This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
File:                     CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json)
Hash identifier:          J5A7tQA3nTkb9lGsywxEHEhs+dy19gJWH6LjSXb4KTY=
Subject key identifier:   54:27:17:DE:57:06:05:B3:B3:22:EF:BF:3B:0A:44:04:F8:70:16:63
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Certificate issuer:       /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial:       42EE38FD32CA1D43A8BAE54567C8F89EF460C9E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
Manifest number:          014D
Signing time:             Sat 20 Dec 2025 22:22:53 +0000
Manifest this update:     Sat 20 Dec 2025 22:17:53 +0000
Manifest next update:     Thu 25 Dec 2025 18:10:53 +0000
Files and hashes:         1: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: /wlL6Hzjl2U8TA/3MzgmIvE9XJCFO7oo2UYSsbQJQjs=)
                          2: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: MAJxrDm1ex5gG0+qVfg9yJc6ZorOreLgA5tyBVAPd0o=)
                          3: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: a8Us3kI8SkWGmqoxEMJdOuQDpMUk4xinBahinzFU9DU=)
                          4: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: rGf/Ot8vpc4bXLZjtJMeJ64W68zetCQCjBNpV60KJLk=)
                          5: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: vb7Kyf31JcU4K7h1whk05luNX6Z6SSjkjzD3prLXHAE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 18:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ee:38:fd:32:ca:1d:43:a8:ba:e5:45:67:c8:f8:9e:f4:60:c9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
        Validity
            Not Before: Dec 20 22:17:53 2025 GMT
            Not After : Dec 25 18:10:53 2025 GMT
        Subject: CN=542717DE570605B3B322EFBF3B0A4404F8701663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:8b:24:a0:a2:06:56:d2:0a:a8:b5:bd:de:
                    e6:25:72:14:30:6c:50:0b:47:ab:e9:54:cc:47:5a:
                    5a:7c:c0:d1:04:8b:c0:b6:a1:52:d9:94:ed:9d:18:
                    55:ca:e4:7d:62:66:04:42:95:0d:97:9d:c1:5a:f8:
                    22:82:a5:26:32:9a:2c:25:12:5f:9d:ab:57:07:bf:
                    cd:75:76:de:96:16:ff:fb:18:8f:7b:a1:3d:eb:73:
                    1f:86:b3:cc:09:c5:ac:42:ca:f6:3d:9b:ee:eb:f4:
                    cc:1a:b8:98:1f:cf:65:13:e4:14:e8:1c:59:a7:ce:
                    8d:2e:c2:60:11:c9:96:28:9b:0d:8f:29:ec:52:dd:
                    87:3d:49:60:cd:f3:af:fe:95:44:ce:1c:50:9c:a3:
                    26:bb:86:25:c2:04:b9:28:b5:38:00:fd:4a:02:5f:
                    98:cd:13:d6:c9:d8:89:76:64:b4:0f:80:33:01:f4:
                    f3:d2:60:31:3e:d6:db:0c:da:52:92:29:eb:fb:76:
                    76:1c:f8:82:44:3a:66:ea:36:48:f2:db:8c:a8:e8:
                    d7:ad:cf:84:bb:a7:c7:44:c8:3e:20:4c:3e:ed:d6:
                    ab:ba:ef:c9:7b:ed:1a:84:23:be:3d:8e:00:47:00:
                    c6:ba:b6:b4:1c:07:a5:aa:94:06:7d:29:12:f1:07:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:27:17:DE:57:06:05:B3:B3:22:EF:BF:3B:0A:44:04:F8:70:16:63
            X509v3 Authority Key Identifier:
                keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:50:fc:d1:01:18:9c:e8:8c:8b:06:a6:88:50:23:61:73:
         38:da:97:30:e1:12:81:af:33:80:8a:6e:84:38:fe:46:7e:d9:
         01:ed:7c:46:8b:2a:0a:ca:3c:8c:bc:64:ea:75:74:78:60:1e:
         fc:b5:37:ce:d9:3f:cb:ee:9a:37:ca:28:5d:f2:12:80:69:1d:
         69:d2:4b:00:ad:ab:03:67:77:10:4c:d2:e2:1c:ba:f3:5e:0c:
         e1:b0:a5:9c:21:e5:a5:8d:74:95:7e:ef:19:4d:3f:cf:c6:bc:
         96:76:0e:d8:ff:62:2a:8e:0f:c2:a8:7f:f1:6d:b1:76:2d:31:
         35:6f:02:53:6f:87:90:05:52:6f:53:5b:da:25:14:e2:94:ab:
         a8:51:61:d7:2d:a7:2f:86:bd:01:88:3b:b5:0d:75:8d:f1:a5:
         49:bd:1c:91:89:8f:8f:ad:ee:c9:d9:94:3b:5c:3f:00:b3:a2:
         2b:c9:3f:6b:0d:31:e5:f2:ac:41:e1:43:b2:54:3d:5e:1f:9e:
         12:8b:f6:80:82:df:80:09:8d:9f:d5:74:50:36:d7:a4:f7:84:
         cf:c7:a6:c6:03:f3:42:0a:88:b2:ef:71:a3:42:0c:34:b5:41:
         6e:f6:36:61:96:e7:3e:9b:d0:48:d2:7c:39:ef:75:f1:0e:09:
         74:17:8a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----