This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.mft
File:                     856E3A36CF2E7B4FC53C8A40A608EC358539F14D.mft (raw, json)
Hash identifier:          2P4EK8fIqOkO32uFMQ/0CNX7c9ggLT9ILyuGF7C9pVc=
Subject key identifier:   32:BF:AD:1D:FA:85:7F:CB:2F:B5:1D:61:7B:3E:69:9C:D3:17:17:5B
Authority key identifier: 85:6E:3A:36:CF:2E:7B:4F:C5:3C:8A:40:A6:08:EC:35:85:39:F1:4D
Certificate issuer:       /CN=856E3A36CF2E7B4FC53C8A40A608EC358539F14D
Certificate serial:       593DAD41BD6584AC3BA6B8D0C9949015748F7302
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.mft
Manifest number:          28
Signing time:             Sat 06 Dec 2025 03:17:57 +0000
Manifest this update:     Sat 06 Dec 2025 03:12:57 +0000
Manifest next update:     Fri 12 Dec 2025 01:20:57 +0000
Files and hashes:         1: 323830333a3364303a3a2f33322d3438203d3e20323734323030.roa (hash: lE3GglL3z7ZY8Df/KLLlyHdAdn33C6RE8zoe/8oNcHE=)
                          2: 856E3A36CF2E7B4FC53C8A40A608EC358539F14D.crl (hash: 3+ovpauXXp2MwmJrBt7r5nK25+mxmht5GQ44lOd7qKY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3d:ad:41:bd:65:84:ac:3b:a6:b8:d0:c9:94:90:15:74:8f:73:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856E3A36CF2E7B4FC53C8A40A608EC358539F14D
        Validity
            Not Before: Dec  6 03:12:57 2025 GMT
            Not After : Dec 12 01:20:57 2025 GMT
        Subject: CN=32BFAD1DFA857FCB2FB51D617B3E699CD317175B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:62:02:2c:5a:a6:19:b5:77:97:3d:90:20:c9:
                    9d:3f:04:fc:8d:73:70:1f:10:67:3c:0c:c3:47:85:
                    36:7a:b1:66:1a:7f:5f:3b:68:3f:c0:39:7c:85:6b:
                    4b:b5:29:44:2c:be:0f:0b:7b:7d:c4:d1:09:6c:f8:
                    4d:10:4b:6d:ae:42:1a:12:5c:fe:86:bc:28:22:89:
                    15:62:bb:2c:b6:0b:dc:9d:48:64:21:40:89:4b:cd:
                    b9:a4:8b:4e:42:f0:c4:4f:f7:0b:8a:4c:73:ed:0b:
                    ea:fd:bb:a6:a0:fc:bf:59:7e:c7:cf:5a:b3:9c:59:
                    5d:b2:63:6f:a3:ad:17:f9:cd:fc:38:ab:a2:26:1b:
                    82:cc:8c:45:79:fc:1d:76:62:70:85:c8:ea:39:ef:
                    9b:a4:0c:23:5f:ed:2f:74:28:75:cc:a6:3e:6e:7c:
                    95:9a:6d:c3:43:fc:0e:fa:c2:80:31:1a:35:c4:26:
                    3f:74:65:7d:21:bf:96:be:47:88:e9:08:86:5b:3c:
                    71:8e:e2:55:90:56:b1:ce:e1:33:c2:30:3d:14:7c:
                    7c:80:83:4c:40:0e:0d:a6:11:31:4b:46:9c:7a:3b:
                    4a:5d:32:8e:a5:e5:37:82:77:61:17:87:1d:86:6b:
                    f5:f6:0a:3b:58:a6:d5:43:9b:2a:4a:6f:47:ba:5d:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BF:AD:1D:FA:85:7F:CB:2F:B5:1D:61:7B:3E:69:9C:D3:17:17:5B
            X509v3 Authority Key Identifier:
                keyid:85:6E:3A:36:CF:2E:7B:4F:C5:3C:8A:40:A6:08:EC:35:85:39:F1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a1:63:1f:01:db:b0:d4:9f:41:0e:ee:8c:ee:d0:b6:22:66:
         9d:4e:4c:48:2d:73:73:59:7d:03:7d:fe:ec:ad:e3:21:0f:95:
         64:43:8d:d7:9e:5a:c0:b2:38:df:36:9e:09:aa:8f:24:4e:91:
         bd:73:c4:46:91:3d:45:19:78:cc:d3:bd:cf:97:97:85:6e:28:
         39:eb:a6:ff:47:b5:c8:dd:f3:c1:59:df:33:89:09:fe:3b:27:
         29:d6:e9:66:df:6a:62:04:18:68:c8:90:1e:29:fa:c6:f7:8a:
         f1:b6:d8:fe:91:d7:f8:1a:28:86:31:19:60:c1:f2:7c:fe:a3:
         16:94:3f:a4:2c:a2:41:0d:17:d9:ca:fe:67:77:93:06:c0:b0:
         48:1e:f3:0b:3c:6d:60:c8:38:bd:95:87:ee:e8:f1:ac:c1:60:
         02:62:42:ff:8d:e9:00:b6:85:95:26:90:5e:fc:de:cf:ce:fc:
         b4:b1:4a:10:47:02:e4:02:5f:ef:9e:9e:7c:55:5d:59:ed:07:
         8e:9b:4f:64:b6:3b:ea:ae:ba:54:b4:e1:a7:ba:e3:fc:b6:b7:
         d0:58:14:41:bc:94:cb:3e:09:64:d7:46:3d:95:f4:d3:36:50:
         4e:a2:3a:5e:0b:7e:a2:4b:39:36:f7:f2:5b:8c:88:47:93:9f:
         4e:74:bb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----