This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
File:                     604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft (raw, json)
Hash identifier:          7f00yycZjo0eutpBpTiy1IvqQs4uiEoeDt2AOCImfUQ=
Subject key identifier:   33:89:17:61:2E:2D:8E:CD:D8:E1:A2:E4:0B:6D:E5:03:FA:A8:00:03
Authority key identifier: 60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81
Certificate issuer:       /CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
Certificate serial:       585573E51E0A4A8C78CD4BC2A6D7E2EDD4F10212
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
Manifest number:          0148
Signing time:             Sat 20 Dec 2025 10:55:54 +0000
Manifest this update:     Sat 20 Dec 2025 10:50:54 +0000
Manifest next update:     Wed 24 Dec 2025 16:13:54 +0000
Files and hashes:         1: 323830333a633163303a3a2f33322d3332203d3e20323635363739.roa (hash: wq5tUkKuUReQVSGTdTpSqn4lCVZZpi7Q7lYTlkravNw=)
                          2: 323830333a633163303a3a2f33322d3332203d3e203532333631.roa (hash: bIPxM/eAKCH1HOeImt+RkI9rG978xG9f6ZV24H0ZxxU=)
                          3: 604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl (hash: hOcTAjYcEzf17TAJ3GESEoDpM7/BeG2sFizjaY9nMyw=)
                          4: 34352e342e3231362e302f32322d3234203d3e203532333631.roa (hash: suDhHyOCnAfaytgoksyE8aD/IPJ6NWyAot4KndhueVg=)
                          5: 34352e342e3231362e302f32322d3234203d3e20323635363739.roa (hash: 2ZAx6V+roMthQj9DYTDAwt5PiSEaAmZhWSyjyXf9/cw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 16:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:55:73:e5:1e:0a:4a:8c:78:cd:4b:c2:a6:d7:e2:ed:d4:f1:02:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
        Validity
            Not Before: Dec 20 10:50:54 2025 GMT
            Not After : Dec 24 16:13:54 2025 GMT
        Subject: CN=338917612E2D8ECDD8E1A2E40B6DE503FAA80003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:04:79:51:08:27:7b:e5:6f:22:4a:52:28:
                    c8:4e:13:20:f8:12:3c:43:d5:40:17:bd:3b:c5:2b:
                    86:d1:44:db:56:10:ff:ab:7f:2c:93:a5:f7:5c:bd:
                    18:b2:28:a2:cf:6f:95:40:9d:6e:5f:d8:ac:83:46:
                    55:e9:a1:e1:a0:98:4c:7f:d1:aa:b8:4f:d8:49:44:
                    03:5f:3c:43:04:fc:4b:cd:2c:65:e3:68:3e:77:50:
                    dd:38:d2:90:ea:c7:ee:ed:e8:4e:18:c9:52:84:7c:
                    c2:e6:45:ea:ab:93:ae:19:3b:d9:2e:10:fd:42:54:
                    c0:50:3f:96:02:87:a0:3b:15:4d:43:1a:e3:76:2b:
                    74:d2:16:f0:0e:a2:c9:49:07:3e:68:4b:6d:f2:07:
                    e3:25:13:23:4e:76:15:cd:f9:c1:18:2f:bd:be:d6:
                    78:81:b0:c3:3d:9e:b3:9d:2e:74:99:82:2b:bd:e8:
                    0a:df:7f:ce:e3:31:1d:f0:62:8b:3d:20:9d:81:2e:
                    ff:90:14:86:69:e6:7d:41:a4:d8:b4:52:fc:51:9d:
                    1a:93:1c:98:f7:ed:0a:80:37:42:f9:f7:40:ba:b8:
                    cd:5a:82:64:43:fd:80:1e:e2:59:69:33:48:60:2e:
                    3f:f4:59:e3:18:87:38:ba:a9:fe:e2:07:2f:85:50:
                    f6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:89:17:61:2E:2D:8E:CD:D8:E1:A2:E4:0B:6D:E5:03:FA:A8:00:03
            X509v3 Authority Key Identifier:
                keyid:60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:94:80:65:93:29:2d:27:b8:b6:18:06:4d:7d:89:8e:36:aa:
         9d:75:3a:77:3e:65:c7:08:75:fc:1d:83:7e:bc:f8:7c:ab:ba:
         7f:a6:44:ce:9a:43:76:a1:77:3e:39:ca:08:87:6d:96:f6:02:
         40:97:55:a0:a2:29:b5:25:62:dc:7d:07:9e:7c:cf:df:a2:dd:
         a1:5b:76:dd:8f:40:ab:8d:03:a0:84:9d:ae:84:1b:63:f3:9d:
         3a:a8:18:37:77:69:97:fa:f1:f2:27:1a:6e:82:5a:79:63:11:
         7a:b6:11:e3:92:5f:08:d3:73:e5:98:07:9a:63:00:4c:1d:c1:
         49:89:d9:b6:9a:ea:e9:5a:d9:c3:61:46:51:95:75:60:aa:04:
         40:c1:75:ab:36:c4:94:f8:b4:a6:ec:e3:8f:71:8e:4c:3a:e3:
         ef:64:72:0f:24:6a:de:e0:6a:cf:2c:df:0d:29:94:b4:34:67:
         48:e6:03:ea:85:6a:2f:55:a6:63:eb:ee:c0:7d:91:a7:41:7b:
         1d:ec:5c:e0:cd:8b:1e:39:88:0b:a3:54:86:61:09:97:a1:fa:
         e9:a9:e1:9b:2c:74:42:e3:a6:de:d1:07:2b:0f:3c:f6:5f:90:
         e9:57:7d:ea:63:8e:ae:38:6c:c2:6c:0d:ab:77:44:09:2c:2a:
         b9:66:6b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----