This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
File:                     C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json)
Hash identifier:          fWRJ4BAmuOGZYcs9vyWkHrp11QQOpA4nxxlm0bwZkjY=
Subject key identifier:   53:66:E3:8C:3E:46:4E:D9:7E:E1:E6:CB:B0:A4:15:CA:A9:7B:A1:97
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       052C31E6137352AAA99C73C758190FC478AAD3BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
Manifest number:          0136
Signing time:             Tue 18 Nov 2025 19:35:33 +0000
Manifest this update:     Tue 18 Nov 2025 19:30:33 +0000
Manifest next update:     Mon 24 Nov 2025 02:52:33 +0000
Files and hashes:         1: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: RVIHmIDNCmIP3eyPllQpcbn7ursqn1i4Fz/Qr5n+Mjo=)
                          2: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: aTo2/+6iPhrQgjeny1Eq8QNGnFjGyq2bLQ3CV8+XMwk=)
                          3: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: 3054cycE+IeDQdn1Qsb2iq0cwRrsLZ4JM54FgUSWoGM=)
                          4: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=)
                          5: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=)
                          6: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: oLwt4cN5vBy0Yz+mlcIKpg1yZOaygBBPGvedyS3l5uU=)
                          7: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Nov 2025 16:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2c:31:e6:13:73:52:aa:a9:9c:73:c7:58:19:0f:c4:78:aa:d3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Nov 18 19:30:33 2025 GMT
            Not After : Nov 24 02:52:33 2025 GMT
        Subject: CN=5366E38C3E464ED97EE1E6CBB0A415CAA97BA197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:65:d8:7b:3b:78:87:8a:46:7c:26:5c:40:5c:
                    0d:89:3a:51:67:40:f6:5e:57:22:6a:a8:eb:c4:ce:
                    e8:9f:74:56:4b:7d:bc:ad:70:6d:c9:20:e7:b4:90:
                    a2:f6:15:47:d6:f3:53:cd:6a:86:35:50:c8:4b:e1:
                    0c:59:6d:df:4a:5e:d7:33:44:ac:49:e2:72:62:63:
                    75:09:cd:8b:be:42:71:d1:c8:ad:92:5f:94:1f:35:
                    cd:ca:17:cb:71:f2:91:e1:c5:7d:63:2c:8b:d9:af:
                    a0:b8:68:5d:45:70:c5:4c:27:d9:7b:09:af:09:c6:
                    c0:b5:29:6e:44:4e:9e:53:22:2d:e9:4c:a3:30:2a:
                    f4:8f:de:6e:f1:e1:d2:55:34:1e:38:c9:09:fa:5f:
                    71:5c:8f:2a:1d:bb:70:c0:d5:5b:bf:fa:9b:2f:d5:
                    38:3d:d1:25:63:4c:ef:90:7f:eb:dd:4c:01:4c:90:
                    61:9b:99:a2:d1:00:ef:0f:a1:64:a6:8e:a4:79:59:
                    eb:87:06:6c:8f:7b:d2:2a:ff:77:c8:90:bc:a5:74:
                    20:2a:73:93:91:cf:a2:da:1c:3f:0d:56:21:14:a3:
                    22:b3:e3:10:87:8b:7f:45:12:ad:06:e0:ec:6c:4c:
                    7a:8d:07:5a:dd:72:ac:dd:38:e7:c7:01:2c:3f:a1:
                    55:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:66:E3:8C:3E:46:4E:D9:7E:E1:E6:CB:B0:A4:15:CA:A9:7B:A1:97
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:92:87:48:41:d9:8a:88:2d:89:e9:fc:0b:d1:85:8a:02:
         61:ef:b8:54:d7:2e:ce:76:0b:b7:c8:7b:da:20:3d:0f:ed:24:
         91:c2:97:18:1c:8e:c0:15:47:94:cb:09:a4:28:73:40:ef:41:
         c2:5d:f1:39:bc:6a:27:ff:2e:84:98:da:5a:ff:4f:a5:79:b8:
         45:7a:46:f0:65:1c:6c:01:4a:b0:d2:eb:e3:55:84:c3:fe:4f:
         ec:6d:9a:82:da:47:f4:ef:36:38:ef:07:10:79:19:ff:1c:a2:
         9d:16:1c:73:c3:d6:3e:47:1a:d7:59:8b:19:84:83:83:2a:36:
         de:07:86:37:ec:af:b4:d0:c5:51:85:9d:5d:42:90:75:64:53:
         35:e0:81:cd:95:94:2d:70:67:dd:85:e5:1d:cb:b0:99:a7:d6:
         46:6d:ce:f7:63:95:94:5b:a4:54:3a:fa:6f:7a:ef:5c:24:89:
         8e:c2:8c:34:21:82:e5:e2:cd:e4:d8:6f:5c:2f:7e:c6:a6:1d:
         65:bf:91:7b:7b:51:d7:a1:03:f1:7b:3e:17:d0:2e:95:8a:f0:
         a6:57:47:11:77:00:9c:e2:6e:ee:20:70:01:d6:89:5a:9e:23:
         df:3d:22:e8:80:97:07:f7:15:db:14:11:64:89:5a:61:4d:81:
         2b:35:f2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 23:25:52 2025 by rpki-client