This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.mft
File:                     2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.mft (raw, json)
Hash identifier:          2f9m8yX1D2CRO7yyX5v/XcbeGEpZ31GACDT5MqIdcHQ=
Subject key identifier:   13:71:BA:CD:E5:2A:33:F3:8D:DF:A8:AE:35:00:96:89:EF:D5:2D:2A
Authority key identifier: 2A:ED:E3:E0:FD:44:F5:06:E2:EE:63:64:B7:D5:11:11:BA:4E:A1:ED
Certificate issuer:       /CN=2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED
Certificate serial:       7E5E97A1BAC26E312137CDBCAD151BFD8172D1FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.mft
Manifest number:          D9
Signing time:             Mon 15 Dec 2025 10:25:42 +0000
Manifest this update:     Mon 15 Dec 2025 10:20:42 +0000
Manifest next update:     Sat 20 Dec 2025 09:46:42 +0000
Files and hashes:         1: 3134382e3232322e3131392e302f32342d3234203d3e20323733343237.roa (hash: 2n/lP/vTYhCJ/lE5KHOn8yLpNMAj/OEVg+f272ZSk2I=)
                          2: 34352e352e35362e302f32322d3234203d3e20323636373537.roa (hash: JC9flHYMy78sr+OHZs7694SiY3vsm9J+aFAypGZJyhg=)
                          3: 3134382e3232322e3131392e302f32342d3234203d3e20323635363636.roa (hash: JpjGlxDk6NaUSN3yZO6GcuajBtdEBQ6XA5F5yL7ixa8=)
                          4: 3134382e3232322e3131322e302f32312d3234203d3e20323636373537.roa (hash: 4VBePLMU53Y/c8SZO/xMt1KAyUaoCvdsesUxgkkZzuI=)
                          5: 323830333a656563303a3a2f33322d3438203d3e20323636373537.roa (hash: MPiVjFTX+b19JYCUZe8QCFp2WnEPKbCcRYiLfEWHhPM=)
                          6: 2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.crl (hash: PdK+3OWN+xhL2VEJDjt2me5K5D63eL0ymbNU4J3GplU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 09:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5e:97:a1:ba:c2:6e:31:21:37:cd:bc:ad:15:1b:fd:81:72:d1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED
        Validity
            Not Before: Dec 15 10:20:42 2025 GMT
            Not After : Dec 20 09:46:42 2025 GMT
        Subject: CN=1371BACDE52A33F38DDFA8AE35009689EFD52D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:e2:77:8b:7b:20:47:d4:37:bf:3f:a8:c1:
                    f7:d6:7e:cf:64:6b:8c:f1:00:a8:1b:44:f6:42:78:
                    9c:db:1b:8f:8b:20:d1:85:30:07:d5:ac:b8:76:de:
                    50:af:21:69:d8:c9:0d:36:c4:15:7b:5a:89:9c:1a:
                    42:07:ef:23:dc:3a:6a:98:b2:86:78:27:01:72:41:
                    d2:c0:2f:71:ba:d3:f9:fd:28:ec:82:05:14:2c:07:
                    53:98:37:8d:46:93:b7:e8:0a:9b:6f:09:a6:d2:03:
                    84:a3:98:6e:00:ec:54:92:ae:df:cc:84:5f:31:2d:
                    05:3b:e3:5f:b7:29:11:7a:f0:6a:e7:ab:6e:3b:fd:
                    8d:43:f3:76:a4:6c:c3:72:4b:e0:f0:c3:8a:27:72:
                    14:3b:06:c0:b9:11:9a:e1:78:ee:2d:ce:87:1b:b7:
                    c1:c4:05:3e:79:e5:d3:2e:f0:ac:11:6c:45:2d:8f:
                    e3:22:00:a9:09:dc:a7:38:53:59:11:70:a4:e4:71:
                    8c:50:11:b9:7b:cb:9f:1a:24:e1:4c:db:e0:8d:2c:
                    51:b1:a3:9f:e4:38:01:9c:20:a6:74:55:6b:c7:c4:
                    d1:e5:4c:36:a0:27:0a:18:1f:94:2c:e3:b0:22:b6:
                    4b:d5:07:3a:db:d5:a8:ec:7a:c7:3d:8c:c4:39:cc:
                    c7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:71:BA:CD:E5:2A:33:F3:8D:DF:A8:AE:35:00:96:89:EF:D5:2D:2A
            X509v3 Authority Key Identifier:
                keyid:2A:ED:E3:E0:FD:44:F5:06:E2:EE:63:64:B7:D5:11:11:BA:4E:A1:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:9e:c5:c9:50:36:b5:63:5a:83:fc:48:7d:ea:90:7b:11:0a:
         b2:1e:17:59:39:23:b4:3a:52:5e:7e:2e:92:61:a9:da:00:25:
         b2:d5:b1:ae:17:c6:d2:cc:2f:be:c9:05:5f:7c:80:a0:c0:57:
         b9:52:8b:cb:e5:f2:08:05:2c:87:30:e1:cc:d3:fd:3b:c0:b6:
         6f:66:74:81:d4:8b:36:f9:40:cc:bf:a2:aa:46:e7:e5:b5:35:
         f8:b9:3b:e3:2b:99:7d:18:67:fd:e9:4e:60:30:d6:d2:95:da:
         5c:fa:6a:33:39:2c:82:26:4d:5c:b6:80:85:5d:f2:47:e9:fa:
         ef:b0:a7:03:f0:46:1b:e4:6e:92:d4:93:0d:03:8b:2e:be:0c:
         01:e6:f5:ea:02:78:a0:2f:96:36:80:d9:e6:65:08:83:86:07:
         fe:47:44:8e:54:80:3c:23:87:9a:76:42:6a:b8:ce:16:20:ff:
         ac:9f:b8:76:e5:7f:8d:2b:af:44:a8:14:4e:db:66:f6:9e:3b:
         56:d6:30:6e:b3:e0:2a:04:cc:13:db:a1:49:2c:35:11:ab:a5:
         c8:92:42:37:b1:60:b7:c9:da:6e:2c:92:a3:5f:ae:d1:31:43:
         77:98:e2:ed:db:61:71:e6:fc:9b:b8:51:3b:4b:a9:20:37:45:
         9b:18:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 05:56:44 2025 by rpki-client