This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
File:                     CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft (raw, json)
Hash identifier:          gAQzo5BVlzpunAi8kw+jF+I8ZzEiT/7hb6Gsr9lU2U0=
Subject key identifier:   DF:F0:1D:91:55:F2:98:9B:F6:F0:44:3D:CB:36:E1:C2:18:B6:F5:E2
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       1582053D2414EB770EAB51ACE00DBEBF8554C03A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
Manifest number:          011C
Signing time:             Sat 06 Dec 2025 07:15:32 +0000
Manifest this update:     Sat 06 Dec 2025 07:10:32 +0000
Manifest next update:     Thu 11 Dec 2025 15:35:32 +0000
Files and hashes:         1: 3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa (hash: wv9bzhvqRZDHf+P78l6TYaz5VREYKd9TaLC7U4S9rPE=)
                          2: 3138312e3233332e3136382e302f32342d3234203d3e203237393531.roa (hash: oKxAOL2yVw8WT/7Yu3EhiJSoZXhnTX43Rx7XofxkwmA=)
                          3: 323830333a6231303a3430303a3a2f33382d3338203d3e203532343638.roa (hash: 46l4d5yDbrgcXTlM1NtPYFcO+4GZfu084BTGP/Vvwuo=)
                          4: CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl (hash: 7uT5g6pas6XERIxkabPpJjVmHtAdA6TgJkRGwfLgtwo=)
                          5: 323830333a6231303a3a2f33382d3338203d3e203237393531.roa (hash: 8jH2YPWVSph+aeAWtR2v9cZBYAvALwyoLByn9gZ8qtE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:82:05:3d:24:14:eb:77:0e:ab:51:ac:e0:0d:be:bf:85:54:c0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Dec  6 07:10:32 2025 GMT
            Not After : Dec 11 15:35:32 2025 GMT
        Subject: CN=DFF01D9155F2989BF6F0443DCB36E1C218B6F5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:cb:05:eb:2f:07:24:5f:0d:d2:b2:49:04:
                    29:ba:dc:c8:2b:8f:1f:f5:b9:ef:e5:dc:9a:17:b8:
                    01:b5:7b:69:ac:49:65:76:fd:4a:e3:70:33:78:06:
                    a2:a0:bc:af:fe:24:19:ec:72:e1:15:5e:9b:a2:31:
                    79:d3:d0:8d:b6:fb:e5:d4:5c:de:a6:02:35:f6:3e:
                    b7:5f:48:60:5f:d8:50:b1:b6:60:e4:7e:7b:6e:d8:
                    b3:e1:93:c1:9d:c7:20:d1:27:36:c5:ba:df:59:2b:
                    24:8c:3a:bd:6b:37:fc:70:35:ee:26:06:e7:bc:9e:
                    bf:a3:78:ff:e0:77:60:33:60:80:81:e6:e8:5e:3f:
                    b2:0c:42:07:07:0f:db:07:88:50:2a:9a:c3:ea:02:
                    3d:a2:d2:00:74:52:ea:cb:8e:96:6f:96:fd:84:89:
                    a6:62:fa:15:55:d9:ff:3d:48:ec:f1:2c:02:c9:7d:
                    85:31:9d:8e:0d:c4:e9:77:65:35:f9:48:8d:49:14:
                    12:78:07:99:de:4e:91:30:46:82:04:8b:32:26:2b:
                    cb:11:ac:5b:8c:c7:2b:a7:b8:e4:ef:6e:95:25:bd:
                    d2:af:2d:65:a5:c6:42:d4:eb:04:11:74:25:d4:5d:
                    04:29:92:52:37:0f:05:f2:55:db:85:f3:1a:85:32:
                    09:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F0:1D:91:55:F2:98:9B:F6:F0:44:3D:CB:36:E1:C2:18:B6:F5:E2
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:96:93:93:0a:4d:80:36:b4:39:f6:68:67:d0:59:95:ac:f6:
         5b:2f:f5:d0:ea:3b:66:a2:38:d3:20:19:12:7a:12:af:2a:89:
         46:09:e0:f4:3a:7b:27:ed:1f:ce:6d:09:7c:1e:f8:db:2a:b9:
         ff:6e:4f:ae:54:34:f5:ba:74:28:1b:9f:b8:b8:98:70:46:a0:
         02:ef:09:4b:6a:23:28:7b:d8:b2:9b:63:21:37:e0:88:a4:2e:
         52:83:04:06:0e:04:d7:78:22:52:61:94:c4:20:70:90:3f:42:
         bf:70:46:7c:24:3c:1e:73:38:01:79:84:9d:ec:44:2a:92:40:
         f5:d8:2e:97:84:cb:5c:34:7b:d1:44:c7:d9:0d:91:a3:75:85:
         a0:14:56:3e:24:a2:81:90:84:69:19:cd:cb:88:0b:69:4a:54:
         2f:28:30:70:c2:6e:e4:a4:ad:55:1b:ba:2c:18:98:b2:02:3b:
         2e:0c:e9:a9:4f:57:54:e9:7e:d6:2a:ca:6a:f5:97:7f:d0:9e:
         a7:3b:cf:b1:32:bb:98:ad:3c:08:bd:ad:73:84:52:ac:08:69:
         be:69:2b:e6:50:0f:39:bc:a4:60:f6:75:5f:9b:54:62:67:eb:
         0f:7f:48:53:30:2c:28:40:37:eb:3f:23:d2:04:91:b5:e5:98:
         43:49:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----