This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
File:                     D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft (raw, json)
Hash identifier:          hq5OteXYgQNy88WDaCswtPYuuouOIJ1a6anBo7OktcM=
Subject key identifier:   C2:B4:F6:4B:8C:4C:A5:50:FC:C3:FA:AA:1B:1A:02:54:33:00:A1:F0
Authority key identifier: D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C
Certificate issuer:       /CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
Certificate serial:       2153AC1C264B7BD9161F8C874BF1B3A8518BE229
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
Manifest number:          0144
Signing time:             Sat 06 Dec 2025 16:40:42 +0000
Manifest this update:     Sat 06 Dec 2025 16:35:42 +0000
Manifest next update:     Fri 12 Dec 2025 12:21:42 +0000
Files and hashes:         1: 34352e37302e3138312e3232342f32372d3237203d3e20323635383134.roa (hash: 0A7i94jTbUoP2cfm7TdMPv+bVBJxVqMSEHN1Kg3Ojx4=)
                          2: 34352e37302e3138302e302f32322d3232203d3e20323635383134.roa (hash: BQdwxtgo5L1T0UilqKluFvqRRHzFjkB9p9gPX/wbUVY=)
                          3: 323830333a333832303a3a2f33322d3332203d3e20323635383134.roa (hash: JzvgMJvQy8H80UwSvphA3clT68+3AsxpsiwjJ+J10lo=)
                          4: D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl (hash: 8sWTe1xevlFYb3mXQKQjt9zW2qPCs0rxHToO0LYgOPI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:53:ac:1c:26:4b:7b:d9:16:1f:8c:87:4b:f1:b3:a8:51:8b:e2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
        Validity
            Not Before: Dec  6 16:35:42 2025 GMT
            Not After : Dec 12 12:21:42 2025 GMT
        Subject: CN=C2B4F64B8C4CA550FCC3FAAA1B1A02543300A1F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:61:d3:bb:06:b7:bf:15:80:65:8f:78:16:
                    30:39:30:ac:6d:ec:ca:a3:d8:14:03:f0:aa:cb:ac:
                    2a:83:0b:4e:4b:1d:51:51:72:79:d4:09:d8:07:32:
                    4d:5d:d3:24:15:c9:18:b9:65:5a:e5:2c:37:36:f6:
                    2c:58:ee:a4:f7:b1:06:58:54:ca:ba:60:80:80:87:
                    fb:2b:70:77:8f:13:10:a6:81:e3:4f:9a:cb:aa:18:
                    3e:fe:89:67:cc:73:bf:1b:96:1b:d8:07:c6:38:0c:
                    1a:92:31:48:f0:76:d5:e1:76:08:74:90:cb:89:72:
                    55:6f:db:33:bf:9c:0e:15:18:eb:bf:0a:10:55:58:
                    1f:31:9c:30:7d:85:7e:49:e6:05:35:71:80:ca:c9:
                    1e:7d:17:a6:62:92:e6:27:d4:cf:e5:2a:c1:86:6c:
                    68:be:a7:95:a6:1b:e0:be:73:8c:b0:18:05:4c:7a:
                    ed:c6:fd:52:c7:5e:c4:44:ea:bf:18:a3:fa:23:00:
                    ae:43:3c:0d:1d:4d:be:28:46:d2:4f:93:3c:d0:bc:
                    f2:db:63:76:8f:33:a8:b7:96:43:2c:4a:a3:2f:68:
                    a0:09:c4:07:9a:89:56:f0:cf:51:d4:46:a0:21:4e:
                    73:3f:8e:b8:5e:8d:19:d4:10:bd:f7:78:d1:5e:4c:
                    37:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B4:F6:4B:8C:4C:A5:50:FC:C3:FA:AA:1B:1A:02:54:33:00:A1:F0
            X509v3 Authority Key Identifier:
                keyid:D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:95:62:4f:01:d6:0f:79:34:cb:46:93:75:37:f0:96:f0:50:
         19:04:ab:24:41:24:22:a0:fa:85:1f:03:40:77:dd:7f:b3:95:
         03:64:7a:0e:46:a4:e5:06:74:e3:4d:71:63:18:f5:3f:72:88:
         47:4d:87:a7:57:6b:04:37:0c:8d:1b:2d:65:73:04:62:18:bf:
         28:7d:bd:11:17:59:9a:c3:c5:50:5d:b5:61:33:6f:e3:43:a6:
         c7:4b:c6:4d:34:8a:b1:87:56:c7:aa:21:26:16:4a:49:d4:98:
         00:59:4c:d2:cb:8a:67:7e:76:70:a9:fe:3f:90:19:67:11:21:
         84:3a:48:fa:7a:14:f5:a4:e6:37:92:73:6e:1d:3f:26:40:20:
         22:ec:15:92:e0:2e:d0:84:75:d1:db:62:26:1e:93:17:8b:89:
         2e:8b:50:50:fb:ec:f0:17:ae:2c:5b:df:cb:63:7f:4c:2c:fd:
         8d:b6:58:61:ec:c1:73:f4:ed:04:84:fa:4a:cf:70:2b:37:c8:
         43:17:24:65:96:cb:91:b8:94:48:19:97:ac:6d:59:05:4d:a5:
         32:8e:be:88:a6:c4:99:a8:ba:56:a9:92:e2:9f:9b:92:76:56:
         be:52:28:81:9f:06:46:4c:37:12:b6:35:2a:a7:f1:5a:5d:e5:
         16:1b:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----