This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft
File:                     D2C96715842E19445AE9268C979CE3C8F576D88D.mft (raw, json)
Hash identifier:          NQSkp9bnZowo6IOiwX+SovIy4eK2I502z51bQ1PsYGQ=
Subject key identifier:   45:6C:FD:D9:1D:1D:FC:EE:A4:D8:91:E1:6C:E5:82:32:02:B1:EB:1F
Authority key identifier: D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D
Certificate issuer:       /CN=D2C96715842E19445AE9268C979CE3C8F576D88D
Certificate serial:       76DBCD482340074BC402A33B58B0BF7DA8DE8B35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft
Manifest number:          0145
Signing time:             Fri 05 Dec 2025 19:03:30 +0000
Manifest this update:     Fri 05 Dec 2025 18:58:30 +0000
Manifest next update:     Wed 10 Dec 2025 06:40:30 +0000
Files and hashes:         1: 323830333a6136303a3a2f33322d3332203d3e20323637383738.roa (hash: etr1vxzggL8ebp6gb0P76/ItGyWW6MBzBD13t/gLlvA=)
                          2: D2C96715842E19445AE9268C979CE3C8F576D88D.crl (hash: Sf05/DQXYCRKd3ZTJS2DlYUNlrJ9KQ0Cx80BLhlJc94=)
                          3: 34352e3137352e3134392e302f32342d3234203d3e20323637383738.roa (hash: pGaWzqZk9Ab6xuvGWePdqEp0CPWzT4knEiqK0/4Dh48=)
                          4: 34352e3137352e3134382e302f32322d3232203d3e20323637383738.roa (hash: FLKVu51CqiMKIC4dg/HlHre6SL632epjxpR+j5YZCBg=)
                          5: 34352e3137352e3135312e302f32342d3234203d3e20323637383738.roa (hash: XwIIrJjE0LxVy4lRZyKlP6xy4wvAdkIRwAH9QZTNONw=)
                          6: 34352e3137352e3134382e302f32342d3234203d3e20323637383738.roa (hash: RkvtaiGcZDO2ojWgCEIuQ8LTZvjfxX4efhqG29kfXw0=)
                          7: 34352e3137352e3135302e302f32342d3234203d3e20323637383738.roa (hash: 1bYKDDuBdhjof2i6LXJ9XhXolvJXmzIT9tvxCFFxZDE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 06:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:db:cd:48:23:40:07:4b:c4:02:a3:3b:58:b0:bf:7d:a8:de:8b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2C96715842E19445AE9268C979CE3C8F576D88D
        Validity
            Not Before: Dec  5 18:58:30 2025 GMT
            Not After : Dec 10 06:40:30 2025 GMT
        Subject: CN=456CFDD91D1DFCEEA4D891E16CE5823202B1EB1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ad:65:bd:a7:6a:95:51:e5:f4:1e:fa:ec:ec:
                    d5:53:06:1a:35:ef:d8:7a:5f:f2:03:28:eb:9b:bb:
                    77:40:4b:fc:ac:47:b5:09:a9:cb:d4:9a:3e:22:01:
                    47:da:cf:47:f1:91:63:f1:f8:cc:e3:e6:9f:72:c2:
                    67:c3:fc:7a:bd:37:bd:0e:2e:dd:3a:b9:46:8b:06:
                    53:38:4b:2e:78:c9:d2:44:77:47:e1:f1:6a:f2:47:
                    cf:4f:71:74:b5:82:fb:52:b2:92:9c:40:b4:75:77:
                    e6:89:fa:04:03:cb:87:a2:88:a4:5b:01:a1:d8:a3:
                    cd:cd:07:76:16:e9:11:df:c6:60:8c:88:a6:14:4b:
                    dc:a1:4f:9c:cf:38:89:6b:f0:3e:1e:02:e3:dd:a9:
                    5c:50:f8:fa:fa:df:53:48:1d:64:7c:bb:6d:2e:d7:
                    bf:c3:45:98:ce:f0:a2:c1:e3:f1:08:93:09:f5:b4:
                    dd:af:99:5b:f3:84:72:76:49:84:5b:0d:60:00:64:
                    24:66:c7:35:07:a6:b1:b5:0f:3d:e9:36:88:d2:33:
                    0c:16:a3:74:76:b5:19:db:ce:74:dd:d5:60:8d:28:
                    06:8d:24:52:4a:86:de:d6:08:f6:9c:f9:57:53:be:
                    c0:a5:24:da:f4:b5:20:47:37:42:ee:35:f6:b5:1d:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6C:FD:D9:1D:1D:FC:EE:A4:D8:91:E1:6C:E5:82:32:02:B1:EB:1F
            X509v3 Authority Key Identifier:
                keyid:D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:33:e4:b9:fa:45:ea:48:1d:fc:12:ce:17:eb:af:80:69:ce:
         a6:9a:11:cb:a2:cb:e0:a0:5a:4c:80:c4:4b:b7:87:c7:45:8a:
         2a:6a:53:ce:2c:88:bb:e1:3a:5f:c3:94:ff:3a:e8:ea:45:5b:
         6a:e9:a0:f1:47:0b:39:ca:4d:8a:ff:c2:20:75:97:c0:3d:db:
         3b:0f:c0:27:fd:12:49:01:b9:c5:ff:0d:11:a6:7f:f0:f0:5f:
         90:43:01:4e:4f:d3:2d:ed:12:ea:94:62:70:75:eb:29:f4:da:
         15:9a:f0:4c:21:9f:ca:4f:ef:33:07:a3:86:81:0c:5d:10:05:
         d3:fd:11:a8:4b:ab:ce:e4:ef:b4:3c:55:81:c4:4d:7a:37:0a:
         8f:4a:22:83:08:fc:59:91:10:d2:c3:d1:82:9e:86:59:1d:de:
         c8:69:8c:4d:53:23:7b:97:53:64:13:47:7e:91:bc:56:c4:85:
         d5:53:e7:0f:c1:8b:64:7d:21:37:c4:6c:29:f7:97:54:6d:f5:
         a5:f1:39:e8:b1:85:5f:45:92:30:df:1a:da:61:95:82:5c:3e:
         ff:fa:b0:dd:ad:3c:5a:74:23:8e:2e:67:a6:1d:dd:10:1a:df:
         58:2f:10:e1:cf:39:86:47:89:13:3d:77:54:73:b1:ca:b3:fe:
         1a:e5:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:39:45 2025 by rpki-client