This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.mft
File:                     A5869529D5045BE846944304A74862560C583B82.mft (raw, json)
Hash identifier:          3sso2Unnz434bbSGbYOwNuPRoVQ/l9WumXOT033ksOk=
Subject key identifier:   AA:B2:84:22:EE:E2:66:85:10:7A:E6:07:BC:2B:D5:70:C2:57:E8:92
Authority key identifier: A5:86:95:29:D5:04:5B:E8:46:94:43:04:A7:48:62:56:0C:58:3B:82
Certificate issuer:       /CN=A5869529D5045BE846944304A74862560C583B82
Certificate serial:       3849AF470222BCC4F5358ED20813E1A8B6EF2E57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.mft
Manifest number:          0143
Signing time:             Fri 05 Dec 2025 06:01:17 +0000
Manifest this update:     Fri 05 Dec 2025 05:56:17 +0000
Manifest next update:     Thu 11 Dec 2025 04:06:17 +0000
Files and hashes:         1: 323830333a656234303a3a2f33322d3332203d3e20323634373132.roa (hash: bEnP0Nbc2iLbijLeBj/Fvu9IFmoOWkUI3YBoKaG69uM=)
                          2: A5869529D5045BE846944304A74862560C583B82.crl (hash: GhlwhxLWz9W2+TnIedbkZ87qQ0kLdbPM/yoZSQvnqAE=)
                          3: 3137302e3135302e382e302f32322d3234203d3e20323634373132.roa (hash: 5jWpgF8ggcPAZrC2qHCw8oFXqP3SScaa+/uWrwsoT8c=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 04:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:49:af:47:02:22:bc:c4:f5:35:8e:d2:08:13:e1:a8:b6:ef:2e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5869529D5045BE846944304A74862560C583B82
        Validity
            Not Before: Dec  5 05:56:17 2025 GMT
            Not After : Dec 11 04:06:17 2025 GMT
        Subject: CN=AAB28422EEE26685107AE607BC2BD570C257E892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:6c:84:41:94:22:41:a9:c1:c5:90:0c:d4:
                    6e:4f:12:42:a8:10:fe:c3:af:76:76:24:b2:64:4c:
                    6e:ce:63:3c:18:26:67:97:94:89:b3:5a:50:ad:83:
                    22:6c:21:1a:31:d2:9f:64:46:fd:68:1c:41:b6:8b:
                    3f:99:6d:4b:1e:3a:96:49:0e:22:9c:39:e8:75:00:
                    14:01:3d:90:5f:8d:1f:2a:c2:dc:88:4e:d4:5f:a5:
                    67:a8:7e:42:38:89:8d:1a:66:0e:8f:aa:74:b1:35:
                    e3:fa:84:fe:19:9d:fd:5c:aa:d9:d1:7c:00:1e:1e:
                    86:98:e6:c4:a3:51:a6:ba:a7:53:df:b8:54:9c:b6:
                    98:ef:fe:b8:06:4c:7a:e3:fe:77:fa:1f:ba:c4:ed:
                    e3:19:7e:67:a2:43:a9:60:91:5d:48:da:f9:11:f0:
                    e1:2e:47:f1:b7:ca:6d:1b:fd:72:23:1f:bc:8e:7d:
                    35:ea:c4:1b:0e:08:d4:cb:5b:36:6a:02:c7:5a:4d:
                    cb:07:86:c5:33:3a:8c:1b:a8:a3:48:24:df:7d:10:
                    49:fb:d8:29:bc:84:7d:6b:da:3c:17:c6:68:17:da:
                    3d:ee:2e:74:6e:90:ca:6e:e5:70:2a:11:30:d9:6c:
                    6e:ac:8a:a3:a1:9d:86:0e:0c:b6:90:00:e5:70:a5:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B2:84:22:EE:E2:66:85:10:7A:E6:07:BC:2B:D5:70:C2:57:E8:92
            X509v3 Authority Key Identifier:
                keyid:A5:86:95:29:D5:04:5B:E8:46:94:43:04:A7:48:62:56:0C:58:3B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:40:30:75:51:b2:c5:68:b7:7b:54:ec:57:9d:5a:e5:e1:88:
         e4:6a:c6:13:04:9b:a0:9e:a7:ce:cd:84:6a:80:70:36:08:f0:
         c4:f5:2e:9f:32:a6:d2:c2:2b:01:e0:e8:56:f4:1f:dc:91:29:
         f9:84:bb:d4:cf:87:e0:f3:52:65:56:f3:42:7c:c5:c7:63:5a:
         2f:d4:50:7b:c0:1a:da:28:6a:45:d6:92:5e:66:51:06:2d:d7:
         e5:05:22:c3:8d:c0:09:33:d1:e0:0a:1c:4b:91:6d:62:78:08:
         5b:b6:d5:1e:aa:cb:39:b8:15:e6:50:5f:52:63:9e:3d:42:e2:
         90:06:f3:93:e8:23:07:e1:10:ce:f4:55:d5:7f:73:6c:46:b1:
         3c:f9:14:38:3c:85:d1:84:ed:32:2c:ae:1c:a4:fc:72:d1:c4:
         5b:23:ea:bb:f5:eb:4a:84:17:74:3b:8a:fa:1d:7f:b8:51:8b:
         26:26:c6:35:6d:a9:2e:89:d2:86:c1:47:86:fd:73:40:d3:ad:
         46:da:32:89:32:57:06:a7:37:91:1b:29:6b:25:28:eb:43:1b:
         71:c8:57:3b:b7:db:08:28:19:49:9a:5a:4e:72:c8:54:78:95:
         37:e6:3d:a9:9a:e4:57:7e:f1:f0:8b:5b:15:01:8c:2c:9b:5c:
         e1:1e:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----