This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
File:                     AA2338B66632D823F77072125112B5BF1F721769.mft (raw, json)
Hash identifier:          4vUtWq3iMW7rWVHC2R7RHbJgZAvfWW4/ccL7t48RgQU=
Subject key identifier:   23:68:BA:59:C3:81:16:CE:42:67:60:A6:54:95:94:20:C5:2F:3F:1D
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       33391EBD68D31DDB4039428118B848ED0B672F8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
Manifest number:          0146
Signing time:             Thu 18 Dec 2025 08:39:19 +0000
Manifest this update:     Thu 18 Dec 2025 08:34:19 +0000
Manifest next update:     Wed 24 Dec 2025 07:14:19 +0000
Files and hashes:         1: 34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa (hash: nOCJFysz8C8bWJVMRkvOCViuUCqzB1SjNWhFC7y70bc=)
                          2: 34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa (hash: 5GwF/yG9sdY75vW2Fj///TOVFJ4fRdCrLcvD0MbMXqY=)
                          3: 34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa (hash: S7FRt48mlJQdhRUBKeeOjWo5otOru6pXI07NZVe+lsM=)
                          4: 34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (hash: /elfOjbQfF2fPsMe6mNPua2FvaMW9MN/Vs+BX6OZ9K4=)
                          5: 34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa (hash: eoL7Y795RnrMWZUw7U8PkLtY0w5+OUPQ52ffjZRRUqE=)
                          6: 34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (hash: H8ah+1UhN/eq5WKFT0vmFxrRSA6J3Cu5+ERJLv9mNDM=)
                          7: 34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa (hash: PMUAqmCu4jLgGE4W1UfcbQhDKwanax0we0RQX2/iKas=)
                          8: AA2338B66632D823F77072125112B5BF1F721769.crl (hash: iZHAZSkqAF0kx+PYAh+DdMdr9QjcWK+WbYj0BeGE6Z4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:39:1e:bd:68:d3:1d:db:40:39:42:81:18:b8:48:ed:0b:67:2f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Dec 18 08:34:19 2025 GMT
            Not After : Dec 24 07:14:19 2025 GMT
        Subject: CN=2368BA59C38116CE426760A654959420C52F3F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c4:a6:47:c1:1c:bb:59:02:f8:c7:db:6d:52:
                    7d:d1:a9:e8:07:e4:58:6f:bf:85:f3:f9:e6:12:6e:
                    65:ec:84:69:28:02:31:43:03:c9:67:ab:c0:38:f1:
                    60:29:8f:3c:e9:a8:65:ad:8b:51:4e:05:3f:e4:4c:
                    ae:9f:cf:de:c7:26:eb:4c:c7:1e:d5:6a:28:e7:30:
                    3b:72:62:bb:60:ad:45:a9:4c:d1:ad:20:b2:2a:90:
                    1e:3d:66:71:f5:58:e4:d1:35:61:59:ff:fb:c7:a6:
                    23:dc:1f:0e:a4:69:72:33:34:71:67:d2:a8:4a:8b:
                    0b:c2:12:3e:f0:f4:9a:f9:4b:b4:1a:f1:20:73:b3:
                    33:7e:21:b1:b3:f4:b1:98:59:88:25:49:a7:37:24:
                    cf:4f:75:4e:69:35:7f:04:3a:0e:fd:3d:88:45:48:
                    4c:d8:1c:a5:c5:bb:10:20:e5:1f:5b:10:b3:8b:7e:
                    1b:92:d5:f7:26:be:17:a3:b2:ed:43:ff:89:fb:af:
                    62:60:7d:3b:e6:3d:69:ce:2f:4b:19:29:38:8e:86:
                    ce:b8:fc:dc:24:51:8f:37:72:75:f6:58:c3:75:90:
                    0f:47:5e:4b:a1:e7:2d:df:62:c1:50:6e:76:36:69:
                    8a:8a:de:a8:10:68:f8:c0:d1:81:d1:1c:6b:19:d6:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:68:BA:59:C3:81:16:CE:42:67:60:A6:54:95:94:20:C5:2F:3F:1D
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:33:4d:05:50:55:6a:4f:21:d0:92:a2:c9:41:e7:85:eb:a2:
         ce:3a:24:a1:45:fb:5f:12:d2:67:36:7c:d5:a3:69:0f:c4:ae:
         93:61:27:c9:6a:b8:32:1a:ce:83:c3:22:77:64:81:0f:80:67:
         78:5f:a5:81:e7:6d:9b:7f:f4:2c:57:34:7a:c3:c9:9b:ef:4e:
         da:64:c0:39:38:10:a6:52:51:7a:d5:b6:47:8b:69:a6:5f:fb:
         3e:27:82:4d:e6:5e:f0:ab:7b:f2:24:af:bc:bd:0e:a6:63:54:
         5c:88:63:05:e8:b5:1e:cd:7f:58:e2:93:10:87:5f:1a:41:51:
         ab:fe:99:d4:47:1d:40:49:d9:f1:30:cd:dd:f4:c1:ce:ab:df:
         6e:cd:28:cf:bd:34:6b:f5:9c:0f:e0:80:8d:94:4f:8e:6e:a5:
         97:9a:38:0b:b3:51:3b:17:99:3e:26:48:da:45:ee:67:63:38:
         fd:7e:fc:3c:33:a0:eb:89:ec:50:a1:7b:ee:cd:4c:7b:c8:43:
         4b:c5:0c:c0:ec:da:be:44:cb:cb:1f:df:9c:ca:74:fb:25:a1:
         8d:9c:db:2f:85:46:c6:28:f7:3e:1a:1f:a6:ad:20:36:3f:89:
         1d:7c:6e:8b:f5:1e:ec:24:19:10:df:b7:d5:50:79:92:bb:1a:
         2d:91:10:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:15:57 2025 by rpki-client