This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.mft
File:                     D5752923966F847D0B5CFFF17C8C51A4E595421C.mft (raw, json)
Hash identifier:          RnNyR1Ltu6l7xi8Hf+Ek5i3kRcVLVJ7yYtxNRKGAgOE=
Subject key identifier:   EB:1B:C9:FD:D0:FE:E8:72:37:2B:81:FE:9B:36:55:95:7B:D8:FA:49
Authority key identifier: D5:75:29:23:96:6F:84:7D:0B:5C:FF:F1:7C:8C:51:A4:E5:95:42:1C
Certificate issuer:       /CN=D5752923966F847D0B5CFFF17C8C51A4E595421C
Certificate serial:       0FBD25BE4F45197B967034F334A034980309C373
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.mft
Manifest number:          0148
Signing time:             Fri 19 Dec 2025 09:25:16 +0000
Manifest this update:     Fri 19 Dec 2025 09:20:16 +0000
Manifest next update:     Wed 24 Dec 2025 20:50:16 +0000
Files and hashes:         1: 323830313a31633a333030323a3a2f34382d3438203d3e20323635383430.roa (hash: i/fTVaPmqY+QTxzUS/C/PUapEBddYBeiEiFPExfg/Cg=)
                          2: 34352e352e31322e302f32342d3234203d3e203136393036.roa (hash: /3J6LPg8BY3XSX1Cko5odGmhio5FIm2vERS2cKB97qo=)
                          3: D5752923966F847D0B5CFFF17C8C51A4E595421C.crl (hash: rjKFdqGKnKOrJI3eZMzNVcfv7GUdEs37ikcR4mEAl4g=)
                          4: 323830313a31633a333030303a3a2f34382d3438203d3e203136393036.roa (hash: /ZbByFhJVpQEnIDx8NfrsNuKfobzoxifDjDR+sA0Dd8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bd:25:be:4f:45:19:7b:96:70:34:f3:34:a0:34:98:03:09:c3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5752923966F847D0B5CFFF17C8C51A4E595421C
        Validity
            Not Before: Dec 19 09:20:16 2025 GMT
            Not After : Dec 24 20:50:16 2025 GMT
        Subject: CN=EB1BC9FDD0FEE872372B81FE9B3655957BD8FA49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:b5:24:36:a8:73:09:79:9a:49:7c:4a:59:
                    b1:ca:78:2a:54:3e:15:be:86:65:ff:75:c6:9c:be:
                    2e:f0:1b:6e:a8:cd:5c:cc:83:84:51:1b:3a:ff:4a:
                    40:4a:04:41:6c:c6:5a:c1:f5:84:5c:96:3a:10:86:
                    c5:68:88:65:0f:1d:a6:77:57:01:8e:d3:9d:15:e1:
                    73:a2:18:f3:74:0c:ca:4b:d9:e8:7b:d0:2c:2e:5b:
                    87:9e:e3:8d:e3:d6:5f:92:08:04:4b:16:62:d6:91:
                    89:0a:af:75:f2:00:f9:b0:82:2f:b8:73:48:7b:56:
                    d0:69:b0:26:ab:15:d9:40:41:05:7b:f3:47:2f:93:
                    dc:c7:03:f9:2c:fd:3c:b2:45:40:8a:38:bb:50:8d:
                    c8:db:ba:a8:89:fb:14:40:c6:7e:53:54:b0:4b:b2:
                    4d:92:53:6c:36:f4:4a:f5:c8:d1:1f:53:d2:73:9d:
                    b8:a7:80:4d:25:a1:20:d5:e9:ac:ff:13:6c:26:ae:
                    a6:07:de:09:2a:2a:d4:06:5e:56:f8:e4:7e:aa:e2:
                    46:f7:ef:a2:fa:c6:53:40:74:c3:5d:fa:e6:6a:1f:
                    8c:84:20:e4:1d:9b:f5:59:ae:80:ff:d8:1a:57:e4:
                    62:6f:69:86:2d:06:7b:9c:33:a8:86:42:74:b2:a0:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1B:C9:FD:D0:FE:E8:72:37:2B:81:FE:9B:36:55:95:7B:D8:FA:49
            X509v3 Authority Key Identifier:
                keyid:D5:75:29:23:96:6F:84:7D:0B:5C:FF:F1:7C:8C:51:A4:E5:95:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:36:7f:a1:56:80:78:0b:ba:25:ed:bd:47:f5:68:85:1c:
         1c:96:a3:71:2c:4e:f2:7c:c3:96:d6:33:70:75:3d:bc:f5:01:
         16:b9:91:64:4c:81:d9:86:2c:fe:e9:02:25:22:1a:52:2c:cf:
         34:f3:20:c7:8c:3c:cf:a1:79:65:55:f5:ea:4c:16:f0:81:47:
         55:0d:19:40:89:33:94:9c:df:1c:0a:0b:48:d1:d0:5d:f2:2f:
         f7:89:c1:80:b2:2d:67:03:6d:9a:ab:79:64:09:9b:ee:a3:06:
         56:58:49:59:43:9b:32:a7:39:9e:e9:f9:d3:fa:70:e0:84:cc:
         ba:2f:ba:65:9a:81:9b:d0:36:6f:a2:82:72:c8:f4:69:10:0f:
         96:28:82:a4:6e:45:d7:74:d8:ef:82:3f:32:6c:b1:99:af:8a:
         9b:24:1d:bd:c3:99:89:dc:1a:25:ec:99:b3:f0:02:2d:6a:5a:
         9b:37:9f:23:38:0f:49:35:01:f3:f1:fd:b1:99:f1:8c:a2:73:
         ee:fb:35:0a:61:4f:21:e6:15:62:63:fe:ca:06:6d:4e:c7:cf:
         58:c8:70:7a:37:41:a2:a4:8b:aa:34:f5:b5:a6:c4:95:cc:3d:
         5f:ab:90:75:e3:0b:67:d2:b6:b0:ae:d8:62:8f:28:28:ee:01:
         14:59:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:57:27 2025 by rpki-client