This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft
File:                     23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft (raw, json)
Hash identifier:          ZjrYfhQbBBSNp7hQu1FJS8IdedsrbD/PZNa8aAhbo8c=
Subject key identifier:   85:C8:EB:F0:50:FA:69:E8:F9:8A:13:44:82:51:8A:44:8C:0B:F1:61
Authority key identifier: 23:CA:48:C6:4E:79:E1:EC:A4:DA:65:62:17:94:A1:D3:89:37:73:EF
Certificate issuer:       /CN=23CA48C64E79E1ECA4DA65621794A1D3893773EF
Certificate serial:       64FD996C488332B1A215EE2376B000A1EB870768
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft
Manifest number:          0149
Signing time:             Fri 28 Nov 2025 22:08:23 +0000
Manifest this update:     Fri 28 Nov 2025 22:03:23 +0000
Manifest next update:     Wed 03 Dec 2025 13:57:23 +0000
Files and hashes:         1: 34352e362e3232342e302f32322d3234203d3e20323635373234.roa (hash: WgE8iOYRv2n/ar6/sgXzP0F/R3AIgyhDf1p9JvGGQ/I=)
                          2: 323830333a396463303a3a2f33322d3438203d3e20323635373234.roa (hash: OVlNl2pJf6FocwGuKEKsKEQQZWlyrEB3VgvjOgT4Eto=)
                          3: 23CA48C64E79E1ECA4DA65621794A1D3893773EF.crl (hash: ZHqSRBnWBP8T/CHt8UcD7zqZkX0pVSTrHmD6d0+grAo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Dec 2025 13:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fd:99:6c:48:83:32:b1:a2:15:ee:23:76:b0:00:a1:eb:87:07:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23CA48C64E79E1ECA4DA65621794A1D3893773EF
        Validity
            Not Before: Nov 28 22:03:23 2025 GMT
            Not After : Dec  3 13:57:23 2025 GMT
        Subject: CN=85C8EBF050FA69E8F98A134482518A448C0BF161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:34:36:94:1d:40:63:32:dc:04:69:e4:bb:
                    67:45:b8:f5:8c:e1:d8:4d:e3:72:10:3a:c3:45:a0:
                    f8:57:74:9e:a9:71:cc:31:98:d5:8a:01:9b:02:d6:
                    a0:a0:e2:99:85:57:b7:3a:d0:a9:cf:0f:9d:1f:f2:
                    7e:ed:85:21:ff:62:b8:d8:33:0e:3d:b4:29:12:c5:
                    58:79:51:5d:bf:7a:b3:b2:48:cc:54:73:dc:46:5b:
                    36:eb:6f:66:74:a8:48:83:1f:a4:46:b5:b4:2c:7a:
                    6e:4e:38:56:c4:54:51:25:4c:64:34:bb:e6:50:f1:
                    61:32:fe:a6:d8:01:d0:1d:f8:da:fe:a6:5d:f5:c0:
                    33:22:1f:f2:c2:88:3a:83:7c:39:af:d9:30:04:60:
                    61:16:ed:90:09:71:85:01:f4:10:4e:13:44:6f:cd:
                    b4:c5:24:cf:4d:ca:24:a7:4c:08:26:bd:52:d2:fc:
                    f3:6d:4b:b7:aa:49:e4:a5:5c:cf:0c:f3:e2:24:67:
                    d1:83:e3:f2:2f:04:08:c9:5a:21:96:d7:39:6b:05:
                    25:7d:80:cf:1f:c7:7b:eb:18:7d:bb:a5:f8:e3:c3:
                    7a:3d:78:28:43:c2:d5:85:ba:71:30:bc:26:fc:6b:
                    ec:9e:27:3c:a5:1b:54:c1:5b:0c:38:5d:1a:ba:23:
                    58:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C8:EB:F0:50:FA:69:E8:F9:8A:13:44:82:51:8A:44:8C:0B:F1:61
            X509v3 Authority Key Identifier:
                keyid:23:CA:48:C6:4E:79:E1:EC:A4:DA:65:62:17:94:A1:D3:89:37:73:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:08:45:6a:e9:f8:c1:ac:dd:c4:0c:9b:08:18:f1:51:a7:4e:
         d4:b9:56:a2:ea:dc:1e:db:b9:42:f2:ba:fa:8f:7d:4e:d8:d2:
         cd:09:c8:c2:cf:64:b1:5a:c2:31:47:ca:d0:98:5a:f4:e4:69:
         3d:80:ed:3c:69:40:af:60:00:06:5d:f9:01:6c:06:f1:18:42:
         4e:0c:2f:23:9b:e1:dd:af:a9:8d:8f:3a:9f:b5:15:f2:01:d3:
         75:2d:80:82:0a:02:44:c1:49:d3:b9:1a:fd:48:92:5f:92:64:
         c0:5e:b1:12:62:3f:97:0a:82:2b:61:fe:5f:cf:3c:da:4c:69:
         52:03:4c:b9:64:8c:99:05:70:24:87:06:bf:a0:a8:db:89:f5:
         78:e6:e2:19:c3:72:a1:c9:3a:f2:77:31:90:bd:d0:c4:fc:51:
         2a:72:3a:ad:3b:ca:9c:bc:12:a8:4b:0f:b9:d7:e9:7a:7b:94:
         25:2c:18:17:ad:ef:ef:f8:40:33:b8:4e:e0:6e:50:0e:82:c7:
         ea:73:ec:d3:04:d2:00:0a:ab:83:11:2f:9c:ec:3e:8a:50:a2:
         04:36:07:15:9c:fe:02:be:65:0d:51:16:fc:ac:8a:59:fe:06:
         7b:5f:b1:2d:7d:51:b2:b8:30:50:29:24:a6:19:fd:27:5f:5c:
         02:99:aa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 14:52:55 2025 by rpki-client