This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.mft
File:                     B6403C53F9B05EDE5B902522724143F306D488E7.mft (raw, json)
Hash identifier:          2gKWprhyF8uHzn12mowqVYX/BTJzJ8bCSG8MWaokSjE=
Subject key identifier:   73:70:2A:60:31:41:F3:CF:AC:39:E8:BA:8E:AD:79:FB:9B:DF:99:95
Authority key identifier: B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7
Certificate issuer:       /CN=B6403C53F9B05EDE5B902522724143F306D488E7
Certificate serial:       0D58C9607E2B637D60C52A6E4B3558AB8A274246
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.mft
Manifest number:          0151
Signing time:             Wed 24 Dec 2025 02:25:22 +0000
Manifest this update:     Wed 24 Dec 2025 02:20:22 +0000
Manifest next update:     Mon 29 Dec 2025 16:47:22 +0000
Files and hashes:         1: 323830333a323631303a3a2f33322d3438203d3e20323731393432.roa (hash: yDwSmm1IA/vLD7Wz1xzqH4i2ofuhK3KAikpsrE6iNyM=)
                          2: 323830333a323631303a323a3a2f34372d3438203d3e20323731393432.roa (hash: M1XFsP/k3hayoX5UccdQkr03R30rI+R0e41Wz3YhWBI=)
                          3: 323830333a323631303a313a3a2f34382d3438203d3e20323731393432.roa (hash: Hd6/k+KCxdjoqoC1aEBH+LnoRESqlotd8XfuGP3jQWo=)
                          4: 323830333a323631303a343a3a2f34362d3438203d3e20323731393432.roa (hash: AMj5vs/a6raUiRY60xtZk8qlds/Ozeu8m5KP1BikuTY=)
                          5: 323830333a323631303a383a3a2f34372d3438203d3e20323731393432.roa (hash: ZCdQ8CAMHdStkQrp4ItKxmqaZFr3/jeVoBDFS48pE8U=)
                          6: B6403C53F9B05EDE5B902522724143F306D488E7.crl (hash: 4u4vkeCLTw8NUs79mUp2my53QS1kjz/IRZVYT5VWH2o=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 06:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:58:c9:60:7e:2b:63:7d:60:c5:2a:6e:4b:35:58:ab:8a:27:42:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6403C53F9B05EDE5B902522724143F306D488E7
        Validity
            Not Before: Dec 24 02:20:22 2025 GMT
            Not After : Dec 29 16:47:22 2025 GMT
        Subject: CN=73702A603141F3CFAC39E8BA8EAD79FB9BDF9995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:a5:f9:58:3f:c3:c4:8b:d7:c4:9b:50:da:
                    e1:a8:43:76:fd:f4:ac:a1:9f:e1:ce:c7:87:ba:41:
                    2e:0b:f8:f7:c1:05:2c:73:f1:41:88:61:b6:28:a7:
                    f5:28:fb:60:21:a9:5a:a3:42:50:e9:e0:7c:7a:47:
                    77:ed:43:e2:71:e9:a6:49:b3:67:cc:5a:19:97:a1:
                    4d:1d:92:9b:f4:63:c9:8e:b3:50:5f:2c:07:14:7b:
                    62:ca:1a:10:57:a6:f5:f4:70:26:7d:b6:37:d5:60:
                    55:a1:d9:01:72:66:a8:c2:8e:aa:93:be:8d:bd:dd:
                    47:98:25:36:c4:e2:6f:a6:4c:59:0f:50:ac:1f:53:
                    b7:7e:ad:50:6e:58:6e:92:13:b8:1b:8b:2f:18:c1:
                    39:97:4a:54:a1:ac:f0:af:0c:3d:ca:ee:ea:e0:80:
                    f5:6c:0b:ca:20:fd:35:d0:7c:26:e5:21:7b:f7:25:
                    a3:03:f9:e6:e7:7e:f3:71:fa:8b:af:ef:0b:53:55:
                    85:6d:0b:53:a7:f7:09:52:4c:5a:19:75:79:3f:c9:
                    78:d3:9b:77:6f:26:80:e0:1c:e6:db:5e:77:4e:16:
                    53:8b:cf:fd:55:ef:fc:96:6e:db:16:d4:c0:67:06:
                    28:a7:73:24:26:f3:cd:19:70:80:88:70:8b:2f:d5:
                    64:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:70:2A:60:31:41:F3:CF:AC:39:E8:BA:8E:AD:79:FB:9B:DF:99:95
            X509v3 Authority Key Identifier:
                keyid:B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:51:73:72:69:b7:bf:4a:52:a8:43:3f:61:19:05:ff:bf:ec:
         72:af:79:63:23:b0:17:c1:56:1c:c3:49:b0:b3:ee:fb:15:91:
         50:a9:eb:f2:15:cf:0f:83:3e:c0:b2:06:9c:7c:26:d0:41:b5:
         34:14:94:6c:a6:07:ca:0a:5c:80:a3:f2:1f:c9:00:51:dc:d5:
         60:8b:e0:15:f1:f5:8e:4f:cb:ab:01:c2:56:8b:a9:c6:76:2f:
         99:c9:68:58:49:fa:c5:50:66:87:ff:b0:98:43:90:fa:67:65:
         89:3f:c6:43:3d:bb:72:71:cf:b6:38:e1:9b:0b:f0:a7:c9:fd:
         3b:d2:68:5e:f4:7e:9e:98:d6:bc:06:51:a2:38:82:d9:99:f8:
         0d:e6:c0:e5:0d:e9:0c:e7:10:d0:37:76:db:5d:56:2f:bc:c4:
         bf:38:c4:74:bc:e1:9a:e4:f1:2d:9d:ee:72:93:43:1a:71:12:
         be:b5:3d:42:e3:ea:30:84:e8:05:0a:de:80:d6:e5:89:b1:29:
         2d:73:78:52:3f:1e:56:73:0d:b1:c8:ce:24:9f:57:14:db:8d:
         04:d2:1d:c8:51:e3:b3:0a:b1:25:7d:e6:4e:06:2f:20:d2:10:
         36:7a:38:31:fc:13:d3:a5:5f:42:bf:05:4c:74:46:50:0e:39:
         32:e8:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:24:52 2025 by rpki-client