This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft
File:                     D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft (raw, json)
Hash identifier:          fNbXfb9y3RpvzJm7OytZ12cnaT86hk3eLDnNRYGeo34=
Subject key identifier:   67:02:C7:0B:A1:12:D6:2E:3E:8E:7D:3D:3A:79:ED:19:36:59:AE:EA
Authority key identifier: D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28
Certificate issuer:       /CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28
Certificate serial:       330B686EE6528AAB39782D60BFC45F198C9EB762
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft
Manifest number:          013D
Signing time:             Fri 28 Nov 2025 17:41:01 +0000
Manifest this update:     Fri 28 Nov 2025 17:36:01 +0000
Manifest next update:     Thu 04 Dec 2025 09:09:01 +0000
Files and hashes:         1: D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl (hash: gwCayG0yEG3XBmwscIhQS7RHUmfh9xgKZAoyZyO94wA=)
                          2: 3133312e302e3133362e302f32322d3232203d3e203631343637.roa (hash: hIcGTsTzrbpPkkDFPHDJ/vJiVZDkozy3mhBw4FInUkg=)
                          3: 323830333a653538303a3a2f33322d3332203d3e203631343637.roa (hash: VPdQcvxY+Djypk/d3zIynnwjkLRuN2kmRMjzxd8Khgg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Dec 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0b:68:6e:e6:52:8a:ab:39:78:2d:60:bf:c4:5f:19:8c:9e:b7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28
        Validity
            Not Before: Nov 28 17:36:01 2025 GMT
            Not After : Dec  4 09:09:01 2025 GMT
        Subject: CN=6702C70BA112D62E3E8E7D3D3A79ED193659AEEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:04:94:0b:6f:70:8d:03:2e:e2:fd:bd:58:
                    6f:58:71:1f:7a:5a:db:08:c3:06:87:0b:3f:e2:96:
                    71:a9:96:91:e7:e8:09:78:8f:c9:92:82:d1:8d:6e:
                    57:a5:16:ff:a4:06:39:7e:1d:44:0d:54:b5:60:18:
                    28:d6:84:f9:3a:60:e0:9d:8a:c5:9e:18:3d:ad:a2:
                    64:e4:47:f2:ee:08:9c:75:68:70:60:66:54:14:5f:
                    f4:46:ac:ff:cb:ef:c8:db:b9:f3:fc:5a:bb:4a:ec:
                    39:ab:30:82:9a:8c:84:bb:90:ad:85:2c:a9:b7:fd:
                    33:49:2d:9d:38:21:15:f0:98:4f:29:bd:77:0d:5d:
                    f6:46:32:c9:e6:3d:5c:b5:b5:88:39:4f:8a:07:a5:
                    47:db:e8:73:ec:8c:bd:bc:60:4f:b1:49:be:7c:bd:
                    74:8e:ce:1e:f6:36:3a:e0:e0:05:b7:58:aa:02:9f:
                    a5:b1:ef:4f:3e:84:6b:ae:4a:29:3a:a0:a8:2f:15:
                    1e:7c:d1:12:4e:94:56:d8:76:23:89:27:7b:b5:6c:
                    25:db:2d:3e:a9:3f:1d:33:e6:cf:76:a2:a2:fe:56:
                    57:58:5f:0c:ba:e0:cf:25:e0:eb:ad:03:1b:f3:03:
                    18:59:e6:d1:10:4a:8b:72:8c:cc:bd:c5:b9:f5:01:
                    b2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:02:C7:0B:A1:12:D6:2E:3E:8E:7D:3D:3A:79:ED:19:36:59:AE:EA
            X509v3 Authority Key Identifier:
                keyid:D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4a:8b:03:5d:6b:1d:ca:d2:a5:5d:46:c9:08:c5:8d:13:aa:
         88:09:42:34:8f:3d:a2:7b:70:aa:76:c4:c3:82:4b:5c:db:ad:
         ca:ac:c4:1a:ee:65:10:b4:e8:f3:e7:4b:10:5f:55:e8:6a:aa:
         fc:11:2c:ae:52:fb:06:aa:43:26:48:f3:94:fa:90:a9:17:75:
         54:2e:48:c1:49:6f:b7:fb:4d:74:c8:a2:c6:81:f0:f0:89:de:
         36:da:cf:00:bf:d7:f0:c3:06:8f:13:09:2e:ff:51:d3:33:24:
         5e:30:a5:2b:6b:08:9b:4b:6c:f0:1f:ef:1f:67:28:5b:f9:ff:
         17:92:d8:73:ae:16:c6:ce:4b:78:ee:e5:02:41:fa:1b:d5:1d:
         f6:76:41:ce:50:15:5e:9e:97:eb:3a:d5:93:3b:dc:56:0d:e6:
         00:74:a9:98:37:1d:51:61:40:48:d8:b5:60:66:12:50:d3:f0:
         48:ef:ba:72:89:04:13:74:6d:52:ae:18:77:5b:c4:53:f3:7d:
         42:67:c5:b4:41:f6:6b:85:24:ec:f8:0b:19:ac:dc:ac:04:65:
         60:92:b3:81:4b:fa:41:b1:bb:b0:9d:0b:00:87:5f:0b:45:0e:
         aa:4f:83:7a:52:4d:ff:a8:90:c5:c5:b2:c0:ac:5c:94:8d:74:
         60:a1:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----