This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
File:                     2D8A5D8A34E265B308F626454D8A6E920C65D608.mft (raw, json)
Hash identifier:          WpgI4MQojolf7unQnkc+F6fqR37kh6FpT3qSwIzx8M8=
Subject key identifier:   8E:A4:13:15:9E:CF:19:52:76:50:A3:CD:7C:D9:88:47:CD:2A:5E:20
Authority key identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08
Certificate issuer:       /CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
Certificate serial:       7C91C8CDA55ED82883D3F19034B89AC6B9C1F950
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
Manifest number:          68
Signing time:             Fri 05 Dec 2025 13:00:06 +0000
Manifest this update:     Fri 05 Dec 2025 12:55:06 +0000
Manifest next update:     Thu 11 Dec 2025 11:25:06 +0000
Files and hashes:         1: 2D8A5D8A34E265B308F626454D8A6E920C65D608.crl (hash: 7Jwu9OyAZbOEyGuC1UIpOCAnA71B3mXC+Q653VHl2I8=)
                          2: 323830333a3539303a3a2f33322d3332203d3e20323732393634.roa (hash: ZtjREPCj/eeu/E9mBRi9OvFD2ENA47U6yaCq0Q6c32c=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:91:c8:cd:a5:5e:d8:28:83:d3:f1:90:34:b8:9a:c6:b9:c1:f9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
        Validity
            Not Before: Dec  5 12:55:06 2025 GMT
            Not After : Dec 11 11:25:06 2025 GMT
        Subject: CN=8EA413159ECF19527650A3CD7CD98847CD2A5E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:c8:1a:6b:59:94:d5:0e:74:be:5c:98:8b:
                    34:c5:04:94:af:d9:73:aa:04:31:08:71:e4:3e:2b:
                    3a:b9:be:6e:45:7d:9f:39:3a:6b:bc:32:15:f8:cd:
                    a6:14:91:a8:42:d3:01:76:4f:26:44:15:10:b1:37:
                    15:f0:40:6d:80:97:06:30:8d:be:6a:b7:a6:32:03:
                    3a:03:1f:fc:81:fc:de:e0:c5:92:e0:b3:54:10:4d:
                    0d:b4:5c:97:49:31:ee:d2:0c:35:47:e2:54:12:97:
                    be:f6:25:fa:af:f4:8a:26:e1:8f:9c:92:d1:9f:1d:
                    1c:1c:43:b0:2e:5e:b0:d6:4c:b4:4d:c7:ab:8f:2c:
                    cf:33:14:9e:6c:2a:d9:19:a9:97:a3:ad:dc:93:c3:
                    8d:21:fc:dc:ef:8b:39:85:c8:ff:29:26:20:05:0c:
                    48:30:b4:69:2c:22:73:f6:db:7f:48:44:ce:d1:e0:
                    40:51:bd:50:62:4b:76:ab:a7:3f:e8:c9:58:b1:e6:
                    a0:30:be:20:45:68:ab:e6:a6:7d:39:68:82:ff:6c:
                    4f:36:84:77:33:b8:6a:29:7d:b9:87:5a:c0:23:74:
                    f9:a6:5a:55:d3:42:d9:86:72:1e:a3:b4:a0:b0:ed:
                    62:1e:ac:72:a4:47:c4:8b:61:ca:be:74:7c:71:08:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A4:13:15:9E:CF:19:52:76:50:A3:CD:7C:D9:88:47:CD:2A:5E:20
            X509v3 Authority Key Identifier:
                keyid:2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7e:a0:72:78:dd:5e:5d:29:8d:e8:64:ef:a2:0a:60:28:5f:
         80:81:01:8f:bb:de:db:7f:88:bb:3c:50:e8:31:d6:cc:3b:61:
         58:d1:65:65:4b:f2:f4:ab:d2:50:f3:6b:e5:c7:de:8a:3a:04:
         f9:f4:12:8c:30:46:2b:04:80:45:12:6d:c0:d2:8a:14:66:f6:
         4a:da:fc:c1:32:1d:f1:fa:1d:76:65:30:50:d7:81:53:00:8d:
         c2:c1:c0:b9:cb:25:0e:e5:9f:32:d6:dc:7b:ce:47:f2:6b:cf:
         15:15:ec:c7:39:b1:fb:f8:0e:e5:83:20:1e:21:df:df:dd:fc:
         a1:ce:00:bb:b1:cd:82:de:f1:5d:c2:eb:ef:bf:89:56:24:4d:
         bb:99:44:90:c2:9f:ec:98:34:87:6b:eb:5e:06:8a:ab:e7:1a:
         49:49:35:f7:af:ee:43:53:1a:04:0b:f2:b6:d8:a9:40:63:0f:
         1d:e4:5a:c3:8e:2e:e6:7a:70:a3:19:dc:6b:7d:7c:d6:21:37:
         b5:5e:7a:8c:b6:91:41:9d:06:53:83:75:6c:61:58:a5:50:1e:
         8d:e6:fd:00:33:71:e4:bb:ea:1f:9f:6a:42:c4:a9:b3:90:e7:
         71:3a:a1:46:a8:81:86:48:e1:0c:f5:83:9f:f6:a7:fd:7b:c7:
         49:40:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----