This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft
File:                     A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft (raw, json)
Hash identifier:          EJ2uRN/SBgyA25kuBW74sQsVfnLJTjDV4ZgE/9i+7Z0=
Subject key identifier:   C0:66:36:F9:17:C2:A1:4A:53:D9:8F:70:0B:7F:7E:95:B7:CD:BE:B9
Authority key identifier: A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6
Certificate issuer:       /CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
Certificate serial:       091F4B1FA1264A07427AB97ED2F0DDDC0AF16BF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft
Manifest number:          0140
Signing time:             Mon 15 Dec 2025 10:45:55 +0000
Manifest this update:     Mon 15 Dec 2025 10:40:55 +0000
Manifest next update:     Sat 20 Dec 2025 08:55:55 +0000
Files and hashes:         1: 34352e3136332e33392e302f32342d3234203d3e20323637363830.roa (hash: 2JT1s9b02udqv1xXocSTYJ7G7ikJiarSvMcL0a1tAiE=)
                          2: 34352e3136332e33362e302f32322d3232203d3e20323637363830.roa (hash: mYLeR814mRwYvAEbb+Y+7Y1Q+oZ47ciYXKINWZfiSB8=)
                          3: A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl (hash: mh/aKcHLhn6uY+TTYyyu+lDRAx1rXhtZPsTNCZHIt6I=)
                          4: 34352e3136332e33382e302f32342d3234203d3e20323637363830.roa (hash: Y3tNshWTORR4A57XRaKIty2c/MO6tw+jncZRdE0XOOs=)
                          5: 34352e3136332e33372e302f32342d3234203d3e20323637363830.roa (hash: MGPQH3Im9gkkm+0Bn9ltqZawLZU5FUV33GSF8YICThg=)
                          6: 34352e3136332e33362e302f32342d3234203d3e20323637363830.roa (hash: 1DwnOznFKZ1jDk6nN7IUsF9qcRjTdT49vErOxqecqTo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 08:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1f:4b:1f:a1:26:4a:07:42:7a:b9:7e:d2:f0:dd:dc:0a:f1:6b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
        Validity
            Not Before: Dec 15 10:40:55 2025 GMT
            Not After : Dec 20 08:55:55 2025 GMT
        Subject: CN=C06636F917C2A14A53D98F700B7F7E95B7CDBEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:a5:fc:b0:52:50:dd:4f:0b:58:17:c0:c3:
                    fd:05:ef:d9:f5:54:c2:ec:26:8d:f3:16:d7:18:3e:
                    20:a6:8a:7e:7e:fe:e2:18:b5:18:65:5e:36:5e:37:
                    88:ec:ff:b3:75:37:86:d4:4c:d2:69:4c:e0:f5:49:
                    42:14:80:81:38:9a:2d:d5:2a:b0:78:6b:eb:73:29:
                    f4:1e:5d:e9:86:b3:5e:ac:ff:59:0e:79:28:b2:ae:
                    14:75:3d:0c:0e:13:31:ba:40:a7:3f:6f:de:26:92:
                    e8:ac:8d:c3:88:5e:fd:fd:73:c5:98:f6:cd:95:38:
                    b6:7d:01:91:7f:d5:9c:ff:f2:a4:e6:1f:87:db:08:
                    77:33:95:f3:ec:37:31:ba:51:5e:64:37:53:32:d3:
                    e3:47:20:c5:f7:95:fa:89:dc:f9:0d:a0:8f:3d:ee:
                    0e:a3:81:45:14:77:a6:ed:79:e9:fd:17:46:5d:9a:
                    eb:0b:49:a2:6e:d3:a8:b8:c1:5d:88:e6:3d:7d:b5:
                    71:59:2b:b3:94:c2:ae:75:a2:cd:88:4d:e9:d4:86:
                    18:dd:75:60:ff:32:16:d8:5f:9f:c1:ed:b9:53:9a:
                    5d:0e:71:59:e8:b4:5f:b1:f8:65:8d:ee:6d:88:56:
                    d1:40:94:6c:a1:a2:02:6d:2f:7f:d1:74:5b:9b:f9:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:66:36:F9:17:C2:A1:4A:53:D9:8F:70:0B:7F:7E:95:B7:CD:BE:B9
            X509v3 Authority Key Identifier:
                keyid:A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:56:7a:26:42:18:01:f5:b3:79:3e:01:7f:31:c6:c1:75:2a:
         35:f2:f9:af:88:00:64:07:55:96:94:be:1c:62:b9:e2:42:cb:
         39:a2:b8:51:71:d2:80:d5:3a:1d:eb:2d:e5:f8:17:2b:cf:73:
         2c:02:ba:9b:f0:2a:d0:b1:db:f0:8e:78:39:24:8b:fa:a4:59:
         14:dc:17:95:2b:6f:e9:0e:81:13:58:24:a3:9b:98:76:f1:99:
         33:01:b5:c5:31:45:7f:3d:5b:4b:01:22:2d:c6:0e:c0:dd:24:
         d8:8d:bc:41:a5:55:5e:21:cb:cf:c4:05:d5:60:6e:d4:14:36:
         1a:04:b4:5d:26:4b:63:e5:3a:66:2a:1a:3b:ce:82:9c:75:e0:
         36:22:10:29:80:60:a0:f5:1b:f6:91:52:9c:a3:9e:17:e0:b9:
         10:2a:f0:58:83:eb:a6:4d:98:f6:7b:87:26:00:d6:a0:4d:a7:
         49:e7:f4:a6:1a:fe:bd:78:86:b0:e2:45:12:e8:71:76:04:af:
         c6:05:87:38:3f:11:c6:48:d9:b1:2f:ac:75:35:cb:3c:cb:de:
         7f:10:dd:99:a2:06:b3:4c:ea:e3:53:df:0a:54:97:8b:6a:f5:
         77:38:e0:70:29:29:b4:30:7d:f6:6c:38:4f:40:4b:6a:83:60:
         6c:1b:b8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:13:16 2025 by rpki-client