This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft
File:                     D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft (raw, json)
Hash identifier:          Fty27z6UbdSaG8u+TApfvHLRrEyF9zfAutLi3eg+jaA=
Subject key identifier:   71:C5:75:CF:1B:12:5E:68:24:2F:58:FE:C8:5D:13:B6:2D:30:46:AE
Authority key identifier: D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9
Certificate issuer:       /CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
Certificate serial:       24397BC8E3027E0E8D694841AC86CF457478C8B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft
Manifest number:          0147
Signing time:             Wed 24 Dec 2025 05:48:09 +0000
Manifest this update:     Wed 24 Dec 2025 05:43:09 +0000
Manifest next update:     Tue 30 Dec 2025 04:49:09 +0000
Files and hashes:         1: 3132382e3230312e3136382e302f32332d3233203d3e20323635373436.roa (hash: 0y5cd72WVuypMCbGfKkoipakxo8YKrcvDEe55BKxSbk=)
                          2: 3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa (hash: EUbSI5tX26rgtunLcvMguWJ3e3VsoBvkT3pVP+Mrvw8=)
                          3: 3132382e3230312e3136392e302f32342d3234203d3e20323635373436.roa (hash: baLlqtzcZif4KXwD+lxVWiP0tEUUObq610B+RBQCI00=)
                          4: 3132382e3230312e3137302e302f32342d3234203d3e20323635373436.roa (hash: Gv84KNSihUZv68Ln46i4z4TUC8czrteO0mVFdbd8Prc=)
                          5: 3132382e3230312e3137312e302f32342d3234203d3e20323731393439.roa (hash: RNu1XIWNIC+LbJyhIQFGQn8HDuwMkjhRDMaR1vBaBa0=)
                          6: D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl (hash: pdcQ5H7iA80ployCVS7v5ImciCoZ9jZLp7LBQmta2CE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 01:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:39:7b:c8:e3:02:7e:0e:8d:69:48:41:ac:86:cf:45:74:78:c8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
        Validity
            Not Before: Dec 24 05:43:09 2025 GMT
            Not After : Dec 30 04:49:09 2025 GMT
        Subject: CN=71C575CF1B125E68242F58FEC85D13B62D3046AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:8d:f3:52:d4:0d:70:36:34:29:b4:8f:e9:
                    d7:6d:ec:a4:cc:b3:be:69:dd:13:ac:31:5e:83:7b:
                    43:c3:4a:7b:ea:41:39:61:f5:bd:a7:7a:28:c1:82:
                    a8:6a:eb:0d:40:6b:68:7f:28:c5:36:7b:42:5f:f5:
                    e7:a3:0a:6d:ef:04:be:7e:e9:2d:4f:eb:a5:d1:78:
                    8c:cf:e0:e4:df:36:db:19:83:f4:a4:e4:b9:9a:34:
                    ad:df:49:1e:3c:1e:a0:45:75:1d:41:be:18:1b:fb:
                    c8:f7:52:b9:83:a8:bd:f5:90:d7:11:64:d6:f7:60:
                    a9:4a:ea:bc:5c:78:82:6e:5c:d3:96:b6:b0:b7:56:
                    66:4e:f1:5d:d3:cf:0c:81:c2:a4:1b:84:83:f2:42:
                    5d:70:a8:4e:e6:fc:54:e1:11:88:7f:f4:f9:2d:d6:
                    1c:9b:19:07:cc:b7:62:32:9a:fe:98:fa:1f:d2:a1:
                    25:7e:9a:a1:0c:8f:7e:83:f9:59:8d:44:81:8b:c7:
                    52:66:42:25:20:04:7b:2a:a7:70:3b:e8:14:76:52:
                    8e:68:88:38:9e:74:cb:97:9b:85:2f:8f:f6:a6:94:
                    7e:38:87:fa:4d:f5:d1:6e:c9:21:17:22:73:26:f4:
                    37:d4:5d:90:32:78:fd:70:51:91:b8:b8:2b:dd:aa:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C5:75:CF:1B:12:5E:68:24:2F:58:FE:C8:5D:13:B6:2D:30:46:AE
            X509v3 Authority Key Identifier:
                keyid:D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ac:f5:62:19:7d:98:43:88:a6:7e:02:fd:06:f8:db:ca:8f:
         9a:8a:cd:b2:45:e7:f2:c6:1e:1b:87:05:f9:d8:8b:bb:19:40:
         d8:47:57:1c:a7:4c:bb:6b:d0:81:5b:97:ea:26:1f:49:ff:b7:
         78:a3:18:9e:ee:c3:0e:a5:47:15:ed:37:71:c1:69:6e:76:50:
         b6:95:12:ed:cb:11:0b:88:81:67:f6:6b:42:45:20:18:08:2f:
         3d:20:93:12:e8:5d:7e:b5:38:2e:65:c8:e9:6e:ad:fc:ac:54:
         10:d0:ae:81:d1:c9:19:49:1b:4e:55:34:97:09:60:52:fe:eb:
         6b:2b:1a:4c:2a:49:ba:91:d5:96:8a:9f:d3:98:35:83:ee:f6:
         c0:5a:bc:1e:9a:aa:c9:91:aa:97:bc:c4:3d:05:d5:fb:07:56:
         6d:f7:c8:5d:f1:d8:25:fc:7e:b3:7d:87:24:a6:f6:5e:3c:a9:
         06:90:cb:ef:25:66:45:f8:50:a7:41:9d:e5:42:55:94:2a:4c:
         f9:80:bf:7b:58:e6:4d:71:f6:2b:96:60:fc:34:e1:5e:df:7a:
         e0:a7:2a:a1:60:87:3a:d9:5f:57:8c:ef:73:bc:9f:0e:87:58:
         6b:0c:ff:ff:b9:6c:e4:05:19:0d:35:55:8e:21:b7:4e:e7:0f:
         56:6a:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 18:57:52 2025 by rpki-client