This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft
File:                     DC553BD05B33548C342568566291E719B4FA73B9.mft (raw, json)
Hash identifier:          lFaVZ9iHFPz5e+nHyMkhWrM8Jbqaeoy0ME+3+RhY510=
Subject key identifier:   7F:2C:49:F4:21:C8:38:AE:27:BF:1B:F0:4F:A3:6A:B8:17:C0:C7:31
Authority key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
Certificate issuer:       /CN=DC553BD05B33548C342568566291E719B4FA73B9
Certificate serial:       27B3328E7AF0D29A1D6A6B493153A3E04C482CA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft
Manifest number:          014A
Signing time:             Sat 20 Dec 2025 19:25:58 +0000
Manifest this update:     Sat 20 Dec 2025 19:20:58 +0000
Manifest next update:     Fri 26 Dec 2025 17:42:58 +0000
Files and hashes:         1: DC553BD05B33548C342568566291E719B4FA73B9.crl (hash: WjWeU+QhWRRNGc8U061JeTZcEfN/HcWQfVV2Evtn5ys=)
                          2: 3138362e36342e3132342e302f32322d3232203d3e203332303334.roa (hash: oYEzWeF5YGsRiKoMxJOuiv8L53x4uOIwi8f4J7g8zWc=)
                          3: 3138312e3139392e3132382e302f32302d3230203d3e203332303334.roa (hash: Xkp7YgxMcsZAoAu98b4G9vcHnpb9tFZOHt9nlsZIR68=)
                          4: 3133382e33362e3134352e302f32342d3234203d3e203332303334.roa (hash: UjfE20EWSyFwNRQQZsKShdJFZd1urg4qiV9LtA9Qybk=)
                          5: 3133382e33362e3134342e302f32342d3234203d3e203332303334.roa (hash: DLmoj2atxvn9Mfqu7VBjdYEexeeGv6TFfnaaNE9wIsk=)
                          6: 3133382e33362e3134372e302f32342d3234203d3e20323635353135.roa (hash: fmvwhJoSPRZs5HuL4TboIcJZhdlGg4dygScNi/e1Wyo=)
                          7: 3138312e3139392e3134312e302f32342d3234203d3e203332303334.roa (hash: by/zYzH9sTJ9Ag2PeXhNM7w0fMQkrQB/+R+yWMQwzeg=)
                          8: 3230312e3135382e35322e302f32322d3232203d3e203332303334.roa (hash: vPXHeyaYYZgqh5jQX5UJQHfvZIJWfuopjgFQi4qsXE8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 17:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b3:32:8e:7a:f0:d2:9a:1d:6a:6b:49:31:53:a3:e0:4c:48:2c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC553BD05B33548C342568566291E719B4FA73B9
        Validity
            Not Before: Dec 20 19:20:58 2025 GMT
            Not After : Dec 26 17:42:58 2025 GMT
        Subject: CN=7F2C49F421C838AE27BF1BF04FA36AB817C0C731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:eb:df:0c:2e:8f:ae:9f:d7:06:8f:15:25:
                    28:4f:c4:47:ba:dc:c2:46:45:e7:3f:1b:2a:5d:cd:
                    4a:ea:cb:09:c3:6f:53:1d:c8:c3:c4:0a:34:1b:d2:
                    fe:a5:ac:5d:05:1f:17:1d:c3:c0:17:d8:50:09:50:
                    6e:f8:78:ac:5e:cd:c0:80:a8:e9:3b:aa:f2:96:22:
                    78:2c:5f:58:8f:a2:25:cf:87:aa:37:ca:09:0f:12:
                    7f:1c:81:20:00:c6:55:99:f0:fa:7f:6f:3e:22:9b:
                    38:07:42:4e:8c:3c:8d:98:9e:60:b0:d8:2e:a5:54:
                    47:b2:23:44:e7:a6:87:83:6c:4a:5d:8e:66:6f:5b:
                    db:27:47:e4:0b:ca:26:d5:db:f4:d9:8f:94:8f:9a:
                    0c:f8:f4:05:5f:fe:eb:9f:b8:f3:8e:5a:9a:8a:87:
                    a5:ab:30:10:4e:a4:27:38:b3:c0:b1:47:32:a5:12:
                    53:73:ae:da:2c:0c:b5:4e:08:24:da:b0:d8:1a:cb:
                    23:e6:ff:91:10:ef:81:c5:3f:b9:49:79:ce:37:47:
                    29:36:c5:95:cb:5d:15:e3:96:92:ea:c6:50:61:e7:
                    03:80:45:68:08:91:9e:96:46:82:75:12:ed:a2:4f:
                    96:89:32:9f:90:40:d0:26:4c:45:db:23:2a:a7:8c:
                    bb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2C:49:F4:21:C8:38:AE:27:BF:1B:F0:4F:A3:6A:B8:17:C0:C7:31
            X509v3 Authority Key Identifier:
                keyid:DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:33:4a:a0:b9:40:2b:bc:5c:35:ff:ac:55:31:31:76:c7:97:
         64:6b:fd:88:b4:56:66:99:d5:a6:b4:3b:ec:01:e4:77:e2:aa:
         4a:bc:bd:1a:78:70:ad:4f:a7:99:54:2c:30:3e:d9:0e:f8:61:
         e1:2b:e7:dd:d4:74:dd:0f:ae:18:9c:32:d2:ec:d6:04:d0:c6:
         3c:3e:22:32:0f:08:86:a7:00:c0:d6:40:41:42:11:42:4a:e4:
         08:5d:85:2b:47:02:bc:a0:43:60:23:b7:f1:53:d1:9f:f6:34:
         7c:dc:bd:c8:88:4a:12:cd:57:0e:73:98:d9:7a:4a:10:2e:73:
         2d:16:53:dc:5f:a7:14:63:37:b4:86:e4:6f:7d:0b:07:29:cb:
         2d:06:60:9f:c3:7f:c4:df:da:a3:75:45:29:9a:47:c5:9f:88:
         ee:ef:e5:ed:3f:a9:2d:91:db:06:e0:16:95:72:8f:b9:3c:1b:
         81:cb:30:f5:8d:0d:5b:e2:bb:01:73:94:44:3f:54:fb:b5:f5:
         ab:47:16:10:e7:e0:23:c0:99:97:8f:a6:79:d2:5c:e4:d8:fb:
         57:dd:e7:1d:44:0a:2d:ad:90:b9:02:71:de:70:ea:1c:88:19:
         bd:6c:b4:e0:1b:59:6d:bb:16:3b:48:af:9c:1e:1c:f8:e3:a5:
         9a:47:d3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:29:50 2025 by rpki-client