This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD6F8E7048E74F40800EAA41840FCA54BE39FF0A905BB6B6AD1AF2EE428BDE7E/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.mft
File:                     2A85DB20A6F649E19299347ED803233E0DC81C1F.mft (raw, json)
Hash identifier:          GAeG4xS/rQxHlnZK/PWsfIRMM4Sd40xe77OAYlX4+Ow=
Subject key identifier:   55:F5:B8:4F:FA:0B:40:73:0F:15:BF:B0:2E:08:82:26:3F:F2:73:A0
Authority key identifier: 2A:85:DB:20:A6:F6:49:E1:92:99:34:7E:D8:03:23:3E:0D:C8:1C:1F
Certificate issuer:       /CN=2A85DB20A6F649E19299347ED803233E0DC81C1F
Certificate serial:       1D33D416763DC3BDBD3CAAAFD9D1000EBD174464
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD6F8E7048E74F40800EAA41840FCA54BE39FF0A905BB6B6AD1AF2EE428BDE7E/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.mft
Manifest number:          CA
Signing time:             Wed 10 Dec 2025 07:58:34 +0000
Manifest this update:     Wed 10 Dec 2025 07:53:34 +0000
Manifest next update:     Tue 16 Dec 2025 07:36:34 +0000
Files and hashes:         1: 3230312e3138322e37362e302f32342d3234203d3e20323733393636.roa (hash: l4dlx0CidTbMhaiPAgOZW+C2Md6xVgLQwC0LwJqg9cY=)
                          2: 3230312e3138322e37372e302f32342d3234203d3e20323733393636.roa (hash: sWxCEXlsVZjoU0yBWbI+XonSTKxKxYKqsqSKkybJIOU=)
                          3: 2A85DB20A6F649E19299347ED803233E0DC81C1F.crl (hash: c4cSXkqrb3hK/CDDkMbHsfUKg9suDEGFR7cGqgUymac=)
                          4: 3230312e3138322e37382e302f32332d3234203d3e20323733393636.roa (hash: hyI3vBposUL70qp9Vxx/AATtT4uA0QN7Gacfuu90+DI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD6F8E7048E74F40800EAA41840FCA54BE39FF0A905BB6B6AD1AF2EE428BDE7E/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD6F8E7048E74F40800EAA41840FCA54BE39FF0A905BB6B6AD1AF2EE428BDE7E/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 08:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:33:d4:16:76:3d:c3:bd:bd:3c:aa:af:d9:d1:00:0e:bd:17:44:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A85DB20A6F649E19299347ED803233E0DC81C1F
        Validity
            Not Before: Dec 10 07:53:34 2025 GMT
            Not After : Dec 16 07:36:34 2025 GMT
        Subject: CN=55F5B84FFA0B40730F15BFB02E0882263FF273A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1c:5d:76:a9:5e:4c:69:2d:a5:4b:3b:47:d3:
                    40:54:e9:59:01:60:26:c4:72:e4:83:1b:b8:80:a3:
                    13:70:a7:f7:17:b1:0c:d0:b4:fe:3d:b2:b4:0d:8b:
                    4e:e3:a9:ea:f1:c4:d0:e8:ae:c2:86:a9:cb:94:0a:
                    c1:b5:06:cc:a7:93:ee:40:07:b7:d9:c2:d5:72:da:
                    ec:b8:5a:91:f5:cf:69:4a:64:aa:a3:f1:7a:75:16:
                    c9:8e:11:00:ae:f9:0d:df:e1:a3:0c:2a:2e:8e:43:
                    3d:69:79:01:f0:f6:51:b8:cc:48:8f:9a:bf:90:ba:
                    09:ad:7b:1a:b2:95:18:b0:b6:7f:55:44:bb:5e:ce:
                    99:03:f5:e5:42:b7:51:8c:f0:14:ef:6a:50:ce:b8:
                    08:5c:e4:95:1d:7d:d5:65:56:3d:c3:14:99:3e:0b:
                    f5:31:2e:df:ca:53:ab:56:93:19:de:d3:f0:a2:de:
                    3b:db:73:5d:13:77:0c:e5:2c:66:d1:62:6d:ce:e6:
                    b0:5b:e4:2c:aa:cd:4f:e5:41:eb:b5:d7:d1:83:4e:
                    cf:b1:e9:55:09:da:86:bb:ac:fa:95:9a:fa:8c:73:
                    cc:9c:3e:15:de:da:2b:24:dc:a7:2b:74:47:69:b0:
                    14:43:6d:4c:95:9a:b4:ab:f3:78:65:18:6d:29:43:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F5:B8:4F:FA:0B:40:73:0F:15:BF:B0:2E:08:82:26:3F:F2:73:A0
            X509v3 Authority Key Identifier:
                keyid:2A:85:DB:20:A6:F6:49:E1:92:99:34:7E:D8:03:23:3E:0D:C8:1C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD6F8E7048E74F40800EAA41840FCA54BE39FF0A905BB6B6AD1AF2EE428BDE7E/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD6F8E7048E74F40800EAA41840FCA54BE39FF0A905BB6B6AD1AF2EE428BDE7E/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:34:5b:cd:64:23:75:bd:17:d2:15:0c:31:31:f2:20:41:6d:
         51:57:0e:da:96:91:00:bd:b5:03:00:12:be:35:fe:0f:e1:fe:
         58:72:fd:24:0c:b3:e7:a5:98:44:58:45:2c:50:20:63:fd:2e:
         10:c5:99:c1:8c:98:b2:29:29:bc:88:d4:29:0e:9b:cb:fa:43:
         fb:4f:39:0b:77:20:a0:29:13:31:c5:14:a5:6f:c7:a6:1d:05:
         73:38:6a:ce:53:d4:ab:40:d8:ee:85:96:de:66:8c:0f:d9:27:
         7f:e7:bb:12:c2:26:bb:12:83:27:32:6c:76:75:a3:7c:62:71:
         12:84:d7:58:fc:2c:41:0b:7d:6b:e0:13:d8:0a:95:a0:83:f4:
         84:f1:4b:47:5e:2c:a6:25:aa:5f:04:af:4b:17:63:03:e9:15:
         a6:28:46:9e:bf:dc:c2:c5:d4:d7:1e:e2:a0:de:86:76:d1:77:
         cb:cb:d5:c5:a4:fb:16:14:6c:20:0d:95:12:23:29:f2:91:1f:
         2b:24:f8:7c:8d:8e:dd:ff:72:8c:c9:b1:41:dc:7f:19:ea:2b:
         ba:e1:09:26:d2:56:86:76:bb:c0:11:e7:2d:1b:87:46:a5:a3:
         09:4d:f3:d2:dd:57:78:ba:f2:60:a8:91:3d:54:17:10:73:e5:
         b5:87:0a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----