:38:6f:47:d1:28:
                    3d:f1:b1:f2:f9:f3:b6:57:36:fa:e1:55:2f:b6:84:
                    cd:f1:c2:8b:87:12:76:85:be:10:e0:df:f2:8f:6f:
                    03:40:6c:1c:ea:f6:6a:ef:29:9b:d5:1a:75:f4:d2:
                    db:b6:13:81:26:aa:df:52:c6:01:2f:3c:7d:eb:9f:
                    d8:fb:d8:4b:23:5b:bc:51:d5:59:42:d7:2a:75:ca:
                    74:79:21:6a:08:4e:94:bb:21:9b:0e:05:27:d5:4b:
                    52:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4A:6B:70:8F:89:8E:A6:13:A3:77:30:08:65:7C:D8:28:FE:98:CD
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:69:4c:6c:67:ac:29:16:14:96:32:4b:6d:a3:9f:6a:18:
         e6:6f:6b:9a:75:dc:df:df:43:17:ba:03:de:e6:1a:79:9d:e0:
         8b:ae:a7:ac:4e:20:00:0f:07:6b:d7:88:19:7d:4c:43:2e:47:
         18:0e:28:5a:f9:5b:be:a9:b8:69:30:12:f7:f8:f7:82:80:b5:
         cb:74:ac:f2:9f:66:23:15:2e:48:42:16:13:db:0e:1a:f1:a0:
         c2:15:ab:ca:25:99:48:0e:10:e6:24:bd:1f:87:e4:22:bb:f6:
         50:eb:bc:3a:9d:b3:2e:75:f3:cf:c1:97:b5:b5:09:2f:04:79:
         40:71:e2:69:46:2c:4a:ad:1c:b6:ae:88:05:13:6a:37:d4:89:
         93:af:84:96:ce:e7:0e:a9:2f:4a:16:18:6c:d0:c5:f4:37:76:
         95:bc:4c:bd:21:ca:ff:c5:e5:7b:17:7e:7b:9b:86:0c:22:dc:
         a3:34:f3:8f:b3:12:32:b0:31:76:24:7c:a5:93:b3:17:97:99:
         10:14:44:78:c4:b6:2f:ae:08:60:e5:cb:f4:0d:23:3c:7b:cc:
         0c:0e:66:ed:ca:24:6e:02:a9:68:a1:e0:c2:af:80:60:af:10:
         8c:8d:8c:8c:3d:3f:68:f8:6e:17:18:23:12:7f:55:49:a7:bd:
         3a:46:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----