This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
File:                     3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft (raw, json)
Hash identifier:          vTGEX6skBli7sCYhmrv0Ktr4ocWpNILabk7n6ceDb5w=
Subject key identifier:   0D:74:4D:E2:72:60:57:DC:73:AA:59:AD:DA:07:2F:33:95:50:04:21
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       47287CC8878B84B963227E3304AF937D57FA1091
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
Manifest number:          0157
Signing time:             Sat 20 Dec 2025 13:07:06 +0000
Manifest this update:     Sat 20 Dec 2025 13:02:06 +0000
Manifest next update:     Thu 25 Dec 2025 09:05:06 +0000
Files and hashes:         1: 3230302e3130372e3139322e302f32312d3234203d3e203237383839.roa (hash: 730gQjHjMcLxx+gjo3WiRmB7xQ2XMPJc5Ey6FIeuuRU=)
                          2: 3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl (hash: nqfmCEH/4gc0Emhni19DmyDS3UpW4CXP8tLyYnxekDw=)
                          3: 3138312e33342e302e302f31352d3230203d3e203237383839.roa (hash: eXTF8wFJ5TpuKpu2ttMCp+YiWu31I3cndcqEwZLrJIU=)
                          4: 3138362e32362e3132382e302f31372d3230203d3e203237383839.roa (hash: uxsH05qS2B1QJ8hZ/Vx1eoRDDwA8kwIXknmq7Yj6ZMk=)
                          5: 3138312e31382e302e302f31352d3230203d3e203237383839.roa (hash: jTngqQUpo7n/YhFSsBURe77Iqp1YYNHl4Bftq/mc4TA=)
                          6: 3138312e31372e302e302f31362d3230203d3e203237383839.roa (hash: Vi16ATN8SVHmivds/lhRqAfILTCy/2WZGZZquP8REqM=)
                          7: 3138312e33342e302e302f31352d3135203d3e2038303438.roa (hash: +ZCEIDosudj77xcjy8Its0LjS6TKkk/QfHryMcjYQlA=)
                          8: 3138362e32362e302e302f31382d3230203d3e203237383839.roa (hash: 7vUn68SwvoPxAdtqXWu37FHNaWKvLWj5sfRTV7bgT1o=)
                          9: 3230312e3233382e302e302f31382d3234203d3e203237383839.roa (hash: 3THliZFI3hjXGW1flcxNUuPJOCVvAh7i5KZBGA0apD8=)
                          10: 323830303a3530303a3a2f33322d3438203d3e203237383839.roa (hash: yZ7A+3E9IIRiDRDR6ywByorkVI0oRAWOF24WdGH5zsQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 09:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:28:7c:c8:87:8b:84:b9:63:22:7e:33:04:af:93:7d:57:fa:10:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Dec 20 13:02:06 2025 GMT
            Not After : Dec 25 09:05:06 2025 GMT
        Subject: CN=0D744DE2726057DC73AA59ADDA072F3395500421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c0:fd:25:f0:4c:a8:f7:db:81:7a:3e:2e:9b:
                    ff:0e:a2:b7:4e:b8:1e:77:01:e2:ba:55:cd:c7:f2:
                    96:b1:0c:12:d8:fc:4a:29:4b:b0:c1:8d:37:d3:d8:
                    2b:df:d0:f0:76:7c:fa:34:b9:bb:0b:f2:1c:b2:98:
                    68:0d:6d:13:7a:6e:99:d2:c2:2f:13:33:52:a8:fc:
                    25:28:6d:2d:8f:ca:86:ca:2c:bc:47:b8:0d:29:1b:
                    f9:ac:37:7a:1a:28:97:dc:ef:88:f6:61:f0:30:5a:
                    ec:e3:63:4b:f9:58:38:59:37:dc:3a:39:db:0e:3e:
                    75:46:06:08:df:ff:bc:4f:b6:41:dc:cd:61:86:99:
                    a3:73:25:16:bb:71:2d:f9:e5:f2:09:c8:bd:84:af:
                    3f:68:99:62:53:89:87:be:d0:fb:52:75:aa:19:fc:
                    e1:32:51:06:1c:82:3f:cf:7d:6a:28:f8:05:cf:a4:
