This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft
File:                     1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft (raw, json)
Hash identifier:          MmZ9Qv1Dv87ZyVXRVb0Kwy0LDU0veUo11YEI3G8zOBc=
Subject key identifier:   5C:B6:84:74:2B:35:4C:7E:40:F5:2D:D6:2D:3A:0E:59:C4:CD:65:AA
Authority key identifier: 1E:8E:43:C3:3D:3E:9E:4C:57:69:92:4F:F3:E8:4B:A9:90:6A:B6:B6
Certificate issuer:       /CN=1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6
Certificate serial:       76BA2F7CF5D01972069D02D0128BA40A7657B31F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft
Manifest number:          28
Signing time:             Mon 01 Dec 2025 10:58:56 +0000
Manifest this update:     Mon 01 Dec 2025 10:53:56 +0000
Manifest next update:     Sat 06 Dec 2025 20:16:56 +0000
Files and hashes:         1: 323830333a376639303a353030303a3a2f34302d3430203d3e20323732383136.roa (hash: oYljaO0LPmxAIquLiYMmqUilwBnNGEbSo+fPawmsi9g=)
                          2: 1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl (hash: NvS1VHZjnFvQOoqQygeU5Uuay1X+D1b5O6JfMk3KAxw=)
                          3: 323830333a376639303a353830303a3a2f34302d3430203d3e20323732383136.roa (hash: BpTGJurnm/bfPm44Dbjc2KurVzjPRldqprtxirW4e9E=)
                          4: 323830333a376639303a353930303a3a2f34302d3430203d3e20323732383136.roa (hash: Bpd0ZqBlcBZNg215pqCEYBGPS/8wTCZEwffTt91osX4=)
                          5: 323830333a376639303a353430303a3a2f34302d3430203d3e20323732383136.roa (hash: 1B0O0CFA1bz2rDk67Ez30f5fpC1qeB2RHq4nkB9j85U=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 20:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ba:2f:7c:f5:d0:19:72:06:9d:02:d0:12:8b:a4:0a:76:57:b3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6
        Validity
            Not Before: Dec  1 10:53:56 2025 GMT
            Not After : Dec  6 20:16:56 2025 GMT
        Subject: CN=5CB684742B354C7E40F52DD62D3A0E59C4CD65AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:52:5b:bf:10:a4:2c:45:94:ef:75:8c:95:2f:
                    94:1b:cc:82:f1:19:1d:c4:43:c4:bf:e8:af:73:a3:
                    92:0f:f1:24:a7:ca:4c:86:eb:5d:9b:58:8a:4d:0d:
                    c8:a1:3a:c5:a7:fb:45:7a:c9:dc:c8:5e:bb:26:20:
                    14:4b:2b:eb:f7:78:6a:ab:51:4d:82:fd:e3:9f:81:
                    5e:9c:0a:ab:6f:e3:72:d6:da:67:7e:dc:35:11:b3:
                    fa:d6:c0:ca:bd:a7:6b:0a:e5:ff:45:27:d3:38:0b:
                    e4:51:31:12:77:41:2b:1e:59:81:66:f5:b7:58:15:
                    3b:1f:1c:d8:4e:40:10:68:49:d5:a7:cd:7a:49:7a:
                    09:ce:32:1e:53:12:31:1d:e2:36:c9:04:ec:b4:01:
                    63:3e:b9:31:38:cc:d6:ab:04:38:be:d7:36:58:0c:
                    27:b0:ce:6e:ce:ee:3e:90:ab:7b:fd:08:8f:95:2f:
                    53:2d:de:d1:e8:bf:6d:fa:75:4e:fc:b1:2b:0f:27:
                    09:47:56:f8:39:0c:4d:e9:be:9d:8f:4a:52:a2:f3:
                    1d:a1:c0:6e:3c:95:cb:ae:12:d1:0d:f1:a3:47:98:
                    f2:ac:eb:02:87:fa:f0:32:44:80:95:87:99:ab:44:
                    96:c3:9a:2a:58:50:33:da:e1:31:2c:85:fd:dc:82:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B6:84:74:2B:35:4C:7E:40:F5:2D:D6:2D:3A:0E:59:C4:CD:65:AA
            X509v3 Authority Key Identifier:
                keyid:1E:8E:43:C3:3D:3E:9E:4C:57:69:92:4F:F3:E8:4B:A9:90:6A:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b9:a3:14:43:ab:72:46:32:8b:96:84:1d:a8:43:54:db:2a:
         5c:46:37:57:12:e2:0b:4d:58:c1:5b:cd:f4:48:91:02:c8:d7:
         44:ef:c4:ad:1f:e1:07:7d:b5:09:b0:98:03:fc:61:80:ea:c5:
         69:c4:69:7d:13:00:71:a0:a9:76:96:5e:f4:0a:cc:8d:ac:3d:
         05:f3:8c:bc:b5:ab:e3:37:87:0a:8f:84:7a:45:b0:90:ae:a1:
         00:3b:5b:1d:e1:83:87:a2:f6:e6:75:4c:be:78:a6:81:43:db:
         fe:23:9a:64:ef:84:4e:e1:8b:6a:d0:d5:72:b3:98:41:35:dc:
         ae:6b:5d:2d:e2:8f:34:af:7d:04:0d:b9:06:41:02:34:93:79:
         3f:a7:75:a7:f5:b2:ac:04:c8:9d:2f:a9:b7:cf:ab:52:1f:6e:
         7a:cb:4d:a4:c6:2c:fe:ee:3e:47:bc:43:60:67:f2:d5:e8:56:
         5b:ba:14:ef:94:aa:5a:1c:ed:be:cf:b7:7b:e4:a7:df:f6:ba:
         24:34:65:be:68:25:f4:47:45:af:17:14:45:4c:40:f8:21:1f:
         df:97:4d:6b:82:18:1e:fc:b9:a3:7d:69:08:43:f7:d9:79:ff:
         78:dc:6f:a7:1b:4d:2f:bc:76:77:9b:d5:6b:21:fc:6e:c2:30:
         b7:c8:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----