This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
File:                     CD0CE589373B27C7377B95716717C42DB8B1FF08.mft (raw, json)
Hash identifier:          CzPgGX55sQdUj11D8iXh4OsQDlmm52CdeqxlSEf+ZeM=
Subject key identifier:   AF:3E:E4:B2:1B:F8:71:E5:CD:80:D8:6D:6F:C6:44:64:01:97:E1:AB
Authority key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
Certificate issuer:       /CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Certificate serial:       22E51C3C80491AB06D1F6192E0800CAEED0916E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
Manifest number:          014D
Signing time:             Sat 20 Dec 2025 21:37:21 +0000
Manifest this update:     Sat 20 Dec 2025 21:32:21 +0000
Manifest next update:     Fri 26 Dec 2025 17:06:21 +0000
Files and hashes:         1: 34352e3136372e31322e302f32322d3234203d3e20323635353334.roa (hash: CoSYKas4sI8Qf+u+dneG3qLNre6vdVMb/a87M2bDQ+k=)
                          2: 323830363a3331313a3a2f33322d3332203d3e203133393539.roa (hash: V1jTdiIClL8ktJS9JduEpU56fttDHqulLMyqE4LKRsw=)
                          3: 323830363a3331313a3a2f33322d3332203d3e20323635353334.roa (hash: TZOgNVMXbo3PDCnkRLxR0R9HhJ+AbqusAcdj3vgq7X8=)
                          4: 34352e3136372e31322e302f32322d3234203d3e203133393539.roa (hash: QSR5ZPL9FuneXJ7EHqO6U7y3Wi/iju9YvODDsaoP79o=)
                          5: CD0CE589373B27C7377B95716717C42DB8B1FF08.crl (hash: WtnuktHuIjkMpsV+aYbkda0WdEpdlO/+RdqewSrEp5k=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 02:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e5:1c:3c:80:49:1a:b0:6d:1f:61:92:e0:80:0c:ae:ed:09:16:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
        Validity
            Not Before: Dec 20 21:32:21 2025 GMT
            Not After : Dec 26 17:06:21 2025 GMT
        Subject: CN=AF3EE4B21BF871E5CD80D86D6FC644640197E1AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:9c:31:ca:24:c0:c2:66:ff:8f:51:a4:7c:
                    3e:81:ac:78:0e:57:44:37:af:de:da:12:17:20:9f:
                    1d:4c:bf:0b:b7:b1:3a:ea:64:e5:8b:c5:fb:8a:85:
                    27:e2:5c:96:84:f5:88:a6:09:bd:66:68:ba:0c:50:
                    e9:00:27:9a:cd:7b:36:ad:02:0c:c2:33:21:ad:a8:
                    c2:64:3c:d9:39:e4:aa:30:ce:28:01:eb:da:ab:b8:
                    cb:25:9f:79:e3:d7:f3:09:65:48:f1:76:36:14:1a:
                    7b:1b:4e:4e:aa:a0:61:a5:73:62:fb:81:02:b7:be:
                    a7:1d:26:18:36:71:95:48:30:ba:e9:14:aa:e7:11:
                    0c:da:5d:6f:f1:e1:e4:86:4e:56:1a:e2:f2:54:82:
                    1e:f1:ae:35:87:06:5e:ed:2f:f7:d7:f5:70:4a:c9:
                    5d:12:2e:08:40:58:74:be:96:c5:9d:09:a0:49:b7:
                    4c:72:88:48:ae:84:ae:ec:63:4e:ae:ec:c0:94:84:
                    ae:c2:42:9c:c2:37:42:4b:dd:6d:a2:b5:a0:8a:67:
                    7d:b0:5e:be:e2:fc:4c:c6:ee:78:64:1c:76:9a:10:
                    db:ad:67:c4:72:0b:09:5d:c1:2a:21:48:9e:92:53:
                    19:b9:54:c6:3c:be:49:3b:63:fa:ed:72:78:a9:e7:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3E:E4:B2:1B:F8:71:E5:CD:80:D8:6D:6F:C6:44:64:01:97:E1:AB
            X509v3 Authority Key Identifier:
                keyid:CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0c:91:9e:1e:62:34:a6:ee:02:74:5c:60:05:f6:e1:00:5d:
         fa:09:d1:76:69:b9:37:c8:62:b5:b0:8b:e7:1b:fb:ac:56:99:
         27:9e:21:f6:b4:99:2a:7a:b6:2e:6b:71:7b:81:55:b3:1a:ba:
         4b:6f:57:22:76:60:65:88:4d:2e:d7:b8:fe:3c:8b:0a:e4:8a:
         92:1a:1e:88:b7:57:11:f6:a8:a4:db:ce:47:2a:04:71:04:e1:
         a6:1a:55:2c:30:9a:92:fa:bb:5e:44:84:cb:d9:04:dd:a2:42:
         27:24:41:61:05:1e:ea:68:82:0a:26:3c:7d:f8:fa:99:c5:30:
         1d:58:2b:30:d1:05:f2:7c:0a:55:f8:4d:80:4c:d5:7a:3b:57:
         61:9e:e6:83:81:5b:76:bc:a2:dd:a1:e5:c8:bb:bf:cf:39:e1:
         d3:68:e4:87:b4:7b:90:1b:e1:f7:d2:8a:66:f9:14:2a:4c:9e:
         87:bd:33:19:9b:e6:05:08:d4:e9:7a:31:ea:54:b9:bf:a4:3c:
         f4:84:a3:61:27:2c:0f:c9:cd:ab:f7:0f:6d:96:0c:e2:2c:33:
         35:f7:d8:19:eb:24:3d:b0:46:8c:75:fe:a8:41:fe:bd:15:96:
         21:72:c9:35:c6:01:b4:f0:3f:52:2b:42:cd:f8:c0:78:de:35:
         8f:13:06:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----