This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
File:                     70B51DCC347573651055FC72DB19C170524018CC.mft (raw, json)
Hash identifier:          n5ezKSLrjGL1b1CzwIXuHuxog06/vMvX1WXxGY3IyYE=
Subject key identifier:   72:43:2A:5E:D6:4C:EF:7B:AE:45:D9:9D:3E:C2:A0:A2:67:7E:22:32
Authority key identifier: 70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC
Certificate issuer:       /CN=70B51DCC347573651055FC72DB19C170524018CC
Certificate serial:       0842FA362FA522E56C1D7F3131A6DBE6ED61EA77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
Manifest number:          0155
Signing time:             Fri 26 Dec 2025 20:42:17 +0000
Manifest this update:     Fri 26 Dec 2025 20:37:17 +0000
Manifest next update:     Thu 01 Jan 2026 15:50:17 +0000
Files and hashes:         1: 3139302e382e33322e302f32302d3234203d3e203436313938.roa (hash: dFj8MmRuFxrByOsX0k3DGUA66P8N+6Pka2xWe2qMLmE=)
                          2: 323830333a613634303a3a2f33322d3536203d3e203436313938.roa (hash: Y7Graa1GkNAS8x/l9kUW3FtTElJHfsqwEL6EK8UOTJ8=)
                          3: 3139302e382e33322e302f32302d3234203d3e203237383936.roa (hash: ML9ua8yvbx7O0GpZG3bnnZT3umLAS9p+jaCGJIMX1sY=)
                          4: 323830333a613634303a3a2f33322d3536203d3e203237383936.roa (hash: B+utkw2BCRRGP7WVCnBbBQJkPWUUr3vvKGJPQqOESlI=)
                          5: 70B51DCC347573651055FC72DB19C170524018CC.crl (hash: 8LMTeaVa3LuJ2cJQcJe9Y91SQSk6CSclGPywT50wiJQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 15:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:42:fa:36:2f:a5:22:e5:6c:1d:7f:31:31:a6:db:e6:ed:61:ea:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B51DCC347573651055FC72DB19C170524018CC
        Validity
            Not Before: Dec 26 20:37:17 2025 GMT
            Not After : Jan  1 15:50:17 2026 GMT
        Subject: CN=72432A5ED64CEF7BAE45D99D3EC2A0A2677E2232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:ea:dc:2f:44:3e:b9:c3:c3:6b:e9:29:1b:
                    fb:34:63:5e:a2:79:8f:c3:34:47:b6:10:b0:1e:9e:
                    62:17:2d:06:da:eb:99:67:10:47:8f:76:36:f8:69:
                    c1:5b:92:5b:6a:c1:12:18:18:94:25:8d:4b:2e:10:
                    47:77:48:c2:d6:3c:0d:02:29:92:2e:63:90:9e:c4:
                    86:ae:3c:44:03:51:ce:84:47:42:76:31:55:82:1b:
                    6a:e5:ef:77:69:31:ed:6f:d0:0b:a2:e0:c5:a1:e1:
                    62:fd:43:56:a2:e2:57:41:ac:b7:77:ec:92:f5:09:
                    0c:72:60:9c:9b:a0:53:60:98:c6:ae:a8:3b:18:f0:
                    a7:36:f2:15:5c:86:81:1a:b6:9a:6c:f5:ef:52:0e:
                    d5:1e:8a:55:25:d9:54:ed:3b:f4:50:92:05:78:4f:
                    cc:41:ba:a1:f2:50:68:8f:41:23:fa:2f:5f:bb:d9:
                    0a:b4:2a:4a:bb:5a:d5:81:71:8a:d6:84:2c:7f:c9:
                    a0:40:09:b8:15:77:0a:ee:41:d9:57:87:d4:a8:6a:
                    8e:33:8c:b8:2e:c3:b8:70:c7:6a:d1:10:95:a1:a6:
                    ae:c1:6b:1b:80:64:4b:29:a3:b9:2e:8d:36:50:f5:
                    82:61:be:14:95:5f:7f:2f:77:f8:09:76:b0:2e:71:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:43:2A:5E:D6:4C:EF:7B:AE:45:D9:9D:3E:C2:A0:A2:67:7E:22:32
            X509v3 Authority Key Identifier:
                keyid:70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e3:60:78:39:e5:83:60:88:57:53:b3:dd:32:0e:fb:97:61:
         e2:2c:45:39:6c:a7:d4:13:30:f7:cf:68:98:2a:27:a9:4c:30:
         9f:3f:e2:b5:da:b9:65:34:3c:7a:c6:04:f4:8b:9d:ad:19:32:
         91:3b:f3:1d:1e:01:1f:c8:73:4e:5c:1e:6d:b7:3a:93:ee:af:
         50:bd:84:0e:ef:4a:9a:91:50:36:2e:fb:a6:25:13:a3:09:d0:
         1f:8a:be:5a:17:a2:79:cb:8a:80:8e:e6:70:bb:b6:07:b6:3c:
         c6:de:42:5d:bf:8e:3c:63:18:34:63:a8:57:0f:47:c9:8d:48:
         7c:13:c0:2b:92:a2:68:53:cb:1e:0d:88:25:b1:66:d6:81:8f:
         0b:f6:2c:74:d1:8f:02:88:22:a5:27:ac:2b:40:3d:74:73:b9:
         b6:36:75:d0:4c:b5:e1:f4:60:75:ea:b5:a7:17:d3:de:fe:9a:
         b4:ba:3d:a9:d0:96:59:39:a1:9f:0b:b5:a3:17:b9:78:9d:34:
         15:f9:75:b5:ad:79:ed:7a:08:c4:79:fd:5d:0c:d1:56:e9:b4:
         15:59:93:ef:e7:43:ae:2d:f9:f1:13:bb:da:b5:0e:29:b7:61:
         0e:9d:68:35:24:df:78:60:fd:0b:45:1e:a4:1f:5b:a0:43:a8:
         e3:8b:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----