This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
File:                     5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft (raw, json)
Hash identifier:          V575CYREV7Kpm6Os5D+L6qHew4mpSIH4hFjwfNxi7b8=
Subject key identifier:   A6:F8:35:E2:CB:29:86:CB:1C:E4:28:1F:CA:A7:E4:B0:87:F8:04:C2
Authority key identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3
Certificate issuer:       /CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
Certificate serial:       7EF3CF87A897D50F6986F6642E8DA537C4640CF0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
Manifest number:          0121
Signing time:             Wed 17 Dec 2025 20:51:43 +0000
Manifest this update:     Wed 17 Dec 2025 20:46:43 +0000
Manifest next update:     Mon 22 Dec 2025 05:38:43 +0000
Files and hashes:         1: 323830333a333965303a3a2f33322d3438203d3e20323730303233.roa (hash: EWJ9dI5o/LGamUw9xQ3M3op3mV3jzKc70BA7/SFRgGI=)
                          2: 3138362e3134382e3139362e302f32322d3232203d3e20323730303233.roa (hash: j6Cgyh3QeFe2ifLKwIDeMaUZ0r5vruBxYcx+SMlxyd4=)
                          3: 323830333a333965303a3a2f33322d3332203d3e20323730303233.roa (hash: o4IQLUPQIEMuLpUo0+feh4FoDO4YoK87IUw/kO9Rngg=)
                          4: 5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl (hash: MUpnDqo4AsxrPMXE5O6Ojf5dqPiqWV2/lrFuD5nqcD0=)
                          5: 3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa (hash: 8fvvqNp7+cbeKwqAqt8Ix0DndOn8jTw3tWcikLTL0EQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 05:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f3:cf:87:a8:97:d5:0f:69:86:f6:64:2e:8d:a5:37:c4:64:0c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
        Validity
            Not Before: Dec 17 20:46:43 2025 GMT
            Not After : Dec 22 05:38:43 2025 GMT
        Subject: CN=A6F835E2CB2986CB1CE4281FCAA7E4B087F804C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:52:33:c3:e0:f2:71:11:fa:a0:a1:d8:0e:
                    7b:89:62:de:e5:e0:c1:c2:60:75:9c:45:e2:cc:b9:
                    39:b7:09:a8:55:8c:f6:26:46:81:0a:65:ae:3d:82:
                    2b:2e:04:39:c6:9c:a9:fc:bb:e1:ed:63:32:1a:36:
                    a6:ef:fe:e8:3b:d6:92:a9:94:f7:1b:33:f8:37:f7:
                    3d:d4:84:da:e9:2d:42:60:6f:da:f6:cb:60:29:4e:
                    fd:75:d0:33:a4:02:1e:e5:70:ad:4c:f7:b5:49:19:
                    d3:4d:cf:aa:97:f1:69:b6:7e:67:62:61:8b:94:c8:
                    c8:26:fe:89:6d:55:b1:a4:c5:6e:53:67:36:13:c7:
                    40:9f:91:a6:62:90:23:e7:f9:28:03:f1:df:cb:bf:
                    8f:f5:05:a3:45:da:8a:ec:f7:7c:28:37:c1:83:24:
                    3f:5c:ef:e8:de:60:d4:a0:26:d9:d9:63:03:ec:02:
                    bb:c9:05:4b:61:0e:74:d4:75:28:a3:f8:a2:b5:ff:
                    1f:a3:e6:24:af:1c:e1:a7:18:b2:cd:2c:cd:ed:e1:
                    8b:83:b2:56:0d:28:1e:4d:81:8b:6a:03:49:cd:95:
                    33:2c:02:75:4f:1f:c2:9c:ae:21:2e:3d:ea:72:c1:
                    37:89:2d:3a:63:a4:77:6a:15:63:12:6b:84:f7:e4:
                    77:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F8:35:E2:CB:29:86:CB:1C:E4:28:1F:CA:A7:E4:B0:87:F8:04:C2
            X509v3 Authority Key Identifier:
                keyid:5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9f:08:8d:eb:10:7d:a6:da:cd:49:9a:e7:74:2a:5a:00:2a:
         c6:5a:0a:46:70:ef:cc:e4:5d:06:84:4e:de:a8:fd:7a:b2:4c:
         ac:4d:41:1d:81:99:f9:49:c4:46:e6:f0:c8:69:39:91:30:07:
         50:e1:53:81:8c:34:a0:e1:a5:9d:d5:2d:24:b9:e3:bb:a7:c2:
         99:4a:51:42:45:eb:24:7c:72:24:75:a7:eb:dc:66:3e:9e:e2:
         53:14:5f:5f:04:00:c3:d1:24:48:bf:1e:1b:3f:1d:28:d1:6f:
         9d:5a:8d:b0:62:23:9b:d5:46:ee:f0:6e:47:9d:de:f9:2e:df:
         bc:29:25:4c:9c:36:44:af:f4:4e:fe:95:23:e5:4f:f9:0a:29:
         09:d5:d0:1c:e1:a5:86:36:01:fe:61:e2:5a:18:2d:4b:de:0f:
         e8:26:58:4d:a1:c4:5d:37:f2:b5:76:fe:c5:7b:49:04:e4:8d:
         c3:65:2b:0d:f9:d5:f6:36:35:d4:17:c9:e6:b5:ca:8e:d8:8b:
         93:e5:86:a4:dd:4b:47:42:29:28:76:3f:36:5b:bb:5f:25:2e:
         4e:62:15:6b:29:b4:5d:b7:47:fb:67:2b:dc:f6:ba:35:ca:15:
         a4:09:d8:83:0f:af:b6:c5:10:e3:16:71:3c:26:ba:a9:37:45:
         38:2e:93:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:25:26 2025 by rpki-client