This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft
File:                     20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft (raw, json)
Hash identifier:          cItL9OSGooyJEAD/SZ1+UA2m/3SxHMq1xUgoov5st8Y=
Subject key identifier:   D0:5D:93:2E:DB:04:D3:3C:78:B4:27:F2:13:88:D9:17:33:53:BF:2F
Authority key identifier: 20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5
Certificate issuer:       /CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5
Certificate serial:       7E24418E0D763E6509FFF84A4E961EA3D359F789
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft
Manifest number:          0142
Signing time:             Mon 15 Dec 2025 23:23:02 +0000
Manifest this update:     Mon 15 Dec 2025 23:18:02 +0000
Manifest next update:     Sat 20 Dec 2025 23:09:02 +0000
Files and hashes:         1: 34352e3232392e34342e302f32322d3234203d3e20323636363837.roa (hash: NXCrnc5k/R7cRXtnojYKX0tyR9Gzw9zx/b4X8zIv+Lk=)
                          2: 323830333a653532303a3a2f33322d3438203d3e20323636363837.roa (hash: RFp/7paxrjEnmz7NX5siL1qxhM8AW6ttH3PE4IdU9z0=)
                          3: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl (hash: hJOSQi41I9NcIIYbISu6AV4eC/lWScpfLfYAa251Cyo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 23:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:24:41:8e:0d:76:3e:65:09:ff:f8:4a:4e:96:1e:a3:d3:59:f7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5
        Validity
            Not Before: Dec 15 23:18:02 2025 GMT
            Not After : Dec 20 23:09:02 2025 GMT
        Subject: CN=D05D932EDB04D33C78B427F21388D9173353BF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ae:0f:d4:62:90:6f:24:c4:dc:4b:0b:c4:20:
                    20:30:0f:78:14:63:fc:82:8e:72:0e:4b:da:2f:82:
                    dd:08:f2:7f:84:5e:d9:d4:98:83:a9:fb:41:fe:17:
                    8e:7e:60:68:b7:2a:bf:a3:90:e8:93:23:98:70:c1:
                    74:53:b0:11:7d:f4:2d:fa:0f:28:32:79:07:b6:da:
                    78:41:da:b0:3d:94:2f:52:53:6b:2f:a3:ed:08:24:
                    c8:56:7b:e8:03:1e:3b:ad:4a:cf:e0:81:5e:4a:ad:
                    9e:f5:6f:03:c9:15:27:01:22:97:20:ec:48:5e:3a:
                    f5:78:92:19:f2:15:57:2b:16:11:59:c3:3e:16:9a:
                    9e:20:3c:63:3d:84:5c:5e:82:84:2e:71:6e:72:b9:
                    66:ce:c8:0a:d5:b8:a0:f2:c6:ef:d4:78:2a:ba:8e:
                    55:53:2a:ef:f6:b6:b4:ac:7d:5a:80:43:5d:7c:96:
                    4c:a6:6c:3a:68:f2:d6:3c:ab:a6:7a:04:e5:6b:64:
                    10:fd:15:bb:42:ff:84:c4:20:84:77:68:0f:5f:83:
                    d0:b6:65:75:28:2e:08:90:d5:e9:c3:18:64:a9:03:
                    c9:cc:d8:3e:4b:f0:5e:5a:6c:a9:80:04:86:5e:d6:
                    ac:34:39:f1:96:f6:2a:ce:7e:be:05:52:ef:8f:39:
                    48:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5D:93:2E:DB:04:D3:3C:78:B4:27:F2:13:88:D9:17:33:53:BF:2F
            X509v3 Authority Key Identifier:
                keyid:20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:6b:f0:fc:66:1b:01:7d:54:22:8d:d9:8e:b2:cd:6f:44:12:
         de:07:ef:77:a9:40:1f:a0:7c:1c:1a:b9:84:eb:7b:59:2b:33:
         3e:99:cd:0d:9f:55:a4:5f:b0:b9:86:34:38:ad:57:cf:c9:5a:
         99:a8:0d:38:e4:3f:2d:c3:c6:f7:d2:df:f2:34:2c:75:8b:ba:
         43:74:b1:b6:ab:ff:97:b4:ab:87:8d:b8:b7:d0:e6:51:4b:5c:
         65:2f:ac:ee:c5:99:7e:e8:4a:de:fd:db:a7:8e:c7:6a:b9:64:
         85:b7:cf:08:dd:a4:61:ea:ec:be:11:e9:32:ff:0f:8e:c1:f7:
         61:7c:a3:54:e9:0d:7b:19:31:df:31:24:5b:47:fc:22:e2:93:
         c3:2f:47:fd:ad:68:69:ca:49:76:e5:f7:47:6f:2b:0e:58:52:
         62:34:75:a3:d4:85:6a:84:59:53:7c:56:19:1f:4a:e7:4e:48:
         d5:3c:6f:e4:0c:98:87:73:ad:5d:ba:f8:8c:12:e6:2a:f1:20:
         ac:0e:49:a5:89:03:bf:c6:1c:de:62:16:ae:6b:3b:61:51:02:
         0c:43:72:81:00:45:11:3e:c5:49:51:54:0f:ea:53:50:ff:9d:
         52:51:e4:10:f2:48:5b:b2:b4:46:fb:6d:75:0f:e8:97:02:fb:
         2e:2b:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----