This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
File:                     C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json)
Hash identifier:          daI6kRt/CzN2HfXBf44ZejBxL5e+dR6m9Me2CUH7Cqc=
Subject key identifier:   7E:75:BC:E2:75:CE:76:C6:DD:50:32:03:E6:A1:72:CE:0E:52:11:D3
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       540A9180572C508F96BA8D79ACBA4D87F5D6095D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
Manifest number:          0137
Signing time:             Fri 21 Nov 2025 02:57:00 +0000
Manifest this update:     Fri 21 Nov 2025 02:52:00 +0000
Manifest next update:     Tue 25 Nov 2025 16:15:00 +0000
Files and hashes:         1: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: 0pUlK+yWg45DYrDR4JmijKi46UJ1EXLzqZAvvzHqW/Y=)
                          2: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: RVIHmIDNCmIP3eyPllQpcbn7ursqn1i4Fz/Qr5n+Mjo=)
                          3: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: aTo2/+6iPhrQgjeny1Eq8QNGnFjGyq2bLQ3CV8+XMwk=)
                          4: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=)
                          5: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: oLwt4cN5vBy0Yz+mlcIKpg1yZOaygBBPGvedyS3l5uU=)
                          6: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=)
                          7: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Nov 2025 16:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0a:91:80:57:2c:50:8f:96:ba:8d:79:ac:ba:4d:87:f5:d6:09:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Nov 21 02:52:00 2025 GMT
            Not After : Nov 25 16:15:00 2025 GMT
        Subject: CN=7E75BCE275CE76C6DD503203E6A172CE0E5211D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:76:c2:ac:22:ff:2c:fe:6a:b3:c9:70:f6:d6:
                    ce:f9:68:b0:14:31:70:71:a4:7e:17:10:21:b1:4f:
                    57:84:71:b1:8b:59:db:84:7b:ed:8f:23:fe:ca:f5:
                    24:cf:04:9d:63:cc:5b:65:96:0c:d1:15:fa:4d:c7:
                    31:7a:a2:6c:bc:a8:4e:9f:7d:99:89:ef:07:7e:d5:
                    d0:81:2c:e8:86:3c:9b:2b:1f:a6:8d:b7:c4:7a:a1:
                    05:49:e7:1b:8e:8c:3f:d7:f5:b9:0a:a2:2b:9c:b1:
                    c5:77:5e:2b:87:90:58:5d:f6:0e:3b:66:52:05:f1:
                    1b:6f:fd:b1:cc:49:46:8d:46:cd:d3:e3:e4:8d:2b:
                    3d:20:41:f0:e6:57:2e:7e:6c:39:a5:6e:8c:44:a6:
                    4e:7e:72:93:b4:61:61:56:f1:93:d3:42:5e:6a:1f:
                    99:bf:fc:9c:b5:48:6e:d9:2a:38:0e:e9:b8:3c:17:
                    ee:0f:fe:26:15:2b:0d:ec:72:37:95:42:62:1e:ee:
                    41:e5:0f:df:b9:89:07:17:59:86:be:e0:bb:71:5d:
                    9b:ee:f7:03:10:71:ab:16:e5:f5:b0:ff:41:09:4b:
                    fe:76:47:a3:c5:4b:d5:b1:7d:52:9a:66:c5:6f:16:
                    83:8f:f7:2c:21:02:58:55:e1:8b:3f:e4:7f:fe:ea:
                    1c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:75:BC:E2:75:CE:76:C6:DD:50:32:03:E6:A1:72:CE:0E:52:11:D3
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1a:6b:c7:71:4d:d1:42:29:be:50:04:17:38:15:47:9b:2b:
         f8:f1:be:e8:31:af:b8:83:8e:35:fd:29:fd:48:6e:82:69:42:
         5a:30:cb:d7:f9:fa:97:ec:c6:6e:6f:97:4a:0b:f6:61:9f:f2:
         64:49:24:b6:46:f9:42:4d:e3:52:52:d0:e2:dc:c7:07:36:56:
         7a:16:a2:a1:03:ec:eb:12:36:fe:29:22:98:1f:30:72:4d:f3:
         69:84:e4:44:ae:58:1f:92:2a:2f:82:fc:f7:7f:b4:be:60:48:
         7f:19:8d:e9:f6:55:c5:69:eb:4e:8c:f7:dc:8e:fc:24:ad:35:
         fb:64:c6:2c:cc:a3:3c:e7:2b:2a:6f:dd:cb:ef:79:97:ac:77:
         e9:3c:98:5b:ef:53:ab:1b:69:14:c5:4c:6b:e1:25:3d:c5:a8:
         1c:7a:26:23:4e:19:18:33:c1:f7:b0:12:57:dd:0d:da:0f:c9:
         ef:58:c2:92:0e:c1:6d:7d:f7:1d:fe:db:3c:8e:75:83:0f:8a:
         67:a7:d4:7c:3c:c4:27:e2:a8:cf:52:b3:d6:73:49:4a:c0:6e:
         9c:15:b2:6a:5b:16:d8:c0:35:7c:57:fc:70:fa:2b:b7:fa:be:
         6b:f4:77:66:36:2a:b2:7c:f2:bc:b5:e5:cc:2f:70:e0:0f:cc:
         37:c4:71:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 23:08:09 2025 by rpki-client