This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
File:                     C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json)
Hash identifier:          PgpnzuGy4AVOvoUF9BmBhVJXZwN7TqQeTS7vsgoo+nE=
Subject key identifier:   E8:A0:4D:F8:47:24:AD:ED:78:C3:02:E4:F6:43:6D:1D:97:02:37:C7
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       0CCA2B7BDC261C5CE9325292C7ADB85AA0FBC3FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
Manifest number:          0146
Signing time:             Fri 19 Dec 2025 16:54:26 +0000
Manifest this update:     Fri 19 Dec 2025 16:49:26 +0000
Manifest next update:     Thu 25 Dec 2025 13:33:26 +0000
Files and hashes:         1: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: oLwt4cN5vBy0Yz+mlcIKpg1yZOaygBBPGvedyS3l5uU=)
                          2: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=)
                          3: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=)
                          4: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: RVIHmIDNCmIP3eyPllQpcbn7ursqn1i4Fz/Qr5n+Mjo=)
                          5: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=)
                          6: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: LCqcLEg17fnMPTvDVPSDQiV4zEydTJJVB879S2TZplc=)
                          7: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: aTo2/+6iPhrQgjeny1Eq8QNGnFjGyq2bLQ3CV8+XMwk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 13:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ca:2b:7b:dc:26:1c:5c:e9:32:52:92:c7:ad:b8:5a:a0:fb:c3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Dec 19 16:49:26 2025 GMT
            Not After : Dec 25 13:33:26 2025 GMT
        Subject: CN=E8A04DF84724ADED78C302E4F6436D1D970237C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:44:34:51:c4:88:19:2b:28:81:e0:d2:b5:
                    18:e8:74:94:6b:82:26:12:51:be:f4:56:ab:36:6c:
                    38:32:58:ca:04:b8:39:3a:14:bf:2a:b5:89:dd:35:
                    41:90:1e:83:1c:3c:f4:47:69:be:63:a8:af:6c:9a:
                    94:c9:5b:4f:29:7a:a3:4e:8e:c1:9c:43:2c:46:2d:
                    e9:d3:b2:92:03:2f:f9:96:4b:87:4d:ad:b4:59:09:
                    60:77:32:02:39:a1:17:da:77:98:6f:87:17:c9:d8:
                    f6:ad:11:e3:7b:45:62:22:5a:7b:db:fb:2a:4a:0d:
                    27:ae:12:4c:e8:8c:a7:a9:be:89:bc:4a:6a:26:f1:
                    e1:06:f9:c6:b9:b7:b4:ce:c4:d0:32:19:20:80:16:
                    c3:22:50:ac:3b:b8:e4:8c:49:2d:22:4f:7d:25:ad:
                    ea:e6:5e:d1:99:e1:77:4b:b6:99:12:42:f3:47:55:
                    e9:e5:c9:f3:bf:2e:40:b3:e0:97:ea:bf:e2:c9:83:
                    10:87:76:9f:f3:16:c9:0d:08:80:b2:b6:c5:bd:7f:
                    e5:47:2e:35:71:6d:1e:cc:45:0f:71:25:e4:55:0d:
                    35:0f:5c:cd:7c:b2:ba:07:e5:a8:89:68:4e:0e:40:
                    6b:27:2b:5c:aa:7b:04:36:57:ea:e6:ed:6e:4d:c3:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A0:4D:F8:47:24:AD:ED:78:C3:02:E4:F6:43:6D:1D:97:02:37:C7
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:59:18:72:f8:da:af:be:ee:f2:58:f8:2d:3e:5e:9c:68:19:
         58:69:05:9d:c8:76:25:94:d8:68:a8:50:9f:13:db:ff:86:39:
         dc:d4:2f:1d:3d:62:29:29:50:f2:e3:7d:c2:23:0a:33:a6:03:
         98:e9:4e:5e:67:3f:66:cb:46:3a:82:c7:73:ba:9d:41:93:16:
         90:38:9a:81:d3:f8:9f:a6:28:97:5c:b6:26:bc:4b:f1:6d:36:
         5f:85:fe:57:fe:62:6f:ed:e1:75:a4:5b:b2:03:b5:a3:a1:43:
         24:3e:9d:98:7c:eb:e3:0e:c5:dc:c6:cd:5d:fa:67:6a:c8:2e:
         3d:18:9c:b5:c8:3a:c9:7a:3c:f1:a7:3b:e3:2a:3d:59:2e:b1:
         5d:6e:91:d7:6b:be:fe:cd:9f:af:44:27:a2:65:db:0b:29:a1:
         68:b7:98:ba:a7:fb:db:68:59:82:22:c5:f6:4c:9e:e8:d5:0d:
         22:bc:0a:42:6e:12:33:8c:24:78:05:fc:95:02:03:dc:a2:98:
         d9:00:72:f9:20:bb:8a:32:9e:60:3f:ad:32:24:1d:67:2d:b1:
         44:ce:e7:7e:51:6d:42:4a:58:89:a0:99:fe:9b:30:29:cd:6f:
         a8:e6:8b:c3:ae:0f:c6:a5:c7:cb:eb:09:89:81:59:26:43:b7:
         f7:3b:4f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:10:09 2025 by rpki-client