This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
File:                     C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json)
Hash identifier:          fbdK/fzb+P8CY3poYEjX5gQSX37TzYe9OJ88bCe0+Ik=
Subject key identifier:   4C:1B:82:21:6F:67:5B:AA:FF:40:3C:96:FB:74:36:1A:D9:74:88:FC
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       2C7DF2029933955E06B1030F19D561FDA1FB394A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
Manifest number:          0138
Signing time:             Sat 22 Nov 2025 16:18:25 +0000
Manifest this update:     Sat 22 Nov 2025 16:13:25 +0000
Manifest next update:     Thu 27 Nov 2025 12:38:25 +0000
Files and hashes:         1: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: aTo2/+6iPhrQgjeny1Eq8QNGnFjGyq2bLQ3CV8+XMwk=)
                          2: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=)
                          3: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=)
                          4: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=)
                          5: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: 1DEitsxVIAT4ByijEJO5NsK+TsSWZW2jIb+9837dQLY=)
                          6: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: oLwt4cN5vBy0Yz+mlcIKpg1yZOaygBBPGvedyS3l5uU=)
                          7: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: RVIHmIDNCmIP3eyPllQpcbn7ursqn1i4Fz/Qr5n+Mjo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Nov 2025 18:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7d:f2:02:99:33:95:5e:06:b1:03:0f:19:d5:61:fd:a1:fb:39:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Nov 22 16:13:25 2025 GMT
            Not After : Nov 27 12:38:25 2025 GMT
        Subject: CN=4C1B82216F675BAAFF403C96FB74361AD97488FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:9a:13:b5:d1:3a:fa:d2:1b:97:f4:9c:66:
                    aa:f8:2c:78:43:cc:b0:ec:b4:91:d3:82:78:8e:b6:
                    65:e9:07:fc:22:37:a6:f1:a4:e2:2e:b0:f1:8e:e6:
                    fe:ae:eb:46:87:2e:de:09:51:1e:d1:95:52:c6:96:
                    39:9e:e3:5b:ae:57:38:2d:c4:04:0d:4f:cd:6d:fa:
                    10:bb:9d:05:58:a3:82:a1:23:ec:4c:bd:65:7c:f4:
                    f9:d6:a0:24:fa:b9:16:d0:8e:67:8e:7e:7a:36:b6:
                    bc:b3:b2:5d:80:32:d3:5c:24:d1:07:c9:4b:a5:cb:
                    44:e6:23:f2:77:53:73:47:59:bb:3b:a0:0a:4b:23:
                    ab:46:f1:1b:85:9a:93:22:7f:fd:74:b9:0b:df:59:
                    94:29:b9:c3:69:00:35:06:15:2d:63:8c:45:99:70:
                    66:65:cc:09:9d:58:af:fe:68:40:71:c0:52:64:2c:
                    0d:3a:9c:99:08:f9:28:0d:c9:a4:27:ab:a9:84:01:
                    b6:4c:d4:28:1f:c4:fe:1c:b1:66:ee:89:97:6f:02:
                    da:a4:f8:4c:9e:91:80:6e:dc:5e:69:a4:86:13:28:
                    72:e7:0d:11:8f:a9:1a:09:59:db:6d:59:43:5b:7b:
                    3b:a0:2e:e1:b0:29:26:67:ab:9b:a0:3e:a5:ce:f3:
                    50:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1B:82:21:6F:67:5B:AA:FF:40:3C:96:FB:74:36:1A:D9:74:88:FC
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:c2:7b:be:ee:d7:dc:70:4e:5a:d3:0a:eb:61:2f:c6:b4:4e:
         e4:1f:f4:4d:29:0c:cb:74:31:a2:51:7e:6c:39:7c:36:55:6e:
         68:89:21:b7:6f:79:91:d2:25:ab:70:24:c8:23:dc:e9:33:4b:
         e7:0b:e7:55:39:c6:48:8c:2c:3b:88:ee:74:8f:24:d9:69:ee:
         f7:d8:34:97:6b:9d:db:43:93:37:c9:40:af:51:12:83:e9:a1:
         d4:b9:2a:14:d6:a8:e3:2a:54:6e:4d:c7:db:b4:45:5a:7b:90:
         e1:1b:fa:87:b3:c3:c7:21:a0:82:d3:f7:41:c6:08:d0:2e:4a:
         91:96:96:39:aa:49:54:d3:7b:47:7f:01:41:2d:4f:8d:24:10:
         3a:49:99:b3:8e:4a:d6:43:26:6c:6a:a3:90:11:2e:05:df:79:
         79:85:57:ea:3e:d4:a8:02:c6:b8:2f:ae:c0:bd:7c:aa:b9:18:
         4b:5f:d7:ac:6a:2a:d4:8a:d2:74:9e:b3:81:8a:9d:45:a5:05:
         37:1c:fd:3a:65:a4:49:27:3c:46:cc:28:c4:d9:07:10:6b:ab:
         9a:08:f8:af:9f:2c:cb:75:3f:32:41:d7:60:d3:54:a6:95:7b:
         7d:29:d6:79:bc:16:8c:b0:02:83:23:23:18:2f:0c:eb:f4:8f:
         bf:c9:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 23:56:35 2025 by rpki-client