This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
File:                     24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft (raw, json)
Hash identifier:          USToNfKxyc/0KT9TEdQKIldRN0rCXzmZeGb12F9IAbI=
Subject key identifier:   D6:BB:F7:67:30:44:C0:F0:BF:CD:F3:73:59:84:64:6B:C6:60:41:57
Authority key identifier: 24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8
Certificate issuer:       /CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
Certificate serial:       511D89F6DEAAE179EEC52A9B009D3F86C4435185
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
Manifest number:          014C
Signing time:             Sun 21 Dec 2025 07:18:44 +0000
Manifest this update:     Sun 21 Dec 2025 07:13:44 +0000
Manifest next update:     Thu 25 Dec 2025 09:10:44 +0000
Files and hashes:         1: 323830333a656336303a3a2f33322d3332203d3e20323637383530.roa (hash: oSkk9LfipEODCq9QkidizqJROnN6tJYJaAmhpqlJRGw=)
                          2: 34352e3137352e3133382e302f32342d3234203d3e20323733393635.roa (hash: WjVlKSmlKMfYyLfSYBFcHYHLAWBav6vyWpdUW5Fo7i0=)
                          3: 34352e3137352e3133372e302f32342d3234203d3e20323733323233.roa (hash: h5WEt+KzQ0qhBHiZohlsS+ahIt5BxvEZmRkY6GUsKD4=)
                          4: 323830333a656336303a666630303a3a2f34302d3438203d3e203131363634.roa (hash: nvif35x9zMHhEYRKe37LJLsDDVCZUILgIwMq+CoAcY8=)
                          5: 34352e3137352e3133362e302f32332d3234203d3e20323733323233.roa (hash: /rnlSRXEZ1Y2PeMdRZnHWVGJQB2sQ66cAjmXxKKPnnk=)
                          6: 24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl (hash: 0n0AzAHGQ9Z/7mZ/SZgCsph+k7etkHFwDM14GwyxKno=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 09:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1d:89:f6:de:aa:e1:79:ee:c5:2a:9b:00:9d:3f:86:c4:43:51:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
        Validity
            Not Before: Dec 21 07:13:44 2025 GMT
            Not After : Dec 25 09:10:44 2025 GMT
        Subject: CN=D6BBF7673044C0F0BFCDF3735984646BC6604157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:74:05:96:3e:58:41:7e:13:53:1a:c8:a4:
                    35:e2:3b:84:45:bf:3a:b6:2d:00:85:a0:80:1b:de:
                    92:ae:ad:35:12:15:4b:21:cf:19:e0:35:44:85:d9:
                    54:be:e3:28:ef:90:fa:86:33:4c:c7:ff:da:85:db:
                    ba:1a:b6:27:d8:8f:a1:2e:59:65:9e:02:b3:a7:7b:
                    fc:e2:e8:3a:3b:03:57:92:84:d1:d8:49:19:5f:44:
                    74:c2:22:b3:4e:70:e3:9a:63:b8:b9:1b:aa:e3:71:
                    3c:40:69:86:a1:db:76:5f:a7:22:bf:8d:56:7e:14:
                    24:27:99:d1:fb:95:94:a3:e3:0d:01:84:43:92:35:
                    1c:14:2f:4e:eb:00:e7:14:cb:af:b0:43:33:fe:e3:
                    f5:c4:02:60:8b:84:af:e4:9c:27:90:67:3b:4e:b0:
                    43:04:a1:5e:09:c2:c0:1c:20:7e:ef:05:4c:60:92:
                    fd:3d:f4:59:92:ca:c1:a2:ae:34:54:7d:ce:21:88:
                    27:82:7c:c3:f4:c2:eb:f1:aa:b0:55:37:36:7f:49:
                    92:2d:d8:3f:cd:08:06:cf:79:d7:da:6f:60:21:19:
                    e9:a3:20:83:c9:c6:f9:52:4c:02:d9:d2:15:ec:48:
                    23:27:c0:ce:8f:37:f5:7f:0b:82:9c:ea:af:79:34:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BB:F7:67:30:44:C0:F0:BF:CD:F3:73:59:84:64:6B:C6:60:41:57
            X509v3 Authority Key Identifier:
                keyid:24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e7:0f:03:99:9a:8d:df:93:1c:aa:e8:b4:76:1c:15:e5:5b:
         44:5f:b3:fe:5a:8c:4c:0a:a6:da:41:56:fd:31:74:7a:3f:cf:
         67:ae:35:f6:fd:d3:40:1b:a2:f9:dd:f0:1f:35:2c:0a:57:9a:
         dc:e9:ce:b5:ec:41:cd:0c:49:ec:f4:15:da:cf:d5:d4:ed:7c:
         95:8f:19:1b:98:64:bf:16:7c:ba:1a:ec:db:2b:a5:0b:e0:bd:
         dc:41:7a:8f:25:78:90:ae:ec:8d:0e:6a:01:47:9c:47:e6:f9:
         dd:34:6b:f3:03:c5:1f:20:37:87:5d:c6:5f:80:e5:0c:1a:af:
         30:ca:60:75:d2:cf:97:0e:7b:a0:93:be:2f:56:96:47:2f:e3:
         06:d8:da:67:e1:41:42:c8:56:bb:58:19:96:9c:8c:69:04:ea:
         00:51:c3:f5:76:96:31:ad:c9:2c:87:70:19:04:99:de:f4:0a:
         fe:01:75:81:da:33:da:21:37:5e:a6:fe:61:a8:4b:81:e7:a9:
         46:f4:0f:09:87:a1:7c:31:21:ff:ea:99:de:ae:07:0b:4b:42:
         8f:a8:6d:e2:04:aa:59:44:84:70:23:f5:21:dc:ef:ed:91:f5:
         92:69:b4:ac:df:c5:f1:91:d1:d8:f9:aa:7b:40:2b:a4:1a:67:
         9c:55:67:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----