This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
File:                     BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft (raw, json)
Hash identifier:          TXm5uE/PCtfkTB8JO8IblNw3pGBiIiDWS59sPi0E9Wc=
Subject key identifier:   27:01:2E:CB:21:92:2D:86:CA:BF:BA:9A:C0:1B:05:FE:F9:57:0B:2D
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       621022124E1E0EA60D37E9C0D634F63CB82309A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
Manifest number:          014E
Signing time:             Thu 18 Dec 2025 13:52:29 +0000
Manifest this update:     Thu 18 Dec 2025 13:47:29 +0000
Manifest next update:     Mon 22 Dec 2025 18:51:29 +0000
Files and hashes:         1: 323830333a323034303a3a2f33322d3332203d3e203238303530.roa (hash: OmlbRyhT/ZJTfY7NLG2Wk/eDNN2JwiK/qbRcXt2tEDQ=)
                          2: 3230302e37342e3235332e302f32342d3234203d3e203238303530.roa (hash: DYDiyM1Ja+2morMZBb13l0i1f+QjktuVzIfm4h0iEsM=)
                          3: 3230302e37342e3235302e302f32342d3234203d3e203238303530.roa (hash: dbtl+9uX7PdG2FA9REeBw158WIFvABX3kOPXdLJyE/Q=)
                          4: 3230302e37342e3235352e302f32342d3234203d3e203238303530.roa (hash: SXF+iCOaXxohlu09DbmzNtLAo1poH9lkJGXGcaHFcJA=)
                          5: 3230302e37342e3235322e302f32342d3234203d3e203238303530.roa (hash: 93aGNsNifP3OVF+eeUqRj4VzNi6ml4CEBm9NizKGCk8=)
                          6: 3230302e37342e3234392e302f32342d3234203d3e203238303530.roa (hash: k/un8zqpTMglunOD4EcoItdRqA0WoCxs4fArTst6BKI=)
                          7: 3230302e37342e3235342e302f32342d3234203d3e203238303530.roa (hash: JY8I2y8DKYtW0y3ksx0VtUBjarL88aRVe3sizrByqR0=)
                          8: 3230302e37342e3235312e302f32342d3234203d3e203238303530.roa (hash: 2qSj8DllafoL0YTwuGanzeUVSWm1vD7YvLZMrGi6fuA=)
                          9: BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl (hash: 3KKh2oHsERBNduIOxhc0ZhLlT00QEpxKxnkiFNWNmM4=)
                          10: 3230302e37342e3234382e302f32342d3234203d3e203238303530.roa (hash: dOHLOsSAt9dMYyx6gsP/D/1zl2CueJEIiBzHqVQNr+I=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 18:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:10:22:12:4e:1e:0e:a6:0d:37:e9:c0:d6:34:f6:3c:b8:23:09:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Dec 18 13:47:29 2025 GMT
            Not After : Dec 22 18:51:29 2025 GMT
        Subject: CN=27012ECB21922D86CABFBA9AC01B05FEF9570B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:df:b2:89:92:d3:f8:55:0c:db:7d:14:13:04:
                    70:45:42:5e:c5:14:87:db:ca:28:b6:ca:f0:46:36:
                    02:6d:53:5f:9d:3f:c7:4b:2b:d6:87:60:9d:be:23:
                    45:3c:f5:43:37:a4:38:1f:e3:30:b2:f9:b0:d8:2a:
                    6c:43:bd:27:7b:df:1a:cb:90:62:f8:6f:f8:b9:7f:
                    1a:f0:93:4c:b4:97:eb:7e:7c:4c:91:0b:2a:7d:6a:
                    7b:74:8d:34:0c:01:ea:73:a1:3d:77:1f:aa:b1:4c:
                    d2:9b:3f:89:45:44:f6:ec:fd:18:ac:11:f7:56:64:
                    d8:4c:95:a5:50:fe:73:ca:32:3c:9e:98:b9:c1:8c:
                    7b:c1:bf:fe:8f:53:63:e9:ba:14:3e:d7:06:7e:93:
                    b2:92:12:e0:4f:a5:1e:c5:00:45:10:58:65:d7:eb:
                    9a:93:c4:a5:ca:02:2b:29:dd:12:e9:4b:00:8c:cd:
                    8e:65:77:10:49:e7:e4:dc:f0:59:83:46:bd:1d:56:
                    f8:eb:20:a5:32:3f:18:69:5a:45:ed:33:5a:37:db:
                    27:15:c0:a7:a1:52:cf:dc:62:86:73:c1:a2:1a:06:
                    44:1a:1e:e7:06:76:9d:57:f5:c5:e9:11:3d:b0:ea:
                    5b:3e:f3:7a:b0:85:0d:cc:b0:9c:94:92:15:2f:27:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:01:2E:CB:21:92:2D:86:CA:BF:BA:9A:C0:1B:05:FE:F9:57:0B:2D
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:9c:ab:09:1f:e7:b6:3b:bb:23:48:ea:79:c3:c9:70:dc:c9:
         01:aa:b8:48:91:c4:2e:e7:cb:fe:ee:e2:b7:8f:42:0b:2c:e8:
         f1:06:54:e2:42:4b:b7:82:dd:00:4d:54:23:2f:82:70:df:5d:
         34:f6:f9:16:05:b3:84:6b:a1:60:27:33:8d:8f:e8:8b:ce:69:
         b2:79:f2:29:ad:78:3f:ff:a5:46:c4:a3:d4:c1:30:8e:ff:a4:
         3e:bb:00:ae:bc:e4:25:b7:14:b7:e6:19:29:31:ab:d8:27:02:
         7d:a2:d9:fe:5f:73:8e:c4:08:85:ee:c9:2f:ed:67:56:29:b6:
         9b:fa:4f:17:42:51:fa:49:36:e8:e1:b4:ed:56:da:64:e8:f0:
         a8:8d:b7:ff:ee:8a:7d:0d:13:9d:04:8f:bf:33:70:0b:09:c7:
         b1:15:79:fa:e4:54:b1:e1:a7:2d:cc:f7:bf:3f:f7:8f:21:11:
         99:b0:34:67:80:c2:24:0d:65:c8:c0:ff:35:d6:62:e2:59:c4:
         9c:b7:7a:a9:5e:bb:e0:c9:3a:a8:ff:6f:f9:01:38:21:2d:6f:
         27:64:83:3e:a3:bc:02:d8:05:c9:e5:38:1e:29:fa:ec:7e:90:
         6a:20:7a:57:f6:ca:01:1c:1f:dd:fe:3a:4f:3d:54:60:05:d7:
         3d:5d:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:34:40 2025 by rpki-client