This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
File:                     2D420DA52C4FED64C64081F978E8485CD8161A81.mft (raw, json)
Hash identifier:          /4NkCYtNxpRHntOmDeEPifeG2jKOQ6ig+JnZkzMclzQ=
Subject key identifier:   D0:C6:D3:B4:30:ED:37:CD:FF:3B:84:DC:C1:0C:0E:69:38:B7:D2:5A
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Certificate issuer:       /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial:       02A7EF5AC7AB4352A880006E89CC538AB6EBD55B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
Manifest number:          013E
Signing time:             Mon 08 Dec 2025 20:31:33 +0000
Manifest this update:     Mon 08 Dec 2025 20:26:33 +0000
Manifest next update:     Sat 13 Dec 2025 07:21:33 +0000
Files and hashes:         1: 34352e3137332e302e302f32322d3234203d3e203631343531.roa (hash: GGuVym2kL4T0FmdZd9rq4sGSSWcGiS/epeSrSrFw9qw=)
                          2: 3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa (hash: /Z7LPAsuTjZ5cwTBvnVpQcKSEa9rH/diyzx0Hq8W+6o=)
                          3: 3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa (hash: 1oYXiRs6rlIee7gSCsds1xIN8M3Wto/5rLLuEM7RJ/4=)
                          4: 323830333a633036303a3a2f33322d3332203d3e203631343531.roa (hash: y+kZpxvB2vqV6FoA3lmooqJCJtir3RHk1ikwbeAOmdU=)
                          5: 3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa (hash: rZzDnwa0MPMnAUQI/T5MjhsAO3J26Ue6xAm2FQO/eiA=)
                          6: 2D420DA52C4FED64C64081F978E8485CD8161A81.crl (hash: +iR/jE3rAxXgB86tbLvk5rgKjn7TyqvV0uIdfvKdbTI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Dec 2025 07:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a7:ef:5a:c7:ab:43:52:a8:80:00:6e:89:cc:53:8a:b6:eb:d5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
        Validity
            Not Before: Dec  8 20:26:33 2025 GMT
            Not After : Dec 13 07:21:33 2025 GMT
        Subject: CN=D0C6D3B430ED37CDFF3B84DCC10C0E6938B7D25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:35:34:11:a6:d9:47:4e:43:31:08:a7:80:2f:
                    41:59:52:cc:a5:7c:03:bc:23:3a:64:1c:46:9c:10:
                    c8:57:c8:3f:6e:b7:43:2b:52:7c:c1:a6:df:4e:98:
                    db:a9:b4:c5:35:b1:3f:e4:dd:da:47:e5:d9:67:c8:
                    45:65:40:58:53:65:16:7c:2c:50:aa:a9:aa:01:02:
                    8d:8d:08:5d:3b:21:08:f1:32:33:8c:c6:aa:bc:a9:
                    b7:ce:bb:f1:ca:46:c9:e8:70:1c:8b:18:65:b3:80:
                    80:6c:03:2f:10:ca:5c:c8:8e:c7:39:18:99:c2:a6:
                    fd:07:1e:06:49:2b:b8:51:82:45:b7:80:cb:99:be:
                    2b:18:2f:10:54:63:91:f7:be:e8:90:99:6c:58:6d:
                    ca:85:e2:ca:2c:a1:8a:e9:61:fd:58:38:0b:d9:55:
                    be:d0:59:6e:71:a1:9b:95:b5:60:9c:51:d5:a9:ab:
                    81:66:fb:f7:ba:0d:dd:81:40:a4:3f:00:4f:91:e2:
                    a1:41:59:5f:68:58:37:3b:a7:59:8d:1b:be:a8:19:
                    e7:99:65:22:5c:f0:66:46:14:46:87:ae:24:d3:ee:
                    3d:b5:2c:a0:bd:da:2d:5e:c2:0c:e1:61:b8:62:e0:
                    73:61:6b:ee:a9:ef:53:9e:e9:0f:2b:79:b7:3d:d0:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C6:D3:B4:30:ED:37:CD:FF:3B:84:DC:C1:0C:0E:69:38:B7:D2:5A
            X509v3 Authority Key Identifier:
                keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:55:dd:a5:de:cd:38:ed:ff:db:52:08:57:89:b0:c7:e5:03:
         6e:83:99:d2:e3:2c:2a:58:ff:27:4c:de:c1:c2:de:2f:f5:00:
         db:37:61:bb:6d:69:3b:72:bd:e1:66:32:7f:03:ce:ba:66:e1:
         e1:84:5d:5a:82:04:0e:fc:fa:5c:df:8b:65:5e:82:6b:9e:8f:
         f7:20:a2:4f:30:fc:07:06:95:cb:18:1c:57:d0:b6:3c:85:f1:
         fc:02:5e:f6:8b:0c:2f:76:0a:11:60:a6:dd:f3:e2:69:12:57:
         c1:e4:68:5f:36:b3:af:e9:e3:2f:8d:77:17:03:84:26:1d:4e:
         5e:ad:25:72:3d:92:bd:72:86:0f:d2:d5:59:5c:f9:f4:02:31:
         78:ec:31:9e:5b:20:1d:99:1c:f3:56:ef:be:76:6c:4b:c2:3e:
         3f:9a:e5:26:8f:12:be:a6:9a:87:e0:37:53:6c:10:74:bf:7b:
         28:b0:ad:98:0c:f6:70:53:47:72:33:3c:bf:a8:c5:cc:8a:c6:
         e1:3a:c8:c7:e2:98:73:99:5e:3e:99:f0:96:b6:a5:8d:5b:0c:
         54:ab:b4:f0:74:c1:2b:14:58:6a:18:89:8e:2e:c6:4e:76:43:
         4b:8c:81:20:20:d4:03:12:77:d0:a4:9d:19:11:f4:b5:5e:44:
         36:26:43:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:38:51 2025 by rpki-client