This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.mft
File:                     CD10DB25820E91BA3528D109BC497D348AF1CC8E.mft (raw, json)
Hash identifier:          2d0Ie5p2Pgth3jLOcKUvJda+2Rd3MvcawvnuKacAwuU=
Subject key identifier:   BD:D2:40:3A:DB:6F:BA:88:16:52:3E:D5:B1:18:91:30:85:43:96:5C
Authority key identifier: CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E
Certificate issuer:       /CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
Certificate serial:       4A376C9911A04A777F2F79A4399D6A1D061F455D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.mft
Manifest number:          0143
Signing time:             Tue 09 Dec 2025 22:37:35 +0000
Manifest this update:     Tue 09 Dec 2025 22:32:35 +0000
Manifest next update:     Sun 14 Dec 2025 23:16:35 +0000
Files and hashes:         1: 3230302e3130382e3133362e302f32322d3234203d3e203237363639.roa (hash: +jZjF9XTsfUfNjkHip6jF2Azb3svyhuuuR1wNgZgvTs=)
                          2: 3230302e3130382e3132382e302f32312d3234203d3e203237363639.roa (hash: Q8HXo5yPO0pWuCpqAFSX3pTrzShM92w0ftpABUKsr5I=)
                          3: 3230302e3130382e3134322e302f32332d3234203d3e203237363639.roa (hash: 4T6KuwNqLWUfvJVhG7Rn9tYVZmvFOSi/JhntwjDaXGo=)
                          4: CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl (hash: nsMPU/vVrVCxdmApTdZUsMhZrA7B0qp69eACy5gCO0g=)
                          5: 3230302e3130382e3134312e302f32342d3234203d3e203237363639.roa (hash: 6C+4r7IUrawVudoz+n1LIwRZ47mx3xWrsv0y85ZdFBM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Dec 2025 02:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:37:6c:99:11:a0:4a:77:7f:2f:79:a4:39:9d:6a:1d:06:1f:45:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
        Validity
            Not Before: Dec  9 22:32:35 2025 GMT
            Not After : Dec 14 23:16:35 2025 GMT
        Subject: CN=BDD2403ADB6FBA8816523ED5B11891308543965C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:4f:08:38:d4:6c:4d:67:7a:ed:32:99:d3:
                    9f:11:a7:06:81:0b:fd:aa:ac:d0:29:d3:0a:76:58:
                    39:67:81:1a:bc:89:d2:f2:17:bd:3a:76:8f:d2:99:
                    08:dc:74:64:22:3c:65:e7:6e:dc:58:90:90:10:4e:
                    1f:54:41:b0:01:55:f2:00:a2:21:d7:29:f9:a9:b2:
                    26:76:94:32:38:68:2b:cb:45:b0:d8:2d:10:9f:32:
                    74:af:40:a7:94:d7:e3:3e:b1:20:0b:8e:15:a4:fd:
                    3d:9d:41:d7:15:34:60:1d:09:26:0d:55:8e:5e:39:
                    a9:7c:12:35:4d:ba:18:c4:77:71:35:56:ca:64:c9:
                    9c:bf:17:25:6a:af:c6:92:9a:a7:35:29:5b:45:e6:
                    15:e5:3a:01:42:11:4f:a3:72:98:75:3a:48:e9:ca:
                    d7:1d:48:3e:b3:2f:c8:0a:f9:4c:9e:ba:17:e8:64:
                    8d:5f:a5:e6:ef:fc:03:c1:d9:a5:16:e2:5e:e9:8a:
                    62:21:a9:ef:5f:df:c2:8d:e8:40:5d:4f:44:ed:71:
                    fb:86:91:44:83:14:44:9c:a5:34:e4:08:17:b2:74:
                    57:ef:90:16:08:51:7b:a0:7c:1f:88:b5:84:82:9e:
                    b1:e4:93:79:e3:cf:51:d0:60:56:a8:90:70:91:81:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D2:40:3A:DB:6F:BA:88:16:52:3E:D5:B1:18:91:30:85:43:96:5C
            X509v3 Authority Key Identifier:
                keyid:CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a0:96:1e:df:a6:1c:31:57:ea:89:2f:e9:e0:0a:05:2b:27:
         ab:cf:7b:fc:1c:4c:43:32:74:4d:83:74:1f:50:a4:c8:c2:9d:
         63:77:82:92:41:37:d2:32:03:84:7b:09:25:60:54:f8:12:2d:
         a0:9c:47:07:84:45:33:48:79:f4:bc:48:37:40:2b:13:9a:1f:
         50:1b:5d:e1:a0:e6:25:88:52:5a:f1:43:42:6c:22:79:18:7a:
         eb:10:0c:2d:ee:ec:48:84:07:93:7f:c7:00:1c:6f:cf:1d:a3:
         ee:2b:2a:f3:4d:8e:d2:25:7b:4a:cc:69:36:63:1a:69:92:c0:
         dc:d3:14:37:51:1e:e7:9c:bf:f7:80:51:f1:50:66:9f:bf:90:
         a5:b2:dd:20:35:ba:cd:39:7f:79:02:cb:c8:a0:b6:80:95:3c:
         90:1d:7a:26:65:14:98:ff:02:ee:d3:e2:16:f2:d1:e4:a5:a4:
         32:e2:25:43:ba:ce:c7:89:85:70:34:d3:ab:fe:1c:ce:bc:a4:
         08:97:33:d9:d9:a2:de:ee:b4:9b:a6:8e:10:d4:08:a8:c1:72:
         c5:70:f3:cc:93:b3:03:18:22:97:06:d4:c3:a5:b4:cb:72:77:
         5a:c5:26:7b:40:69:85:9e:7c:71:fa:6b:bc:2c:b1:e7:96:c4:
         4a:75:c2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----