This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.mft
File:                     DB5A38E075D530ECB516C04071D54A6B1DD78CFC.mft (raw, json)
Hash identifier:          YiYlarbXu+55tVOGmVMlf2lsjBOx8SEvUcAYn921ehk=
Subject key identifier:   3A:D2:F1:4F:D1:0A:34:33:1E:86:87:AF:36:C7:75:DC:83:D6:D7:22
Authority key identifier: DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC
Certificate issuer:       /CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
Certificate serial:       2958CEDBE3BF407650BE548CDBFC4E5CA19FBC3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.mft
Manifest number:          0155
Signing time:             Sat 20 Dec 2025 20:56:57 +0000
Manifest this update:     Sat 20 Dec 2025 20:51:57 +0000
Manifest next update:     Thu 25 Dec 2025 23:35:57 +0000
Files and hashes:         1: 34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa (hash: VlF6Ju6G3UVGsIbMxDgOn4//p7mQ/CQK7AT41fHzjeA=)
                          2: DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl (hash: VZMt8bOQRN9e54yfJFuN2Ru7d1e2fcacx67cLERWRZQ=)
                          3: 34352e3136312e3130382e302f32342d3234203d3e20323636393031.roa (hash: sQDbSdTAmq8/ZnUGrofA/QEuKQ6zlAaqLM8ey6hKefc=)
                          4: 323830333a373661303a3a2f33322d3332203d3e20323636393031.roa (hash: x6EnuX18Ybwv5DConJWwF62yHyFbPUvEzJ9fFZSpX68=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 23:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:58:ce:db:e3:bf:40:76:50:be:54:8c:db:fc:4e:5c:a1:9f:bc:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
        Validity
            Not Before: Dec 20 20:51:57 2025 GMT
            Not After : Dec 25 23:35:57 2025 GMT
        Subject: CN=3AD2F14FD10A34331E8687AF36C775DC83D6D722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:82:08:d1:80:84:ee:36:fb:32:19:7a:fe:
                    31:99:a3:2d:5b:9d:0d:02:45:8b:5d:84:01:fa:b3:
                    f0:75:c6:78:45:1c:89:95:24:ea:d1:9a:d0:ea:c4:
                    35:85:0a:90:7a:c6:30:21:8b:7d:8a:b9:85:1d:06:
                    50:9a:ce:23:69:50:4b:07:14:64:23:76:ae:c6:13:
                    b7:53:a6:cb:a9:c2:03:6f:d0:61:b3:df:e9:21:95:
                    2c:fe:a9:96:1e:34:31:a2:4f:f7:70:68:aa:06:5c:
                    ab:7c:96:8d:13:85:8d:d3:3b:38:09:5f:04:3f:51:
                    3f:28:64:37:7a:2d:64:ca:2f:0c:db:35:57:2c:20:
                    c8:db:4b:4c:17:60:98:86:d3:95:9f:83:13:0f:1e:
                    c6:d8:e5:b8:11:24:d5:45:3e:a6:1d:36:eb:b5:1e:
                    b8:73:7c:0d:27:5a:34:a4:27:6a:c2:c2:e6:d6:b5:
                    44:97:7a:88:3d:5f:55:83:77:15:bd:ca:11:24:71:
                    83:c9:76:fc:75:0b:90:e1:69:9b:b1:6c:ee:7b:16:
                    ca:ba:29:0c:a5:8b:b5:da:b9:94:e8:67:8d:88:d4:
                    b0:d0:6e:6e:33:07:6d:a0:b6:a2:eb:76:04:28:a7:
                    0d:a4:e6:5c:da:a5:14:11:d0:ac:87:b2:cc:59:a2:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D2:F1:4F:D1:0A:34:33:1E:86:87:AF:36:C7:75:DC:83:D6:D7:22
            X509v3 Authority Key Identifier:
                keyid:DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5d:9b:f6:ff:b1:10:2f:1c:02:c2:7f:e8:aa:3b:d0:88:9e:
         07:94:40:41:e5:33:66:b6:53:5e:9d:b8:25:81:7b:90:7a:45:
         6f:00:9e:80:5e:27:37:79:77:a0:12:d0:de:65:d6:0e:8f:ed:
         41:19:25:db:e8:f0:9e:94:c3:05:08:3d:21:80:0f:e1:f9:cc:
         b7:52:ec:ab:67:6d:99:0d:a9:70:f6:b5:dd:b7:20:b1:28:09:
         b1:c9:b2:10:7a:62:1d:5d:e4:0e:e3:88:ff:d0:a4:a9:c2:54:
         64:f0:34:35:26:49:2b:d8:90:1e:a5:77:1a:be:7e:b0:3e:47:
         a3:8c:a4:f3:24:0a:1d:3a:d3:d4:6a:b6:52:48:18:5b:cf:63:
         e8:f3:29:1b:6a:17:65:25:af:f2:dc:72:5b:ef:f9:92:2f:e9:
         79:c2:03:b1:8d:33:9a:2c:90:f1:44:70:23:35:53:0f:92:2d:
         b6:cf:d6:f5:90:0e:2d:8c:b6:d8:da:01:25:66:d2:a3:76:86:
         21:68:c2:e8:ff:84:eb:69:9f:38:b1:3d:d6:7f:39:7c:ab:da:
         ee:50:8a:57:07:49:52:5b:98:7e:27:54:b5:42:63:89:ad:bf:
         7a:b0:2f:f8:37:4d:50:7d:78:1f:a3:3d:bf:c5:1d:ae:84:39:
         1f:e6:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----