This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
File:                     958AE74C7555B3A115DBFFC8840395CE219F59B5.mft (raw, json)
Hash identifier:          tJRnpm+jAinAG8mPYFL3IBmDc4ExByPnzwGESI3o2Qo=
Subject key identifier:   C2:A8:A5:9A:6D:F4:8F:3F:65:80:48:17:8F:63:0E:74:77:ED:6B:64
Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
Certificate issuer:       /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Certificate serial:       2F187B57D219E98ED0B67008BDE122D0F71B1D67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
Manifest number:          014C
Signing time:             Wed 24 Dec 2025 14:08:00 +0000
Manifest this update:     Wed 24 Dec 2025 14:03:00 +0000
Manifest next update:     Tue 30 Dec 2025 05:07:00 +0000
Files and hashes:         1: 958AE74C7555B3A115DBFFC8840395CE219F59B5.crl (hash: 8rikzZX5WKVXv+ksw2lPzezJWKboFOuw4GhmiGEXYo0=)
                          2: 3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa (hash: lFMPHHji0WkM/od00nWsQTxJbZLHB08h94Wr7OzPf/o=)
                          3: 3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa (hash: 1eatcISrRWEjiJa/p7xBX6b+4bgRrTHTtU+86eOUpvs=)
                          4: 3139322e3134312e34302e302f32322d3232203d3e20323635373934.roa (hash: wrwjTyh9pOptnNw9f/Tc7oUs2AyzWXt8NtoMFsZcyT4=)
                          5: 323830333a653032303a3a2f33322d3332203d3e20323635373934.roa (hash: kte3CTPUXYYiPA/2fZyA0RgagBOOb+s0KWpcd0MjF1Y=)
                          6: 3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa (hash: diXk1/Gtwc/ZoVUL78ZJK+xf8Tc+NqK2dFhbBJwjjXQ=)
                          7: 3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa (hash: DsrrF+UUK1Q1sB6PvCAllfUXQz6xxhErCjiWOoHEOPc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 23:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:18:7b:57:d2:19:e9:8e:d0:b6:70:08:bd:e1:22:d0:f7:1b:1d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
        Validity
            Not Before: Dec 24 14:03:00 2025 GMT
            Not After : Dec 30 05:07:00 2025 GMT
        Subject: CN=C2A8A59A6DF48F3F658048178F630E7477ED6B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:28:54:a4:75:af:88:2c:9c:01:1f:dd:1e:66:
                    ef:3f:0f:f5:53:78:ae:9c:75:bc:b9:63:6f:4d:05:
                    a9:3b:78:6d:87:e7:4f:b1:76:11:2b:ef:ce:eb:b2:
                    4a:d1:b1:e9:8f:77:92:84:50:db:3c:4f:2c:86:d0:
                    c2:9e:97:73:ef:3b:0f:9b:22:15:17:d5:03:c3:93:
                    2f:ee:ec:bd:16:84:5a:8f:74:72:3e:26:2e:18:61:
                    e0:a5:cc:5d:23:1c:86:b2:15:01:f0:2a:17:a3:cf:
                    c0:9e:6c:23:0d:a7:91:cd:da:f1:f8:35:70:65:58:
                    31:63:65:c8:06:06:5c:00:4c:c9:7b:8a:e7:9b:1c:
                    ef:2f:a9:7a:7e:0d:eb:c4:a4:c0:3b:67:b3:99:96:
                    69:a1:b8:ac:c8:90:7e:be:cf:4b:fd:77:28:6d:13:
                    08:44:3a:d1:0d:58:9c:52:54:4c:27:5f:7f:e6:4b:
                    79:cd:cb:35:db:d0:f1:ff:64:16:b5:47:1a:55:98:
                    ed:13:52:44:cb:bb:ed:28:67:85:4c:a8:39:65:00:
                    36:2a:e6:06:d8:50:8a:9f:20:d0:20:35:b9:51:97:
                    93:17:d8:d4:5f:1e:c2:b2:53:11:0f:c6:10:e9:bc:
                    30:f4:a9:5f:ca:43:2a:e2:40:fe:54:6d:63:d9:c8:
                    96:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A8:A5:9A:6D:F4:8F:3F:65:80:48:17:8F:63:0E:74:77:ED:6B:64
            X509v3 Authority Key Identifier:
                keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e3:c2:a0:ab:90:eb:57:d7:b1:9d:58:18:a0:a3:86:ea:75:
         02:2d:d9:f3:74:8e:a7:70:b4:6d:ff:29:9e:c1:23:29:5b:e8:
         c6:10:d8:6a:92:9f:4a:ed:af:5f:8b:15:b0:31:fc:fc:90:e7:
         ba:3f:52:ad:32:c4:dd:ad:4f:15:03:b2:8b:7d:21:97:b7:16:
         75:f1:23:3c:9f:c4:4c:ad:3c:63:49:e3:0a:85:7b:e4:d8:0b:
         d5:5f:ad:c9:82:67:e6:f2:a5:09:fd:f5:16:90:61:17:c9:f9:
         b1:06:53:25:8f:e3:ae:97:b9:b9:da:db:f6:34:4e:59:8d:95:
         ae:02:95:17:47:3c:00:27:b3:63:45:aa:65:78:f2:ab:0d:d1:
         25:d1:dd:03:75:f4:61:cd:1a:51:77:3f:8a:cc:ef:58:9c:33:
         69:dc:07:d9:4e:d3:26:99:ea:01:84:24:15:7c:38:1c:4f:2d:
         9b:7f:e5:69:ad:de:cb:92:fd:23:01:58:83:c2:28:cf:f5:6e:
         3f:01:75:d0:4b:03:ab:b8:25:6d:aa:fb:a2:cb:ab:e6:27:35:
         8c:8e:f6:4b:a3:47:58:39:a8:2b:e0:8f:c8:5c:39:36:c7:83:
         aa:35:93:72:6c:51:82:1a:5b:5a:15:de:66:d0:f5:1d:6e:3e:
         f6:60:e4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 00:32:22 2025 by rpki-client