This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
File:                     CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft (raw, json)
Hash identifier:          De7vpfB7DT+7CqV8y+BgobhJVij+6zZT2UJcH2n/9YU=
Subject key identifier:   6C:8A:6A:7A:D7:08:19:D3:A1:2C:16:D7:B8:CA:94:59:AB:66:53:65
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       16FC800F6D0A44D7C42DF65F3A3D4629F495711D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
Manifest number:          011A
Signing time:             Wed 03 Dec 2025 05:38:29 +0000
Manifest this update:     Wed 03 Dec 2025 05:33:29 +0000
Manifest next update:     Sun 07 Dec 2025 13:46:29 +0000
Files and hashes:         1: 323830333a6231303a3a2f33382d3338203d3e203237393531.roa (hash: 8jH2YPWVSph+aeAWtR2v9cZBYAvALwyoLByn9gZ8qtE=)
                          2: 3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa (hash: wv9bzhvqRZDHf+P78l6TYaz5VREYKd9TaLC7U4S9rPE=)
                          3: 3138312e3233332e3136382e302f32342d3234203d3e203237393531.roa (hash: oKxAOL2yVw8WT/7Yu3EhiJSoZXhnTX43Rx7XofxkwmA=)
                          4: 323830333a6231303a3430303a3a2f33382d3338203d3e203532343638.roa (hash: 46l4d5yDbrgcXTlM1NtPYFcO+4GZfu084BTGP/Vvwuo=)
                          5: CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl (hash: nYkroEE6xfLquTGGQN5ndlJoJnsBepJVV8VE3dWcnaI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fc:80:0f:6d:0a:44:d7:c4:2d:f6:5f:3a:3d:46:29:f4:95:71:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Dec  3 05:33:29 2025 GMT
            Not After : Dec  7 13:46:29 2025 GMT
        Subject: CN=6C8A6A7AD70819D3A12C16D7B8CA9459AB665365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:76:e3:db:a8:1d:c9:9e:f9:93:ef:c6:0e:
                    f4:db:a7:74:43:8c:ef:2b:99:82:9b:65:a8:cf:df:
                    41:09:35:8a:d3:70:32:f7:3a:f3:08:76:e4:34:f2:
                    e4:e6:47:15:35:53:c8:1a:37:6a:f9:b7:dc:c9:79:
                    a6:c2:15:c3:d1:f0:7d:fd:d8:3d:ab:05:33:76:b5:
                    f8:14:64:0d:e8:13:04:e9:60:e3:86:8a:d8:f4:19:
                    dd:bb:e8:74:a8:d9:52:da:98:c8:63:d4:f9:e3:d4:
                    99:c1:3e:bb:a0:c1:01:bc:f2:42:2a:fc:59:80:d3:
                    e8:5f:29:47:20:9b:76:73:8f:b1:2a:65:5d:da:1a:
                    e5:e6:f6:69:e5:1c:13:87:8e:38:8d:e9:88:88:01:
                    bd:3f:72:ad:5d:c3:d4:f9:b9:43:9f:e3:63:62:75:
                    61:27:6d:c2:23:8e:06:82:a6:eb:1c:8a:c5:88:7c:
                    07:b1:92:e2:c8:86:e9:b4:30:52:0d:3f:51:5a:2f:
                    8b:20:6e:4b:06:4c:dc:9e:18:bc:e8:5a:22:2d:69:
                    5b:1d:aa:95:bf:4b:cf:a9:fc:d4:ed:a9:0a:38:7e:
                    5a:27:60:a7:37:04:35:f7:a4:e1:23:75:74:3d:b0:
                    a2:f2:af:fa:88:0a:f5:22:e8:59:58:36:5e:77:22:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8A:6A:7A:D7:08:19:D3:A1:2C:16:D7:B8:CA:94:59:AB:66:53:65
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:41:78:dc:71:60:58:a5:97:06:ae:bd:e1:bb:87:53:17:
         bc:48:6e:1f:84:8a:fd:12:fc:5a:0c:f6:3d:d9:85:d2:9c:a9:
         14:72:22:a5:42:0f:f2:ea:f6:ef:90:86:86:7d:ef:64:a8:5f:
         28:ce:c0:09:dc:ab:37:c6:97:22:b2:ca:ec:58:f1:df:ba:99:
         10:06:d2:82:90:9d:59:69:a4:77:13:59:12:a3:71:44:d9:23:
         f5:79:d4:d4:bd:5c:53:b2:cb:a6:25:f7:ad:d1:6b:f1:35:de:
         8c:d3:71:e7:ae:41:be:f4:6e:40:e9:5e:d9:57:e5:d9:c3:0e:
         80:8e:93:03:49:4b:68:c2:13:59:37:d9:bc:01:45:f7:72:87:
         35:06:2d:df:3a:2a:e0:c0:42:e1:b5:12:1a:41:eb:90:df:4f:
         83:41:cc:b7:38:fc:40:0d:06:d7:dd:1f:72:e1:30:a4:57:db:
         00:a2:d3:09:c2:82:cd:a8:98:d1:c7:9c:ed:1e:c5:97:ed:57:
         b5:56:25:dd:5a:0c:a5:f1:8d:98:d9:57:c7:a7:49:dc:20:15:
         ca:19:99:47:65:3c:de:36:92:70:cf:b0:33:2f:93:bb:64:13:
         56:f9:f7:8d:97:c5:21:30:9a:91:0a:29:c3:d4:a5:28:06:c4:
         9a:d6:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----