This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
File:                     5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft (raw, json)
Hash identifier:          53Q11Jr4LTUGspv/ElzXMcDsqWoWiF74X/xC7XifGUs=
Subject key identifier:   BD:FD:B0:9F:CC:7D:A3:2A:B4:3C:DC:61:71:56:6C:CA:36:50:F8:7E
Authority key identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3
Certificate issuer:       /CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
Certificate serial:       7FA6B438D900B93B771B215A10552986068D7B3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
Manifest number:          0125
Signing time:             Thu 25 Dec 2025 03:00:21 +0000
Manifest this update:     Thu 25 Dec 2025 02:55:21 +0000
Manifest next update:     Mon 29 Dec 2025 20:32:21 +0000
Files and hashes:         1: 323830333a333965303a3a2f33322d3438203d3e20323730303233.roa (hash: EWJ9dI5o/LGamUw9xQ3M3op3mV3jzKc70BA7/SFRgGI=)
                          2: 3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa (hash: 8fvvqNp7+cbeKwqAqt8Ix0DndOn8jTw3tWcikLTL0EQ=)
                          3: 3138362e3134382e3139362e302f32322d3232203d3e20323730303233.roa (hash: j6Cgyh3QeFe2ifLKwIDeMaUZ0r5vruBxYcx+SMlxyd4=)
                          4: 5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl (hash: iCDbuHPvhGtm54XJtTtOBgnwYweNROGsMXzYRv3uxIg=)
                          5: 323830333a333965303a3a2f33322d3332203d3e20323730303233.roa (hash: o4IQLUPQIEMuLpUo0+feh4FoDO4YoK87IUw/kO9Rngg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 19:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a6:b4:38:d9:00:b9:3b:77:1b:21:5a:10:55:29:86:06:8d:7b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
        Validity
            Not Before: Dec 25 02:55:21 2025 GMT
            Not After : Dec 29 20:32:21 2025 GMT
        Subject: CN=BDFDB09FCC7DA32AB43CDC6171566CCA3650F87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:20:7c:4c:80:29:e9:18:c3:23:ce:d2:a8:
                    7d:3b:c7:8f:f5:2e:2e:b5:53:c5:64:b1:0e:bc:7d:
                    9d:91:12:7c:b3:af:56:f0:44:f3:cf:25:7d:d1:d4:
                    d6:01:a5:41:6f:09:81:93:0f:41:8f:a2:fe:c1:ca:
                    b3:c1:c7:6b:85:ac:27:1a:33:7a:1d:f2:93:8b:b4:
                    72:d9:66:ce:e6:9d:67:de:39:45:59:7e:ae:91:39:
                    fe:cb:29:43:33:a9:32:82:8c:11:7c:b0:87:61:eb:
                    c0:25:d3:fd:42:7f:ee:be:c1:52:ad:cd:04:58:fa:
                    ae:a3:1e:1c:c2:f4:7d:17:ab:04:bc:29:e3:d7:00:
                    bc:1f:79:9d:98:12:84:80:1a:a8:36:a6:3d:b5:85:
                    4f:53:09:70:e1:14:d5:c5:2d:e2:f7:f8:34:ae:c8:
                    f9:b4:96:4f:0f:fd:ba:61:c1:7d:2d:45:96:fd:5e:
                    c3:f0:46:6d:fe:f9:52:70:54:ff:32:53:c5:ac:b1:
                    d9:17:17:ba:cf:cf:76:af:21:33:75:e6:ad:81:b0:
                    42:cb:b0:d5:50:e6:d7:1f:99:42:1f:25:62:83:26:
                    e7:6f:71:58:e3:71:e9:9c:03:c2:60:72:8a:1a:01:
                    ee:cb:fd:6a:45:e7:bd:3a:5e:81:bc:b1:70:2e:b8:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FD:B0:9F:CC:7D:A3:2A:B4:3C:DC:61:71:56:6C:CA:36:50:F8:7E
            X509v3 Authority Key Identifier:
                keyid:5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3e:17:5f:83:22:5a:13:22:9b:ce:5d:50:74:0c:5b:90:6f:
         18:fc:26:9e:80:1c:12:23:00:e4:5a:37:db:70:e0:06:67:b0:
         f2:9f:f2:1d:a8:70:d1:91:e9:ec:f3:b5:c8:67:38:3d:fa:91:
         a4:f3:56:c5:ec:8d:6f:06:0c:f6:6f:cb:c3:a4:81:2f:7a:ec:
         36:82:42:25:6d:a2:e3:65:d0:b2:05:0d:7b:bd:ea:42:cd:15:
         c3:45:17:7a:1a:35:26:4c:7e:36:43:e6:29:d5:ea:5e:3e:96:
         6d:f3:e8:9f:55:32:4b:35:7e:08:d2:ae:c2:1d:63:78:94:0d:
         58:d1:91:18:f1:aa:98:12:b7:0c:73:1f:d5:0b:82:e7:a2:ad:
         29:c9:f5:53:96:2f:99:a2:71:5f:1a:78:38:fb:c5:9c:14:59:
         d7:a3:38:49:dd:ca:3f:ef:a7:d0:6b:37:e9:26:ab:4e:bb:57:
         92:f1:3d:60:4b:3f:ab:e4:62:b7:26:99:95:90:05:c5:ed:fe:
         92:11:d3:ec:e0:ba:9e:3b:55:29:8b:57:e7:52:e6:44:ab:0e:
         5d:96:3d:06:10:e9:57:a8:a6:3b:d6:30:36:eb:9a:5f:77:f7:
         a1:07:f8:74:ba:b1:71:29:5a:e3:60:04:cc:5e:3d:79:24:ae:
         c4:26:fc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 13:21:10 2025 by rpki-client