This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft
File:                     2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft (raw, json)
Hash identifier:          7/BeZy5xhyxutCMCbO9qx+/SVp8ts3UgNPLD6qIuCxY=
Subject key identifier:   BA:0B:6F:2F:3B:AD:BF:96:36:AF:A8:89:CD:A2:4A:38:BF:B1:B7:0F
Authority key identifier: 2D:86:92:86:7D:08:88:ED:E9:94:3E:1B:31:BA:ED:70:B4:DB:48:11
Certificate issuer:       /CN=2D8692867D0888EDE9943E1B31BAED70B4DB4811
Certificate serial:       325A4437D74918637CB20694394F8D901C26C40E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft
Manifest number:          0143
Signing time:             Fri 05 Dec 2025 01:08:24 +0000
Manifest this update:     Fri 05 Dec 2025 01:03:24 +0000
Manifest next update:     Tue 09 Dec 2025 23:45:24 +0000
Files and hashes:         1: 323830333a333831303a3a2f33322d3438203d3e20323731383339.roa (hash: 3210TdmahXk1vHiIapLHiNQOIVAyIIlWlsQSEJlbR48=)
                          2: 34352e3233392e3231362e302f32322d3234203d3e20323731383339.roa (hash: Bj0nm1n4WHfcZZSvRlS9rAMS5hAfN154DashuE/kWrU=)
                          3: 323830333a333831303a3a2f33322d3438203d3e20323633373032.roa (hash: TL50qrk9XvnFgdQLkO+e39A+FHmbv3UMwsCY6R9yRO8=)
                          4: 2D8692867D0888EDE9943E1B31BAED70B4DB4811.crl (hash: TiS5Ogo++TPzosoSbJcPccyMxCSUsxskfiFCLu7XfH8=)
                          5: 34352e3233392e3231362e302f32322d3234203d3e20323633373032.roa (hash: w1wLfKkqH57IWUZNa4mHTuLp2m5ja/hD3TZz3yTOZs8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Dec 2025 23:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5a:44:37:d7:49:18:63:7c:b2:06:94:39:4f:8d:90:1c:26:c4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8692867D0888EDE9943E1B31BAED70B4DB4811
        Validity
            Not Before: Dec  5 01:03:24 2025 GMT
            Not After : Dec  9 23:45:24 2025 GMT
        Subject: CN=BA0B6F2F3BADBF9636AFA889CDA24A38BFB1B70F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:aa:33:76:5d:9e:9e:d6:17:c0:79:22:35:
                    88:96:8e:a9:6f:57:e2:51:e3:d3:40:29:e1:42:f8:
                    9c:20:53:2a:e3:ef:1b:5a:b2:d2:bb:2a:7f:a2:b9:
                    2d:78:8f:34:df:5b:ca:66:0e:51:24:e5:80:77:b3:
                    ba:39:fa:58:b1:f8:b1:85:dd:07:3f:ff:d7:6f:c6:
                    c8:19:03:3e:af:d3:aa:16:6a:4e:96:81:98:46:af:
                    34:cd:20:b5:e1:cb:87:72:cb:e2:c8:77:8e:20:38:
                    b6:75:f1:c1:4b:1c:51:ae:e5:c8:89:73:a6:e1:73:
                    f2:0b:c8:f6:56:a1:ba:58:f1:a2:8e:c4:bb:4a:ed:
                    15:93:18:9e:8f:7d:6f:b2:ba:1a:12:7d:13:e9:9e:
                    5a:4a:f5:1d:f3:ab:25:6d:55:6b:39:98:bf:66:85:
                    51:25:8e:5b:d9:e7:4d:67:ff:c1:d4:1d:2c:43:17:
                    a2:34:d2:ef:0d:b8:cc:73:31:51:a0:6d:b9:7e:31:
                    03:3b:7f:98:e0:96:32:8a:2f:01:8e:a6:99:d0:b8:
                    f2:e9:5d:c7:90:76:f5:dc:95:ea:81:4a:36:3d:1c:
                    af:fc:65:4a:ad:1d:75:80:58:c1:5f:36:11:14:29:
                    21:2d:43:23:67:e5:c6:e8:6f:8a:fc:35:e1:ec:85:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0B:6F:2F:3B:AD:BF:96:36:AF:A8:89:CD:A2:4A:38:BF:B1:B7:0F
            X509v3 Authority Key Identifier:
                keyid:2D:86:92:86:7D:08:88:ED:E9:94:3E:1B:31:BA:ED:70:B4:DB:48:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a7:72:04:0e:6b:d8:de:cf:95:7f:f6:b6:a1:b3:1d:10:ba:
         0f:96:20:ba:f9:56:31:75:d7:db:44:cd:8e:03:7d:29:12:b8:
         f6:3e:ec:f5:cf:9c:61:f7:ee:ab:5b:a3:77:89:b8:c5:7b:93:
         67:e5:b1:ab:b0:00:58:59:79:5d:86:33:34:91:2f:fe:fb:f9:
         ac:d7:0b:c6:d5:47:dd:cc:0e:2c:77:2c:36:2e:1a:1a:a7:09:
         e0:75:da:11:73:fb:85:6a:b9:3c:c7:82:34:09:a2:ec:33:53:
         cc:7e:29:2e:46:d4:c8:b2:3f:be:e9:0b:d4:22:a8:a8:0f:1d:
         c2:4d:3c:83:7c:0e:2e:c8:c0:07:21:63:ee:83:c2:51:b2:07:
         c0:70:32:1f:b4:e3:96:1b:38:d9:b4:e7:39:0a:fb:eb:98:8b:
         46:fa:02:f7:ce:83:8e:0c:dc:1a:d8:e3:10:a5:47:3d:6a:ff:
         5e:b5:b4:5f:d8:aa:ed:1a:15:3b:18:0e:00:73:33:bb:36:27:
         d8:ed:d6:c6:50:62:2f:43:ef:12:0b:26:21:5c:84:7b:0f:01:
         98:b0:c2:21:2d:16:54:68:32:4b:70:9a:9b:72:65:e7:7d:b2:
         fd:05:a6:e9:31:43:a4:84:3c:d2:ab:59:84:86:a5:b7:56:62:
         fa:66:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----