This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.mft
File:                     653BCCC8DAB0459A5D23BCB1437938AC615D5023.mft (raw, json)
Hash identifier:          ll/xw9p2WWunLAOZnqAH7SXz34TFT6pYeVmmO0Ie7Uk=
Subject key identifier:   1E:09:63:E4:1A:0D:8F:80:71:26:FA:2F:99:03:4D:4B:DC:A9:1D:CB
Authority key identifier: 65:3B:CC:C8:DA:B0:45:9A:5D:23:BC:B1:43:79:38:AC:61:5D:50:23
Certificate issuer:       /CN=653BCCC8DAB0459A5D23BCB1437938AC615D5023
Certificate serial:       4C8F12AF6E6344519E90D62FCF10291F9CF7A308
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.mft
Manifest number:          0148
Signing time:             Sat 20 Dec 2025 00:59:08 +0000
Manifest this update:     Sat 20 Dec 2025 00:54:08 +0000
Manifest next update:     Thu 25 Dec 2025 23:21:08 +0000
Files and hashes:         1: 323830333a383638303a3a2f33322d3438203d3e203532343635.roa (hash: mN2OVkmONi5Rq26/F5FdA0u7k5y5lHSv5GOaqZd5/20=)
                          2: 3136312e302e37322e302f32312d3234203d3e203532343635.roa (hash: /4FQvb45yFWjfjZu/1QgvL/Px7rIBq++IuhF9G6aXiI=)
                          3: 653BCCC8DAB0459A5D23BCB1437938AC615D5023.crl (hash: k8PfeUC0aRNHMU84/Sdqa3AN7NzzSFDJHKfTVFCRvt4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 23:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8f:12:af:6e:63:44:51:9e:90:d6:2f:cf:10:29:1f:9c:f7:a3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653BCCC8DAB0459A5D23BCB1437938AC615D5023
        Validity
            Not Before: Dec 20 00:54:08 2025 GMT
            Not After : Dec 25 23:21:08 2025 GMT
        Subject: CN=1E0963E41A0D8F807126FA2F99034D4BDCA91DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b3:70:e2:fc:b5:68:ef:9e:2c:d0:7a:72:10:
                    8a:ee:e0:bb:1d:94:7e:9a:85:38:15:f1:bc:78:a4:
                    1a:03:58:56:84:e2:1c:c1:ac:f2:22:ca:04:c6:ea:
                    e5:14:fb:6d:a1:df:67:2f:bc:62:05:3c:7f:32:36:
                    73:c1:eb:32:61:80:35:de:15:12:9d:88:e9:78:49:
                    ba:62:ae:9e:8c:73:52:0f:c8:7c:c9:e8:6b:f9:59:
                    d8:87:db:b0:c7:8a:de:48:78:24:ef:7d:6f:e3:f2:
                    aa:d2:9c:72:8f:a3:a3:51:4b:48:64:be:60:99:3b:
                    5f:8c:25:de:61:c3:cd:6e:1f:f3:7b:58:80:b0:7f:
                    dc:18:83:e1:e2:5c:c7:3d:7f:04:de:bd:6f:32:b7:
                    18:24:c9:8f:d4:2e:f3:a6:9e:05:4a:ef:b7:92:23:
                    a9:62:ca:7a:14:ca:6e:54:6c:00:5f:4c:65:d9:7a:
                    6d:7c:66:4a:7e:77:00:32:17:33:a8:7c:9f:5e:51:
                    94:97:e6:9e:a5:0c:9a:dd:8b:8f:8a:a8:b7:13:dc:
                    61:38:ba:d8:d9:12:aa:21:7b:0f:f5:08:0a:77:3b:
                    3e:35:18:30:3d:67:b6:dd:90:f3:f5:b5:52:41:74:
                    e5:95:0c:24:3d:3b:a9:f2:4b:b6:c6:67:22:3d:65:
                    5c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:09:63:E4:1A:0D:8F:80:71:26:FA:2F:99:03:4D:4B:DC:A9:1D:CB
            X509v3 Authority Key Identifier:
                keyid:65:3B:CC:C8:DA:B0:45:9A:5D:23:BC:B1:43:79:38:AC:61:5D:50:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:94:4c:47:10:09:70:1d:04:7a:ec:50:c4:81:ae:4e:d9:86:
         7d:5b:85:14:0f:58:32:9e:bb:05:fd:b2:bd:40:6f:be:65:f1:
         ff:9f:fa:cf:9b:86:49:7f:13:cd:0b:1e:b0:4b:c2:4c:b6:0e:
         76:4d:15:92:db:79:f9:d0:16:46:9b:a4:62:eb:ee:d1:7a:0d:
         ad:bb:3e:51:82:4e:53:03:77:41:72:24:96:fc:c9:66:64:b7:
         d5:68:90:0c:02:80:97:ae:30:19:2b:0d:27:66:76:a7:34:72:
         5d:ac:33:d7:99:aa:3f:ad:54:4d:c3:05:4c:60:9f:f3:65:18:
         82:93:6d:fe:ea:c8:d9:9c:76:61:96:7c:fa:4f:8e:7b:06:f0:
         4e:7e:9a:db:d3:c1:35:3b:65:4b:50:d2:95:f3:2f:62:a4:5e:
         4f:d5:50:69:30:d3:c9:9c:9e:87:e2:d3:8d:6f:3b:24:23:3e:
         24:fe:6b:98:d0:a3:8a:a7:61:ae:b9:64:4f:e8:cd:8b:70:5e:
         5b:45:73:2f:a3:93:9d:5d:19:ab:f9:d7:50:eb:4b:ef:8b:d4:
         65:41:d5:b9:ad:ee:54:10:1b:6a:cc:3b:2d:7e:e4:81:c6:aa:
         47:a7:26:c7:44:c9:90:b8:d1:00:9b:81:5c:db:4e:ae:20:9b:
         fa:ca:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----