This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
File:                     C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft (raw, json)
Hash identifier:          bOSaL0ixWtjxvPyn8UUDcloJ+gBVrmFGeJG44aBT1nI=
Subject key identifier:   30:04:31:72:FA:28:5E:0D:8C:44:34:3C:F1:96:14:E4:B7:DC:5B:2E
Authority key identifier: C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF
Certificate issuer:       /CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
Certificate serial:       21601D7B859F020DF8D8B89AE0799847B75ACCF0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
Manifest number:          0149
Signing time:             Fri 19 Dec 2025 19:41:06 +0000
Manifest this update:     Fri 19 Dec 2025 19:36:06 +0000
Manifest next update:     Wed 24 Dec 2025 12:04:06 +0000
Files and hashes:         1: 323830333a333434303a393030303a3a2f34382d3438203d3e203634313132.roa (hash: V7n4FXN4L3J5kh7lABWze2fn37QlBCMnaMh8CjJqJvc=)
                          2: 323830333a333434303a3a2f33322d3332203d3e20323633373834.roa (hash: Sd13uHInc4Kn+ubo/KQHDM+MBZQVef5heXe9wUkNSNo=)
                          3: 323830333a333434303a393030313a3a2f34382d3438203d3e203634313132.roa (hash: ZY91kikjds994GmzBVdh/W5VZAapWlEjjsLEXi574DM=)
                          4: 323830333a333434303a393030363a3a2f34382d3438203d3e203634313132.roa (hash: SZi3B6s1w4luZu3sk9CEk1h0desN8c3+v7Kvma0Udz4=)
                          5: 323830333a333434303a393031323a3a2f34382d3438203d3e203634313132.roa (hash: lenTQKaiZJy1FHKI+0uFwhOeT4uRsj/EbthSQGOZ618=)
                          6: 3137302e3234372e39322e302f32322d3232203d3e20323633373834.roa (hash: 4ZC9sWKl3SJ9srIc361WQ1C5vGr6rRKPE75nzUGmrvM=)
                          7: 323830333a333434303a393030323a3a2f34382d3438203d3e203634313132.roa (hash: 8BEZMdi5+G2ggJUl5ar/PATm9j6rD14pFavUqHoiqTc=)
                          8: 3133382e3132312e39362e302f32322d3232203d3e20323633373834.roa (hash: mqeH2u0V4t+J8Rg1NVx/ykSe9H/qEra1aAuOhDFlmwg=)
                          9: 323830333a333434303a393030303a3a2f34302d3430203d3e203634313132.roa (hash: T6xOAkdiQFAVAyZSSyLQUJoeY1m5i65rc5WsP5eWWT8=)
                          10: 3137302e3234372e39322e302f32322d3234203d3e203634313132.roa (hash: VuMxrP9hzPKayt96VuJ85skcmP3kUvHGM2MZUNOD/yg=)
                          11: 323830333a333434303a393030333a3a2f34382d3438203d3e203634313132.roa (hash: XQG6rS2ntijKoJYLSF5FNhJqq01F5zhtdvFhKb9WwD0=)
                          12: C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl (hash: KBqsMMvXwHadDe1oNRr2ThkKQUaa3sbjp8KgiC+Q6PY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 12:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:60:1d:7b:85:9f:02:0d:f8:d8:b8:9a:e0:79:98:47:b7:5a:cc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
        Validity
            Not Before: Dec 19 19:36:06 2025 GMT
            Not After : Dec 24 12:04:06 2025 GMT
        Subject: CN=30043172FA285E0D8C44343CF19614E4B7DC5B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8f:a6:7f:a2:f4:af:55:7b:ec:8e:e2:c9:e6:
                    e9:27:cc:17:7b:ee:01:af:d7:6c:16:69:4b:79:e1:
                    0e:2c:0a:f6:65:3a:6a:02:42:0c:98:80:15:40:d9:
                    e8:7e:2e:df:4e:ac:3e:12:41:d0:fa:f1:c3:4c:ba:
                    65:58:b6:76:c1:f5:97:82:d4:e4:d9:81:6b:7b:61:
                    db:b5:ac:24:6f:da:6a:44:b2:44:5d:fe:64:70:ba:
                    a9:73:71:4f:a6:47:17:a3:77:57:29:bb:b0:62:32:
                    40:d6:01:f6:8e:1e:8b:00:0f:62:be:47:d3:89:a4:
                    e3:00:bd:8c:4b:db:63:3e:82:fc:db:03:df:ae:1b:
                    39:e1:ee:24:18:11:dd:0a:c1:d7:e8:14:4b:96:45:
                    f8:89:1a:40:40:67:aa:5f:b5:43:dd:b6:6c:32:05:
                    5f:8e:5d:ad:fe:76:c4:11:6f:e2:3c:7b:90:e0:e6:
                    3a:87:ec:18:73:87:c5:cb:14:50:e7:8e:f4:91:15:
                    43:ba:c4:9b:c5:cb:f7:db:31:f0:0e:5a:71:c4:ac:
                    0a:eb:14:73:0f:ec:7a:16:26:3f:f1:b5:34:a7:05:
                    52:5b:45:f7:78:dc:12:dc:69:6d:fd:3e:8e:5f:38:
                    5a:b3:fc:de:87:a9:d2:68:fe:c2:f5:4a:dc:25:f3:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:04:31:72:FA:28:5E:0D:8C:44:34:3C:F1:96:14:E4:B7:DC:5B:2E
            X509v3 Authority Key Identifier:
                keyid:C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:0b:9f:a0:99:82:e7:3b:9b:09:d3:d6:06:02:78:fb:7b:51:
         24:3c:14:10:31:2f:a9:5f:f4:ad:19:33:c4:bd:d2:c7:ee:de:
         58:71:2c:7f:0e:85:b4:72:28:e6:32:85:f4:6f:9f:5d:42:a4:
         cb:be:dc:4e:2f:f1:4f:36:b0:76:12:3b:24:d5:24:5c:82:21:
         f3:b0:94:b1:2c:95:f0:44:ff:a9:50:06:c7:2f:a3:dc:d6:f2:
         fa:b8:e4:f1:2b:38:2a:af:07:b8:fc:a7:ab:7c:72:00:54:6b:
         7a:88:3d:5a:3d:53:c0:35:74:9f:42:16:07:ab:65:10:92:c5:
         e4:92:a9:b2:c9:ba:7a:8a:43:74:be:db:88:e3:b1:b2:f3:74:
         41:2d:1b:ce:8a:ab:c5:96:ff:32:49:cc:14:34:d5:6d:44:90:
         b7:b9:77:55:bb:bd:c2:77:c3:f2:eb:ca:76:42:67:7f:d7:f8:
         44:07:13:fd:20:dd:20:90:49:9f:9a:bc:2b:83:b7:0c:76:65:
         d0:03:cf:5d:e1:ee:97:d8:b0:0b:53:a8:59:ac:72:e8:9f:63:
         6e:cf:a7:4e:cc:65:91:d8:12:eb:4b:77:b2:72:3b:73:2d:f1:
         47:de:f7:81:d6:bb:0c:9a:15:c8:c8:60:d5:8b:24:01:45:ee:
         a3:d4:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:19:29 2025 by rpki-client