This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
File:                     D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft (raw, json)
Hash identifier:          9LhhNS5eliJ/wvP8SkKj9z4OG4yQYeEFOZoflIaJwtk=
Subject key identifier:   A1:1D:71:0C:00:E5:80:ED:E9:21:C9:3C:2A:93:93:59:5A:CD:8E:86
Authority key identifier: D2:5A:64:5B:A2:C0:88:2C:C1:32:2B:68:10:B6:0C:BB:EF:E3:79:3E
Certificate issuer:       /CN=D25A645BA2C0882CC1322B6810B60CBBEFE3793E
Certificate serial:       331C4D44C6C6C4EF55533F0CEA1608E32A89DA7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
Manifest number:          014D
Signing time:             Sat 20 Dec 2025 03:50:52 +0000
Manifest this update:     Sat 20 Dec 2025 03:45:52 +0000
Manifest next update:     Thu 25 Dec 2025 03:22:52 +0000
Files and hashes:         1: D25A645BA2C0882CC1322B6810B60CBBEFE3793E.crl (hash: y87X5fq1nwGG8Oz9/pjYcFnyZ5Zzfmil3Y7yzVXqux8=)
                          2: 3138372e3130322e3230302e302f32322d3234203d3e20323730303435.roa (hash: HCRuBCBbvTsUWvUKHcyYpI0YXia8zGI3h6e+x+4AbeE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 01:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1c:4d:44:c6:c6:c4:ef:55:53:3f:0c:ea:16:08:e3:2a:89:da:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25A645BA2C0882CC1322B6810B60CBBEFE3793E
        Validity
            Not Before: Dec 20 03:45:52 2025 GMT
            Not After : Dec 25 03:22:52 2025 GMT
        Subject: CN=A11D710C00E580EDE921C93C2A9393595ACD8E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:e4:32:7e:ca:c7:f6:b5:cd:5d:a0:29:0d:
                    c9:19:71:e8:30:c7:e8:3e:b0:d4:32:c5:a5:9f:b8:
                    e7:65:47:1f:d8:88:a7:de:a1:1c:8d:ca:a7:89:26:
                    09:cf:67:0c:71:6b:31:9f:f9:77:34:e2:fe:44:f5:
                    6c:e7:cd:fb:c1:5d:ad:e4:7f:95:68:5a:7d:f4:e4:
                    0b:0a:bd:e5:d9:ce:9f:3c:96:61:90:96:24:36:17:
                    81:8d:9d:2c:07:93:c0:a7:88:45:1b:96:82:63:43:
                    60:44:13:ae:ac:2e:31:a2:88:e4:3f:c1:60:e5:20:
                    1c:01:ba:90:31:50:d3:7f:11:b4:a4:98:c0:e3:86:
                    97:5e:2b:ca:f1:8a:56:e2:70:6c:fc:6b:26:8e:1e:
                    a2:2c:ce:6f:e5:43:f8:5f:42:6f:ce:d9:22:2a:4b:
                    32:0d:b3:4d:1d:7e:2b:30:c3:4c:73:42:c1:eb:e8:
                    62:5a:10:53:84:da:f5:88:e9:f9:a2:94:fb:0a:eb:
                    04:ce:f2:8a:dc:f1:f0:55:40:11:93:ed:d0:65:f8:
                    27:e7:46:b2:9c:75:bf:03:0e:18:21:06:7d:f7:46:
                    1e:bb:9b:d1:e3:ab:53:ac:7d:84:d8:74:fd:da:30:
                    1d:85:8e:ec:69:f9:29:61:db:e0:bc:30:6c:6e:ed:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1D:71:0C:00:E5:80:ED:E9:21:C9:3C:2A:93:93:59:5A:CD:8E:86
            X509v3 Authority Key Identifier:
                keyid:D2:5A:64:5B:A2:C0:88:2C:C1:32:2B:68:10:B6:0C:BB:EF:E3:79:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:88:25:f2:92:f3:89:bd:74:67:7d:aa:17:10:c7:0c:13:42:
         92:af:34:ac:84:1e:a8:7a:1c:55:b2:d4:60:39:82:a3:9a:28:
         9c:08:d8:2f:57:f9:62:96:39:23:3c:81:6f:6e:d9:b5:59:87:
         61:9b:d0:7f:62:1c:32:33:f4:47:cd:d9:c7:5a:01:da:30:0d:
         bd:e5:b6:fc:a6:b3:ef:81:22:4c:7c:70:d0:18:ae:3f:17:be:
         b5:38:90:92:6d:64:13:7b:14:8f:26:9e:0e:a0:65:b8:70:d0:
         f0:19:35:4a:48:11:c5:85:9c:8f:99:58:66:a5:9f:a3:64:47:
         c9:8a:a1:07:68:ac:53:63:de:80:f6:1c:ee:24:7f:51:2c:1c:
         97:b6:30:13:06:ee:af:7c:bc:d1:c1:80:f8:83:96:44:1b:8d:
         b5:8a:7b:71:ec:43:a1:4b:24:b4:5a:4c:5c:a0:92:9a:cf:78:
         f8:95:79:bd:51:61:0d:ab:e6:df:1b:f9:08:9a:3b:73:a7:1d:
         18:97:4b:d9:5b:26:fb:da:f3:b6:45:56:31:fc:97:a5:21:1c:
         42:24:f6:fa:9b:ed:73:a4:a6:6f:70:76:33:23:30:d5:e8:8d:
         5d:01:07:00:4c:a5:29:fa:d1:8e:1d:9b:df:65:ae:25:0e:95:
         76:89:ac:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----