This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft
File:                     512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft (raw, json)
Hash identifier:          1CgdiYrOOvkUvupzLJ3wFE37P1WS6Eke4lzw9AHE5Wc=
Subject key identifier:   D4:9B:4A:F4:41:AC:A1:5E:61:BD:B2:D8:2A:C7:41:15:21:F1:20:DB
Authority key identifier: 51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C
Certificate issuer:       /CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
Certificate serial:       5F88446690FB7B4D49776B13ADD90EC73014B952
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft
Manifest number:          0142
Signing time:             Sat 20 Dec 2025 21:37:23 +0000
Manifest this update:     Sat 20 Dec 2025 21:32:23 +0000
Manifest next update:     Thu 25 Dec 2025 12:53:23 +0000
Files and hashes:         1: 3230302e36322e36342e302f31392d3234203d3e203134373534.roa (hash: YXsmbJH78VUcAhuyB0FzJF0P74n8HMRAUlYUJxtV0aE=)
                          2: 512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl (hash: cv2pXwElXRhNpZpC0Xih6Is9gDNE/lTTKqt7l7rVNQU=)
                          3: 3139302e3231322e302e302f31382d3234203d3e203134373534.roa (hash: k+/tInh1hPDsSkNfga9VFWTvfQK2VoUYs4y+fL6x8zI=)
                          4: 3139302e3231322e36342e302f31382d3234203d3e203134373534.roa (hash: Mt6BA8MmzQm9RLKygJL5I324pqii/Bcz8RvrD9Ntx6w=)
                          5: 3138362e37362e302e302f31352d3234203d3e203134373534.roa (hash: JmsUY4Y6+YRa61wi2PSTJT3x29aXXQL3D5W8GQPRm0I=)
                          6: 323830333a326436303a3a2f33322d3438203d3e203134373534.roa (hash: XKEjavoIqS6/TUrz7A02vk9sjHc+AueGFojF0r3J+DA=)
                          7: 3230302e36322e39362e302f31392d3234203d3e203134373534.roa (hash: OlPLoFF8q2PxQjDllsShqBRLcE8yszjqHNkqSUzr9X4=)
                          8: 3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa (hash: fP0nwdAwxjmfHnFyq1AsAwrlKSmkS/BhIHmnxk1f0oQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 12:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:88:44:66:90:fb:7b:4d:49:77:6b:13:ad:d9:0e:c7:30:14:b9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
        Validity
            Not Before: Dec 20 21:32:23 2025 GMT
            Not After : Dec 25 12:53:23 2025 GMT
        Subject: CN=D49B4AF441ACA15E61BDB2D82AC7411521F120DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:ae:ee:a5:d9:17:3d:4f:37:51:88:12:db:
                    5f:1c:92:8f:4f:ab:ba:57:e1:bd:64:de:a6:67:a8:
                    aa:95:51:7a:fe:a6:41:4e:01:4c:1f:72:c1:ef:2f:
                    db:82:8a:2c:e9:6d:60:a5:41:c4:5a:18:9c:bf:e7:
                    88:d1:40:76:a8:1f:84:60:15:6e:94:37:87:eb:05:
                    cc:9d:2b:fc:77:c1:f4:32:5b:28:ce:e0:df:46:4c:
                    72:3a:8f:a0:dd:01:5d:c6:f3:f2:8e:75:99:d6:b4:
                    66:81:e6:21:13:4b:c5:53:03:4a:6b:59:a9:a7:ac:
                    bc:84:c8:dd:8c:67:d1:a5:da:8e:c6:89:24:d8:f9:
                    93:d1:d2:79:58:c0:b9:be:e0:9c:ca:8a:35:b2:94:
                    33:79:40:5e:6f:99:e5:b7:46:9d:d1:6e:62:e2:5f:
                    e3:27:cf:bb:9b:f0:62:29:7a:11:d9:97:d4:22:cf:
                    b0:db:6e:2d:71:3f:fd:8f:f6:c4:c6:80:13:ef:80:
                    b4:5c:3d:b3:3b:01:76:3d:45:d1:d4:4a:7d:70:bc:
                    3a:c3:76:0d:b6:3a:7c:e9:0d:54:83:a4:8b:c4:e8:
                    fd:cb:03:f9:58:ae:7b:7f:17:c7:7e:c0:97:45:68:
                    5d:a3:85:f3:a4:31:22:b1:4b:13:23:88:af:c9:26:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9B:4A:F4:41:AC:A1:5E:61:BD:B2:D8:2A:C7:41:15:21:F1:20:DB
            X509v3 Authority Key Identifier:
                keyid:51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:11:57:bb:17:94:44:1b:1b:aa:1f:3a:1f:e0:4d:de:87:
         fd:06:87:33:f1:91:36:f6:c0:2d:26:ec:c3:29:f9:04:ee:1a:
         ac:72:cb:ae:8f:4a:f1:26:13:23:e2:0d:5d:22:f1:ec:e9:11:
         29:b9:5e:35:f1:e3:33:8a:8d:72:9b:0a:63:f3:b2:05:8a:25:
         bf:78:9d:bc:8c:83:e1:0b:27:99:11:cc:9b:4c:34:f3:d3:b4:
         5f:bc:59:83:ca:4a:c6:a4:32:8d:d6:63:3a:98:ef:31:56:ad:
         0d:0d:86:4f:b8:c5:a9:16:87:2d:d4:b5:4d:24:44:f2:93:da:
         c4:83:f5:3a:96:14:f6:10:5d:a4:97:18:97:b5:e5:bd:80:2a:
         48:d2:d6:b4:20:4e:da:df:a9:8e:a7:c2:22:3a:ae:fb:d9:be:
         7d:a7:bb:b2:c6:bf:76:e0:c9:bd:6a:b2:4c:8d:26:2a:44:17:
         38:19:dd:ec:e8:8e:81:d8:e9:74:bc:e6:b6:a8:99:93:c2:7d:
         31:9b:bc:07:84:fb:12:65:ee:0b:3f:e0:8d:6b:78:6b:70:19:
         6b:1b:49:bd:31:ba:a2:10:b1:e2:db:6f:c8:bf:68:6c:d9:17:
         72:74:84:04:6c:72:55:ce:e0:38:dc:3c:65:66:f0:e6:86:9b:
         d3:f9:d9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:16:55 2025 by rpki-client