This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
File:                     2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json)
Hash identifier:          DVexXC8+TdMugJn8p9ZVRR1KZkjoRc5RfuSzO0EAM0o=
Subject key identifier:   BD:D0:CF:73:F4:6C:CE:74:6A:C5:DC:79:BA:CC:B4:46:89:6D:37:E1
Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
Certificate issuer:       /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Certificate serial:       03DD53927F9374AB3DFB39FFF1A3C71733415AC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
Manifest number:          0141
Signing time:             Tue 09 Dec 2025 11:05:57 +0000
Manifest this update:     Tue 09 Dec 2025 11:00:57 +0000
Manifest next update:     Sun 14 Dec 2025 09:37:57 +0000
Files and hashes:         1: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: g6DNKjZekU2uDpQLAA16qySYRWAhC+pOHrCuJlds2qw=)
                          2: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: by7gnBEQ7gshhfckAKVbdfketOYMXrCdXkkcufXzFJQ=)
                          3: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: kvXq/7xFBcYihjCboY6sXmggXJS5RFgBzNm9B4FD6Yk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Dec 2025 09:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:dd:53:92:7f:93:74:ab:3d:fb:39:ff:f1:a3:c7:17:33:41:5a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
        Validity
            Not Before: Dec  9 11:00:57 2025 GMT
            Not After : Dec 14 09:37:57 2025 GMT
        Subject: CN=BDD0CF73F46CCE746AC5DC79BACCB446896D37E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5e:7b:07:4a:2f:41:33:46:9b:64:9c:b5:4d:
                    dc:54:ff:08:30:54:82:4d:48:97:f6:9f:e7:bc:8e:
                    60:66:35:be:2b:4c:cf:fa:2b:ab:a5:fa:ba:92:f0:
                    03:50:8a:a7:0c:c3:94:23:6c:2f:e7:3e:ee:80:d2:
                    5f:e6:cb:c5:73:c0:23:c3:0b:18:9f:29:95:22:c3:
                    26:2c:fb:38:8b:41:17:11:ae:91:08:e8:10:4f:2f:
                    45:92:48:ee:a7:53:85:d0:75:0e:d5:c9:1c:d9:9b:
                    8a:c3:5e:2f:87:13:e5:df:8b:bc:1b:f0:ca:45:98:
                    66:91:05:b0:ee:f8:dc:f3:1a:54:82:1b:8c:a1:b2:
                    80:52:66:ac:61:38:56:a3:50:8e:96:54:57:78:72:
                    d4:49:25:d4:66:dd:a5:84:06:6f:9f:22:13:23:5a:
                    3e:95:a8:5f:3b:26:54:9a:9d:9a:13:28:9b:e1:c3:
                    34:81:ed:13:a1:dd:18:be:35:ec:7a:1e:89:8c:68:
                    fa:d2:03:33:db:8c:74:46:c0:12:72:19:fa:46:21:
                    d1:69:01:7b:47:21:ab:f3:69:2d:61:80:10:65:14:
                    1b:35:33:15:ff:66:13:9e:e8:2e:b7:4a:6c:06:31:
                    18:01:c0:28:2b:76:00:85:f2:4e:f8:6a:24:a1:be:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D0:CF:73:F4:6C:CE:74:6A:C5:DC:79:BA:CC:B4:46:89:6D:37:E1
            X509v3 Authority Key Identifier:
                keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:67:a0:88:c7:23:c3:67:ac:26:b7:ea:41:97:af:18:f0:
         e0:a0:6a:b1:e1:0f:25:e5:08:91:82:3b:4e:5f:fc:d5:0e:1c:
         dc:0c:6d:93:fb:ae:20:8a:a5:6f:a4:4e:a3:f9:51:ce:cc:0a:
         11:69:cb:33:12:3e:b3:dc:4d:56:7d:79:81:e0:d9:41:86:63:
         de:67:22:3f:4d:f6:99:c1:f6:e0:0d:db:e4:ca:ec:b3:e1:50:
         41:d5:50:cc:92:2f:01:f0:a3:16:34:e7:ff:e6:1d:9b:c2:15:
         c7:e2:b0:6f:97:2c:36:b1:0d:8c:e8:63:8f:3a:95:b5:a4:5d:
         3b:d4:59:af:12:1c:2b:ac:70:4e:63:c9:bc:a2:d1:88:6d:09:
         4d:57:13:26:8f:dc:6a:52:85:56:88:25:22:94:d7:67:db:f9:
         a2:82:86:1a:60:24:03:53:fe:d4:03:04:da:02:f7:39:8b:8e:
         fe:da:6b:93:4f:7a:31:08:3f:02:ea:9f:e7:56:73:36:ef:1b:
         67:6a:4c:27:37:ab:3b:79:b9:40:d6:0d:51:a0:f6:f8:ef:68:
         63:42:c2:05:c8:4e:f5:32:8f:82:c9:5e:a2:91:26:16:76:b4:
         89:7d:09:48:83:e2:a6:cf:87:a6:c7:d0:1e:ad:83:ab:a6:8b:
         48:78:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----