This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft
File:                     23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft (raw, json)
Hash identifier:          YRBV6Q4Ort+BA6oj/3YyHYX6JdutaN0iYbreKwmeZug=
Subject key identifier:   9D:AE:A2:CB:DF:33:42:C0:04:5C:C2:46:12:6A:D6:09:4F:FC:DE:A3
Authority key identifier: 23:CA:48:C6:4E:79:E1:EC:A4:DA:65:62:17:94:A1:D3:89:37:73:EF
Certificate issuer:       /CN=23CA48C64E79E1ECA4DA65621794A1D3893773EF
Certificate serial:       7E2597FD68B5FC1AE49EA41E362CD41813FDCCDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft
Manifest number:          0146
Signing time:             Sat 22 Nov 2025 16:58:52 +0000
Manifest this update:     Sat 22 Nov 2025 16:53:52 +0000
Manifest next update:     Fri 28 Nov 2025 08:21:52 +0000
Files and hashes:         1: 23CA48C64E79E1ECA4DA65621794A1D3893773EF.crl (hash: OYpvAXPnBI7kSwR9KY/5E5Qv6rS0ZS1pWgHpQjiDr9E=)
                          2: 323830333a396463303a3a2f33322d3438203d3e20323635373234.roa (hash: OVlNl2pJf6FocwGuKEKsKEQQZWlyrEB3VgvjOgT4Eto=)
                          3: 34352e362e3232342e302f32322d3234203d3e20323635373234.roa (hash: WgE8iOYRv2n/ar6/sgXzP0F/R3AIgyhDf1p9JvGGQ/I=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Nov 2025 18:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:25:97:fd:68:b5:fc:1a:e4:9e:a4:1e:36:2c:d4:18:13:fd:cc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23CA48C64E79E1ECA4DA65621794A1D3893773EF
        Validity
            Not Before: Nov 22 16:53:52 2025 GMT
            Not After : Nov 28 08:21:52 2025 GMT
        Subject: CN=9DAEA2CBDF3342C0045CC246126AD6094FFCDEA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:50:db:f5:3e:16:c5:19:06:04:47:4a:c3:
                    fc:b4:26:f6:40:ee:87:e1:90:30:e6:7c:7e:ae:73:
                    72:45:9d:13:84:23:d4:c8:cf:6e:79:d9:3b:c6:7b:
                    b2:17:49:aa:4f:c8:ad:9d:7e:64:87:fe:bf:82:04:
                    65:21:c8:1b:a6:e2:4a:19:ca:88:2c:73:e9:8e:5d:
                    e8:1f:c2:cb:9c:d2:32:72:aa:9e:2e:a5:a8:25:46:
                    e9:64:96:df:84:90:2e:a6:c6:b0:15:92:0a:83:e2:
                    1a:87:3a:0c:2d:60:d7:c3:87:19:18:50:76:61:d4:
                    10:ec:be:8e:cc:57:15:0b:6a:b5:a9:c5:01:d5:a6:
                    c2:fe:7a:48:64:49:f7:e5:1b:34:65:c4:05:97:83:
                    99:5f:f6:e5:4b:fd:47:fc:16:6b:51:5b:6a:d3:16:
                    92:e8:06:38:6d:bc:41:04:1c:31:30:a9:69:7c:ee:
                    80:69:d5:c7:f6:12:ef:10:9b:08:12:88:36:96:3f:
                    5b:a1:37:6e:35:e9:bb:89:e3:06:ea:97:61:6b:e8:
                    7d:38:12:f3:ea:ca:c0:7c:a0:d7:cb:07:c2:2e:b9:
                    5a:0e:47:3d:4c:ea:dd:9a:25:ae:b6:7d:d7:e3:c7:
                    24:fa:cd:71:49:9b:d0:44:1f:27:f1:4a:30:eb:1a:
                    37:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AE:A2:CB:DF:33:42:C0:04:5C:C2:46:12:6A:D6:09:4F:FC:DE:A3
            X509v3 Authority Key Identifier:
                keyid:23:CA:48:C6:4E:79:E1:EC:A4:DA:65:62:17:94:A1:D3:89:37:73:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:60:0b:2c:e1:1c:45:c5:99:e0:a0:32:94:f8:c6:ab:77:1f:
         0e:36:31:f6:3b:ae:eb:8b:b6:b1:3f:ac:ba:67:80:96:8c:e1:
         83:30:44:fc:88:7d:f9:32:d6:2a:b3:9f:74:36:2b:cf:5e:b9:
         d5:38:fa:00:74:cb:2e:ac:04:79:9a:f9:6f:89:e5:96:49:3a:
         68:1b:e1:27:c3:86:1a:0f:6b:af:fd:3f:21:be:21:9d:6f:9d:
         3c:b1:90:95:59:fd:db:b4:30:60:b5:bf:47:e0:3f:dd:a0:61:
         08:cd:11:b9:0e:63:ad:ca:53:59:06:4e:55:c1:92:cb:0e:fb:
         2f:45:21:d0:55:94:10:75:d7:cb:32:60:90:d6:f2:ba:ee:e9:
         36:39:fd:39:17:7d:b9:d1:2e:15:aa:60:a8:33:d9:94:ac:1d:
         5d:74:b0:fa:86:19:d6:99:ff:78:14:9e:f7:68:01:7f:d7:fc:
         7f:ed:e6:83:89:55:b4:00:0c:9c:aa:f7:9b:89:e1:2b:b4:1d:
         12:a0:99:ae:d2:7f:0f:cb:96:ff:ce:58:64:88:34:6b:c9:6f:
         41:d7:be:90:cf:4a:18:42:f6:a1:3c:3b:9e:70:47:dd:7b:4f:
         73:72:de:1c:64:94:69:82:46:a6:12:d4:d0:93:ae:e2:78:7b:
         0d:ca:d9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----