This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
File:                     604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft (raw, json)
Hash identifier:          xOz0O844UrFKDFn3sJptaQJ3jL9LHEXqfl0XVtg+a5w=
Subject key identifier:   F6:74:C5:F3:CD:9C:74:1F:6E:3C:19:5B:9C:7B:FC:35:13:92:34:38
Authority key identifier: 60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81
Certificate issuer:       /CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
Certificate serial:       65F38808C89FD2B614F08A80EE2968381A1297DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
Manifest number:          0141
Signing time:             Fri 05 Dec 2025 11:34:20 +0000
Manifest this update:     Fri 05 Dec 2025 11:29:20 +0000
Manifest next update:     Thu 11 Dec 2025 04:45:20 +0000
Files and hashes:         1: 323830333a633163303a3a2f33322d3332203d3e203532333631.roa (hash: bIPxM/eAKCH1HOeImt+RkI9rG978xG9f6ZV24H0ZxxU=)
                          2: 323830333a633163303a3a2f33322d3332203d3e20323635363739.roa (hash: wq5tUkKuUReQVSGTdTpSqn4lCVZZpi7Q7lYTlkravNw=)
                          3: 34352e342e3231362e302f32322d3234203d3e20323635363739.roa (hash: 2ZAx6V+roMthQj9DYTDAwt5PiSEaAmZhWSyjyXf9/cw=)
                          4: 604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl (hash: +avBMtfsHWzeFlEk9MefMX9gI2BCH1ZR75a4b6O4a+4=)
                          5: 34352e342e3231362e302f32322d3234203d3e203532333631.roa (hash: suDhHyOCnAfaytgoksyE8aD/IPJ6NWyAot4KndhueVg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 04:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f3:88:08:c8:9f:d2:b6:14:f0:8a:80:ee:29:68:38:1a:12:97:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
        Validity
            Not Before: Dec  5 11:29:20 2025 GMT
            Not After : Dec 11 04:45:20 2025 GMT
        Subject: CN=F674C5F3CD9C741F6E3C195B9C7BFC3513923438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:f8:90:84:33:0a:53:a4:a3:94:fd:97:1c:
                    8d:17:f9:0f:41:fc:6e:7d:05:41:5d:ab:f8:55:60:
                    b6:f4:ab:c5:bd:e4:2e:df:f3:28:33:dd:94:7b:25:
                    79:29:76:0e:0b:d6:0e:9c:fd:32:3d:1b:b5:67:e9:
                    fe:39:1a:5a:2b:53:1e:b7:6d:79:1d:f1:5d:ed:11:
                    27:cf:7a:1a:80:bb:be:1b:7f:cf:33:f3:2e:c1:fa:
                    49:0f:e7:d5:25:0a:1d:30:f4:32:f3:e5:86:71:d0:
                    da:13:fc:21:66:4d:b6:e1:35:26:39:07:81:15:0c:
                    fc:e4:7b:61:d5:6c:e9:9b:be:2d:2f:4c:a7:24:91:
                    54:b6:9d:76:31:9b:af:28:48:00:b5:07:8e:e2:01:
                    7f:09:be:4b:bf:cc:10:58:62:a8:7f:fa:e3:8b:b4:
                    ec:be:76:ec:45:67:18:d5:09:5a:14:af:d5:e6:aa:
                    1c:d1:f1:10:09:fc:97:b9:d2:f6:f1:32:70:4e:82:
                    06:e9:fa:ea:11:9a:cc:9b:24:0e:64:17:ce:47:ea:
                    47:61:6d:e6:5d:b6:4b:2e:ce:39:41:a3:99:77:69:
                    f7:12:eb:cd:64:fa:e6:67:71:b6:2f:6e:41:28:85:
                    11:8e:49:1a:2b:79:81:49:18:75:28:0c:fe:af:07:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:74:C5:F3:CD:9C:74:1F:6E:3C:19:5B:9C:7B:FC:35:13:92:34:38
            X509v3 Authority Key Identifier:
                keyid:60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:24:4b:60:83:c9:9c:24:71:91:7e:17:ee:19:40:0d:df:32:
         26:a1:9b:68:24:6f:1a:12:c5:9f:10:47:8b:8f:21:bd:56:a2:
         0b:66:6c:9f:1d:21:28:da:9c:25:95:27:43:e1:70:84:1d:ef:
         d7:ef:80:8b:6d:f5:bc:6f:b0:64:5c:5e:e8:b7:3b:b3:8b:25:
         09:74:d1:fe:aa:a6:52:2a:37:39:65:e6:64:5e:65:eb:7a:9c:
         80:10:e1:7c:6c:db:9d:29:25:76:2c:b6:6a:92:69:b2:52:51:
         97:29:29:e0:39:05:59:20:79:48:32:8f:92:2b:ab:e0:92:30:
         47:51:ba:ab:73:1d:73:16:a0:04:91:75:ed:3e:2c:9d:f8:73:
         a0:c0:9d:67:e2:87:44:78:4c:f4:69:b7:0f:8f:97:a0:e1:e5:
         50:5f:70:8c:86:5c:03:86:a1:52:4e:fe:bf:08:77:e3:6f:20:
         ee:ff:eb:6b:13:dd:23:74:f4:c6:43:87:06:a8:43:23:fe:49:
         d0:24:34:47:7d:52:84:67:11:6b:bb:db:0d:a6:36:e6:19:6c:
         7d:13:70:12:ac:f6:e9:88:ad:52:a6:e7:1a:cd:25:02:75:c2:
         32:da:78:a2:1a:38:6b:39:02:fc:2a:d3:1b:6b:e5:5b:a7:e7:
         e4:fc:f6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----