This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
File:                     2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json)
Hash identifier:          2KSTGficTt87kqa2JjW141qI/hLppdUPmtqsN1kjJ84=
Subject key identifier:   21:70:8F:65:85:6A:5E:70:F7:88:C3:1F:08:F3:F8:48:91:C5:15:8E
Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
Certificate issuer:       /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Certificate serial:       3949483D27952910B194739E0E321449D3C6B049
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
Manifest number:          0146
Signing time:             Sun 21 Dec 2025 09:09:46 +0000
Manifest this update:     Sun 21 Dec 2025 09:04:46 +0000
Manifest next update:     Fri 26 Dec 2025 17:00:46 +0000
Files and hashes:         1: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: CULaGvMOiC1S1Hsckhk4NQ1sFXwzk/ZlivUrv91+tu0=)
                          2: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: kvXq/7xFBcYihjCboY6sXmggXJS5RFgBzNm9B4FD6Yk=)
                          3: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: g6DNKjZekU2uDpQLAA16qySYRWAhC+pOHrCuJlds2qw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 17:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:49:48:3d:27:95:29:10:b1:94:73:9e:0e:32:14:49:d3:c6:b0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
        Validity
            Not Before: Dec 21 09:04:46 2025 GMT
            Not After : Dec 26 17:00:46 2025 GMT
        Subject: CN=21708F65856A5E70F788C31F08F3F84891C5158E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:ba:d4:f7:c0:33:20:01:dc:a2:88:6c:52:
                    a4:0e:cb:56:d6:cb:e2:e1:51:97:81:69:89:39:fd:
                    65:ee:b8:3a:3b:5f:56:ec:8b:a6:14:af:2b:13:a0:
                    c6:7b:b8:ca:62:40:bd:cc:db:c8:3f:a1:7b:9d:0e:
                    54:9f:94:c8:de:3f:16:f8:8a:26:cc:0f:f4:8e:3d:
                    32:7e:43:ee:d2:29:33:d2:d0:c4:14:33:51:ab:f3:
                    44:c4:46:cb:88:e4:5b:4c:b3:e5:8a:ab:bc:ec:8c:
                    07:8a:37:55:42:25:40:d4:14:a1:8b:aa:21:25:eb:
                    0d:46:0e:6e:1b:62:52:9e:96:c4:98:56:05:b5:c9:
                    6b:cc:96:be:24:ba:26:d0:16:cb:69:49:b2:1e:f3:
                    67:31:b4:b8:cd:35:5f:cb:c0:cf:a1:f2:d5:0c:0e:
                    18:8b:12:2e:e8:a8:d8:93:b7:11:7f:18:8b:d9:05:
                    6c:95:cf:de:23:8c:29:fb:78:5e:9b:ed:77:db:32:
                    b6:99:2d:0f:88:23:a3:90:56:da:42:43:3e:33:e2:
                    0e:38:55:bd:af:7c:55:62:b9:a4:38:2c:31:a4:65:
                    32:1d:5d:cc:73:28:ec:1d:6c:80:af:38:7d:7d:fc:
                    70:0f:72:65:4d:8a:d5:3c:d6:28:34:63:a0:13:06:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:70:8F:65:85:6A:5E:70:F7:88:C3:1F:08:F3:F8:48:91:C5:15:8E
            X509v3 Authority Key Identifier:
                keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:9d:1a:d4:e3:2e:ea:3e:d4:93:a6:37:98:e2:0c:6d:58:f9:
         06:c1:ed:86:cf:ab:62:be:95:c8:04:9f:31:b4:8c:2f:0e:f1:
         2a:d8:08:4e:40:28:cf:67:9d:b1:98:7b:ac:76:59:b7:6f:3c:
         58:47:1e:73:9d:55:76:ad:0b:67:83:51:4d:c0:58:e0:39:e6:
         02:48:99:e2:79:f2:90:7e:0b:8f:88:f7:86:af:ac:c7:a0:5a:
         60:79:5a:08:3d:3f:34:57:c2:be:56:23:f8:2c:22:aa:f3:f9:
         65:7d:45:26:2e:66:6f:26:d7:aa:0a:cb:7f:c3:ca:11:1d:16:
         b0:87:f6:49:07:87:04:f8:78:c2:37:82:18:27:e3:43:eb:a8:
         1f:3a:47:de:83:c9:a6:0d:71:00:ca:00:a7:b0:4f:1b:95:aa:
         4e:5a:b2:bf:ca:43:1e:a3:97:2a:34:32:74:dd:18:88:97:48:
         df:0e:71:70:22:0c:7b:9c:6e:60:0c:2c:e4:08:0a:43:67:7b:
         6b:84:2a:58:04:a4:7e:ac:13:83:76:57:ea:d5:f9:82:44:05:
         fb:e5:df:7e:aa:4d:39:d2:02:06:8b:93:b1:64:95:d2:75:e1:
         da:cf:c0:63:fe:b3:ba:14:08:57:5d:11:f8:fa:5e:cc:44:4d:
         4f:38:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----