This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
File:                     533F533C8354549C5674B43113DA207BD7EF1A31.mft (raw, json)
Hash identifier:          2llRFxXNcealIa93LcgY/qf+/cpVu4Jo0LHJDgiBlF0=
Subject key identifier:   49:61:1B:49:E1:0A:5D:6B:86:C7:CD:94:3B:E3:91:C6:64:51:3B:BD
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Certificate issuer:       /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial:       5201254EF60CF84F903A2F64189BEA5AE4DF1856
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
Manifest number:          0140
Signing time:             Sat 06 Dec 2025 02:17:28 +0000
Manifest this update:     Sat 06 Dec 2025 02:12:28 +0000
Manifest next update:     Thu 11 Dec 2025 08:40:28 +0000
Files and hashes:         1: 533F533C8354549C5674B43113DA207BD7EF1A31.crl (hash: 1t9YKhNfuSFPiCnqCfbiF+67uc/Q53ruPIIqWN9cW1A=)
                          2: 3133382e3231392e37332e302f32342d3234203d3e20323733313630.roa (hash: FMzUudDZq3j/KH5zRAXyjPcaSrjvgFrnev/X1/caefU=)
                          3: 3133382e33362e3133362e302f32322d3232203d3e20323633383239.roa (hash: cIresJVe1MgQzlCQQZUPcrYXf60vw1shBDDKb68VppI=)
                          4: 323830333a386638303a3a2f33322d3332203d3e20323633383239.roa (hash: 2u0dftYB47kjwXQ/8bRf/ZNymxq4PxtCGh2sxIxGJfU=)
                          5: 3137302e38322e302e302f32322d3232203d3e20323633383239.roa (hash: dTQM4w8XXyA/lFw/sG22dD2nZolOt+ZucUQCj38hrd0=)
                          6: 3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa (hash: 3Ta2XuaMw6SgnwP6Td6U16cGQxfTPeyf7tBj9ki/4/0=)
                          7: 3133382e3231392e37322e302f32322d3232203d3e20323633383239.roa (hash: 2AUMtLQZ7aZkrGKLCLHuDL7ZIJ9UUb1Nh45366eDHQc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 08:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:01:25:4e:f6:0c:f8:4f:90:3a:2f:64:18:9b:ea:5a:e4:df:18:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
        Validity
            Not Before: Dec  6 02:12:28 2025 GMT
            Not After : Dec 11 08:40:28 2025 GMT
        Subject: CN=49611B49E10A5D6B86C7CD943BE391C664513BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0b:34:da:c2:5d:ea:96:34:22:04:d4:8b:c3:
                    18:6d:e9:71:ae:f9:e0:e6:5e:25:6a:00:f6:24:b8:
                    4a:a9:7b:20:62:66:2b:ed:ea:f1:38:11:e0:e7:a3:
                    84:fe:e1:71:9b:00:14:02:24:fd:02:0b:bb:cb:04:
                    68:5a:a3:92:14:11:79:9c:7d:a1:e3:e2:70:83:eb:
                    59:7e:48:48:73:c9:ae:6e:a1:6a:0c:c8:31:52:02:
                    0a:2a:d2:59:93:82:5e:61:1e:cf:29:19:99:7c:ca:
                    5c:cd:3e:8a:40:fe:b1:2b:78:2e:8e:a0:b5:2f:5a:
                    18:7b:e1:41:8e:e6:d3:98:a0:83:c3:f4:df:70:ab:
                    73:04:eb:f7:ea:72:eb:e3:f3:f6:5b:62:82:12:41:
                    d5:dd:c3:e4:46:5f:b6:83:f9:47:f5:1e:0b:98:e9:
                    a5:2b:8e:2f:5d:8f:ea:2d:dd:f6:6e:8c:b2:cf:f9:
                    fc:70:9c:2b:15:48:d2:02:df:58:8d:4f:46:dd:25:
                    27:75:0e:41:3f:81:6f:2a:fb:ae:b4:f2:91:15:2d:
                    55:99:ae:94:d0:ad:11:84:23:dd:7d:6a:ff:c7:94:
                    f4:79:25:2b:95:5a:84:c0:5b:54:b8:03:69:94:f1:
                    41:ef:77:7b:9d:28:f9:c4:b0:ae:b4:6d:e1:e7:5b:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:61:1B:49:E1:0A:5D:6B:86:C7:CD:94:3B:E3:91:C6:64:51:3B:BD
            X509v3 Authority Key Identifier:
                keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e5:7a:a5:47:be:65:d5:10:f8:8f:47:76:2a:36:18:7b:9c:
         ab:f8:9a:f3:83:37:1e:6a:55:88:46:42:26:45:29:05:b1:b9:
         c7:97:98:c2:ab:46:32:b0:63:36:46:e0:de:cb:fd:ff:b2:6f:
         03:69:f4:ae:f8:f4:73:6b:ed:a3:9c:2b:27:eb:6e:9d:a0:86:
         ca:a9:66:5d:4b:46:96:18:06:81:d5:9a:de:a2:08:36:8d:7b:
         c1:a8:5f:a3:ea:a7:d2:45:ef:fa:05:92:0c:6f:04:27:ff:d9:
         5c:15:22:69:e7:f3:af:a9:b5:20:13:58:e8:69:a0:16:92:02:
         1a:22:01:50:f0:ff:09:84:86:cc:37:58:c6:21:be:63:71:97:
         3e:70:55:91:f1:79:94:f6:f8:c1:0c:cb:01:d7:d4:61:54:73:
         c2:d1:2d:db:fa:60:5c:c2:10:d9:ef:a2:b7:d5:e1:87:a1:ad:
         41:21:f0:a6:ee:9e:bb:11:11:58:55:90:93:a6:b0:ff:4b:a5:
         e7:c5:eb:37:41:ff:72:c7:b8:d1:71:4a:ff:24:6c:97:dd:b2:
         36:c7:15:1f:7e:34:7c:15:75:65:53:ab:56:7e:a3:8e:23:2b:
         4a:60:e8:b7:c3:44:31:f3:05:09:7f:74:79:13:ca:14:0e:7d:
         ee:5a:be:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:22:44 2025 by rpki-client