This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
File:                     70B51DCC347573651055FC72DB19C170524018CC.mft (raw, json)
Hash identifier:          AICBCyQKlURtPOy3xaC+8i4mUZBBeF4Qc/YAjrP731E=
Subject key identifier:   15:65:61:DB:7F:A3:07:BD:7E:C9:DD:A9:41:35:64:70:43:A8:B9:4A
Authority key identifier: 70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC
Certificate issuer:       /CN=70B51DCC347573651055FC72DB19C170524018CC
Certificate serial:       21DF9B4A62CF0D48A09250C8FB64F0BEFB34FFF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
Manifest number:          014E
Signing time:             Wed 10 Dec 2025 22:51:54 +0000
Manifest this update:     Wed 10 Dec 2025 22:46:54 +0000
Manifest next update:     Tue 16 Dec 2025 03:42:54 +0000
Files and hashes:         1: 323830333a613634303a3a2f33322d3536203d3e203436313938.roa (hash: Y7Graa1GkNAS8x/l9kUW3FtTElJHfsqwEL6EK8UOTJ8=)
                          2: 3139302e382e33322e302f32302d3234203d3e203237383936.roa (hash: ML9ua8yvbx7O0GpZG3bnnZT3umLAS9p+jaCGJIMX1sY=)
                          3: 3139302e382e33322e302f32302d3234203d3e203436313938.roa (hash: dFj8MmRuFxrByOsX0k3DGUA66P8N+6Pka2xWe2qMLmE=)
                          4: 323830333a613634303a3a2f33322d3536203d3e203237383936.roa (hash: B+utkw2BCRRGP7WVCnBbBQJkPWUUr3vvKGJPQqOESlI=)
                          5: 70B51DCC347573651055FC72DB19C170524018CC.crl (hash: n51DuWDNCfzqsOEK7Xx4XOaP1G86B0z19iTCjFSnmsI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 08:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:df:9b:4a:62:cf:0d:48:a0:92:50:c8:fb:64:f0:be:fb:34:ff:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B51DCC347573651055FC72DB19C170524018CC
        Validity
            Not Before: Dec 10 22:46:54 2025 GMT
            Not After : Dec 16 03:42:54 2025 GMT
        Subject: CN=156561DB7FA307BD7EC9DDA94135647043A8B94A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:11:e0:35:fc:83:a4:d4:5e:02:7f:dd:f5:
                    76:e2:35:e8:36:f6:9e:93:90:8e:7a:8a:aa:93:57:
                    7b:91:9f:c1:2e:00:c9:a1:3b:63:59:f4:f5:da:da:
                    cc:35:a4:05:9a:3f:16:11:7b:56:ef:bc:77:d9:15:
                    8c:55:8e:bf:36:fb:5f:e7:fd:f0:0f:b8:a7:70:db:
                    ec:ed:8d:1a:c1:78:f9:a4:a4:b5:92:ba:17:b7:a9:
                    64:20:f0:e7:ec:d9:54:9c:6d:0c:a9:e9:b1:1f:66:
                    d3:bb:d8:1e:da:79:ac:2e:17:28:2d:5f:d4:26:be:
                    ad:05:5d:6b:c3:c2:5e:33:b6:6b:bb:6c:7c:6d:8d:
                    cf:22:1b:3a:e9:85:6b:02:b1:01:ad:2e:49:9b:f6:
                    90:26:3e:a8:72:c8:39:eb:9e:52:31:86:74:c8:3f:
                    07:5c:8a:ea:92:fe:0f:d6:f1:a5:7d:bc:47:cd:b4:
                    83:bf:07:29:88:31:fe:06:38:89:c7:62:2f:b3:d6:
                    8c:e5:10:e1:93:5c:32:f9:21:8f:20:a0:47:44:ca:
                    5a:86:33:d9:56:b2:bb:77:17:ac:a5:72:0f:e8:ed:
                    78:f2:79:ee:50:64:d8:ea:6c:f8:fd:e5:47:e5:16:
                    e5:56:9e:f9:44:3e:c2:bf:f4:2a:fe:5f:9f:2c:d3:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:65:61:DB:7F:A3:07:BD:7E:C9:DD:A9:41:35:64:70:43:A8:B9:4A
            X509v3 Authority Key Identifier:
                keyid:70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:29:e0:2f:8c:c0:ea:a1:c0:ce:86:dd:e1:fd:13:4e:14:35:
         9d:fa:78:ad:2b:ea:ab:32:3b:17:ed:70:5c:1e:36:d3:7b:51:
         37:3b:49:ee:d5:9f:fe:07:56:46:12:79:97:f7:4d:32:6e:4d:
         18:97:fa:76:f8:8d:c7:0d:b7:f2:c3:00:5f:9c:26:67:55:d7:
         5c:a2:3a:74:88:7a:e0:be:5b:37:64:a5:92:71:f3:7b:a2:de:
         e2:cc:e1:5b:44:81:9a:db:68:58:78:f2:16:9b:a5:0e:d6:17:
         a1:50:ba:83:c1:bf:e2:be:ec:65:ea:95:78:22:26:1b:a7:b5:
         2d:09:8a:43:30:31:a6:ba:73:b8:19:53:63:b7:a1:3d:d7:85:
         80:41:4f:5c:0f:c7:b2:bb:6b:ed:8a:77:17:b3:f5:0e:88:c4:
         fa:f5:67:51:7c:cb:5a:77:b8:b1:4c:86:ad:f2:06:aa:94:fd:
         91:4c:9f:b5:be:27:54:90:02:a9:7a:c2:97:a1:32:fb:35:a6:
         c5:d7:f4:45:c0:91:c4:1f:85:14:11:30:06:41:a5:e7:52:f0:
         c6:3f:4d:0c:7a:60:c7:ae:06:6c:fc:d1:27:80:fe:49:7e:9f:
         7a:c2:f1:bb:fc:d5:dd:ac:ea:d8:ca:62:f2:0d:81:59:8c:9c:
         60:de:ff:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:21:53 2025 by rpki-client