This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
File:                     2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json)
Hash identifier:          VDtpGRLzPCFBNJvMfEDui22JbbsENC3YHcRvgY1IgDA=
Subject key identifier:   36:D2:65:94:6F:4D:1D:97:C0:4A:1F:92:30:2B:51:D6:2E:FB:E9:04
Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
Certificate issuer:       /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Certificate serial:       329D0ADDE921615A5B9FFE71F65175EF09D93E00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
Manifest number:          0156
Signing time:             Fri 23 Jan 2026 05:26:04 +0000
Manifest this update:     Fri 23 Jan 2026 05:21:03 +0000
Manifest next update:     Wed 28 Jan 2026 21:41:03 +0000
Files and hashes:         1: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=)
                          2: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: 4YT76mg5dITWNiH2hE5kgjyBgua4a3LhZgbWUTw9x8I=)
                          3: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: 6qvXA46gt88V1tACBInyQk1XfdPMIfnfnxvggHtKU1g=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9d:0a:dd:e9:21:61:5a:5b:9f:fe:71:f6:51:75:ef:09:d9:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
        Validity
            Not Before: Jan 23 05:21:03 2026 GMT
            Not After : Jan 28 21:41:03 2026 GMT
        Subject: CN=36D265946F4D1D97C04A1F92302B51D62EFBE904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:8a:9e:f2:1f:47:dc:40:df:8f:d4:2e:e0:
                    83:f2:c9:ee:63:0a:7f:06:41:b1:22:ed:3b:7f:36:
                    5c:b2:95:da:a5:d7:99:0f:e5:f8:aa:30:84:b8:0c:
                    2f:eb:58:21:9b:78:f0:74:03:7b:c8:15:9e:27:c2:
                    0b:33:cc:29:4b:df:f5:be:ac:31:aa:e1:1a:61:5f:
                    e4:75:d3:7e:27:fb:c6:17:e0:fe:24:94:b4:85:b9:
                    a9:c5:d9:47:2b:34:28:93:c5:63:55:5e:f3:22:92:
                    2e:f8:b6:8c:27:2d:34:e9:4f:f2:8e:d9:0a:0c:82:
                    2e:16:9d:31:a5:e1:77:46:83:5d:54:dd:14:3d:37:
                    3e:9e:e2:f5:d4:33:a6:6f:9d:1e:ac:d1:c6:90:40:
                    38:3d:27:fa:7e:4a:2f:af:be:fc:76:61:09:ff:fb:
                    48:58:3c:25:79:e3:c3:d0:0b:b4:c8:7d:1a:40:19:
                    30:5f:1c:95:02:eb:38:ce:84:1d:94:e1:22:7d:61:
                    ff:5c:86:e6:ce:e2:45:98:50:2f:47:54:eb:14:e5:
                    e0:81:37:a9:db:9e:db:bd:aa:3b:1f:f3:07:b3:e7:
                    f5:0d:df:28:c1:94:a5:c8:4b:0e:2b:31:5e:47:0c:
                    9b:68:a8:34:17:e8:11:da:12:d3:80:2f:dc:1c:6e:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D2:65:94:6F:4D:1D:97:C0:4A:1F:92:30:2B:51:D6:2E:FB:E9:04
            X509v3 Authority Key Identifier:
                keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d7:b1:44:9d:3b:f4:f7:b1:30:6d:67:6a:09:9e:2a:79:bc:
         eb:60:d9:6e:bc:fb:b9:94:9f:cb:51:db:62:bf:80:8c:2f:d0:
         07:49:f1:c3:99:23:9b:45:52:2d:cb:95:71:af:9c:94:a7:90:
         87:7a:29:c9:2a:3c:9f:bc:00:09:e7:a5:6e:a8:aa:5e:b0:a1:
         e0:1b:7a:93:f7:ca:71:08:f3:eb:1e:1c:14:bd:c0:94:d2:9c:
         a0:fb:a4:ba:62:ff:ce:1d:7e:c6:dd:ae:21:2f:16:b1:ae:83:
         6e:38:a6:27:26:93:39:ba:84:65:06:0d:52:32:16:9e:cf:fa:
         bd:f6:e8:23:9d:29:cf:8e:6e:89:e9:8b:8a:ae:2b:3c:58:b0:
         29:25:cf:9a:d6:44:79:7a:4d:cf:b8:85:cd:8f:bd:a3:eb:fd:
         e5:67:a0:bb:ab:b9:e8:25:45:f2:84:1b:28:78:44:c0:aa:c3:
         89:8e:bf:a7:f0:37:bd:1d:13:df:7d:19:56:50:9a:f8:32:c2:
         5e:03:57:44:a7:43:dc:36:b9:93:32:38:a5:ad:5f:db:6c:1d:
         3b:41:ee:3d:31:94:ee:64:f6:35:fb:e4:c8:02:16:5d:e9:d4:
         b1:c3:7b:60:a0:3e:c1:56:2b:e9:cf:3e:30:06:d2:d7:2c:96:
         b3:4c:19:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----