This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
File:                     5D81157E960567670F7461B44557EFEA818501D2.mft (raw, json)
Hash identifier:          EkxJsl/Pvco3igFsF1AlRvNrbhIX1KNaOxbwpza4UPY=
Subject key identifier:   6B:AD:EB:BA:03:FF:76:F8:FA:1D:1C:71:A3:5B:09:4C:10:45:5E:B5
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       5FE211FA63252058E86BF8511FF76E88CFFBCCE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
Manifest number:          0150
Signing time:             Sat 20 Dec 2025 04:27:04 +0000
Manifest this update:     Sat 20 Dec 2025 04:22:04 +0000
Manifest next update:     Thu 25 Dec 2025 09:21:04 +0000
Files and hashes:         1: 3230302e372e3136302e302f32302d3234203d3e203237383238.roa (hash: yhraEemo5oNZS1Vp/2RMyrvdvUHvcFt5radrCdAXO9E=)
                          2: 323830313a3130343a3a2f34302d3437203d3e203237383238.roa (hash: U0g+ZhC8/zG80aq7e5Hpc9RnzXpIMukrBY3+kAVFjYE=)
                          3: 5D81157E960567670F7461B44557EFEA818501D2.crl (hash: cbxvGsMz1WZ/axIAnejFAt0w5SeKfWrIHnNSD1UXgW0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 09:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e2:11:fa:63:25:20:58:e8:6b:f8:51:1f:f7:6e:88:cf:fb:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Dec 20 04:22:04 2025 GMT
            Not After : Dec 25 09:21:04 2025 GMT
        Subject: CN=6BADEBBA03FF76F8FA1D1C71A35B094C10455EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:73:b8:41:98:06:25:8c:16:28:79:b8:09:
                    68:08:a0:25:cb:c7:ed:87:ce:52:66:ea:ae:6f:17:
                    57:53:a5:ce:a2:fc:be:0e:26:05:d9:d6:9b:25:10:
                    85:d5:26:e8:91:ef:a7:2f:62:ef:3e:d6:c3:e4:ae:
                    c0:a5:72:6b:4e:db:a4:fa:89:6a:9e:cf:16:e2:ff:
                    c9:f8:b8:f3:0d:54:54:3b:de:a6:05:c4:e3:5a:1d:
                    8e:28:a5:4a:e8:13:33:39:3b:f8:f9:22:7e:9f:25:
                    08:f6:16:9b:b7:f1:12:92:bb:ac:74:73:d0:5b:20:
                    a6:21:c7:92:28:bf:72:d7:6e:f6:83:f9:ec:6f:51:
                    5b:fb:80:e1:90:11:59:54:fa:78:cb:d8:b9:3c:3a:
                    09:f6:02:ad:8e:e9:d4:e2:93:a0:75:a0:9d:b4:aa:
                    4f:44:2d:76:5c:5d:21:a8:5a:0b:4f:9a:3f:f8:76:
                    02:0b:cf:91:d7:50:4e:c6:0a:8c:52:cc:dd:57:80:
                    46:26:be:12:69:4b:65:9c:01:d5:8a:33:43:e7:ab:
                    18:a0:7e:f3:0f:57:d7:e3:6f:f9:1e:81:8f:94:c4:
                    7e:2a:24:6c:ce:36:14:32:cd:39:13:1e:78:bf:9f:
                    94:6b:eb:2a:60:cb:2e:0c:cf:e0:eb:21:0d:4d:a4:
                    0d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AD:EB:BA:03:FF:76:F8:FA:1D:1C:71:A3:5B:09:4C:10:45:5E:B5
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:11:81:a5:45:67:71:5b:17:e2:c3:94:2f:38:47:4e:75:be:
         5e:bb:4a:a6:df:2b:25:47:5e:ae:f6:a0:db:1e:a5:c9:55:08:
         40:e8:82:c4:a0:f8:2f:c8:8e:99:c7:ed:0b:ba:59:f2:5e:32:
         ff:67:96:f6:e8:e6:be:b6:7d:5e:72:28:11:a8:4c:f0:e7:3c:
         2a:35:6f:92:81:89:b4:4f:cb:71:be:d2:19:4b:8d:90:2c:f1:
         e2:8d:70:08:a8:8b:41:44:9f:5b:01:21:d7:46:18:df:d8:5d:
         f4:6f:6d:2f:a0:f9:d6:9e:1d:e7:b2:10:0a:ec:a1:16:e0:15:
         98:10:b6:18:8b:4b:ca:ba:33:bf:2b:bd:83:ff:31:72:71:14:
         db:d3:b1:cc:f1:e5:49:7f:b8:89:b3:1d:48:7f:8e:b3:d3:27:
         db:91:ee:9b:75:5a:eb:6a:f1:f8:74:2d:85:89:49:39:ad:4f:
         c9:ba:11:c0:98:ac:9e:86:0f:0b:67:6a:c8:96:b8:fb:a0:af:
         25:d6:b2:a9:65:40:27:bb:e6:8d:5b:d7:fa:a5:30:d0:ad:d8:
         f3:7a:cd:02:13:79:fb:e2:04:32:27:55:c4:3c:d2:e9:6c:5d:
         10:66:9f:32:ba:1c:7c:6e:fe:bd:d8:91:29:31:94:16:5f:8a:
         8c:f1:51:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:09:05 2025 by rpki-client