This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
File:                     20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft (raw, json)
Hash identifier:          hr4+x0miBYjbmI+sn+A8EGzj5LmqLpgp0ZsbRVrVzsU=
Subject key identifier:   C3:52:08:CF:75:96:78:EC:D1:D7:D4:34:EF:5F:49:48:14:5E:B9:CD
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Certificate issuer:       /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial:       35CBE7FB208B81EA68CBBAEB2B7B482228A69FD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
Manifest number:          0148
Signing time:             Fri 26 Dec 2025 09:20:10 +0000
Manifest this update:     Fri 26 Dec 2025 09:15:10 +0000
Manifest next update:     Wed 31 Dec 2025 12:54:10 +0000
Files and hashes:         1: 323830333a383465303a3a2f33322d3332203d3e20323733303036.roa (hash: IhrcR9v71SHVWTPWhhNNwFVAgzsaGowtRREEzljdA5Q=)
                          2: 3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa (hash: D4Wuw579mtmQk3148E/t7+wdylw1tUvsSFL+d95cbeo=)
                          3: 3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa (hash: Y3oZHoznCaUCBQoRIIqHUk1GE9kbKfIIaQ4fpU0PJjw=)
                          4: 34352e3138392e3233352e302f32342d3234203d3e20323733303036.roa (hash: tHCd2o3Ws3sRzLZIPTJtx1XUzBWF561xvUTQHUix3mg=)
                          5: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl (hash: jq1oT5QNhm2C1vsbwnERm8toKpcY8d5OLYwO6fowmaE=)
                          6: 3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa (hash: UxWVsSHgc7sCdCdtXfz5xPAdpgKquF6TGclmGWtYyus=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 12:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cb:e7:fb:20:8b:81:ea:68:cb:ba:eb:2b:7b:48:22:28:a6:9f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
        Validity
            Not Before: Dec 26 09:15:10 2025 GMT
            Not After : Dec 31 12:54:10 2025 GMT
        Subject: CN=C35208CF759678ECD1D7D434EF5F4948145EB9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:9b:71:e2:d1:8f:25:81:1c:08:d5:8f:48:
                    0e:91:b1:5e:62:43:5c:66:12:96:aa:ff:fc:b6:b1:
                    3c:72:5c:cb:cc:c5:ec:e5:90:2f:03:21:4c:b6:c4:
                    37:14:33:10:3a:d6:49:29:69:dc:01:07:9e:68:56:
                    f5:fc:25:bd:5f:de:f0:5a:f3:70:d6:22:84:7f:5c:
                    4e:08:50:1b:94:b3:63:07:50:fe:06:cb:cf:1c:f5:
                    a3:27:3a:a5:d5:5a:3b:aa:0f:49:eb:83:be:50:0f:
                    3c:bf:05:5e:80:55:e4:9e:74:91:7a:94:15:18:39:
                    3c:1c:bb:f1:88:dd:e3:fd:7f:97:82:9c:17:dd:b9:
                    b1:14:c2:fb:ae:80:aa:a9:2f:24:31:4f:7d:55:d1:
                    44:64:ef:b2:c3:51:f5:7e:10:33:0c:52:0e:93:a8:
                    06:1d:36:7a:df:14:62:b6:9e:fa:83:fe:4a:6d:05:
                    f6:b9:85:7a:f4:60:79:d2:77:d5:57:53:34:8b:ca:
                    ea:ed:ed:77:90:4b:3d:c9:84:aa:1a:b9:02:b1:83:
                    bc:0d:06:42:c5:63:53:3f:b8:31:46:53:5f:fe:02:
                    aa:f3:ee:4c:7e:92:d0:1e:8d:fe:e1:bd:11:a1:2d:
                    26:27:b9:55:87:58:8c:98:f7:24:1b:fa:fa:55:16:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:52:08:CF:75:96:78:EC:D1:D7:D4:34:EF:5F:49:48:14:5E:B9:CD
            X509v3 Authority Key Identifier:
                keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d7:d4:65:f9:4d:72:72:c8:32:ad:18:39:42:0c:9c:c1:96:
         b2:47:f4:7c:e4:25:0d:a6:36:12:82:bb:37:f8:db:f9:e9:5f:
         84:30:3a:23:8e:7a:f0:e3:87:49:c9:ed:64:52:9d:70:9e:18:
         64:33:ba:e5:43:33:e5:7c:33:5a:ba:39:15:40:d1:ba:dc:02:
         c8:ec:cf:bc:2d:d6:ea:7f:83:ec:e2:4f:d0:e9:f3:5a:a8:b5:
         13:ec:e8:6c:8e:30:37:bf:42:62:99:0b:46:f4:16:aa:af:3d:
         67:18:c6:d3:3e:b5:33:db:23:68:eb:23:8d:d6:61:4e:34:46:
         8d:86:89:54:14:d8:9f:fd:2c:7e:56:8e:09:07:c1:ba:e0:0a:
         71:5f:e4:e1:4d:01:0c:46:61:68:6d:49:1b:70:11:45:11:ab:
         a8:5b:33:9c:50:16:f0:b3:51:6f:bc:47:54:90:38:62:c9:35:
         88:cf:be:90:08:d1:86:63:f1:4e:35:7f:2a:7b:14:31:c5:3d:
         26:0b:bf:89:9f:81:4f:4f:c3:04:81:ff:12:47:80:16:d4:f6:
         7b:66:91:03:80:4c:51:9d:a9:0b:a2:43:2b:94:5c:72:81:5b:
         5a:37:28:66:fd:ba:4d:dc:47:c2:93:84:16:ba:c0:d4:11:6e:
         da:f8:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 22:35:41 2025 by rpki-client