This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft
File:                     DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft (raw, json)
Hash identifier:          EXjAAOug1cIjxwL8K91mvsYE60MSbgIrEwWr+Ga+y6Q=
Subject key identifier:   7E:62:ED:86:17:CA:F2:9F:AE:67:80:C2:9C:A4:2D:3F:5D:83:7A:FE
Authority key identifier: DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A
Certificate issuer:       /CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
Certificate serial:       34369818F4DC78F18C65DBC3E952A3DC49065932
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft
Manifest number:          0145
Signing time:             Fri 05 Dec 2025 14:41:07 +0000
Manifest this update:     Fri 05 Dec 2025 14:36:07 +0000
Manifest next update:     Wed 10 Dec 2025 07:59:07 +0000
Files and hashes:         1: 323830333a636332303a3a2f33322d3332203d3e203532343638.roa (hash: Rc5GyfeKiWedtLYcpadlhz2T0yhmuDLKu5Lom5UEwf0=)
                          2: 34352e37312e33362e302f32322d3234203d3e203532343638.roa (hash: ZQ/iGIMlrJKCQ3XFKyTv4EdpWvvX1r5Jm5qh/tW8U48=)
                          3: 34352e37312e33362e302f32322d3234203d3e20323634363638.roa (hash: BWFPGzPKwRv8djR5Py/+0nYxCCVZKh24HPi9pBQFMDs=)
                          4: DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl (hash: 2PPp14AT7CPpcURHp8Q72c3rYOfP+CCqWK8r8AIUEN0=)
                          5: 323830333a636332303a3a2f33322d3332203d3e20323634363638.roa (hash: dTk3OiJ6UrS0s4KkZfsMHvjt/J6RcX6ttXOYoWfB9eQ=)
                          6: 34352e37312e33382e302f32342d3234203d3e203237393437.roa (hash: b/C7X31DF8XnnwR2vZ4AoiCaKMnwptXF+oFbeMm8ilE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 07:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:36:98:18:f4:dc:78:f1:8c:65:db:c3:e9:52:a3:dc:49:06:59:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
        Validity
            Not Before: Dec  5 14:36:07 2025 GMT
            Not After : Dec 10 07:59:07 2025 GMT
        Subject: CN=7E62ED8617CAF29FAE6780C29CA42D3F5D837AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7c:18:33:7b:3a:8a:d1:eb:a6:86:21:71:a5:
                    e5:57:e2:ab:bb:fe:23:8b:48:45:2b:c8:74:e7:3a:
                    8b:b2:27:ba:b5:64:01:0a:84:15:5a:b1:93:0e:0b:
                    0c:3a:2f:37:b3:72:c6:ff:21:4c:69:52:6c:97:d3:
                    16:90:19:56:7e:bc:3a:e3:98:43:80:88:cd:3c:72:
                    c0:7d:4b:ff:82:43:ff:be:a9:09:f4:d7:c8:96:f4:
                    db:bc:46:76:19:b9:cb:07:9a:66:9c:7e:37:f7:b7:
                    64:06:22:eb:ed:58:2e:04:01:96:c6:e6:f1:06:90:
                    9b:35:08:18:a7:bb:c3:6c:0a:f6:2f:da:86:de:c6:
                    8b:31:d5:25:aa:97:af:6d:c6:a0:86:e6:bf:b4:9f:
                    21:fb:1b:9c:17:a1:bd:db:a5:ba:15:9a:0e:58:8a:
                    5f:6d:ee:1d:9f:5d:9b:a2:c4:a1:b0:d4:9b:7e:39:
                    e1:cb:dc:64:7d:79:d6:a2:3a:43:5b:46:d8:87:72:
                    a9:33:6a:ad:db:b1:c5:27:c6:67:ce:25:0f:96:1b:
                    ac:a8:a6:b5:db:69:a8:22:ac:42:0f:63:32:c8:38:
                    45:d4:bd:d4:50:e7:11:9c:82:a9:c2:df:00:a8:7f:
                    eb:94:6e:36:5f:94:17:9a:5e:2c:3f:8b:36:e4:67:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:62:ED:86:17:CA:F2:9F:AE:67:80:C2:9C:A4:2D:3F:5D:83:7A:FE
            X509v3 Authority Key Identifier:
                keyid:DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:86:fa:be:24:f3:c8:c4:f4:e7:92:09:e1:31:65:75:e8:
         9a:7c:e3:ae:d6:d8:71:45:a2:12:e0:f8:b1:cb:cf:6d:81:2f:
         4d:ac:68:c1:cc:15:67:29:33:b5:ea:5a:7f:af:4b:cb:96:69:
         55:6a:3e:33:32:70:98:1b:d8:82:18:fc:4f:1d:82:f3:a4:27:
         65:0f:a7:ae:72:18:e3:fd:c1:48:32:ba:ee:1e:50:6a:e6:a7:
         90:ba:ee:76:81:4d:25:d6:eb:a9:56:f8:67:48:d7:04:f9:e9:
         34:66:d9:42:3f:c0:73:4f:97:a1:d4:7c:72:6f:12:cf:1a:1b:
         56:fc:a2:c6:64:16:4b:06:e1:48:d5:7b:26:f1:e7:e5:24:3d:
         ae:2a:c8:e1:23:e1:c9:c8:63:1a:9d:d4:62:eb:20:62:b4:ef:
         16:2d:cf:a8:4f:70:01:ea:84:af:ca:0b:f8:79:fc:52:ae:5c:
         b9:2a:19:62:21:af:20:5f:92:e5:9d:a2:13:1a:3d:11:e7:91:
         6e:70:b3:ba:80:df:60:0a:ed:0b:55:c1:fc:ea:4a:3e:40:1c:
         bd:45:d5:a2:20:31:c2:fe:8b:33:fa:c1:9f:0f:5b:5c:85:18:
         07:87:dd:03:6f:cd:21:7d:99:b2:73:05:a3:48:bb:4a:b0:f8:
         b6:99:08:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:38:29 2025 by rpki-client