This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
File:                     2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json)
Hash identifier:          SIpzdHKnosI7BUr5tEJrjmQ0v+CVIdBVWpAUQymu/Zg=
Subject key identifier:   6E:89:DF:FC:C7:C3:C5:32:B9:D7:63:DC:A8:BA:ED:D9:D1:76:11:5A
Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
Certificate issuer:       /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Certificate serial:       1A0BB6D986DBFFA649A5FBDCA37F4EA06E5D5913
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
Manifest number:          013F
Signing time:             Fri 05 Dec 2025 20:14:15 +0000
Manifest this update:     Fri 05 Dec 2025 20:09:15 +0000
Manifest next update:     Wed 10 Dec 2025 15:35:15 +0000
Files and hashes:         1: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: kvXq/7xFBcYihjCboY6sXmggXJS5RFgBzNm9B4FD6Yk=)
                          2: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: g6DNKjZekU2uDpQLAA16qySYRWAhC+pOHrCuJlds2qw=)
                          3: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: dVBuQuEcAxvHRn4GPUWm9iO5YGVllYqqvDYWbNGLfjA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 15:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0b:b6:d9:86:db:ff:a6:49:a5:fb:dc:a3:7f:4e:a0:6e:5d:59:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
        Validity
            Not Before: Dec  5 20:09:15 2025 GMT
            Not After : Dec 10 15:35:15 2025 GMT
        Subject: CN=6E89DFFCC7C3C532B9D763DCA8BAEDD9D176115A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:68:f3:48:03:9d:49:bd:4c:a2:4d:3b:31:
                    9c:46:84:3b:1c:7b:0e:b4:92:01:4c:b7:51:66:d2:
                    6d:0b:b3:4c:97:6c:3d:58:ab:8a:7f:a1:8f:62:ac:
                    1a:03:c0:98:5b:6a:50:13:c8:8f:21:5d:8e:b6:0a:
                    4c:fd:09:89:a4:f9:d3:ec:92:b4:1d:4b:e7:ab:e4:
                    48:ad:89:dc:4c:da:08:28:40:fe:cb:ff:b8:b1:22:
                    4a:5f:39:e9:7c:ff:c6:13:a9:9e:cd:06:f2:04:57:
                    73:05:8e:a9:b7:60:68:b7:26:40:b1:b0:92:86:0c:
                    15:55:b8:22:4a:3f:f2:95:81:cd:d4:bb:cc:e1:1a:
                    db:f8:18:99:06:89:a1:32:3c:08:c7:21:eb:bb:31:
                    e7:89:24:47:74:78:c8:43:e6:d0:54:19:9f:fe:d3:
                    fa:65:26:c6:18:dc:8e:30:0e:2e:23:2e:ab:16:b1:
                    02:0a:90:29:e5:01:90:be:39:30:03:7b:21:62:f5:
                    30:a9:68:37:82:d5:25:de:a6:3f:a3:20:d0:ef:90:
                    7a:24:20:89:d0:b8:44:1b:cd:bd:b3:0b:6b:34:33:
                    09:d8:c4:f9:6d:06:f7:57:f7:30:31:ae:e7:ba:8c:
                    b2:f3:66:12:cb:aa:ac:46:4e:24:40:21:94:c8:8a:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:89:DF:FC:C7:C3:C5:32:B9:D7:63:DC:A8:BA:ED:D9:D1:76:11:5A
            X509v3 Authority Key Identifier:
                keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d1:58:f8:54:64:b3:61:d9:04:3d:72:13:76:3d:1f:b1:6d:
         1b:09:1b:b0:2e:70:0f:51:b4:28:c4:83:6d:02:16:98:94:29:
         f5:de:7f:2e:b7:68:67:fb:76:2a:e5:3d:65:58:41:2f:cd:08:
         78:f6:d6:ff:3e:3e:04:93:a9:69:a9:40:5e:55:ab:80:e6:91:
         0e:0c:d3:58:0d:c5:01:d2:41:93:79:6f:b5:30:b4:bc:a2:2d:
         34:61:e0:42:e9:a8:2b:35:2c:8e:0a:d2:29:32:9c:a8:a9:c5:
         59:ff:08:ce:6f:3c:b2:97:58:95:35:da:cd:b3:e0:5c:74:5a:
         67:b2:2c:3e:e8:b0:1f:e1:a0:34:83:c6:2c:24:e9:c3:06:ee:
         d7:25:31:11:98:d4:15:5f:b4:60:2a:67:53:24:ba:9e:18:ac:
         b4:3c:cd:52:98:8e:b2:00:25:0f:ed:19:7c:58:04:99:32:56:
         11:73:be:5b:ff:e2:e8:3d:31:09:a9:b9:cc:53:07:88:fc:e3:
         05:a6:fc:80:77:00:21:7d:f6:7f:fa:8a:6f:81:f0:07:2a:18:
         ed:a0:0d:7b:ac:f9:5b:88:c0:54:ca:7e:c0:96:98:41:df:4d:
         86:93:3d:79:23:f2:1b:5b:f3:c2:a2:e5:7d:2e:c5:1a:de:79:
         62:05:d9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----