This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
File:                     5408B30DE5B83D183566781EE9CE33FDF27A8870.mft (raw, json)
Hash identifier:          Iod7eC6VXErwTCxx1wD/RllQT2b+nkU+DMP1qMrJckw=
Subject key identifier:   9F:81:AB:1A:CF:AB:F0:78:77:21:14:E9:6A:6E:9A:AA:D3:22:B8:12
Authority key identifier: 54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70
Certificate issuer:       /CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
Certificate serial:       479BAA40A8EFD8B8A644841276AD4796EDE07B95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
Manifest number:          014C
Signing time:             Wed 17 Dec 2025 13:52:48 +0000
Manifest this update:     Wed 17 Dec 2025 13:47:48 +0000
Manifest next update:     Tue 23 Dec 2025 04:33:48 +0000
Files and hashes:         1: 3139302e39332e33392e302f32342d3234203d3e203139383633.roa (hash: sfJDz7kna8h1AvIsmy8CoZ629qt9bD9LgaSJIa7KSRg=)
                          2: 3139302e39332e33372e302f32342d3234203d3e20313734.roa (hash: TI3Q/bRoWy4eQt1CH2Oq9KtQkg1K65bhi3eASsLoUls=)
                          3: 3139302e39332e33362e302f32342d3234203d3e203532343333.roa (hash: Hd4tiLdhTr19rOa+0WYoNRnZvxqx4/Rpt7n+JeuMPlc=)
                          4: 5408B30DE5B83D183566781EE9CE33FDF27A8870.crl (hash: 0vRLKBXHtAHA441XYRFQqknJ/p0mWiROCf6A6kDwDik=)
                          5: 3139302e39332e33382e302f32342d3234203d3e20313734.roa (hash: hSUmhzZqHyI6Gn/BzgFuCp4VxRXKw3qepwH6PV6Gk/4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 04:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9b:aa:40:a8:ef:d8:b8:a6:44:84:12:76:ad:47:96:ed:e0:7b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
        Validity
            Not Before: Dec 17 13:47:48 2025 GMT
            Not After : Dec 23 04:33:48 2025 GMT
        Subject: CN=9F81AB1ACFABF078772114E96A6E9AAAD322B812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3b:77:ad:c1:f6:9f:7d:0e:22:40:9e:17:b7:
                    43:f8:59:64:88:1b:00:56:f4:65:7a:57:da:8f:3f:
                    5f:a9:fc:18:58:a0:33:29:d8:16:73:ad:89:0c:94:
                    a8:1a:ea:a5:b8:b1:02:d8:6d:51:19:ce:b8:61:cb:
                    c2:6c:ce:c4:24:6e:d7:30:bb:d5:58:94:d2:16:d2:
                    f7:a1:cf:4e:35:37:56:e0:bd:13:93:0b:37:5a:75:
                    25:34:c8:54:ac:5d:cf:17:58:28:f5:39:c0:2d:3a:
                    af:db:fe:10:60:98:cc:ca:b7:da:30:03:d7:b6:76:
                    3e:5c:2a:48:02:88:1f:c6:96:5e:f6:f4:83:ca:57:
                    d7:26:2f:21:3f:0b:c8:bd:61:fc:09:fc:e4:0d:1a:
                    0b:03:47:86:0f:04:e5:67:62:1d:3e:a8:b1:e5:cb:
                    83:57:dd:5b:61:06:bc:d9:b2:6a:1f:0d:b9:d4:bf:
                    77:c9:86:65:69:e5:04:9b:32:ce:64:53:2d:9d:0e:
                    ae:32:0c:11:14:ec:a3:bf:4d:59:7f:95:3a:90:0d:
                    1b:9a:77:e8:b0:14:71:2f:cb:66:14:e7:7a:20:8a:
                    d7:3f:6a:de:9a:16:e8:0c:58:e5:1b:44:7b:47:a1:
                    d4:7a:33:76:f1:9d:2e:c9:bb:be:e5:4f:36:56:94:
                    e5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:81:AB:1A:CF:AB:F0:78:77:21:14:E9:6A:6E:9A:AA:D3:22:B8:12
            X509v3 Authority Key Identifier:
                keyid:54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:69:6d:12:f4:d7:7e:1d:cd:74:f4:b6:fb:03:d2:36:b0:d2:
         58:5f:ca:68:a6:3a:3c:bd:db:8f:c6:f5:6c:3d:55:32:01:2c:
         f5:6d:bb:61:cc:6b:46:1c:56:b0:f7:c4:87:74:ba:59:ac:d5:
         d8:09:ed:63:36:69:4a:8e:93:b1:c9:8d:7a:f5:88:0c:7d:4b:
         9e:9c:63:3a:ee:cc:5c:ae:53:b0:a1:49:09:0e:0a:e6:b4:5b:
         d1:3e:7a:80:ff:3c:dc:15:03:51:ef:f1:b5:e4:c3:b9:da:25:
         eb:42:cc:2f:e3:f2:02:0f:50:eb:f7:a3:fe:91:80:cd:34:ed:
         80:1f:36:6a:33:64:f2:0b:36:82:ca:38:f7:79:c8:76:6d:98:
         31:e9:19:02:da:de:a9:ff:f2:b5:ff:d1:91:33:f2:18:c2:2d:
         37:20:03:47:b1:0e:50:f6:82:19:6e:d5:fa:31:a7:f3:26:fe:
         34:74:7d:f5:02:ce:20:d5:a8:d7:9e:6c:da:7a:93:32:75:66:
         51:c2:e4:fc:95:aa:8c:98:8f:f1:09:f5:7b:54:2b:ef:59:c2:
         5e:f8:fc:83:93:c5:4e:be:4f:11:68:fb:92:56:8f:04:63:31:
         24:77:4d:62:21:ae:f3:2f:cb:05:5c:d0:a6:9a:50:3c:50:83:
         8a:f4:b2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----