This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
File:                     20FD70DC301FF93D288ED851C3A69B22D7B04220.mft (raw, json)
Hash identifier:          jF9hlTBSVQiYgwuLP86/1xXa6xCPfpQdepz2YeKrvcg=
Subject key identifier:   B3:92:D3:EE:88:65:AB:62:6F:94:71:43:DB:96:62:D0:57:57:92:80
Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20
Certificate issuer:       /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220
Certificate serial:       191BD1D752A15A501F0ADA55C0BE834F3DBB6D5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
Manifest number:          0140
Signing time:             Mon 08 Dec 2025 03:00:55 +0000
Manifest this update:     Mon 08 Dec 2025 02:55:55 +0000
Manifest next update:     Sat 13 Dec 2025 00:03:55 +0000
Files and hashes:         1: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (hash: hiq3f5SQVXyvVqAHJFD41H8GmsplFaT7zWIIcFR5Zms=)
                          2: 20FD70DC301FF93D288ED851C3A69B22D7B04220.crl (hash: zNy5B+tD7ivrZ2+jJgY+C5PLdS6AwBqWXyNLtg7DS14=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Dec 2025 00:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1b:d1:d7:52:a1:5a:50:1f:0a:da:55:c0:be:83:4f:3d:bb:6d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220
        Validity
            Not Before: Dec  8 02:55:55 2025 GMT
            Not After : Dec 13 00:03:55 2025 GMT
        Subject: CN=B392D3EE8865AB626F947143DB9662D057579280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:a9:2a:9a:ae:48:90:ba:23:27:8f:26:b3:
                    35:0d:76:3e:78:3d:6c:64:32:72:95:f0:25:a8:b1:
                    42:8f:7e:0f:75:ab:40:28:dd:94:9e:f4:cd:bd:ca:
                    40:99:42:b7:23:fd:60:4e:d1:93:3d:89:51:07:90:
                    2f:15:e4:f5:ac:f5:f8:47:63:0e:32:4b:b7:87:14:
                    90:31:54:f2:c6:ad:f0:c6:9e:1f:8f:7b:61:b3:97:
                    19:84:74:ec:ff:69:94:b9:23:53:ca:93:30:a1:d1:
                    c4:f1:4f:6c:f6:88:df:a3:b1:3a:3a:19:7a:ff:06:
                    bc:90:a7:1b:81:92:44:8c:72:85:7c:43:a5:5a:1e:
                    50:54:fe:24:5d:45:01:a3:1f:6c:65:be:9e:07:5d:
                    9d:4e:2d:95:ef:f5:0c:2a:6e:f5:3f:79:c3:45:ce:
                    c0:61:e8:4c:7a:42:3c:a0:4d:16:91:85:cb:af:bd:
                    d4:a6:76:e7:79:2c:f1:97:3d:9d:37:b1:b2:c0:fe:
                    d5:ff:d1:c3:a1:4c:e4:fd:ca:7d:f3:33:9d:bb:11:
                    9d:12:32:48:75:77:c6:ab:b6:fe:93:8a:fe:a8:e2:
                    42:d5:7b:bb:aa:41:2c:40:53:3e:79:c4:36:e1:2b:
                    b1:94:6e:3b:fb:74:00:5a:78:88:ec:96:d1:79:04:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:92:D3:EE:88:65:AB:62:6F:94:71:43:DB:96:62:D0:57:57:92:80
            X509v3 Authority Key Identifier:
                keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0a:12:49:d4:7c:42:34:0c:23:82:a8:06:79:4d:19:a7:68:
         52:d7:6b:d8:90:fa:d0:dc:fa:13:0e:af:a3:d5:21:93:93:09:
         0a:82:fa:20:93:54:09:42:09:ff:fa:d7:02:92:7a:f6:24:42:
         8b:d2:3e:1b:0a:b1:19:36:8f:14:51:e2:f8:86:b3:36:c2:09:
         0a:c2:27:d4:4f:65:25:ef:24:5e:aa:6c:07:7c:b4:13:e8:f0:
         8b:27:4c:c6:22:3d:a6:b5:5b:60:03:f4:45:66:c4:c0:13:24:
         f8:a2:6b:44:ff:f3:00:f9:b1:01:b1:42:2f:78:10:0f:8c:cb:
         fa:27:2c:06:ae:cd:d4:e5:8e:1c:a0:e9:f7:07:7c:70:b2:dd:
         fe:68:0f:8f:a9:3a:5a:66:95:7c:7d:c8:8b:6e:9e:63:55:96:
         b0:36:47:52:0c:0d:df:ab:a5:ab:00:ad:25:7f:9e:04:f4:21:
         bc:4c:d2:4e:89:c0:c7:0c:0e:7d:02:af:80:79:62:fb:9d:4a:
         2c:78:51:ca:e3:04:bf:6e:3e:de:ab:1b:3f:f0:f4:66:8b:00:
         f7:bd:c9:7e:99:03:41:4b:b7:56:2e:37:86:21:68:62:20:54:
         2a:d1:b8:00:d0:71:d5:bb:ab:46:6f:18:4a:6d:57:48:99:25:
         fe:66:04:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 19:00:17 2025 by rpki-client