This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
File:                     BCDD50591AFBE01DD1E89006B709D14B69D79567.mft (raw, json)
Hash identifier:          vwOmIlYsqveUlgLfLYY+FnC5EqO91VZCEXAssE/OCEs=
Subject key identifier:   28:B4:29:7B:8B:E7:96:B6:F8:77:69:D0:E9:68:0B:27:01:FE:4F:06
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Certificate issuer:       /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial:       5F73D378AFC6605C94A6F4DA5CED44CD63C0A977
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
Manifest number:          0143
Signing time:             Wed 26 Nov 2025 20:56:05 +0000
Manifest this update:     Wed 26 Nov 2025 20:51:05 +0000
Manifest next update:     Mon 01 Dec 2025 22:08:05 +0000
Files and hashes:         1: 3139302e3130362e33322e302f32312d3234203d3e20323633323434.roa (hash: IKpYtNnPqJi7A2I065akkFAJXM/1P20XrCW6mLLJ8DY=)
                          2: 323830303a6362303a3a2f33322d3438203d3e20323633323434.roa (hash: HG79+FZ1IJmtzxISYDc5++PcOk2TMTwJhOCfg+BwQeE=)
                          3: BCDD50591AFBE01DD1E89006B709D14B69D79567.crl (hash: Rp/3bTWr3XiI/EBB9H5lSW+nRGR91JwxtNnwm/+oGPs=)
                          4: 3138362e302e3138302e302f32322d3234203d3e20323633323434.roa (hash: 0DlXsm98HlB5uDzTYzIjyDBNM1DJ5k3QRekEzRjOxzQ=)
                          5: 3133312e37322e3133322e302f32322d3234203d3e20323633323434.roa (hash: 9BHe64mInmx7D9r4r9/CtM7RjflnHnNO52klk8Xfo/4=)
                          6: 3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa (hash: xopTA6jKSIsdkIE6jBzhXIFqdR5+llPDfkKoskVciXA=)
                          7: 3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa (hash: r3mpym8MNwnvHxIuYSgXnngQZcrxT6L1+B3uUPWi9dY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Dec 2025 08:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:73:d3:78:af:c6:60:5c:94:a6:f4:da:5c:ed:44:cd:63:c0:a9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
        Validity
            Not Before: Nov 26 20:51:05 2025 GMT
            Not After : Dec  1 22:08:05 2025 GMT
        Subject: CN=28B4297B8BE796B6F87769D0E9680B2701FE4F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:68:ae:95:67:55:d0:16:f8:83:3a:75:fc:
                    53:a5:0f:7f:69:1d:97:5b:6d:4f:58:55:4c:d2:bf:
                    d0:3a:5a:92:71:a7:1f:5b:92:fa:74:0a:e6:e2:25:
                    ac:c7:9a:26:a7:ea:8b:1a:35:8f:13:fb:55:07:da:
                    4a:3a:30:72:0f:12:8b:da:48:67:a7:43:43:d1:24:
                    70:cd:c9:04:d3:19:79:fa:da:ea:85:01:8b:57:9d:
                    01:76:9d:7a:c2:0e:f3:e3:88:a6:09:85:c1:23:97:
                    d6:36:58:c2:85:49:72:00:47:59:8c:9b:53:a2:ca:
                    75:c6:91:e0:69:44:1b:d3:c7:e7:70:77:cb:6b:2c:
                    bb:e7:6b:e0:19:f5:d0:fc:b5:d8:77:4e:5a:41:c0:
                    45:68:59:0e:ac:d3:9e:2e:73:de:5c:6b:79:8d:a9:
                    8a:05:5b:08:f4:53:d1:74:a0:40:01:20:40:70:72:
                    f7:c3:b7:49:af:20:47:6d:5f:7d:84:22:f0:66:7f:
                    2b:d6:4c:29:ce:56:14:48:24:66:a8:79:1d:8d:21:
                    9a:77:4e:f3:35:ae:36:81:e9:01:ef:43:3b:57:73:
                    90:a4:89:23:65:7e:7d:a3:05:56:6a:8a:28:4f:e7:
                    89:34:a6:fe:cd:9a:11:2c:e6:2b:bf:17:bd:25:f1:
                    8f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B4:29:7B:8B:E7:96:B6:F8:77:69:D0:E9:68:0B:27:01:FE:4F:06
            X509v3 Authority Key Identifier:
                keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8a:77:a7:7f:b4:5b:50:ff:82:e8:f8:16:1b:7f:74:b6:12:
         4b:fa:7f:de:1e:44:87:7a:ee:94:ac:ba:c4:5f:d8:31:96:32:
         29:42:39:b9:73:94:dc:b2:71:01:87:00:b0:9c:95:62:45:50:
         e2:6d:67:65:3c:ed:85:34:80:d4:68:cc:f8:d1:03:24:33:c1:
         ab:2f:17:a2:e1:bd:a4:16:db:1f:d8:4b:57:a4:dc:01:ce:b0:
         17:25:2b:83:87:2c:38:e1:97:4b:a5:7e:fe:de:49:f3:e8:b5:
         53:26:8f:41:46:50:c1:ef:4e:77:12:1f:89:d9:90:1b:00:ee:
         51:10:75:13:85:3a:07:2f:66:ce:2a:8f:86:40:b4:6f:28:fa:
         76:5a:9f:ba:f0:bb:98:84:ce:5c:bc:57:61:7a:76:c7:0b:e8:
         b5:60:78:d9:74:7e:d8:3e:72:cf:bf:89:06:73:9f:20:3f:26:
         53:42:ea:f0:eb:3b:df:4e:11:ce:d6:79:40:6c:d6:75:56:ca:
         b8:65:30:66:48:77:47:f2:ff:28:4b:0c:a0:dc:ae:15:05:a9:
         8e:be:aa:d0:77:4c:31:a4:d7:4b:32:ac:ef:f2:99:a4:d9:49:
         d6:d8:1f:ba:7b:3d:bc:c4:34:5f:94:a3:ba:98:54:d7:7d:9e:
         28:15:d0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 27 14:17:11 2025 by rpki-client