This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
File:                     D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft (raw, json)
Hash identifier:          8q4kkPXuRBLkjlPbcTD5IRhod0bonKT+GSt/AuhZLpk=
Subject key identifier:   A9:34:54:19:E4:91:8B:9E:70:33:51:FA:5A:C2:92:81:4E:A7:4F:EB
Authority key identifier: D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF
Certificate issuer:       /CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
Certificate serial:       589580C22B8AFCBF6F1084C516AA308816328A70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
Manifest number:          0149
Signing time:             Fri 19 Dec 2025 20:36:35 +0000
Manifest this update:     Fri 19 Dec 2025 20:31:35 +0000
Manifest next update:     Thu 25 Dec 2025 04:16:35 +0000
Files and hashes:         1: 323830333a323338303a3a2f33322d3332203d3e203631343930.roa (hash: 37FGoqHql1lAwS1I4gY7cxjuGK15+aGng9+TwPzr39o=)
                          2: 3133312e3130382e3134312e302f32342d3234203d3e203631343930.roa (hash: 9AORvdZhHNHLMxlBF30Yr1xq7sW3FUp/1yp8qzNjziM=)
                          3: 3133312e3130382e3134302e302f32322d3232203d3e203631343930.roa (hash: DfpTFjVvf1alvruUaebab5xYVfRBTs3q5fSr7tBGsI8=)
                          4: 3133312e3130382e3134322e302f32342d3234203d3e203631343930.roa (hash: hYxVB1Q6S8ci9bGO91VqG0Jb7oFrhIE/NNPJtC6vnlQ=)
                          5: 3133312e3130382e3134332e302f32342d3234203d3e203631343930.roa (hash: SS+Ot+ZRvgQ0dt529+nWCiN4jRhfOlSab7bEew+i/jA=)
                          6: 3133312e3130382e3134302e302f32342d3234203d3e203631343930.roa (hash: Xk7kdKnH7ySRqM5jbPx5P2c7kxZVYEizDWQ+dzxTITc=)
                          7: D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl (hash: 6wfdoGdCMsFBp254DLGA+Ayj7jCHwSh3+AieAbyPAF4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 17:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:95:80:c2:2b:8a:fc:bf:6f:10:84:c5:16:aa:30:88:16:32:8a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
        Validity
            Not Before: Dec 19 20:31:35 2025 GMT
            Not After : Dec 25 04:16:35 2025 GMT
        Subject: CN=A9345419E4918B9E703351FA5AC292814EA74FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:d3:f8:80:e2:53:b5:d1:92:2e:79:a1:8e:
                    0c:fb:19:6c:b5:42:f7:08:a1:93:52:d8:95:6a:9e:
                    c6:cc:77:7e:d1:c8:11:6c:6e:01:2a:b0:e9:4b:f0:
                    0b:dd:48:c2:57:c3:79:0d:a7:23:ff:5c:58:bc:1e:
                    7d:77:7c:45:50:f7:1d:67:06:2e:80:f4:89:93:ed:
                    0f:72:56:de:9b:93:29:b7:2d:5c:40:fb:34:41:c2:
                    e4:54:2a:31:ab:f0:35:88:fc:50:e1:48:bd:7e:35:
                    4d:43:1f:f5:b1:27:df:a8:2b:b8:ff:3a:6c:3c:98:
                    f8:76:d4:9b:16:0f:24:50:b3:66:0b:13:16:bc:b4:
                    97:52:80:34:cb:26:25:1b:b9:a0:59:4f:c4:75:93:
                    3e:4a:1a:ee:89:c7:85:d8:9e:06:40:a6:0f:11:be:
                    28:95:ad:f1:94:b9:a7:61:a6:03:47:45:66:94:a2:
                    9f:c1:79:01:ff:9c:56:99:2c:0c:f5:ac:7b:77:1b:
                    fe:4c:be:78:6b:6a:bd:f5:19:72:41:6f:57:11:21:
                    f2:ce:a6:8e:09:35:57:0a:56:81:8a:58:de:01:8f:
                    19:5a:7e:43:dc:e1:b1:72:65:7c:1b:52:9b:a5:e8:
                    f5:cf:7f:4d:18:38:36:74:7a:9d:f3:88:8f:18:1c:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:34:54:19:E4:91:8B:9E:70:33:51:FA:5A:C2:92:81:4E:A7:4F:EB
            X509v3 Authority Key Identifier:
                keyid:D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5c:60:8f:f6:75:80:aa:c6:e8:4b:cc:24:9f:da:d2:5a:db:
         2c:86:10:83:46:05:0b:2c:25:f8:41:c2:86:db:31:36:18:ac:
         51:1b:99:00:78:7e:1f:b2:e1:f0:c1:49:31:49:ea:0e:ad:6c:
         31:c5:19:76:6d:7b:27:57:53:d9:73:c0:b3:2f:97:64:77:b3:
         23:a2:c0:fd:1a:31:73:27:5c:4a:ac:4d:89:d2:6d:6d:4d:fd:
         f3:47:f1:d1:2e:fa:ec:09:1f:de:92:98:45:bb:b3:72:6c:47:
         f5:90:66:6c:2e:0d:ee:f8:b4:ca:75:97:12:f0:6d:96:c5:68:
         b5:8c:94:51:b8:55:c3:6a:9e:61:33:04:55:bc:5e:43:ee:5e:
         a1:1c:d5:d2:c7:a5:14:c3:a9:84:20:0d:d3:6c:51:9e:4b:75:
         2a:ea:af:66:e3:8e:17:3d:0a:c2:0a:6c:cf:aa:5e:66:bb:d1:
         8b:1d:65:96:f0:18:b0:35:30:c7:dd:81:5e:97:c4:59:df:3e:
         b1:7a:99:2f:dc:2b:f6:76:7b:a3:e6:7d:7e:cb:c6:2a:09:2f:
         76:37:e3:33:81:34:8d:dc:3a:0f:c6:95:c7:7d:1c:c3:67:fe:
         c6:2c:7a:db:33:08:a7:6a:0c:ac:fb:bc:13:a0:6b:e5:ea:99:
         aa:45:a6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:22:32 2025 by rpki-client