This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.mft
File:                     3A2E414DFFAF888C3670046DD819856FE5330921.mft (raw, json)
Hash identifier:          GX2uOhTAhPITEf01Smv5BQc+3WF67+FtEG0nfLgnHr4=
Subject key identifier:   AB:7D:30:F0:ED:DC:B7:1A:C2:AE:1B:11:61:55:35:DD:5D:69:00:E1
Authority key identifier: 3A:2E:41:4D:FF:AF:88:8C:36:70:04:6D:D8:19:85:6F:E5:33:09:21
Certificate issuer:       /CN=3A2E414DFFAF888C3670046DD819856FE5330921
Certificate serial:       3BC369AB72FC7AE5E5C8DD9F9A056E6EC2A6A142
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.mft
Manifest number:          0156
Signing time:             Tue 09 Dec 2025 21:01:39 +0000
Manifest this update:     Tue 09 Dec 2025 20:56:39 +0000
Manifest next update:     Mon 15 Dec 2025 18:33:39 +0000
Files and hashes:         1: 34352e3136342e3233312e302f32342d3234203d3e20323634373734.roa (hash: mGUBhifSaxYMIkhw0BSKGnOs+jZygw87SZqRsYiizT0=)
                          2: 34352e3136342e3232392e302f32342d3234203d3e20323637373036.roa (hash: 1EzhEvOzKoWPEniPOGZbHkMROdqTQT6lJeK7Zcuv/EE=)
                          3: 34352e3136342e3233302e302f32342d3234203d3e20323637373036.roa (hash: uxtKLJqqjpo2VaO6z3rhsdjYGkMRXTiyNrHbB6p3D5Y=)
                          4: 34352e3136342e3232382e302f32332d3234203d3e20323637373036.roa (hash: K0ADn3kWuo4FItRJLQ+QUVURknH7P362deqB6g21JLo=)
                          5: 3A2E414DFFAF888C3670046DD819856FE5330921.crl (hash: kLZEyf9g304waxN7BuOUKvy4ycaeuXA7yV469ZEdh50=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.crl
                          rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Dec 2025 21:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c3:69:ab:72:fc:7a:e5:e5:c8:dd:9f:9a:05:6e:6e:c2:a6:a1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2E414DFFAF888C3670046DD819856FE5330921
        Validity
            Not Before: Dec  9 20:56:39 2025 GMT
            Not After : Dec 15 18:33:39 2025 GMT
        Subject: CN=AB7D30F0EDDCB71AC2AE1B11615535DD5D6900E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:8a:0f:93:b7:93:c1:6e:a2:1e:77:61:77:
                    be:dc:1f:cf:1e:e8:a6:2a:6f:ec:16:b4:9e:f6:0c:
                    c7:1f:67:bb:22:d1:ad:2a:9b:84:a9:8c:21:56:60:
                    3c:44:f4:98:47:b9:df:3a:fb:80:f1:7a:5d:f5:65:
                    e0:fb:8a:ff:78:b1:46:2d:7c:c4:86:0a:4c:df:44:
                    fb:c6:8f:a7:81:50:24:d7:67:df:9e:51:6f:c1:2e:
                    ce:c3:0b:93:e2:c8:28:6d:12:7e:5a:42:0c:5d:1b:
                    cf:f9:13:a9:b4:59:bb:5a:7e:f6:dd:c7:b7:65:1e:
                    b2:0f:47:e6:08:8f:8c:a9:66:2d:ae:1c:b5:5f:95:
                    da:c0:1e:e5:1f:16:c1:24:15:db:28:1b:b4:26:25:
                    12:85:d0:07:f8:82:44:65:dc:39:74:25:2d:a6:36:
                    03:73:3b:d2:c7:38:fa:5f:a3:5a:52:37:0f:61:33:
                    a5:85:9e:d6:8a:be:25:0a:d5:3a:f5:c6:5e:7a:3e:
                    19:5c:d4:ea:1f:fb:46:77:ee:38:ea:27:8a:1f:c9:
                    68:5f:89:9b:41:91:bc:dd:01:23:c4:bc:b8:03:1b:
                    5a:86:50:1b:56:9c:3e:37:ed:fa:46:7d:f1:75:63:
                    12:14:ba:9d:b8:dd:f7:43:64:d9:24:45:58:9c:50:
                    4c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7D:30:F0:ED:DC:B7:1A:C2:AE:1B:11:61:55:35:DD:5D:69:00:E1
            X509v3 Authority Key Identifier:
                keyid:3A:2E:41:4D:FF:AF:88:8C:36:70:04:6D:D8:19:85:6F:E5:33:09:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:da:10:40:78:74:91:58:09:c6:d4:c6:f9:5d:b2:7d:df:88:
         c1:0b:05:14:ab:28:db:e7:50:8b:0c:fc:5b:87:ce:9e:19:94:
         6b:e2:d6:33:92:2b:e8:71:67:2f:fe:cd:b6:80:27:b1:97:24:
         32:b0:9a:80:e6:2b:1a:61:df:ce:d9:b7:7d:69:42:03:11:e5:
         cc:32:a5:b9:f8:a9:16:bc:eb:14:8d:51:c0:91:02:37:ea:1d:
         22:c7:66:e1:39:3f:83:26:8b:a8:ad:19:a2:38:33:df:d6:cb:
         c8:35:30:f5:55:22:2f:b2:fe:14:ba:0e:27:21:b9:58:9a:6f:
         a7:97:94:a6:91:f7:e6:29:b5:18:1c:bc:a8:16:3f:c4:26:23:
         e8:12:d9:ea:7f:45:d4:cc:00:66:56:bb:27:fd:f2:78:45:f9:
         c6:c8:a6:ac:9f:22:dc:d1:62:a5:ee:a6:a1:74:37:ad:70:66:
         38:0e:91:1a:06:42:c5:e6:09:f8:3e:37:77:55:00:e8:f2:3b:
         69:a0:6b:41:96:13:31:a7:fd:2c:8a:f5:a4:c1:42:20:08:dd:
         02:00:8b:5b:31:60:fd:26:c6:a4:5f:cc:ff:3f:a7:e4:58:2e:
         5e:7b:12:be:86:26:04:73:d6:09:b6:ad:29:a2:e7:07:2c:86:
         51:7c:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:38:52 2025 by rpki-client