This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft
File:                     20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft (raw, json)
Hash identifier:          xkKzAuXlhj7gLbLFOZElkZ9Y3kObAM/3zxsMLB9igk0=
Subject key identifier:   68:00:54:CA:26:61:97:59:23:AB:95:9D:E8:E3:D9:18:CB:FE:70:D5
Authority key identifier: 20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75
Certificate issuer:       /CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75
Certificate serial:       6546C07ED0059143688F996CBEF2391DB835ADC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft
Manifest number:          0152
Signing time:             Sun 21 Dec 2025 04:47:18 +0000
Manifest this update:     Sun 21 Dec 2025 04:42:18 +0000
Manifest next update:     Thu 25 Dec 2025 07:46:18 +0000
Files and hashes:         1: 323830333a653363303a3a2f33322d3438203d3e20323635373339.roa (hash: dvzwargEWguyR8iOmj+URH/WbQtPtG3se+Bb5q/B/+w=)
                          2: 34352e372e3235322e302f32322d3234203d3e20323635373339.roa (hash: oWQSqlcdx4/yT7qjsV+illIbnlSc+E/9dg4NF7vSbYk=)
                          3: 20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl (hash: GzqCrvjW18efwYcG3S8Ea187BmhGSlitQ4XN398EVKY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:46:c0:7e:d0:05:91:43:68:8f:99:6c:be:f2:39:1d:b8:35:ad:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75
        Validity
            Not Before: Dec 21 04:42:18 2025 GMT
            Not After : Dec 25 07:46:18 2025 GMT
        Subject: CN=680054CA2661975923AB959DE8E3D918CBFE70D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:1d:a0:2c:a5:d6:17:76:46:41:44:11:b6:
                    ff:df:90:58:5b:90:af:0f:74:d8:43:2d:21:c4:99:
                    1b:12:df:70:70:2d:46:b5:ab:88:58:c5:df:a5:47:
                    f8:cb:26:87:0f:8b:44:6e:a8:37:2a:cf:6a:7a:1c:
                    1f:16:e6:d6:06:ec:dd:9c:b3:e5:0e:7b:d0:06:b7:
                    fb:ea:03:25:1e:22:fb:73:89:85:3d:5f:a8:08:70:
                    b5:68:4d:a9:0c:2b:66:07:71:cb:66:80:c5:fa:d2:
                    ab:a6:00:1b:5a:10:f1:a2:04:e5:cc:18:4a:b6:bf:
                    60:e9:d4:99:bd:1e:07:eb:e7:ee:90:70:37:9d:b1:
                    b5:b2:3b:42:e0:1b:c2:76:57:8b:16:88:07:ab:90:
                    7f:f5:a5:d4:c3:39:99:3f:6d:53:04:57:a5:82:93:
                    3f:8d:41:29:9c:62:8c:09:06:d3:1c:ea:3a:68:cb:
                    e3:fc:32:f0:3d:2d:b9:3a:30:17:ae:38:b5:f9:d6:
                    25:97:0b:00:e3:6c:7a:c8:65:0b:55:29:f2:89:e9:
                    85:80:11:e5:9b:45:cd:62:30:e1:22:71:2d:72:55:
                    24:ca:4e:0b:52:ce:17:c2:e0:dd:68:8e:f4:73:60:
                    a8:55:2d:82:0c:96:53:94:da:21:74:f1:ca:51:e0:
                    d0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:00:54:CA:26:61:97:59:23:AB:95:9D:E8:E3:D9:18:CB:FE:70:D5
            X509v3 Authority Key Identifier:
                keyid:20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:03:98:23:c4:bb:7e:7e:79:e5:7e:0c:e3:cd:59:2d:84:b4:
         a5:80:f0:df:6f:b3:cd:c5:3f:39:7d:c3:ed:4a:4d:bb:7f:cf:
         71:6c:58:9d:cb:ac:38:91:ef:c0:c1:5a:e3:a4:38:d3:5e:fa:
         24:e7:a3:ea:53:5d:8e:ff:d7:41:04:24:c6:13:17:2e:6c:5c:
         92:61:d9:a7:24:87:80:ea:ad:75:7b:41:94:70:85:7e:00:8c:
         e0:97:69:4b:e8:f9:7e:92:c0:44:75:9a:85:ac:42:5e:3b:2e:
         b7:df:af:bf:39:06:68:f4:b3:11:b0:82:81:bc:c7:99:20:67:
         a5:96:bd:09:06:43:4a:fe:59:64:e7:1f:93:c7:26:a9:fd:33:
         b2:29:69:c0:16:eb:18:be:4d:9a:d9:35:98:b3:d9:aa:79:16:
         58:f9:11:e5:82:34:8e:26:59:c3:e4:d4:d3:d7:02:4a:c3:8e:
         04:e9:8d:9b:58:13:54:f3:44:78:41:e5:54:ec:58:10:da:0e:
         3e:7f:ef:6d:b0:b3:a5:4c:82:10:62:44:d6:31:f1:2b:c6:7e:
         e0:43:84:cc:b6:49:c4:1a:6c:c0:ab:92:da:2f:dd:ad:a9:6e:
         ec:6d:41:84:4d:26:34:13:36:b7:ba:60:56:69:3d:e5:fc:68:
         f2:61:93:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----