This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
File:                     CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json)
Hash identifier:          VeHH7wFxshf51zGU2vw4qI3PqTAcuVGCP6cqGb819cw=
Subject key identifier:   6A:18:E7:8C:79:3C:EE:28:C2:4D:5B:02:B9:41:75:71:04:1E:5A:0E
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Certificate issuer:       /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial:       12E0EF7021F1DD2EDAB658159273D9BD0EB54540
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
Manifest number:          0149
Signing time:             Fri 12 Dec 2025 08:41:35 +0000
Manifest this update:     Fri 12 Dec 2025 08:36:35 +0000
Manifest next update:     Wed 17 Dec 2025 01:19:35 +0000
Files and hashes:         1: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: MAJxrDm1ex5gG0+qVfg9yJc6ZorOreLgA5tyBVAPd0o=)
                          2: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: a8Us3kI8SkWGmqoxEMJdOuQDpMUk4xinBahinzFU9DU=)
                          3: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: rGf/Ot8vpc4bXLZjtJMeJ64W68zetCQCjBNpV60KJLk=)
                          4: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: +F+NHhMD5/ce0UdFgJVuwRhm0EQLlhvaTfnyTVifW2o=)
                          5: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: vb7Kyf31JcU4K7h1whk05luNX6Z6SSjkjzD3prLXHAE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 01:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e0:ef:70:21:f1:dd:2e:da:b6:58:15:92:73:d9:bd:0e:b5:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
        Validity
            Not Before: Dec 12 08:36:35 2025 GMT
            Not After : Dec 17 01:19:35 2025 GMT
        Subject: CN=6A18E78C793CEE28C24D5B02B9417571041E5A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:cf:a1:95:92:e8:9e:2f:37:a7:7a:f2:fc:
                    15:76:7b:88:c4:90:c4:e3:f8:00:9b:ab:a2:00:78:
                    4f:36:27:d5:5b:20:ef:d9:59:84:da:9e:68:93:c0:
                    b6:24:fb:93:ef:a6:02:ec:e5:96:a2:34:58:ee:87:
                    d2:36:6c:ee:aa:4b:c8:00:cc:45:12:13:96:5c:e0:
                    1d:2f:4b:c7:dc:86:6f:06:df:1b:3d:1a:af:d7:cf:
                    e1:ef:45:48:c3:0d:d0:38:0d:d4:96:10:59:fa:91:
                    31:05:3c:b2:75:14:bc:a5:ce:1f:88:90:0e:42:2c:
                    64:ab:ac:e5:fb:db:88:56:63:a2:c7:52:99:d6:1f:
                    29:4c:2e:35:63:9e:04:ab:b7:5b:f1:27:57:31:70:
                    ad:f0:1c:1a:ad:15:c1:cd:bd:51:30:b7:ce:7f:f5:
                    25:d6:47:44:0d:1b:ab:49:d0:f8:c0:f7:47:fb:1e:
                    25:fd:d8:b9:19:fa:60:1e:ed:89:b2:d6:08:be:02:
                    37:4c:55:d5:dd:bb:96:15:20:9f:68:65:5b:6f:57:
                    2d:a0:e4:fc:65:f6:04:43:d1:f9:c1:e5:00:c5:ec:
                    ec:e6:00:67:7b:b4:7e:73:39:c9:4f:3e:34:1d:6e:
