This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft
File:                     5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft (raw, json)
Hash identifier:          ga9UEq21noGa4Ij5Jm/F52jJJTvFEcpPYxpBZhbCHsA=
Subject key identifier:   BE:C3:9A:5B:60:65:93:56:CE:81:DB:98:B3:09:80:A3:F4:E7:9C:32
Authority key identifier: 54:58:CA:1B:10:BC:28:3A:21:E9:C9:D3:56:90:38:E8:0F:56:76:E4
Certificate issuer:       /CN=5458CA1B10BC283A21E9C9D3569038E80F5676E4
Certificate serial:       32C8D87E035C8C7901F04DB19BA1A636CBC1E710
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft
Manifest number:          DC
Signing time:             Mon 15 Dec 2025 14:48:11 +0000
Manifest this update:     Mon 15 Dec 2025 14:43:11 +0000
Manifest next update:     Sun 21 Dec 2025 14:19:11 +0000
Files and hashes:         1: 323830363a3431333a3a2f33322d3438203d3e20323732333632.roa (hash: 3gei3c3TJdAEt3+8CEVzip+xVBL8sD0wxQZ5kOaWLIc=)
                          2: 5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl (hash: FAktdSwuEYnmWYy0otGcIhXTD8TLPbTOtS24elxrZd8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c8:d8:7e:03:5c:8c:79:01:f0:4d:b1:9b:a1:a6:36:cb:c1:e7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5458CA1B10BC283A21E9C9D3569038E80F5676E4
        Validity
            Not Before: Dec 15 14:43:11 2025 GMT
            Not After : Dec 21 14:19:11 2025 GMT
        Subject: CN=BEC39A5B60659356CE81DB98B30980A3F4E79C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:85:56:32:27:84:c7:9d:2e:35:54:e4:95:
                    2b:b7:3f:13:15:27:e8:14:e1:0c:ec:1a:b5:fb:02:
                    a0:b7:c1:dd:aa:5b:31:42:15:53:56:df:1d:c9:cc:
                    7d:34:03:64:de:da:7a:e9:14:7b:42:02:2b:2d:e1:
                    9a:5f:e2:08:c4:78:f0:b5:8a:81:22:ed:b0:69:06:
                    bc:5a:65:61:1d:c2:8b:90:ee:1a:95:31:a6:39:32:
                    c6:18:93:35:84:52:93:28:8c:e7:15:88:e3:17:a7:
                    c0:76:e9:03:c0:96:57:b7:99:98:69:bb:29:61:b5:
                    56:a4:75:98:b8:4f:19:92:f0:ef:b8:c3:8e:55:47:
                    88:b3:8c:82:28:03:02:62:b1:09:b9:7a:74:b8:ea:
                    9e:3e:49:8a:1b:19:00:ce:88:01:f8:24:41:04:82:
                    bc:8d:fe:83:46:1e:ce:db:9a:9d:0c:af:c2:81:ce:
                    e6:4c:71:27:dc:6f:26:a0:f3:7e:32:28:a8:46:7c:
                    7d:11:23:64:f1:4f:c4:22:a8:1e:e0:1c:55:3b:56:
                    ff:25:20:e8:0b:cb:66:b5:f9:3e:34:7f:32:b2:07:
                    95:2f:79:81:50:2b:3c:eb:f4:58:2d:58:6b:d7:19:
                    ba:b3:48:c5:c7:62:37:4a:28:40:1c:e3:e0:75:e1:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C3:9A:5B:60:65:93:56:CE:81:DB:98:B3:09:80:A3:F4:E7:9C:32
            X509v3 Authority Key Identifier:
                keyid:54:58:CA:1B:10:BC:28:3A:21:E9:C9:D3:56:90:38:E8:0F:56:76:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:84:60:78:1c:4c:36:3a:a5:9e:4d:cb:9e:72:e2:ad:f8:29:
         8c:de:b6:61:c8:91:b3:6c:cd:41:3b:10:be:8b:a9:2b:4f:2d:
         c8:3f:87:5f:2c:4c:65:44:1b:b3:a7:9a:bf:ff:ab:f4:80:b8:
         9e:f6:5b:b7:b1:a2:27:d8:b5:c1:07:85:ce:58:59:95:14:c1:
         47:09:92:57:49:98:11:cd:1c:95:30:19:71:63:3f:56:42:fd:
         fd:4c:3c:62:fa:80:c3:99:75:6b:9c:6c:65:54:3b:e1:cc:4a:
         c5:d3:2d:35:5d:ae:be:f6:1f:5f:33:55:64:94:f6:54:df:25:
         e5:85:4d:ab:dd:c7:08:98:dc:d1:08:b0:ac:2b:21:77:84:17:
         93:b8:10:57:87:6f:e5:d1:b0:d2:a4:ae:50:13:d8:a3:c8:b8:
         b9:92:4c:2f:c2:33:a8:f5:ec:2a:d1:73:81:96:45:3e:51:7d:
         02:4d:67:1a:5b:da:4c:e1:22:b6:db:89:a1:68:23:9c:76:88:
         88:56:28:7d:36:be:a5:ac:16:ef:d5:f7:6a:ef:62:40:fa:36:
         d5:99:a1:51:4c:54:4c:06:77:03:5b:9d:8a:a4:fb:fb:11:9e:
         bf:30:6e:37:ab:47:d3:81:ee:c0:d8:88:cf:d4:de:58:a3:72:
         e7:e9:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----