This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft
File:                     D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft (raw, json)
Hash identifier:          weMQ94/xgcC3EHES2j7tzpjF98jRCFqANEK4nJvDnQQ=
Subject key identifier:   E7:E0:45:A8:95:63:09:E3:43:79:48:F2:45:19:87:3F:8E:D6:10:4D
Authority key identifier: D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F
Certificate issuer:       /CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F
Certificate serial:       14D329A52FD77D46CF7066BF6322DAF8D49A3759
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft
Manifest number:          EE
Signing time:             Fri 05 Dec 2025 08:12:27 +0000
Manifest this update:     Fri 05 Dec 2025 08:07:27 +0000
Manifest next update:     Wed 10 Dec 2025 23:06:27 +0000
Files and hashes:         1: 323830333a376535303a3a2f33322d3438203d3e20323633313935.roa (hash: oJnk7HghAfllaWlCWdC4nj4Eg5ypd+tMzoPry4NKeww=)
                          2: 323830333a376535303a3a2f33322d3438203d3e20323632353839.roa (hash: eCaEFSjE7aZuQizaw6/baM+QHao5Mv042kghMe+uIo0=)
                          3: D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl (hash: Tq4r3mWjFWXwoBSrZBIVlGRB63G8h3sRSodFzqENtNA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 23:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d3:29:a5:2f:d7:7d:46:cf:70:66:bf:63:22:da:f8:d4:9a:37:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F
        Validity
            Not Before: Dec  5 08:07:27 2025 GMT
            Not After : Dec 10 23:06:27 2025 GMT
        Subject: CN=E7E045A8956309E3437948F24519873F8ED6104D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d5:d9:f6:2d:66:f6:94:5e:06:e6:5a:e4:6e:
                    48:18:55:bf:8b:64:17:44:9d:47:7b:a5:4c:e1:40:
                    e4:ac:25:82:5c:99:83:15:06:3c:81:72:81:bb:6b:
                    de:cd:ad:1a:6d:9e:0c:12:de:f6:6d:f2:e1:c3:b7:
                    76:be:da:ec:59:d4:f9:25:9c:f9:02:66:b9:3a:6b:
                    63:a9:30:6f:d6:c8:92:60:ce:7b:d3:80:de:05:1e:
                    1d:a7:6b:7f:7b:95:24:f7:61:ec:b5:b6:48:13:5b:
                    56:fd:eb:c9:ef:16:2f:04:2a:0d:52:75:02:15:78:
                    36:65:00:a4:c4:ea:b4:f7:f4:1b:7f:39:11:d0:26:
                    ab:0c:17:69:4b:87:b5:64:9d:47:df:d4:16:d6:02:
                    0d:68:73:b2:f1:a3:7f:df:b3:d1:2c:f9:3b:08:cb:
                    18:97:4e:f2:8b:ba:57:4d:3f:4f:02:aa:5a:ea:fd:
                    67:4e:a2:d3:55:b4:d2:c6:00:48:2d:d3:43:e7:1c:
                    e1:32:c2:a9:d0:58:ec:23:79:1a:5a:17:86:f2:07:
                    d6:5f:a4:2f:e0:1d:e7:11:4f:16:aa:d0:8b:5f:25:
                    27:e6:ea:9f:69:39:e6:1b:da:70:b3:07:77:14:5a:
                    c7:42:a8:59:d2:a2:d5:d1:ec:84:5e:e9:38:4b:79:
                    77:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E0:45:A8:95:63:09:E3:43:79:48:F2:45:19:87:3F:8E:D6:10:4D
            X509v3 Authority Key Identifier:
                keyid:D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:89:fc:f0:c8:f4:42:b7:96:9a:cd:dc:a9:2c:ba:19:63:36:
         e1:13:f4:0b:bc:40:0f:1c:d7:c8:e5:b9:80:e6:18:b8:d6:09:
         61:c7:11:ce:b4:84:c6:d9:78:db:0d:3c:11:c8:37:5b:bd:f3:
         38:29:6e:70:d5:02:ca:ed:d7:10:6e:74:12:10:a4:5e:64:c5:
         a6:5d:3e:7f:3e:5e:9d:c4:1b:ee:ef:1d:d1:7c:88:cc:3e:ea:
         dc:6b:22:aa:04:00:65:f9:2c:bc:e5:de:dd:4b:44:c5:88:f4:
         b6:eb:78:24:50:d3:c6:5d:3a:4f:f9:fa:b4:55:82:82:66:54:
         94:95:69:bb:c4:9e:2a:4f:cd:16:32:27:69:d2:af:48:fd:50:
         ad:fc:3d:df:72:0e:79:eb:31:1f:fa:e6:9e:78:1e:b9:ec:1b:
         73:f7:3f:af:fd:e5:fb:2d:c8:1b:32:e4:e3:68:cc:d6:96:94:
         59:45:94:06:71:84:39:c1:ee:ba:15:01:0d:79:a9:0d:8b:5e:
         ef:d8:65:99:f4:5b:49:74:9a:a2:d4:9e:19:fa:fe:8d:5c:77:
         0c:34:05:76:d5:a4:45:6c:54:dc:f0:ca:78:39:ad:ba:a6:a5:
         16:e7:47:f2:79:f8:df:49:e3:51:83:40:be:f5:fb:12:5d:05:
         0a:1b:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----