This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
File:                     2D420DA52C4FED64C64081F978E8485CD8161A81.mft (raw, json)
Hash identifier:          Nw/W8ek73WpxJtE3abKcwVWNRt+L31rwI4L/MHAHOVE=
Subject key identifier:   90:7E:A9:B1:DC:0D:CE:A7:70:C4:2B:2C:1C:BB:75:1B:B4:16:F9:0F
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Certificate issuer:       /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial:       41337842AA62E269ABE6022B0FFC6083D14AC7C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
Manifest number:          014A
Signing time:             Mon 29 Dec 2025 17:50:49 +0000
Manifest this update:     Mon 29 Dec 2025 17:45:49 +0000
Manifest next update:     Sat 03 Jan 2026 21:02:49 +0000
Files and hashes:         1: 3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa (hash: rZzDnwa0MPMnAUQI/T5MjhsAO3J26Ue6xAm2FQO/eiA=)
                          2: 3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa (hash: 1oYXiRs6rlIee7gSCsds1xIN8M3Wto/5rLLuEM7RJ/4=)
                          3: 323830333a633036303a3a2f33322d3332203d3e203631343531.roa (hash: y+kZpxvB2vqV6FoA3lmooqJCJtir3RHk1ikwbeAOmdU=)
                          4: 34352e3137332e302e302f32322d3234203d3e203631343531.roa (hash: GGuVym2kL4T0FmdZd9rq4sGSSWcGiS/epeSrSrFw9qw=)
                          5: 2D420DA52C4FED64C64081F978E8485CD8161A81.crl (hash: xsG+9NFM6WMNTzjck6TIDHnJ9r8GX48Kzua2mfNTb40=)
                          6: 3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa (hash: /Z7LPAsuTjZ5cwTBvnVpQcKSEa9rH/diyzx0Hq8W+6o=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 Jan 2026 21:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:33:78:42:aa:62:e2:69:ab:e6:02:2b:0f:fc:60:83:d1:4a:c7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
        Validity
            Not Before: Dec 29 17:45:49 2025 GMT
            Not After : Jan  3 21:02:49 2026 GMT
        Subject: CN=907EA9B1DC0DCEA770C42B2C1CBB751BB416F90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:61:63:f6:67:31:af:ad:0f:06:c2:da:89:
                    ee:e1:e1:cb:9c:a1:60:23:4f:ac:71:a0:8d:3c:8c:
                    db:85:7b:5c:14:2e:93:70:e2:c3:ad:e1:3d:a6:77:
                    6d:36:7a:26:3d:ac:54:c0:f6:f1:b1:05:b7:4c:43:
                    dc:45:41:d5:58:a0:a6:3c:36:88:ff:20:ce:73:73:
                    4b:56:0f:9d:58:e6:f6:50:54:02:63:25:7a:92:4b:
                    2d:93:05:40:01:c3:24:19:61:72:a2:02:56:4e:46:
                    c6:d0:f1:cc:cf:be:f4:f4:2d:27:3c:87:27:0f:c9:
                    ac:83:ee:3c:f6:c7:56:64:5c:1e:88:bd:88:f4:62:
                    89:eb:ab:51:cf:35:cd:5b:45:bc:0a:2f:d9:1a:2c:
                    8c:9a:ce:92:f6:cf:a8:ed:52:6c:4c:8a:ac:23:60:
                    e1:dd:fc:90:fa:34:10:3a:52:16:89:f7:d6:28:05:
                    85:5f:4a:9d:24:47:04:e6:a0:8f:84:e8:38:ce:32:
                    26:57:fc:7d:30:6f:a7:08:e1:95:ef:40:ba:4b:d2:
                    fc:45:d6:0d:7a:9c:6b:90:54:b2:4d:13:c9:e1:6f:
                    d2:c3:50:70:80:7c:a4:8c:64:67:2f:8a:f5:84:c1:
                    ba:f3:a2:f3:4d:30:c6:97:30:e7:65:e4:2c:70:67:
                    53:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7E:A9:B1:DC:0D:CE:A7:70:C4:2B:2C:1C:BB:75:1B:B4:16:F9:0F
            X509v3 Authority Key Identifier:
                keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:9a:96:39:6e:c1:0f:06:5c:57:56:4f:71:fb:4d:3a:5e:8f:
         97:6c:a9:1d:4b:f7:3e:e0:08:0f:d4:d7:c2:e1:fa:90:dd:4e:
         b6:70:8f:c9:c8:91:15:c9:c6:27:58:60:b1:98:e3:ea:d0:4f:
         c4:5f:7c:d2:9c:cf:93:35:a1:fe:b6:d8:4c:10:f8:ea:7a:15:
         ee:32:cf:81:0e:75:a9:ea:33:91:ca:9e:ae:18:0a:11:1f:ba:
         a0:28:dd:70:b4:b5:8c:bf:27:e7:7c:08:1d:d1:ee:85:20:c7:
         20:89:13:9d:d5:e3:cb:8f:ba:70:38:3c:cc:64:a8:b5:62:d2:
         79:bc:f6:2d:67:a8:a3:53:7c:8f:2b:19:e1:34:2c:97:4a:65:
         a3:11:3c:9c:0a:2a:2b:e3:74:fc:93:5d:10:05:17:ed:bd:a1:
         74:c9:bb:a1:54:f0:56:30:08:fb:6f:37:f2:bb:45:e7:fa:26:
         1d:c4:de:82:5d:da:19:fa:26:f6:10:68:87:32:c3:4f:f4:cf:
         4a:75:10:af:98:74:67:7f:87:1c:4c:65:44:3c:1c:d7:ea:fb:
         83:31:3f:3b:09:46:60:a4:47:64:8c:f0:9c:a4:c0:64:89:9e:
         3c:d8:01:55:6c:ed:0d:fb:76:e7:0c:62:d6:05:72:d7:04:d9:
         54:8c:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:18:10 2025 by rpki-client