This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft
File:                     CDE9A086136079BC935532C1329B043B4912BF62.mft (raw, json)
Hash identifier:          4kK8tpMwQjapQREVoBGzTzxjln2LgBWGKNwSZpv7Vus=
Subject key identifier:   07:F1:48:6C:CE:20:23:29:D3:43:EF:7E:D7:23:2B:A1:D1:AA:EB:3D
Authority key identifier: CD:E9:A0:86:13:60:79:BC:93:55:32:C1:32:9B:04:3B:49:12:BF:62
Certificate issuer:       /CN=CDE9A086136079BC935532C1329B043B4912BF62
Certificate serial:       21A6121687F6E931F144A055BA4B7C6B95E5DB4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft
Manifest number:          0147
Signing time:             Fri 19 Dec 2025 11:56:39 +0000
Manifest this update:     Fri 19 Dec 2025 11:51:39 +0000
Manifest next update:     Tue 23 Dec 2025 12:39:39 +0000
Files and hashes:         1: CDE9A086136079BC935532C1329B043B4912BF62.crl (hash: dxZfcl0fhUriLB20tO97RqGh7dNBCwQ+vwwaLh0SG4Y=)
                          2: 323830333a636636303a3a2f33322d3332203d3e20323639383333.roa (hash: DAWfUBJxhL/E2Uz/2dU/mnXFUcL+tMpbjshPWq8OILY=)
                          3: 34352e3138382e32302e302f32322d3234203d3e20323639383333.roa (hash: kHeTSpTYh6OdL0w4DvDN/TDfQuBaK/PDRfAKHxPTS9c=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 12:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a6:12:16:87:f6:e9:31:f1:44:a0:55:ba:4b:7c:6b:95:e5:db:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE9A086136079BC935532C1329B043B4912BF62
        Validity
            Not Before: Dec 19 11:51:39 2025 GMT
            Not After : Dec 23 12:39:39 2025 GMT
        Subject: CN=07F1486CCE202329D343EF7ED7232BA1D1AAEB3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:98:f5:db:1c:4b:10:7a:d8:a7:a9:cf:f9:
                    46:6c:6f:19:e2:cb:59:76:84:00:d5:8c:19:38:01:
                    a7:65:57:fe:79:8d:3d:53:da:9a:31:cf:c4:a3:84:
                    8b:32:b4:dd:8b:2d:bc:f1:a1:e7:44:1c:4c:52:bf:
                    38:39:ad:74:78:2e:51:d6:bb:4f:81:a6:5e:f9:7b:
                    99:48:3a:72:ff:76:56:af:d2:bc:4f:19:e7:82:d2:
                    a1:f2:af:bd:5f:73:68:c6:a3:dc:d1:ea:22:b0:fd:
                    24:bb:fb:be:20:a9:01:44:48:0c:3b:d6:5c:c6:8e:
                    b4:5c:3b:55:7d:b7:af:8e:85:bd:bf:6d:af:f0:a4:
                    b4:ee:ab:5f:45:55:86:53:a6:ef:83:c8:90:49:10:
                    45:d6:bb:06:56:6a:b3:8e:52:b1:13:64:26:9b:8c:
                    85:1c:20:bc:de:c4:88:41:29:1d:19:bd:ee:64:08:
                    29:4c:e6:c9:11:be:7a:69:3a:a4:02:16:4d:70:b5:
                    d5:1f:d7:05:16:05:f3:4e:1c:85:f6:ae:02:28:86:
                    38:e0:7e:0c:b1:69:c0:d9:50:50:fc:59:63:3e:79:
                    85:61:2f:4d:0f:3f:d3:78:5e:a6:45:83:2d:09:9a:
                    28:95:02:27:0e:36:0d:e6:3b:4b:cf:2e:5f:d5:a1:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F1:48:6C:CE:20:23:29:D3:43:EF:7E:D7:23:2B:A1:D1:AA:EB:3D
            X509v3 Authority Key Identifier:
                keyid:CD:E9:A0:86:13:60:79:BC:93:55:32:C1:32:9B:04:3B:49:12:BF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a9:b6:14:69:6f:7a:c5:5a:d8:c6:b8:0a:dc:c6:07:13:ad:
         6a:b9:bf:7b:fd:66:00:d5:90:e7:50:f6:8e:20:23:d4:5c:6e:
         37:06:3b:87:b1:7f:87:e6:63:fe:0d:09:86:4b:8a:c2:12:c2:
         a9:d5:0c:4e:b6:f1:ef:ac:e9:8f:67:29:d8:0a:51:da:07:56:
         f0:6a:aa:5f:2c:6f:ff:fb:75:d7:fa:f8:9e:67:ea:4b:26:01:
         2d:c1:3b:f3:64:7f:69:49:59:54:bc:9b:4c:90:e7:08:48:3d:
         da:80:98:9b:f2:f8:e2:cc:87:14:5d:ed:8f:ab:a1:76:ca:9c:
         33:69:50:00:24:d7:3f:03:87:5b:dd:2e:b8:12:21:86:4e:a4:
         1e:86:aa:1a:9b:09:c9:c6:3d:35:1e:3d:4b:47:69:68:9e:e7:
         59:92:04:37:64:bd:1d:d9:5b:0a:a6:81:58:63:73:7f:d3:04:
         82:4f:37:01:1f:8a:c0:5f:1d:f9:de:ee:df:f4:ce:c4:c2:5e:
         b9:e9:83:48:77:a4:11:c1:a4:2f:cf:c7:5b:ae:34:32:9b:b7:
         47:d4:05:8c:f1:0c:6f:74:56:2e:42:50:ef:e3:a1:c2:37:fa:
         c2:94:71:37:5d:08:e8:de:44:b9:b2:dd:4e:55:24:6e:96:63:
         c2:aa:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----