This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
File:                     49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft (raw, json)
Hash identifier:          MiWU4n3Ux7TbvKSKvVU/0eQtkyHVckPbogPeryH0J/M=
Subject key identifier:   EE:E0:47:09:35:B0:67:3C:87:6A:74:23:BF:2B:B1:DB:ED:61:07:80
Authority key identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
Certificate issuer:       /CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Certificate serial:       4E88361802FD198980AEC96B57837979ABF2D5B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
Manifest number:          0153
Signing time:             Wed 24 Dec 2025 07:29:05 +0000
Manifest this update:     Wed 24 Dec 2025 07:24:05 +0000
Manifest next update:     Mon 29 Dec 2025 20:45:05 +0000
Files and hashes:         1: 3139302e3130382e3232342e302f31392d3234203d3e203237373531.roa (hash: EsVOIums8iQYcbIzqrDW3hte8T+9Q0l0QtGzLG1/14c=)
                          2: 49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl (hash: YLHPbMpLLjWx7aRIS9YhPleEz6ZoDAEbhLcy02KzzRQ=)
                          3: 3139302e3132312e3137362e302f32302d3234203d3e203237373531.roa (hash: 3Dr2oGh7JYGjFW77vNSai2cbP4g2Yd4KvX1lvITR1O8=)
                          4: 323830333a623630303a3a2f33322d313234203d3e203237373531.roa (hash: ji9QviBBUjlT4wooPPlSPC8PKPlx4RF6U43j01IEdKw=)
                          5: 3230302e35392e3232342e302f31392d3234203d3e203237373531.roa (hash: tK/VW2lytfuNn0A266sABYMXm5GPOyAcvW3ekwcbZyg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 20:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:88:36:18:02:fd:19:89:80:ae:c9:6b:57:83:79:79:ab:f2:d5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
        Validity
            Not Before: Dec 24 07:24:05 2025 GMT
            Not After : Dec 29 20:45:05 2025 GMT
        Subject: CN=EEE0470935B0673C876A7423BF2BB1DBED610780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:04:5e:52:a5:05:59:69:db:ec:e2:65:44:
                    21:7c:e6:fc:56:10:8d:40:3e:8d:36:cc:cc:0a:7b:
                    b8:31:0c:d8:e8:19:30:1a:9d:85:6a:1c:6f:8b:eb:
                    03:58:87:6f:56:04:2c:75:c8:8c:ae:7d:f9:87:a5:
                    0c:d7:31:a8:b3:12:3d:cf:b3:7d:36:c7:4b:bf:7f:
                    5d:56:81:24:6d:cb:bf:90:41:0e:42:d3:54:c8:27:
                    47:25:25:2f:d4:dc:2a:24:77:f9:e8:b4:65:df:89:
                    0f:d4:b4:3c:93:2a:bf:3e:97:d8:7b:53:88:04:7d:
                    f5:27:fc:0c:b7:64:05:71:b4:78:a6:41:72:e7:25:
                    9f:c2:94:02:75:04:b7:8a:03:7e:47:58:7a:d9:12:
                    b7:53:cb:d0:7f:7b:8f:30:f7:33:9a:ab:ce:1c:ea:
                    b3:f6:44:b1:a4:f0:0a:46:96:b7:e9:5a:60:ee:04:
                    a1:be:54:1d:e8:1a:ed:23:b7:16:7d:a0:b3:eb:c3:
                    f6:7e:bf:47:33:ce:0d:65:2f:74:da:bb:c5:64:c2:
                    c3:05:51:18:5f:bb:30:72:af:d0:8c:5c:b7:2c:3b:
                    c5:e1:30:3e:ee:cb:02:ae:9b:43:a9:a3:f8:10:8c:
                    fe:da:17:b7:23:50:e9:4f:8c:59:9a:50:dd:71:b2:
                    a3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E0:47:09:35:B0:67:3C:87:6A:74:23:BF:2B:B1:DB:ED:61:07:80
            X509v3 Authority Key Identifier:
                keyid:49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:17:1b:c3:d3:88:73:93:40:b1:85:75:1a:bc:7c:5e:d6:6a:
         14:2d:d9:e1:85:d3:8d:8d:86:7b:a2:f7:dc:ea:24:5d:58:6c:
         4d:71:ec:af:ee:d2:38:6c:5c:e3:82:d1:a6:87:7b:3d:aa:97:
         08:15:62:ee:26:61:30:9f:99:d2:e1:92:d7:29:88:e9:8f:dc:
         78:08:04:e7:43:53:b3:34:07:2c:6d:43:98:ae:07:f5:9c:d3:
         b7:62:85:c1:43:1c:c5:ce:e8:8b:f4:d3:83:db:d6:e3:ff:28:
         d2:d9:c6:4e:e7:29:59:34:7e:c5:9a:ba:db:72:63:cc:31:10:
         6a:8f:9e:07:8b:6d:03:b6:2b:06:79:5e:b7:75:6d:26:4a:20:
         a3:57:e4:63:78:a1:a5:29:52:3f:af:58:83:20:47:35:83:5a:
         6f:99:58:a7:5f:c3:ed:8c:f2:c6:63:c1:96:d8:73:e3:d1:b3:
         eb:b4:7c:f9:32:8d:5d:ca:e1:61:05:7f:6b:4d:09:e6:87:81:
         2d:22:99:0c:4a:b2:66:2f:50:cb:94:18:73:39:1d:44:5c:ca:
         c3:80:6f:f8:ad:e9:10:0c:31:fc:7f:77:81:00:37:7f:12:04:
         a9:10:f3:c9:d8:e7:85:5f:2c:63:a5:d4:db:8b:e5:4a:1e:44:
         b3:aa:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----