                    64:3c:98:62:15:17:51:91:f9:f2:cd:b5:f0:e2:76:
                    cb:24:57:91:5e:8a:e9:e7:c5:ea:37:1c:79:f8:90:
                    6b:93:83:eb:b2:6f:63:a2:42:d0:3c:09:f3:60:0a:
                    f9:da:4d:79:cb:d1:65:49:90:89:28:b7:22:78:6b:
                    a5:e6:ef:92:77:54:26:bc:17:fe:02:91:72:a3:48:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:74:4D:E2:72:60:57:DC:73:AA:59:AD:DA:07:2F:33:95:50:04:21
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7d:40:c8:67:20:35:14:1b:d9:a2:cf:6c:13:65:7b:c1:ca:
         70:73:ab:03:94:b9:3a:23:17:ed:1c:38:85:bb:d5:a3:da:60:
         a2:88:29:cd:3e:77:34:b9:49:0c:90:12:eb:a3:d8:b8:c8:e7:
         f1:29:a0:4d:85:c8:25:19:9c:39:8f:71:e8:aa:10:df:32:d7:
         9b:19:08:7a:a0:7a:7b:6f:7b:af:d6:eb:03:58:70:3a:8b:a7:
         c7:4f:7c:14:88:2a:d9:e8:c6:e3:8f:8f:6b:72:bd:52:73:58:
         6e:d1:78:07:95:3d:42:1c:c3:44:61:a3:51:f3:84:5e:71:3a:
         4e:8b:bf:fd:78:f9:88:a1:9c:7b:b1:ff:90:cc:fb:a1:27:eb:
         b3:08:f9:99:b0:72:2e:14:e5:06:72:5f:5b:52:0c:0a:20:a0:
         30:cc:b1:2c:24:64:9f:3d:84:b9:9c:15:66:51:5d:c0:b3:13:
         92:5e:a4:f0:de:cd:9b:3e:3d:8a:27:84:7a:1d:be:87:75:b2:
         2f:e7:4b:0e:22:c2:61:0a:06:32:01:c2:91:c9:7d:41:13:94:
         cc:54:be:4e:c7:3c:8a:25:a7:35:81:6d:f1:d8:90:be:96:e5:
         46:c0:b1:58:4f:ec:02:a3:d8:9b:d0:1d:d8:10:ce:af:4c:9c:
         6d:dd:e3:a5
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIURyh8yIeLhLljIn4zBK+TfVf6EJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QyQzA2NUM5NzRFNzAwQjEzNjlFREY0QURCRTFCRDEx
MjcyQjA5QTAeFw0yNTEyMjAxMzAyMDZaFw0yNTEyMjUwOTA1MDZaMDMxMTAvBgNV
BAMTKDBENzQ0REUyNzI2MDU3REM3M0FBNTlBRERBMDcyRjMzOTU1MDA0MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTwP0l8Eyo99uBej4um/8OordO
uB53AeK6Vc3H8paxDBLY/EopS7DBjTfT2Cvf0PB2fPo0ubsL8hyymGgNbRN6bpnS
wi8TM1Ko/CUobS2PyobKLLxHuA0pG/msN3oaKJfc74j2YfAwWuzjY0v5WDhZN9w6
OdsOPnVGBgjf/7xPtkHczWGGmaNzJRa7cS355fIJyL2Erz9omWJTiYe+0PtSdaoZ
/OEyUQYcgj/PfWoo+AXPpGQ8mGIVF1GR+fLNtfDidsskV5Feiunnxeo3HHn4kGuT
g+uyb2OiQtA8CfNgCvnaTXnL0WVJkIkotyJ4a6Xm75J3VCa8F/4CkXKjSLUxAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUDXRN4nJgV9xzqlmt2gcvM5VQBCEwHwYDVR0j
BBgwFoAUPSwGXJdOcAsTae30rb4b0RJysJowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjE3NDg3OEY2NUMzMDk5REVFMjZFQTI5NjUxODVERDJD
MDEwMTUzQzVEQzM0MzcyM0I1MEE0MDYwQThBMEVBLzAvM0QyQzA2NUM5NzRFNzAw
QjEzNjlFREY0QURCRTFCRDExMjcyQjA5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDJDMDY1Qzk3NEU3MDBCMTM2
OUVERjRBREJFMUJEMTEyNzJCMDlBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUYxNzQ4NzhGNjVDMzA5OURFRTI2RUEyOTY1MTg1REQyQzAxMDE1M0M1
REMzNDM3MjNCNTBBNDA2MEE4QTBFQS8wLzNEMkMwNjVDOTc0RTcwMEIxMzY5RURG
NEFEQkUxQkQxMTI3MkIwOUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPfUDIZyA1FBvZos9sE2V7wcpw
c6sDlLk6IxftHDiFu9Wj2mCiiCnNPnc0uUkMkBLro9i4yOfxKaBNhcglGZw5j3Ho
qhDfMtebGQh6oHp7b3uv1usDWHA6i6fHT3wUiCrZ6Mbjj49rcr1Sc1hu0XgHlT1C
HMNEYaNR84RecTpOi7/9ePmIoZx7sf+QzPuhJ+uzCPmZsHIuFOUGcl9bUgwKIKAw
zLEsJGSfPYS5nBVmUV3AsxOSXqTw3s2bPj2KJ4R6Hb6HdbIv50sOIsJhCgYyAcKR
yX1BE5TMVL5OxzyKJac1gW3x2JC+luVGwLFYT+wCo9ib0B3YEM6vTJxt3eOl
-----END CERTIFICATE-----
Generated at Sun Dec 21 17:55:12 2025 by rpki-client