This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
File:                     2D8A5D8A34E265B308F626454D8A6E920C65D608.mft (raw, json)
Hash identifier:          GSP8K6iItXGwVg5MbzmToLsLh0qBpnX9Fl2K4TQTRfk=
Subject key identifier:   D7:34:AF:BF:10:E6:FE:2D:8A:A5:FE:26:45:2A:05:F8:0C:43:37:54
Authority key identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08
Certificate issuer:       /CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
Certificate serial:       211FBBCF27BBA0A4B41E8536A4DD5FF6BAE90680
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
Manifest number:          6F
Signing time:             Mon 22 Dec 2025 15:29:21 +0000
Manifest this update:     Mon 22 Dec 2025 15:24:21 +0000
Manifest next update:     Sun 28 Dec 2025 13:44:21 +0000
Files and hashes:         1: 323830333a3539303a3a2f33322d3332203d3e20323732393634.roa (hash: ZtjREPCj/eeu/E9mBRi9OvFD2ENA47U6yaCq0Q6c32c=)
                          2: 2D8A5D8A34E265B308F626454D8A6E920C65D608.crl (hash: Vn0gX2b5pWGWSnLVYDaiNwSiNKoEnrXN6CWDuYpqJnM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Dec 2025 13:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1f:bb:cf:27:bb:a0:a4:b4:1e:85:36:a4:dd:5f:f6:ba:e9:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
        Validity
            Not Before: Dec 22 15:24:21 2025 GMT
            Not After : Dec 28 13:44:21 2025 GMT
        Subject: CN=D734AFBF10E6FE2D8AA5FE26452A05F80C433754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:d7:9f:1d:75:8b:ca:35:85:31:d6:26:ca:
                    99:71:87:61:cf:f1:60:61:65:c8:22:9f:12:97:eb:
                    63:23:b1:8f:9f:23:94:ee:c0:0c:28:7c:e4:60:0b:
                    4a:1c:96:3a:09:e1:9d:fa:bc:2a:ce:dc:79:45:b3:
                    4e:06:32:19:4e:e7:02:54:7e:f1:50:d0:91:54:50:
                    e6:1a:2e:ce:70:15:a3:13:71:f7:1f:9f:89:2c:f7:
                    c6:79:9d:fa:98:54:f0:8f:95:bc:45:59:58:3c:21:
                    11:24:48:17:fe:0e:15:6f:da:cf:ae:4b:b4:7d:ff:
                    e2:b0:6c:99:d6:fc:ec:8b:59:c6:37:bd:35:a2:7a:
                    3b:af:50:f2:1b:c5:6e:9a:77:06:bd:94:b7:e2:82:
                    1a:30:2a:cd:b9:df:53:e4:3d:d4:38:ee:30:ad:0b:
                    9e:af:94:50:80:0b:5e:74:86:8b:c3:70:62:88:12:
                    fa:19:a0:c9:3a:e0:e7:0c:9e:d2:bc:87:cd:6a:3a:
                    03:58:67:c7:8a:29:a4:e1:1a:14:b0:a6:99:1e:3a:
                    d3:99:c2:66:2c:0e:0b:5f:ae:80:d6:56:83:1c:94:
                    f5:a8:75:26:8c:6d:b8:8c:74:b5:98:5f:80:b4:ad:
                    f7:ba:6f:83:b8:47:18:a6:d8:0c:e7:76:7a:55:47:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:34:AF:BF:10:E6:FE:2D:8A:A5:FE:26:45:2A:05:F8:0C:43:37:54
            X509v3 Authority Key Identifier:
                keyid:2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c1:c8:7c:8d:ed:b9:50:ff:ab:24:0a:df:2d:5b:b6:10:92:
         e5:46:59:f7:8e:c8:57:b6:21:91:4f:14:2b:1a:3f:4d:a5:cf:
         54:3f:89:c0:9e:bd:9d:42:df:25:19:09:27:5b:84:42:00:23:
         e7:c3:c4:a0:2c:1e:98:c1:bc:7e:36:90:48:e9:19:96:03:0b:
         f2:0d:01:e0:81:ea:9a:bd:cf:d7:82:51:b2:27:37:c2:d1:4d:
         43:5f:40:04:8d:6e:e6:14:71:a1:b6:d2:35:cd:35:d7:60:d2:
         59:a8:b0:49:92:2a:a3:af:ba:e9:50:d0:86:9e:f2:01:90:4a:
         ab:06:f0:31:b9:92:9a:20:0e:fa:88:9d:7a:5a:bc:57:35:07:
         51:83:90:c3:5b:d0:45:1e:3b:79:6b:ed:1d:d5:61:85:5c:53:
         5d:8e:cc:02:4a:fe:9e:89:b7:13:1a:5a:4f:a2:2a:c2:6f:fa:
         a8:81:d5:d6:28:1d:e7:29:c1:9a:17:b2:03:ac:ce:38:fa:c4:
         8c:bc:c1:9a:1f:83:5b:8e:28:bf:97:13:22:94:5e:ff:f5:f9:
         cc:ae:32:c9:c5:77:c4:1e:34:d4:72:0d:2a:a0:4f:ae:1e:2e:
         fc:4d:97:a8:98:e9:ed:03:70:ec:de:fc:4f:78:38:3c:54:a2:
         6a:99:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----