This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
File:                     C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json)
Hash identifier:          3oO8gt5mXad0kFVVMjLlGn6fo0a8iIZ4a3YXsg/ooGs=
Subject key identifier:   96:2A:1C:8E:88:EB:64:08:6F:D3:43:2F:CD:B4:1C:23:B2:B6:8A:DB
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       0C211D3869030C0D1A3D79C17317E59DD120BB09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
Manifest number:          013D
Signing time:             Tue 02 Dec 2025 07:10:19 +0000
Manifest this update:     Tue 02 Dec 2025 07:05:19 +0000
Manifest next update:     Sun 07 Dec 2025 20:20:19 +0000
Files and hashes:         1: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: +IdqGCremb6/QfcLAdxWrjuydtGARBR5xDVTj2oiRgI=)
                          2: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=)
                          3: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: oLwt4cN5vBy0Yz+mlcIKpg1yZOaygBBPGvedyS3l5uU=)
                          4: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: aTo2/+6iPhrQgjeny1Eq8QNGnFjGyq2bLQ3CV8+XMwk=)
                          5: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=)
                          6: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=)
                          7: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: RVIHmIDNCmIP3eyPllQpcbn7ursqn1i4Fz/Qr5n+Mjo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:21:1d:38:69:03:0c:0d:1a:3d:79:c1:73:17:e5:9d:d1:20:bb:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Dec  2 07:05:19 2025 GMT
            Not After : Dec  7 20:20:19 2025 GMT
        Subject: CN=962A1C8E88EB64086FD3432FCDB41C23B2B68ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:a9:53:51:59:bd:c5:a5:c4:ff:67:b8:3e:
                    bf:f9:4d:e1:44:a2:6d:2b:d0:c1:7c:1f:f4:52:b2:
                    e5:b8:c3:8d:83:fe:26:b1:52:93:ca:4a:5e:a9:6f:
                    87:e2:70:c1:cc:22:ed:ad:9c:46:e1:f7:fb:34:7f:
                    58:bc:ed:57:be:ba:94:5f:8c:bd:cd:b9:d7:51:02:
                    69:99:53:d1:ac:02:60:53:9f:ce:06:aa:54:02:c1:
                    7f:68:22:fb:4c:1d:e5:28:69:a8:b1:68:df:45:5f:
                    c2:af:2a:c0:2b:84:93:01:76:05:a9:42:0f:03:10:
                    8b:57:c1:42:24:2d:f7:aa:cb:9e:4d:15:1b:57:7d:
                    8d:6e:a6:11:17:3d:2d:1c:a9:7d:0a:17:be:c5:7e:
                    59:5e:6c:57:35:d0:94:50:0d:5c:dc:bf:f1:a3:38:
                    5f:8b:bf:1d:1d:63:bb:88:90:ab:e2:4e:23:43:c2:
                    c3:51:0b:1e:4d:16:c4:83:de:eb:01:d0:66:d0:31:
                    cc:6d:55:6a:65:53:44:b6:7f:f9:04:dc:e7:4c:53:
                    a0:3a:f0:72:89:5e:f6:51:43:74:05:ea:75:34:0e:
                    4d:b6:ad:b5:2a:6a:e6:0a:92:85:27:51:61:08:3a:
                    a4:43:38:a3:15:38:47:cb:c5:44:e9:d7:69:04:a7:
                    7a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2A:1C:8E:88:EB:64:08:6F:D3:43:2F:CD:B4:1C:23:B2:B6:8A:DB
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:eb:dc:26:a9:74:91:9d:91:87:a7:2f:b9:96:37:1b:41:0e:
         e6:88:28:bd:ab:0e:40:79:e3:ee:51:81:c4:b5:e5:6b:69:b1:
         d2:60:4d:39:2e:f3:c6:e5:dd:4a:6c:57:59:4c:8e:43:57:ff:
         fa:66:9d:b9:05:f4:5b:c2:4d:93:9c:6c:67:e2:5a:71:bb:bc:
         53:c8:39:3a:c8:39:47:3a:27:2d:8f:4d:b8:05:db:d8:d1:9a:
         82:77:50:22:b5:bc:3d:c3:42:54:f5:6b:c1:5e:e9:98:1c:b3:
         91:62:02:d1:e0:71:05:69:9f:74:ba:72:f6:d5:f7:11:1d:38:
         31:9f:ff:1a:18:98:9b:d3:6f:77:66:1f:2c:59:e1:f7:38:9b:
         2b:72:0b:9e:89:6c:bc:7d:e3:4b:cc:fc:07:b0:98:26:4e:95:
         d6:ea:78:87:72:72:72:e6:99:73:9c:2c:58:42:50:74:bb:89:
         6a:b4:30:41:66:35:e9:f0:94:04:11:80:57:4d:c1:8e:ba:d4:
         64:b2:5e:bb:62:19:69:41:45:0f:0c:d3:d6:eb:28:76:22:98:
         4d:8b:c2:a8:d1:b9:a3:8f:ee:d9:d7:d2:e4:4c:79:c4:ac:78:
         50:12:66:12:22:2f:d5:e8:cd:e7:9d:f4:ba:4d:b3:77:f2:5a:
         2c:5d:83:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 04:12:53 2025 by rpki-client