This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
File:                     20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft (raw, json)
Hash identifier:          CrSVivnGc96xrTRuPham7G9ETyuByBhJ+V7BqdvZRTc=
Subject key identifier:   CB:A3:2E:D4:E9:EB:FF:2D:EE:51:CF:E3:CC:9F:94:A0:C1:40:F5:C9
Authority key identifier: 20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
Certificate issuer:       /CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
Certificate serial:       08F56B20A75CCA4D4E1610F9F42C8F6B68F69B16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
Manifest number:          014A
Signing time:             Tue 16 Dec 2025 09:13:57 +0000
Manifest this update:     Tue 16 Dec 2025 09:08:57 +0000
Manifest next update:     Sun 21 Dec 2025 16:54:57 +0000
Files and hashes:         1: 3137302e3234372e3133362e302f32322d3234203d3e20323634373830.roa (hash: I2ua20SVmTvexQDgDcx13C8HeWOZcfaDBSEHTSWdNRk=)
                          2: 3136302e3233382e3235342e302f32332d3234203d3e20323634383539.roa (hash: KO1SSpavTbyg7HFRtvqMyJWEB+ZnlB3T7roiVm6a7Z8=)
                          3: 3136302e3233382e3235322e302f32322d3234203d3e20323634383539.roa (hash: oZUtL7TcKMkTMcsRD4+cvxhAdsoG7Mb2LrTjOhQdq+s=)
                          4: 3230302e31322e32382e302f32322d3234203d3e20323634373830.roa (hash: WBNy1eLt9YuzJ+wkr/k6i4TZ5cYTE/637OEwKZWgYTc=)
                          5: 3136302e3233382e3235322e302f32332d3233203d3e20323634383539.roa (hash: TQnvYhDAZYFiLp+yK3ipM9mMZiGwQz10Jo9mY0c0E08=)
                          6: 323830333a313334303a3a2f33322d3438203d3e20323634373830.roa (hash: FKICauL83A/ax5cdLIRsg945NlzHw+pc6Xs/d+O/2Qw=)
                          7: 3136382e3232382e3234382e302f32322d3234203d3e20323634373830.roa (hash: gojxVyq+gUhgU4FE7lKAqsoCNlcEQvAAyj69qt9vVp0=)
                          8: 3136302e3233382e3235342e302f32332d3233203d3e20323634383539.roa (hash: pMYJuKExamad0wC9U4YdYdqiMVp2IfYyHXuDHUIo324=)
                          9: 20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl (hash: 94zQiDMLCLgDA2og1153MtzLfX9p23EZQF86cWqSIMQ=)
                          10: 3230302e3132362e33322e302f32302d3234203d3e20323634373830.roa (hash: i9zgCnNrq8bcxofN13vAgU1rDNWKcRA2fapKD8mMCSo=)
                          11: 3136302e3233382e3235322e302f32332d3234203d3e20323634383539.roa (hash: GX06SyZczlCBM/2P51Lf0AKBYvQ0YX8T9lWBjG+tMUI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 16:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f5:6b:20:a7:5c:ca:4d:4e:16:10:f9:f4:2c:8f:6b:68:f6:9b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
        Validity
            Not Before: Dec 16 09:08:57 2025 GMT
            Not After : Dec 21 16:54:57 2025 GMT
        Subject: CN=CBA32ED4E9EBFF2DEE51CFE3CC9F94A0C140F5C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:b7:71:ec:c7:a0:49:14:eb:6b:b0:29:f3:
                    8c:c7:f0:88:67:a8:ee:0b:e5:f5:9e:f0:c1:56:41:
                    c8:dd:f1:3b:0f:ad:41:f0:25:d5:e7:d4:ab:9a:5a:
                    6b:70:d0:5a:49:97:86:b5:3d:d7:ab:6d:fa:d5:cb:
                    72:ca:19:e6:b4:64:70:f3:88:6e:31:17:ef:24:b6:
                    26:aa:e1:81:fa:28:64:f9:6d:a6:4e:d8:8f:2e:aa:
                    b9:8e:cd:21:95:2a:9f:48:1a:76:11:f7:d6:7c:d8:
                    45:30:53:34:8e:be:bb:ea:eb:af:75:67:49:6b:40:
                    ce:75:b8:58:93:77:a9:97:47:47:06:6f:1f:7b:a4:
                    36:14:12:f4:1f:61:d7:b0:9d:20:4e:cb:a1:7d:ed:
                    4e:2a:51:13:c7:e6:c7:74:c9:ec:02:72:41:b7:76:
                    39:f5:ce:76:c6:70:d6:95:65:d4:25:10:62:52:f0:
                    ee:b3:75:94:08:90:9e:4a:f9:b2:f7:fb:f4:0f:50:
                    45:8b:4a:02:34:c0:e4:f5:83:ab:fd:40:d4:82:e4:
                    4a:d4:16:3a:c1:9d:a4:fb:99:f5:f9:48:3c:4f:c6:
                    fb:c9:81:32:04:d5:ec:81:de:51:39:f7:4a:1d:bb:
                    8e:7d:e9:d9:95:55:ca:c8:31:67:e1:b9:47:72:63:
                    9f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A3:2E:D4:E9:EB:FF:2D:EE:51:CF:E3:CC:9F:94:A0:C1:40:F5:C9
            X509v3 Authority Key Identifier:
                keyid:20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d2:05:62:4c:34:d0:a4:fd:b8:8f:17:08:d2:2b:24:28:85:
         34:b1:55:da:26:62:90:21:8c:bd:7e:20:e2:91:61:b8:f7:29:
         aa:c0:85:18:68:90:48:b3:fc:69:96:87:43:e8:01:53:09:32:
         4c:ff:91:b8:ea:b2:d8:cd:89:46:56:31:90:a0:92:8a:3d:3f:
         ee:ef:3e:d3:91:6f:be:0b:f3:4e:b9:3b:8a:a0:b7:13:30:60:
         0b:61:f6:6c:f0:66:49:b3:24:40:0d:ec:54:eb:3f:c9:4d:56:
         6d:38:43:a4:06:42:51:44:0e:53:a1:f5:e7:e0:6b:a6:d0:b7:
         c8:b1:ef:d4:55:47:c9:50:ba:08:87:9b:e3:bf:2f:a4:d4:a8:
         d4:6a:0c:d5:c8:de:72:d2:a6:64:75:85:b0:ed:89:18:cc:a3:
         ca:69:33:0b:c9:63:20:ef:7f:28:02:31:bd:60:ea:ed:0c:64:
         86:1b:aa:cc:c2:f7:55:fb:25:d8:86:e9:1c:47:fb:ed:c8:1c:
         cd:3a:11:23:b7:da:3c:36:54:d2:94:59:8e:69:ba:03:32:bb:
         7f:47:77:43:b1:30:fe:c2:d8:5f:60:1c:19:27:3d:00:40:7b:
         90:01:30:11:ce:14:13:c3:c7:1d:1d:b3:1c:a7:0d:cc:74:29:
         6b:25:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:48:31 2025 by rpki-client