This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
File:                     BCDD50591AFBE01DD1E89006B709D14B69D79567.mft (raw, json)
Hash identifier:          85R1kQDxkEC/mgKI9facEujVk8M2y4HBEka+1pVNoBI=
Subject key identifier:   E8:BB:51:FA:A6:5D:39:D0:8F:DE:28:22:B8:E2:3D:C4:CD:E3:7B:34
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Certificate issuer:       /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial:       5436EF816A87FC735D3E510B9E65FCE3CA93DF38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
Manifest number:          0141
Signing time:             Sat 22 Nov 2025 13:16:46 +0000
Manifest this update:     Sat 22 Nov 2025 13:11:46 +0000
Manifest next update:     Fri 28 Nov 2025 05:41:46 +0000
Files and hashes:         1: 323830303a6362303a3a2f33322d3438203d3e20323633323434.roa (hash: HG79+FZ1IJmtzxISYDc5++PcOk2TMTwJhOCfg+BwQeE=)
                          2: 3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa (hash: xopTA6jKSIsdkIE6jBzhXIFqdR5+llPDfkKoskVciXA=)
                          3: 3139302e3130362e33322e302f32312d3234203d3e20323633323434.roa (hash: IKpYtNnPqJi7A2I065akkFAJXM/1P20XrCW6mLLJ8DY=)
                          4: 3138362e302e3138302e302f32322d3234203d3e20323633323434.roa (hash: 0DlXsm98HlB5uDzTYzIjyDBNM1DJ5k3QRekEzRjOxzQ=)
                          5: 3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa (hash: r3mpym8MNwnvHxIuYSgXnngQZcrxT6L1+B3uUPWi9dY=)
                          6: 3133312e37322e3133322e302f32322d3234203d3e20323633323434.roa (hash: 9BHe64mInmx7D9r4r9/CtM7RjflnHnNO52klk8Xfo/4=)
                          7: BCDD50591AFBE01DD1E89006B709D14B69D79567.crl (hash: gJ+9vI+CGvHUhEYX9z1vvjzmSascDFYBsXonnqZnoDw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Nov 2025 05:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:36:ef:81:6a:87:fc:73:5d:3e:51:0b:9e:65:fc:e3:ca:93:df:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
        Validity
            Not Before: Nov 22 13:11:46 2025 GMT
            Not After : Nov 28 05:41:46 2025 GMT
        Subject: CN=E8BB51FAA65D39D08FDE2822B8E23DC4CDE37B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5b:9a:7a:e6:60:f6:24:d0:46:26:f8:91:ca:
                    06:6e:9c:f4:22:60:7c:f5:55:c7:3a:e5:d6:84:23:
                    a3:31:8f:8a:11:7f:ed:7d:11:af:33:08:b1:77:38:
                    98:e5:89:57:b0:a6:ee:75:5f:83:e7:98:4e:c9:ff:
                    1d:32:6c:ff:3f:6e:6e:d8:a7:05:2b:de:86:f4:17:
                    bd:eb:8b:4c:78:41:74:7b:1e:cd:06:f8:a1:a3:08:
                    2e:af:c8:61:c9:8f:0a:cd:d9:14:78:6c:de:0e:af:
                    fe:b8:4f:1d:de:85:b1:9b:e5:74:9c:90:50:1a:a6:
                    d3:68:90:5a:c7:2c:3c:3a:51:37:4c:f7:84:13:04:
                    cc:76:0c:ae:0f:be:22:02:53:1d:21:3c:55:b1:06:
                    1b:dd:5b:3b:ee:e5:9c:b9:b7:17:28:49:66:bb:15:
                    e5:ff:65:d9:da:10:71:8b:d1:7a:9f:05:26:14:1f:
                    70:44:e5:06:ce:67:66:a3:99:37:f3:39:6e:d7:fe:
                    67:34:67:6d:89:4a:1b:80:77:89:15:d8:6e:00:18:
                    b6:bf:f4:9c:9a:6a:ee:2d:dc:c4:a1:a2:bb:c9:c7:
                    87:02:e4:f4:56:50:29:6b:e1:cd:71:18:17:37:4d:
                    d9:85:5f:99:67:76:05:cb:32:36:76:00:ac:12:64:
                    1b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BB:51:FA:A6:5D:39:D0:8F:DE:28:22:B8:E2:3D:C4:CD:E3:7B:34
            X509v3 Authority Key Identifier:
                keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4b:44:1b:19:64:69:72:bf:cc:e4:fd:ab:18:de:09:92:97:
         e9:b4:dc:b4:b2:70:54:83:3b:51:16:47:48:ef:6a:14:69:4a:
         de:29:d1:e9:94:61:29:11:82:c6:b2:1a:42:9c:cf:fc:bf:8e:
         ec:d5:6e:cd:67:6c:67:0a:88:9a:68:a5:88:d1:71:f4:c2:08:
         cf:ff:33:fa:ac:6d:df:11:f8:ab:f4:59:89:35:e1:76:ff:45:
         ea:cc:af:4b:c7:9d:85:a6:74:0d:99:b9:c5:6a:ce:b7:60:6e:
         86:cf:f9:65:8f:85:3c:8f:96:1b:35:b5:7b:69:dd:52:f9:38:
         24:44:db:e2:6f:46:79:9f:ee:70:e1:18:3c:2f:82:44:4f:b8:
         33:1a:90:07:9e:20:1e:d4:a2:01:80:d6:66:c8:b4:f9:d4:52:
         fe:18:4f:68:51:e7:0a:d9:3b:c0:9a:c6:97:93:3f:c4:45:af:
         aa:1e:52:97:7b:39:46:16:23:3f:23:2c:b6:f3:6e:d8:25:b6:
         81:13:ed:ca:c1:3d:15:ff:9f:42:b9:65:6c:6b:4e:ac:1b:3e:
         1c:3d:5b:81:65:2e:ce:b6:d4:7f:4b:c0:76:6e:61:1f:fa:2f:
         24:02:aa:a2:62:f7:9b:0e:c2:53:d7:e2:9e:3a:1c:8c:d6:2c:
         e1:4e:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 24 13:29:12 2025 by rpki-client