This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
File:                     BCDD50591AFBE01DD1E89006B709D14B69D79567.mft (raw, json)
Hash identifier:          TXWtM/0H3hhhG/OGvYh0+hgV2P/62tF7dNieXigyhac=
Subject key identifier:   48:4D:B2:2C:4F:D6:38:44:95:D1:E3:75:F3:29:57:8E:00:21:81:6E
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Certificate issuer:       /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial:       60C48D2E1963FE21C64D46CAC193E6E325F79004
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
Manifest number:          0148
Signing time:             Sat 06 Dec 2025 08:31:16 +0000
Manifest this update:     Sat 06 Dec 2025 08:26:16 +0000
Manifest next update:     Thu 11 Dec 2025 13:46:16 +0000
Files and hashes:         1: 3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa (hash: r3mpym8MNwnvHxIuYSgXnngQZcrxT6L1+B3uUPWi9dY=)
                          2: 3133312e37322e3133322e302f32322d3234203d3e20323633323434.roa (hash: 9BHe64mInmx7D9r4r9/CtM7RjflnHnNO52klk8Xfo/4=)
                          3: 3139302e3130362e33322e302f32312d3234203d3e20323633323434.roa (hash: IKpYtNnPqJi7A2I065akkFAJXM/1P20XrCW6mLLJ8DY=)
                          4: BCDD50591AFBE01DD1E89006B709D14B69D79567.crl (hash: dFnB1oXGWxYy6eDnSDeouPgt4HdPIze282mpsB9RZmU=)
                          5: 3138362e302e3138302e302f32322d3234203d3e20323633323434.roa (hash: 0DlXsm98HlB5uDzTYzIjyDBNM1DJ5k3QRekEzRjOxzQ=)
                          6: 323830303a6362303a3a2f33322d3438203d3e20323633323434.roa (hash: HG79+FZ1IJmtzxISYDc5++PcOk2TMTwJhOCfg+BwQeE=)
                          7: 3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa (hash: xopTA6jKSIsdkIE6jBzhXIFqdR5+llPDfkKoskVciXA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 11:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c4:8d:2e:19:63:fe:21:c6:4d:46:ca:c1:93:e6:e3:25:f7:90:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
        Validity
            Not Before: Dec  6 08:26:16 2025 GMT
            Not After : Dec 11 13:46:16 2025 GMT
        Subject: CN=484DB22C4FD6384495D1E375F329578E0021816E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:cd:0b:cf:73:3e:97:c5:26:eb:6b:2f:a7:
                    c2:83:90:8f:16:f7:7f:7c:84:9d:c7:d3:b5:67:bf:
                    c8:cc:4d:3e:3b:47:36:f8:49:9d:40:42:7e:45:79:
                    8b:09:00:be:28:43:22:08:21:c4:21:b4:3a:3c:f3:
                    ad:62:14:db:67:1e:12:bf:23:68:af:12:cf:00:84:
                    d6:bc:7f:74:0f:9d:71:d8:26:d3:f5:b5:ff:c4:f9:
                    a6:0b:44:ea:cf:ca:5b:ee:f6:c6:e8:57:b8:ef:de:
                    8b:23:3e:63:90:50:bb:c4:74:8e:76:e5:c7:e7:6c:
                    d9:61:7f:bd:9d:4e:fc:51:f7:6a:70:63:11:cb:a6:
                    66:0e:2b:1b:eb:85:bf:5b:04:27:94:9b:fe:95:7b:
                    0d:7d:b4:db:db:6f:0d:38:53:36:89:89:d2:69:ea:
                    d4:0e:a9:9b:b4:8d:7e:56:0f:e0:75:11:f6:6e:ba:
                    06:e2:86:fe:76:a9:86:40:41:2d:2e:c5:07:e7:16:
                    58:71:c8:c8:4e:03:7c:b5:27:de:b9:f7:aa:ce:c9:
                    65:99:65:19:b4:45:44:e5:28:ce:ea:a8:3d:59:30:
                    4f:cb:08:56:ec:16:8a:12:da:4c:df:7a:ca:21:4e:
                    5d:29:b7:30:d9:06:96:87:14:9d:02:07:24:42:ac:
                    1c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4D:B2:2C:4F:D6:38:44:95:D1:E3:75:F3:29:57:8E:00:21:81:6E
            X509v3 Authority Key Identifier:
                keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:49:89:c4:06:2a:ea:f3:bd:5d:7d:f4:5e:03:82:ed:3f:d8:
         51:79:cd:53:55:93:f2:92:c4:fd:8f:95:10:07:18:dd:fb:c7:
         eb:a8:46:68:f0:64:a3:6b:07:f0:fd:95:56:19:09:3a:f2:85:
         ff:e9:ee:01:b9:62:bf:a3:3f:b5:7d:a1:00:c2:0a:bc:e1:ba:
         e8:84:1d:25:bb:54:ea:89:e7:92:fc:1d:d1:63:f5:a0:d5:a3:
         ec:8f:fe:f5:df:4d:a8:97:a5:4b:15:29:2a:9b:29:9f:52:41:
         3e:7e:52:00:be:ee:91:3b:42:d2:b5:97:c9:e2:4e:03:ba:7f:
         60:d2:e3:21:9f:34:91:dc:12:ce:f4:9a:4d:00:ca:65:fe:65:
         2a:2a:c2:92:ff:05:e3:f9:ca:d3:a9:2d:93:2c:c8:a4:d5:eb:
         59:21:8e:17:a7:e4:cf:5d:d2:97:4c:0a:8e:47:42:77:37:07:
         91:04:ba:c4:9c:3b:4c:a1:8b:9f:f9:46:d4:4f:fc:13:e4:0c:
         f0:6d:8a:5b:cc:29:d9:fc:86:9c:ba:f8:1b:73:66:db:e3:98:
         2d:58:c2:c4:31:49:12:67:01:f2:60:3f:2d:0f:ee:24:81:74:
         6f:1a:25:c4:3f:8e:99:2f:25:d0:8d:ef:de:fd:d2:e0:94:5e:
         d1:f2:a1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:43:36 2025 by rpki-client