                    b1:09:d2:f8:f3:77:3f:f0:8f:1c:e3:32:c9:db:cd:
                    4d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:E7:8C:79:3C:EE:28:C2:4D:5B:02:B9:41:75:71:04:1E:5A:0E
            X509v3 Authority Key Identifier:
                keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:63:c4:be:6c:f0:ab:c5:02:b6:6a:44:23:60:a2:5d:3d:88:
         07:04:d9:e9:3b:8b:dc:84:b9:03:ce:3a:a4:19:2e:7f:2f:e9:
         52:79:e0:95:9e:eb:d0:d2:38:3a:d8:66:9b:b0:28:8a:a9:e6:
         ff:19:10:fc:63:63:81:a6:bb:d6:aa:d6:5f:88:99:69:cd:88:
         8b:0b:38:4e:80:8a:07:99:30:86:fa:0b:0b:af:81:40:0d:c2:
         63:69:b7:c3:ce:3d:03:90:4c:12:c2:59:a8:fc:d8:89:3d:87:
         24:97:73:31:fc:dd:04:85:72:df:cd:63:08:de:8f:3b:74:bc:
         e8:1e:d6:b9:85:12:bd:40:4e:a4:0a:62:66:9a:9b:bd:dd:bb:
         18:74:a6:5b:4f:e1:aa:b6:8a:e6:04:6f:da:39:f3:18:a3:8d:
         f4:16:89:93:82:56:1e:7b:29:9e:a1:37:89:47:22:5a:45:02:
         57:61:d9:6f:94:e0:73:6d:f8:02:20:86:ba:9c:9d:fb:2d:28:
         42:65:00:5e:eb:75:8e:55:09:09:dc:85:92:d1:8b:87:a1:a0:
         d6:8d:80:04:50:9b:c4:ae:0c:95:67:a3:99:f7:23:40:b0:f5:
         62:91:98:0f:74:6c:cd:ab:a8:24:68:73:a0:e4:9e:ef:ea:54:
         ad:53:00:23
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUEuDvcCHx3S7atlgVknPZvQ61RUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JCMzBGQ0EyN0I4
RkJFOERBOTAeFw0yNTEyMTIwODM2MzVaFw0yNTEyMTcwMTE5MzVaMDMxMTAvBgNV
BAMTKDZBMThFNzhDNzkzQ0VFMjhDMjRENUIwMkI5NDE3NTcxMDQxRTVBMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIWs+hlZLoni83p3ry/BV2e4jE
kMTj+ACbq6IAeE82J9VbIO/ZWYTanmiTwLYk+5PvpgLs5ZaiNFjuh9I2bO6qS8gA
zEUSE5Zc4B0vS8fchm8G3xs9Gq/Xz+HvRUjDDdA4DdSWEFn6kTEFPLJ1FLylzh+I
kA5CLGSrrOX724hWY6LHUpnWHylMLjVjngSrt1vxJ1cxcK3wHBqtFcHNvVEwt85/
9SXWR0QNG6tJ0PjA90f7HiX92LkZ+mAe7Ymy1gi+AjdMVdXdu5YVIJ9oZVtvVy2g
5Pxl9gRD0fnB5QDF7OzmAGd7tH5zOclPPjQdbrEJ0vjzdz/wjxzjMsnbzU1DAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUahjnjHk87ijCTVsCuUF1cQQeWg4wHwYDVR0j
BBgwFoAUyjJcdYvZWuIzjTe7MPyie4++jakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZF
MkVCNEQxOTVCQTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFF
MjMzOEQzN0JCMzBGQ0EyN0I4RkJFOERBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTMyNUM3NThCRDk1QUUyMzM4
RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzA5MjdENEUxOEY3N0VGQjYwMkFFMjFENTYxMUI4OUM2RTJFQjREMTk1
QkExODQ4REQ5OTYxRjg0QTBFRDJCMi8wL0NBMzI1Qzc1OEJEOTVBRTIzMzhEMzdC
QjMwRkNBMjdCOEZCRThEQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoY8S+bPCrxQK2akQjYKJdPYgH
BNnpO4vchLkDzjqkGS5/L+lSeeCVnuvQ0jg62GabsCiKqeb/GRD8Y2OBprvWqtZf
iJlpzYiLCzhOgIoHmTCG+gsLr4FADcJjabfDzj0DkEwSwlmo/NiJPYckl3Mx/N0E
hXLfzWMI3o87dLzoHta5hRK9QE6kCmJmmpu93bsYdKZbT+GqtormBG/aOfMYo430
FomTglYeeymeoTeJRyJaRQJXYdlvlOBzbfgCIIa6nJ37LShCZQBe63WOVQkJ3IWS
0YuHoaDWjYAEUJvErgyVZ6OZ9yNAsPVikZgPdGzNq6gkaHOg5J7v6lStUwAj
-----END CERTIFICATE-----