This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.mft
File:                     27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.mft (raw, json)
Hash identifier:          Dc67hg2GjUDZO97nLLpTcRq2LwRc/vHs75/Nz3Yjulw=
Subject key identifier:   3F:98:10:F0:85:7C:D5:24:10:A3:B0:1A:C7:3E:B3:39:5C:A7:93:91
Authority key identifier: 27:B2:C2:0B:7F:3B:89:AC:F8:EE:F9:84:3F:F5:DE:D4:D0:58:37:0F
Certificate issuer:       /CN=27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F
Certificate serial:       33262F20D389997A5362ED5A2C5E1D366B41594F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.mft
Manifest number:          013D
Signing time:             Wed 26 Nov 2025 16:08:26 +0000
Manifest this update:     Wed 26 Nov 2025 16:03:26 +0000
Manifest next update:     Tue 02 Dec 2025 15:58:26 +0000
Files and hashes:         1: 3133382e3132322e352e302f32342d3234203d3e20323639393734.roa (hash: 9sM7RqQt9U6Qf8ze2iYfMOUAH+JIPWPWyhtnhHitbQ0=)
                          2: 3133382e3132322e342e302f32322d3234203d3e20323639393734.roa (hash: mTZQEZmwiU+5aRk0Zvdzfz7LCR1h+fj1RVQnaUwBwSQ=)
                          3: 323830333a643434303a3a2f33322d3332203d3e20323639393734.roa (hash: SDjPiFDSKRtDgXD3ZrALcFM/fJoBP6suNeEX42tRL28=)
                          4: 27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.crl (hash: fV2ua+NUP/WRKreSk0DDvY1PIiazz72VMZYPWUI58Jw=)
                          5: 3133382e3132322e362e302f32342d3234203d3e20323639393734.roa (hash: NBUHE2Ry6gqtC8izHPZ6Zef7dugB9COhf36zNEdZmEg=)
                          6: 3133382e3132322e372e302f32342d3234203d3e20323639393734.roa (hash: yMFMh95DwtHg0VE0b7uw+qnBtwDjOND/hgXhqbLb0vQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Dec 2025 11:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:26:2f:20:d3:89:99:7a:53:62:ed:5a:2c:5e:1d:36:6b:41:59:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F
        Validity
            Not Before: Nov 26 16:03:26 2025 GMT
            Not After : Dec  2 15:58:26 2025 GMT
        Subject: CN=3F9810F0857CD52410A3B01AC73EB3395CA79391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:56:5d:31:ad:ac:2b:6c:e8:43:d3:7f:f9:eb:
                    28:41:eb:47:de:92:59:39:ef:d1:ee:76:6a:a6:23:
                    62:05:9c:9f:cc:1d:52:09:67:07:bf:a9:cf:22:ab:
                    e1:99:f3:81:85:d2:41:62:09:e7:47:59:aa:e3:40:
                    c7:22:70:26:d1:54:48:ce:9b:28:b5:55:97:1d:36:
                    09:69:6b:3a:0f:5f:a1:48:f4:52:b3:08:0f:03:3e:
                    33:8f:74:1d:73:c2:b3:8b:bd:f4:9f:c7:1f:2c:a5:
                    3e:b1:53:f8:ec:bd:d4:7e:53:86:6b:6d:1b:b2:3a:
                    6b:37:b9:0e:b8:29:50:54:00:b0:81:d2:9b:a9:de:
                    a4:13:3b:f4:16:f3:3f:0c:09:85:6e:a6:f6:25:23:
                    e7:43:ec:c2:07:f2:71:9d:46:5e:ae:21:06:4a:3f:
                    0a:e6:0d:a2:62:26:07:6a:9c:47:cf:59:f9:4c:c3:
                    47:9d:74:67:f3:e1:82:99:41:b7:d6:2b:00:82:7d:
                    8d:57:e0:11:fd:ae:b6:00:e1:7a:50:e6:21:2c:0d:
                    a5:bb:c6:fc:4b:79:25:8e:03:76:be:34:5b:90:04:
                    da:df:cd:68:ad:d9:2c:8a:33:56:ae:5a:ec:c0:7b:
                    b8:4b:25:99:ec:b9:6f:65:47:3f:50:66:5f:6b:a2:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:98:10:F0:85:7C:D5:24:10:A3:B0:1A:C7:3E:B3:39:5C:A7:93:91
            X509v3 Authority Key Identifier:
                keyid:27:B2:C2:0B:7F:3B:89:AC:F8:EE:F9:84:3F:F5:DE:D4:D0:58:37:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:47:48:40:7f:73:6c:35:0d:e1:d3:3b:95:6c:78:dc:6b:da:
         e2:56:f2:c2:66:5b:9f:e1:5a:91:de:af:6d:73:92:87:98:30:
         b7:8f:0b:cd:15:10:3b:eb:54:03:6d:df:d8:fb:e7:31:44:2e:
         ed:54:73:26:81:d1:cb:31:75:3c:a7:97:74:64:91:af:eb:b3:
         97:50:02:87:99:cf:3b:4d:37:10:d4:27:9e:bb:a8:5d:31:1e:
         02:25:1b:f3:96:4b:2f:e1:bf:be:5a:33:2a:bd:31:be:4f:f5:
         52:25:2c:cf:d6:9a:4b:35:d3:86:07:e7:0e:cb:97:57:de:c5:
         1d:0e:d5:6f:65:cd:11:0e:b1:f4:21:43:64:6a:70:c8:14:ba:
         5b:3a:20:5b:e7:c5:04:28:bc:e7:cb:a8:c4:56:e5:47:5e:63:
         2d:f9:72:f6:64:ea:fd:80:c7:1a:39:a5:02:6d:4b:49:2e:20:
         0d:50:92:30:41:f2:25:4b:86:ec:77:c3:99:68:5b:f7:9e:13:
         cb:73:e8:a4:c4:72:1e:ea:0c:b3:d0:39:c3:f4:73:ad:78:c7:
         aa:ec:0d:41:0a:79:fe:3c:66:5f:7d:c3:52:6d:d8:a3:69:e6:
         5c:dd:c9:1c:3e:7e:07:92:42:fa:fb:9c:0c:e0:fb:23:b2:84:
         f0:7d:a9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 18:02:42 2025 by rpki-client