This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft
File:                     2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft (raw, json)
Hash identifier:          y8GF/qNf6Wme5wpCnRqsRikxSavyEjyGoWosmsrSnCQ=
Subject key identifier:   11:D0:63:5B:2C:5A:BB:86:B2:98:24:4C:19:37:2F:2A:37:FC:9F:24
Authority key identifier: 2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E
Certificate issuer:       /CN=2BA10E6D7C0328E5364BF4041104D52624FF2C2E
Certificate serial:       451558462A361157A40CE68B9823E25A35A2522C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft
Manifest number:          0139
Signing time:             Fri 21 Nov 2025 16:09:51 +0000
Manifest this update:     Fri 21 Nov 2025 16:04:51 +0000
Manifest next update:     Thu 27 Nov 2025 00:41:51 +0000
Files and hashes:         1: 2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl (hash: Xg7Z6c/n5Sj6cK6hyubCvxkLrhP5b4wNS99WcHqLpys=)
                          2: 3137392e302e3230302e302f32332d3234203d3e20323732303337.roa (hash: PKNaFKeg+XA0R8pPsaE0XNWjkab4G/BL7Kc8XqWa3UI=)
                          3: 323830313a31373a633030303a3a2f34342d3634203d3e20323732303337.roa (hash: gT7W4LIZ9d/QEhQQWyx0lvNoG8i9pGxNgt3t5mqHR4M=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Nov 2025 18:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:15:58:46:2a:36:11:57:a4:0c:e6:8b:98:23:e2:5a:35:a2:52:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BA10E6D7C0328E5364BF4041104D52624FF2C2E
        Validity
            Not Before: Nov 21 16:04:51 2025 GMT
            Not After : Nov 27 00:41:51 2025 GMT
        Subject: CN=11D0635B2C5ABB86B298244C19372F2A37FC9F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3b:e2:4a:11:01:55:a0:34:5e:05:36:bf:ee:
                    c8:e8:b1:4e:43:17:e8:cb:c0:db:a3:58:d9:27:ea:
                    5f:6e:fd:99:7e:4f:60:dd:47:5f:10:f8:75:72:5a:
                    1e:4e:ea:31:a0:ba:ba:5a:11:6f:b0:30:46:50:e4:
                    52:5f:6c:a7:da:e3:3f:f1:1e:81:95:2f:68:8e:9f:
                    b8:4f:96:af:17:c1:68:57:ec:46:91:69:1a:a4:f0:
                    ee:68:d5:e7:53:a0:50:16:47:3a:77:57:34:ec:9e:
                    08:ff:f3:8b:75:9a:f6:c9:93:5b:ef:d6:6a:97:72:
                    22:fb:30:d0:ab:11:41:23:a4:21:24:c6:53:ca:86:
                    43:c5:97:a0:9e:9f:97:e6:97:e8:b1:9a:26:42:66:
                    b3:36:c1:6e:7e:58:95:9e:d4:5c:e2:1f:ca:bd:a6:
                    cd:21:f8:02:75:2b:ee:6f:29:a7:d0:9d:27:1b:d5:
                    f6:78:5d:8c:d4:93:fc:ec:f6:d4:33:d4:1f:20:9d:
                    7b:f1:29:7c:60:d1:e6:f9:b9:fd:56:5f:16:ae:44:
                    c1:bd:1b:be:46:11:ca:20:41:46:68:d8:88:56:4c:
                    25:b6:f4:0d:1a:c4:1c:35:c2:f3:a1:7a:03:79:1f:
                    6a:61:bc:3f:43:09:75:14:c1:e3:90:25:46:96:1d:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D0:63:5B:2C:5A:BB:86:B2:98:24:4C:19:37:2F:2A:37:FC:9F:24
            X509v3 Authority Key Identifier:
                keyid:2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d7:95:2a:82:c9:ea:62:08:c6:7d:6f:0f:d9:c7:b8:11:96:
         d6:d9:c9:00:78:43:71:20:8d:10:4b:29:c5:32:e2:1c:be:fb:
         ca:f1:d8:28:0f:67:24:f0:3e:41:05:36:3a:97:20:ff:58:ee:
         a5:7a:2e:58:f3:22:8e:11:ba:62:0c:62:26:c5:4b:bf:ff:9f:
         f3:51:50:9c:fa:63:d5:29:84:45:b5:91:fe:2a:91:8b:13:23:
         c6:8e:49:9d:1f:50:d0:f6:54:bc:8f:b2:42:f1:be:4a:26:c8:
         26:18:09:bd:bc:eb:1d:58:c7:54:aa:e5:31:52:6e:e0:0c:0e:
         04:49:2e:6e:e8:1d:94:4f:5a:67:4c:dd:52:15:07:4a:69:e0:
         76:3c:0d:e4:1f:02:20:e6:6e:97:fe:32:81:c5:8b:af:d8:07:
         35:dc:d7:5f:a3:d0:74:e0:27:a5:67:f7:55:9f:20:b5:f2:b8:
         9e:2e:b9:45:38:74:fd:9a:af:b8:74:98:c0:aa:9f:70:50:de:
         0c:bb:09:f7:9b:a4:ae:14:c4:e4:19:d5:58:1a:86:ed:b7:76:
         74:c6:2c:34:16:33:ec:fb:dc:dd:ae:83:6e:c0:e2:f6:8b:67:
         c6:1d:19:91:39:c0:87:af:1c:e9:10:15:95:2b:0d:d8:1e:a7:
         6a:c9:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----