This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.mft
File:                     D1A55CA9F61A19739707656D810C4C2DDBDB13DF.mft (raw, json)
Hash identifier:          xHJisPaqinvcdF0sQLrJlswva2eh+stP/UFb1Dh1H/8=
Subject key identifier:   DF:08:6D:C6:FA:4A:F0:3F:68:F0:53:33:3E:9B:FA:A2:BE:9C:59:61
Authority key identifier: D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF
Certificate issuer:       /CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
Certificate serial:       1F9124174F724EEB8F6A55ECA1F89B13C7AD5975
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.mft
Manifest number:          014B
Signing time:             Tue 23 Dec 2025 18:25:53 +0000
Manifest this update:     Tue 23 Dec 2025 18:20:53 +0000
Manifest next update:     Sun 28 Dec 2025 15:29:53 +0000
Files and hashes:         1: 3138362e322e3137362e302f32302d3234203d3e203532323333.roa (hash: WX/UiG63pcU1r4rKQAybYy0oTUtnzkewq8Kr6uO7kqA=)
                          2: D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl (hash: zep/GznsUyPXsYwn2wyl935lmxQx/oK6R5HUt9B0rk4=)
                          3: 3133382e3231392e3134302e302f32322d3234203d3e203532323333.roa (hash: gepYFtCeYqrntz5vudf0v76ted/PXE6mMcRMdn7dhkU=)
                          4: 3136312e302e39362e302f32302d3234203d3e203532323333.roa (hash: JbPZG0kVwFAgbodXoQyhwSLiaajrlva4AYaYqUJjsr8=)
                          5: 323830303a3533303a3a2f33322d3336203d3e203532323333.roa (hash: 84IzbMfNqv/tR8sfsriR1gQ7Wedr7k6q3013zoUO0Z0=)
                          6: 3133312e3232312e3134342e302f32322d3234203d3e203532323333.roa (hash: 4QadW97CHTpEJoQiHa6upB8kEjHryM6EJ4kE/u0MRAc=)
                          7: 3139302e3131322e3232342e302f31392d3234203d3e203532323333.roa (hash: g5fqF5dY8AAX12StCqKNz14P4w+FA74CODwHwDRr24A=)
                          8: 3137302e3234352e302e302f32322d3234203d3e203532323333.roa (hash: scWNLQZ02BYUNWZOv7bjVK9Tor+7KCEBMJ2IiNIgX1k=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Dec 2025 15:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:91:24:17:4f:72:4e:eb:8f:6a:55:ec:a1:f8:9b:13:c7:ad:59:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
        Validity
            Not Before: Dec 23 18:20:53 2025 GMT
            Not After : Dec 28 15:29:53 2025 GMT
        Subject: CN=DF086DC6FA4AF03F68F053333E9BFAA2BE9C5961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:9f:68:14:2b:05:3f:68:c6:b6:ba:f7:86:
                    97:1b:24:20:6f:6e:a1:83:f6:4f:2f:a0:e2:fd:68:
                    aa:56:b0:f6:61:ce:79:5b:5a:fd:88:83:96:35:08:
                    9e:24:44:f7:45:f1:7a:d6:26:03:d9:55:06:7d:be:
                    4e:34:70:79:f1:f1:e6:6d:fb:f0:1c:d9:03:68:38:
                    8b:a3:85:5d:96:14:e3:47:e0:14:31:2c:01:b5:71:
                    ee:ac:fe:be:ac:8c:3e:44:7b:c1:1e:e8:e4:5f:6f:
                    75:f7:ab:8c:7c:ff:0c:ec:90:9a:3b:42:b7:59:fb:
                    30:47:21:73:60:40:51:66:ff:e5:81:2c:24:1b:72:
                    a5:a1:db:77:b1:0c:d4:dc:b3:a3:7f:95:6e:b0:62:
                    40:1b:c5:1e:9f:5d:8a:5a:28:7c:cf:30:8f:a9:69:
                    04:02:e4:85:3f:b6:f9:be:d8:cc:7e:c4:f0:12:0f:
                    27:4b:bb:52:82:2f:e9:8c:d4:b5:cd:48:62:a5:52:
                    fa:d7:3e:84:45:4d:43:5e:38:3a:80:f5:f4:6c:84:
                    3c:32:cb:24:7b:54:be:3a:eb:a7:5e:94:3a:d1:e5:
                    78:2a:23:6f:2b:9b:56:0b:43:4f:52:13:0f:5e:c2:
                    fb:50:e1:52:98:55:95:78:a6:9a:a4:28:66:cc:2e:
                    d7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:08:6D:C6:FA:4A:F0:3F:68:F0:53:33:3E:9B:FA:A2:BE:9C:59:61
            X509v3 Authority Key Identifier:
                keyid:D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:09:98:2d:25:7d:79:72:5c:9e:bc:4d:a5:18:db:41:44:ea:
         77:95:88:02:96:95:98:6e:a9:20:0f:f9:64:9d:86:57:c8:4f:
         bc:10:5d:41:26:ff:55:54:90:05:97:44:72:35:bb:45:a2:e3:
         8d:43:f6:12:86:95:96:10:7e:13:9a:fb:a0:d4:e8:eb:80:a8:
         f2:ef:41:55:d6:db:03:5f:95:d4:cb:c4:7f:11:c2:19:db:21:
         c5:5b:e7:bd:50:0a:40:df:b0:08:48:09:63:f3:31:38:13:1e:
         0e:b5:c6:03:44:df:d2:a1:39:c2:94:65:40:9e:2b:b2:1a:eb:
         a7:11:51:c3:5f:e9:29:61:f0:c5:e9:5d:ae:f7:ae:b5:6e:b2:
         55:55:26:15:8c:9d:b5:cd:5d:f0:79:3a:50:1f:38:bd:27:ac:
         5c:13:61:12:f1:a5:d3:2e:3c:74:a8:cb:be:bc:22:f7:2a:0c:
         de:3d:f3:12:65:f9:01:76:63:f3:bf:ef:9d:15:0e:f5:be:e9:
         89:6f:3b:9e:b4:eb:8c:2a:06:b3:56:21:b3:90:bf:5f:ea:00:
         b8:98:a9:34:7c:f7:a8:8c:84:8d:bf:3e:cd:ec:9d:be:42:e9:
         f7:f8:16:39:c3:36:10:39:5d:f5:aa:14:af:80:63:b3:8a:2f:
         7d:6e:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:40:01 2025 by rpki-client