This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
File:                     2D8A5D8A34E265B308F626454D8A6E920C65D608.mft (raw, json)
Hash identifier:          NjxJ7mw4Ampf2PjxB5K5oeNzfwklOM9oqgITCLj+I6U=
Subject key identifier:   D3:34:78:F9:AF:95:D7:D9:3B:B4:F5:67:D7:00:51:D3:AE:C6:F9:CE
Authority key identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08
Certificate issuer:       /CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
Certificate serial:       3970DFC3C45BF298CC02EC6C3FD09BF0D4AD9AED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
Manifest number:          63
Signing time:             Tue 25 Nov 2025 14:18:45 +0000
Manifest this update:     Tue 25 Nov 2025 14:13:45 +0000
Manifest next update:     Sat 29 Nov 2025 17:23:45 +0000
Files and hashes:         1: 2D8A5D8A34E265B308F626454D8A6E920C65D608.crl (hash: e6+OaSLIvIdLrc3SU5csvcs/FFCbzhwclQs2gpfvNuk=)
                          2: 323830333a3539303a3a2f33322d3332203d3e20323732393634.roa (hash: ZtjREPCj/eeu/E9mBRi9OvFD2ENA47U6yaCq0Q6c32c=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Nov 2025 17:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:70:df:c3:c4:5b:f2:98:cc:02:ec:6c:3f:d0:9b:f0:d4:ad:9a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
        Validity
            Not Before: Nov 25 14:13:45 2025 GMT
            Not After : Nov 29 17:23:45 2025 GMT
        Subject: CN=D33478F9AF95D7D93BB4F567D70051D3AEC6F9CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:56:fb:2b:4a:8d:15:ef:32:32:f3:83:61:
                    9d:eb:2b:93:d2:b1:c2:3a:0f:57:fb:5e:da:94:8f:
                    ee:a9:db:bc:7c:9b:e8:0e:a2:2c:fd:cf:42:6b:1d:
                    dd:bb:fe:d1:a5:36:28:6f:c5:b8:fa:32:d3:e9:9c:
                    17:de:1e:1f:09:0c:99:f6:69:35:d2:55:6e:22:89:
                    9f:2b:ea:17:6b:3e:06:8c:02:0f:27:cc:fa:bc:d3:
                    69:79:f0:10:cb:2e:c1:ab:96:74:d3:2d:19:fa:b6:
                    7e:7d:0a:f6:f7:98:b0:aa:0a:e3:eb:b9:6a:04:9d:
                    81:4e:1e:ae:3a:a3:c7:25:aa:73:e2:1c:f7:3d:6a:
                    9a:f5:4f:5d:84:4e:36:70:e8:2b:8b:66:c0:bd:31:
                    94:38:80:11:ba:1f:db:47:63:7f:90:7b:c8:e0:ed:
                    75:01:08:08:32:38:a0:d4:b3:20:b9:8e:f5:c5:01:
                    f9:66:91:18:0a:f9:ce:bf:f7:a9:54:e8:86:2f:82:
                    97:48:9e:24:33:b4:82:61:fb:77:e7:27:8d:57:3d:
                    90:82:64:ec:d6:b4:ee:b8:6a:07:1a:54:18:35:03:
                    48:9c:d7:cf:98:b4:f6:9c:05:de:0c:98:8d:92:ba:
                    3d:81:7e:4e:13:7a:e2:c0:e4:82:9c:cd:a2:fe:a7:
                    12:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:34:78:F9:AF:95:D7:D9:3B:B4:F5:67:D7:00:51:D3:AE:C6:F9:CE
            X509v3 Authority Key Identifier:
                keyid:2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:77:f8:00:0e:e8:6c:cd:61:07:ef:60:91:aa:a1:7c:bb:11:
         da:55:49:56:4a:94:c6:f8:05:7b:d7:84:38:a1:b5:8c:c3:64:
         ee:0a:1b:25:04:fc:28:ba:81:e2:ef:2c:a6:b1:06:f3:11:24:
         6e:46:6c:cb:96:09:8d:3f:76:d9:85:c8:72:cf:2f:c3:ea:91:
         c0:98:d1:f4:ac:4d:35:76:5d:02:51:7d:c5:c2:91:07:1a:40:
         7b:3c:ba:99:10:25:58:de:ce:c8:b0:c5:c6:84:a5:ea:47:40:
         7d:b1:14:83:b5:90:be:56:d3:04:74:d2:78:b1:bf:e7:01:31:
         cb:e7:65:73:58:e5:81:5f:8a:17:16:7c:3e:02:bf:1e:45:87:
         7d:db:0b:b5:01:63:4c:6e:5e:12:66:dd:3f:f5:d9:c3:ce:e1:
         da:88:65:ad:15:5e:cd:9c:b3:59:19:54:a2:5c:ad:52:00:09:
         88:61:b3:99:73:cf:0d:7c:fc:c1:77:f6:25:40:06:da:97:20:
         44:a9:a7:c3:81:e9:e1:f1:08:c9:89:76:18:6b:86:e4:cc:dc:
         b7:7d:d0:ce:43:c3:a7:5b:73:dd:6d:e2:fa:29:0b:ea:45:b1:
         08:7b:2c:f3:3e:89:57:4b:39:0e:1b:f9:5b:62:43:cf:f9:a2:
         97:8a:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----