This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft
File:                     CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft (raw, json)
Hash identifier:          htveOTYdMfFg1tDvpVx7O4431P62ZyJStEXVxjr4iOQ=
Subject key identifier:   93:15:65:D3:B8:7A:C7:17:04:6D:B8:7F:B2:CB:2F:42:69:76:14:65
Authority key identifier: CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3
Certificate issuer:       /CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3
Certificate serial:       228E734E4F3C701C8B3C7B8A9BD00F08A7E57901
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft
Manifest number:          0146
Signing time:             Sat 06 Dec 2025 23:09:19 +0000
Manifest this update:     Sat 06 Dec 2025 23:04:19 +0000
Manifest next update:     Fri 12 Dec 2025 22:13:19 +0000
Files and hashes:         1: 323830333a376538303a3a2f33322d3332203d3e203130363937.roa (hash: 0Qn0E7vPhpgg1CGcGhP6Q7/IBFamZE+35UWnAibGbyk=)
                          2: 3230362e3232312e38302e302f32302d3234203d3e203130363937.roa (hash: A63DPWaGu4ncao5SbuzzNORnyJp3efH7wi7W3ibdfqs=)
                          3: 3230362e3232312e38302e302f32302d3234203d3e20323634373937.roa (hash: RPlSJwAa9hJihfh1yMG/936mXOrCgRuCAxGXhLPTmYA=)
                          4: CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl (hash: gmhz2zFQmhD1KhBj9OQU+OvAiCd4VssuQYVBvLa4XZA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 16:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8e:73:4e:4f:3c:70:1c:8b:3c:7b:8a:9b:d0:0f:08:a7:e5:79:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3
        Validity
            Not Before: Dec  6 23:04:19 2025 GMT
            Not After : Dec 12 22:13:19 2025 GMT
        Subject: CN=931565D3B87AC717046DB87FB2CB2F4269761465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:35:48:c9:48:e1:9f:5a:fa:80:f1:3f:0f:
                    02:2e:eb:64:b5:e5:e6:df:11:58:c0:41:11:67:b7:
                    8c:8d:78:93:ab:df:17:f4:88:5d:6f:00:2f:fa:75:
                    fa:ca:a3:aa:1c:0a:de:c5:62:bc:13:c3:6f:16:d6:
                    a9:22:b5:61:ea:bb:c3:a0:83:4f:04:3e:16:de:88:
                    74:ff:ec:7b:c9:f0:3b:98:14:18:e4:15:fd:9d:f5:
                    73:1b:9a:9f:e3:5d:ec:ec:ec:94:28:a3:bd:13:1b:
                    d7:43:38:38:cc:b8:fe:6e:d2:12:13:72:1e:1c:1b:
                    d6:55:9a:43:79:9c:8c:ed:71:0a:30:58:a7:b7:38:
                    9c:63:24:fa:d6:0e:6b:2a:3f:9e:af:c4:bd:4c:2a:
                    7b:9c:eb:59:a8:8a:21:a6:a7:ca:6c:78:0a:0e:ba:
                    28:b7:7b:9c:e7:06:ec:78:16:60:ba:65:52:64:4e:
                    aa:2a:71:2c:7a:d9:ce:03:2c:60:1d:39:dc:ef:c3:
                    f8:35:32:f3:91:4e:a9:eb:cc:16:4f:a2:f2:73:e0:
                    5c:e1:9b:43:c2:29:e6:32:ca:b4:a1:bd:80:c5:9b:
                    d3:0f:b5:62:22:b4:16:3e:bc:b2:b4:fd:2f:50:af:
                    7e:18:30:00:d9:0f:ba:96:a6:38:ea:49:21:da:76:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:15:65:D3:B8:7A:C7:17:04:6D:B8:7F:B2:CB:2F:42:69:76:14:65
            X509v3 Authority Key Identifier:
                keyid:CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:0c:c0:2d:1a:aa:37:97:ed:06:08:00:0e:cb:f6:35:5f:83:
         2c:a5:1b:b2:81:7e:3b:6e:4c:e4:c1:20:b4:19:c2:74:9d:27:
         d4:45:1e:30:94:f6:22:ef:3c:ee:a1:f3:12:05:28:93:7f:bd:
         82:cb:65:13:51:6b:37:ce:6e:e6:a4:4b:9b:4a:b8:73:8c:a6:
         d1:f8:94:b0:43:d1:3e:c8:69:d5:5f:dc:2b:c1:66:58:4c:28:
         72:cf:d5:5b:28:6c:fe:e5:01:3a:24:07:fd:a6:2b:05:3d:14:
         60:58:00:73:5c:72:12:b5:b3:a2:2f:4e:52:22:23:16:0c:8f:
         55:e7:4c:89:7c:50:37:51:ca:d7:a5:6e:48:8b:1b:a5:e1:9e:
         fc:9f:4b:59:c1:88:15:bc:fc:40:c1:c6:3c:ef:91:4d:c4:1b:
         ec:be:32:51:87:72:aa:6b:18:43:88:4d:fe:a3:47:ef:9f:ef:
         91:a6:0d:fb:48:68:3e:e1:1d:78:cd:92:f3:99:50:bc:63:35:
         7a:80:69:84:2e:bb:41:c5:f1:06:6f:24:3a:75:fc:be:4c:d6:
         fb:67:8c:d5:ee:b0:95:86:13:da:28:be:93:35:2a:a1:74:cb:
         ed:b1:87:68:09:5b:84:6a:29:ea:18:08:e6:aa:91:34:c6:d7:
         b0:83:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----