This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
File:                     20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft (raw, json)
Hash identifier:          IklwhNKKohxWJbjlg7nH3Ws3DxjxN1Kn2//QECAWaE0=
Subject key identifier:   35:4D:47:E4:9D:E7:62:C5:A5:F3:33:20:0D:2B:A7:4E:B1:44:F4:9B
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Certificate issuer:       /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial:       4BE07866233D209E52D1D8BC5C6182848D82F634
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
Manifest number:          0145
Signing time:             Fri 19 Dec 2025 15:48:47 +0000
Manifest this update:     Fri 19 Dec 2025 15:43:47 +0000
Manifest next update:     Thu 25 Dec 2025 10:31:47 +0000
Files and hashes:         1: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl (hash: xK7ScSRCc05E/K1xQtQ2cygD7wZChV8kYzjraMgTRaM=)
                          2: 3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa (hash: UxWVsSHgc7sCdCdtXfz5xPAdpgKquF6TGclmGWtYyus=)
                          3: 3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa (hash: Y3oZHoznCaUCBQoRIIqHUk1GE9kbKfIIaQ4fpU0PJjw=)
                          4: 34352e3138392e3233352e302f32342d3234203d3e20323733303036.roa (hash: tHCd2o3Ws3sRzLZIPTJtx1XUzBWF561xvUTQHUix3mg=)
                          5: 3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa (hash: D4Wuw579mtmQk3148E/t7+wdylw1tUvsSFL+d95cbeo=)
                          6: 323830333a383465303a3a2f33322d3332203d3e20323733303036.roa (hash: IhrcR9v71SHVWTPWhhNNwFVAgzsaGowtRREEzljdA5Q=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e0:78:66:23:3d:20:9e:52:d1:d8:bc:5c:61:82:84:8d:82:f6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
        Validity
            Not Before: Dec 19 15:43:47 2025 GMT
            Not After : Dec 25 10:31:47 2025 GMT
        Subject: CN=354D47E49DE762C5A5F333200D2BA74EB144F49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:77:08:2f:20:26:c5:94:08:a5:61:8c:b4:29:
                    22:83:9d:b6:bf:00:07:6c:34:a0:3f:c1:63:1e:09:
                    4e:3c:57:78:28:10:ca:bf:7a:bd:fe:81:9b:9d:00:
                    a8:59:bf:ea:86:13:1f:cd:0c:ae:77:bf:50:40:41:
                    a9:ea:a9:70:7d:70:da:94:37:3e:dd:dd:b0:d8:28:
                    53:92:c7:f6:b3:79:b4:0a:3d:05:41:fc:94:27:5f:
                    cf:54:07:54:c9:59:de:61:1c:21:7c:f9:90:40:ee:
                    4d:a4:4d:7c:08:38:d4:1b:15:59:20:45:eb:ca:89:
                    90:e5:6e:47:e8:cd:04:fe:27:62:68:06:a2:25:cd:
                    06:75:37:b1:4d:6a:c2:9c:e1:c7:21:eb:05:53:17:
                    c0:56:f3:aa:dd:41:dc:43:7f:72:a1:f1:7b:5a:9e:
                    f2:08:e6:7f:37:cb:f8:0c:9b:70:00:6a:e0:1b:bb:
                    a3:74:c8:9e:90:dd:d6:cc:f4:d3:73:88:c5:32:66:
                    ab:25:29:30:d3:9c:ec:76:57:54:34:03:ff:25:b1:
                    5c:a1:73:60:19:ae:c7:cf:5a:85:2d:58:e0:a5:e3:
                    5e:76:a0:91:39:97:14:b7:08:12:f4:63:69:26:3c:
                    ca:97:78:87:5c:35:f4:f9:c1:8c:16:3b:79:00:aa:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4D:47:E4:9D:E7:62:C5:A5:F3:33:20:0D:2B:A7:4E:B1:44:F4:9B
            X509v3 Authority Key Identifier:
                keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:36:41:99:d2:81:9f:3b:48:ff:e8:27:8c:d5:f6:b6:1d:29:
         e8:67:38:a2:8d:ca:0a:26:5b:ca:f6:14:eb:cc:e0:fb:1b:ce:
         00:9b:cb:f8:8b:0e:eb:ff:cf:3f:5e:c9:5e:70:53:50:e7:c3:
         83:51:7e:f7:69:34:37:99:f6:4b:59:b7:a0:f3:ad:0c:9d:22:
         d8:e9:e6:92:de:c6:4e:b4:7c:64:af:24:f7:32:61:56:72:a5:
         5f:74:0b:71:e8:f3:fe:b7:4f:c4:9d:28:99:a0:e1:74:3b:dc:
         eb:09:a5:63:8d:41:07:e0:5c:90:6d:2e:a2:f9:ac:95:da:28:
         ec:a7:20:59:63:72:2e:69:43:3e:39:4f:42:41:3a:3a:93:df:
         a0:90:ec:82:d9:de:cf:88:80:0f:ad:2e:83:1e:a2:f3:bc:e0:
         54:1c:39:f4:18:d3:7a:7a:17:9e:9e:4b:16:e6:79:91:fe:8e:
         5d:3e:13:f3:38:b9:c7:59:34:51:8a:0a:ae:fd:f1:2b:c5:e4:
         85:98:9e:ec:da:b9:f1:64:c7:2e:32:ff:99:e9:d4:99:3b:27:
         f6:cd:46:61:17:48:72:52:ef:01:00:c1:1c:49:64:50:e2:2d:
         f4:ac:44:ce:db:60:40:d5:13:e3:f5:d8:29:6c:4d:a3:e5:3f:
         28:05:ac:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----