This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft
File:                     2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft (raw, json)
Hash identifier:          zD4JMjaIGgECwmpj2ZnPFhnuJfmnpGotM2lx9V3gUk8=
Subject key identifier:   21:4C:60:9E:F0:23:ED:E1:5A:87:DC:66:FC:B2:20:DF:E7:E4:DE:5E
Authority key identifier: 2D:86:92:86:7D:08:88:ED:E9:94:3E:1B:31:BA:ED:70:B4:DB:48:11
Certificate issuer:       /CN=2D8692867D0888EDE9943E1B31BAED70B4DB4811
Certificate serial:       17FC1CC8A72384C5A7B2C8298B3C1E6C66412AA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft
Manifest number:          0145
Signing time:             Mon 08 Dec 2025 14:28:03 +0000
Manifest this update:     Mon 08 Dec 2025 14:23:03 +0000
Manifest next update:     Fri 12 Dec 2025 21:58:03 +0000
Files and hashes:         1: 323830333a333831303a3a2f33322d3438203d3e20323731383339.roa (hash: 3210TdmahXk1vHiIapLHiNQOIVAyIIlWlsQSEJlbR48=)
                          2: 34352e3233392e3231362e302f32322d3234203d3e20323731383339.roa (hash: Bj0nm1n4WHfcZZSvRlS9rAMS5hAfN154DashuE/kWrU=)
                          3: 2D8692867D0888EDE9943E1B31BAED70B4DB4811.crl (hash: FY5dAsXcnLxBFfG4WNRB8XbI55tTlsxW9IL35oi4ny8=)
                          4: 323830333a333831303a3a2f33322d3438203d3e20323633373032.roa (hash: TL50qrk9XvnFgdQLkO+e39A+FHmbv3UMwsCY6R9yRO8=)
                          5: 34352e3233392e3231362e302f32322d3234203d3e20323633373032.roa (hash: w1wLfKkqH57IWUZNa4mHTuLp2m5ja/hD3TZz3yTOZs8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Dec 2025 21:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fc:1c:c8:a7:23:84:c5:a7:b2:c8:29:8b:3c:1e:6c:66:41:2a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8692867D0888EDE9943E1B31BAED70B4DB4811
        Validity
            Not Before: Dec  8 14:23:03 2025 GMT
            Not After : Dec 12 21:58:03 2025 GMT
        Subject: CN=214C609EF023EDE15A87DC66FCB220DFE7E4DE5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:3a:10:b0:80:d9:d2:60:82:da:5b:3f:66:
                    d6:da:93:fe:28:ad:99:22:96:64:a7:66:c3:2f:d1:
                    33:8a:b9:8c:c4:3e:19:18:2f:fb:35:7c:0b:56:03:
                    ed:70:0e:3a:b9:4a:91:e2:b5:93:68:0e:64:98:d9:
                    64:65:e9:17:6a:cf:95:c5:d5:e7:d9:49:12:ea:da:
                    82:15:38:55:66:35:d2:a7:58:9a:1c:94:30:d7:37:
                    25:01:4d:e3:e1:0b:39:59:d0:3e:1c:60:80:71:f0:
                    2d:17:59:60:ad:4b:98:09:9e:89:c7:10:b4:98:5b:
                    ba:29:9d:ab:68:d4:3b:19:b4:e8:4b:fc:60:ea:5c:
                    dd:cd:6e:94:b9:de:23:1b:15:17:a0:f2:5b:1c:60:
                    8b:cc:aa:f2:69:49:ae:f9:e0:12:e9:1f:a3:d3:9c:
                    e9:1f:97:ce:51:57:6d:f7:aa:79:48:82:1b:88:db:
                    9a:87:17:6d:22:21:c5:ed:12:13:85:db:ef:6d:c6:
                    09:f0:16:a0:d8:0d:8f:88:be:86:33:e6:ae:a2:11:
                    3e:22:f2:e6:5a:14:50:14:80:5c:dd:d9:74:da:40:
                    55:5b:ab:fa:e2:7c:d9:e3:1c:cc:d8:dd:3f:e1:af:
                    ae:ed:8a:d3:6d:9d:75:02:9f:67:9a:04:36:2d:00:
                    67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4C:60:9E:F0:23:ED:E1:5A:87:DC:66:FC:B2:20:DF:E7:E4:DE:5E
            X509v3 Authority Key Identifier:
                keyid:2D:86:92:86:7D:08:88:ED:E9:94:3E:1B:31:BA:ED:70:B4:DB:48:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:60:06:1e:51:10:cd:30:d5:23:cb:b8:1f:43:b1:0c:5a:d9:
         2c:6f:18:97:b1:81:2c:9e:f5:7e:3c:1e:de:59:2a:ee:b7:6b:
         f9:59:96:5c:27:fe:7f:b7:0d:10:90:f8:57:43:93:5a:12:f6:
         61:e1:d7:c9:2c:cd:a2:09:a1:74:cf:3a:49:42:fd:e7:b8:c6:
         ba:71:71:1e:9d:58:1e:ce:51:03:43:e7:55:98:83:df:3d:9b:
         b1:4e:eb:e1:b8:3c:f5:b0:d5:b0:5b:ca:da:fa:14:95:57:b8:
         59:2e:ab:e5:d9:3f:a2:4e:42:81:de:54:49:13:6c:7b:0d:fe:
         4a:13:43:8d:83:80:9c:de:32:1e:da:2c:ae:d1:d1:90:3b:1a:
         16:78:61:9f:55:80:24:9a:23:de:97:29:89:7a:bb:59:6d:89:
         58:ca:62:7c:cd:db:51:f3:19:44:6e:76:8b:f4:92:50:f5:94:
         6b:a7:e1:ab:52:07:8b:28:28:4d:e8:15:53:16:99:2b:38:f3:
         17:43:7b:83:99:96:51:7d:d1:22:63:75:50:aa:09:a2:a1:c2:
         86:8d:52:24:22:b8:b3:b5:a6:b6:1c:44:72:a7:70:72:08:ab:
         05:87:d6:2f:e5:07:e5:9a:91:3c:dc:f0:67:ed:3f:da:b7:a4:
         98:77:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:17:13 2025 by rpki-client