This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
File:                     35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft (raw, json)
Hash identifier:          6ulOiTnZBy+tbOZUcLNscW5QNVWxabDju3Zp2I2aQec=
Subject key identifier:   07:25:4E:7A:79:F3:D1:BD:69:C7:6C:75:C7:E7:00:A6:7D:B4:86:BF
Authority key identifier: 35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
Certificate issuer:       /CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Certificate serial:       2DB588A309E4E2A3A7A1CFB164C6D9EB8AF4FE02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
Manifest number:          0145
Signing time:             Sun 07 Dec 2025 16:40:23 +0000
Manifest this update:     Sun 07 Dec 2025 16:35:23 +0000
Manifest next update:     Sat 13 Dec 2025 10:15:23 +0000
Files and hashes:         1: 35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl (hash: QAJUVtE7b5HhqSXC5tc/VNLdFf0lEKhN0hMMzLz6fvM=)
                          2: 3230302e31342e36332e302f32342d3234203d3e20323731383935.roa (hash: R/xlQioDY89XcDeeG5I0NudslmN4l6JszCL8g4ImE1w=)
                          3: 3230302e31342e36322e302f32342d3234203d3e20323731383934.roa (hash: +uBzTORbQf53oDCI78NsvBd//pCTklRu2qH9JmQll10=)
                          4: 3230302e31342e36312e302f32342d3234203d3e20323731383933.roa (hash: tBHwKNBqu8izLIAZtsYF9Sv3+6hDKWBOzuv5AFnbq0s=)
                          5: 3230302e31342e36302e302f32342d3234203d3e20323639393633.roa (hash: McTQN/gzt40lO4XLEn/bnLDx+L42Yp/wvNHlFn+nfiA=)
                          6: 323830313a31383a323830303a3a2f34382d3438203d3e20323639393633.roa (hash: iHmUij6tGAnaB8sGgGBn4Tc6WTxYiLVE8QxsUg/ECUk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Dec 2025 10:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b5:88:a3:09:e4:e2:a3:a7:a1:cf:b1:64:c6:d9:eb:8a:f4:fe:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
        Validity
            Not Before: Dec  7 16:35:23 2025 GMT
            Not After : Dec 13 10:15:23 2025 GMT
        Subject: CN=07254E7A79F3D1BD69C76C75C7E700A67DB486BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:67:4e:16:6c:bb:a3:49:94:1e:c6:36:08:
                    18:17:c2:d1:48:55:13:05:f1:ff:46:2b:79:45:44:
                    8f:f5:64:67:a7:62:f7:51:ef:b0:47:c2:e6:02:01:
                    bb:1d:55:a6:53:e4:a5:84:c1:6f:d0:0d:c7:f4:e6:
                    8e:de:3e:d0:fd:7c:6e:0a:ab:e7:e8:aa:d0:92:bb:
                    c3:57:2f:e6:76:37:86:9f:c4:92:ab:1a:d5:39:2a:
                    cf:40:3f:15:9a:93:9a:e3:22:91:a9:d2:09:bc:db:
                    35:fa:cd:82:2d:e5:2b:fa:9b:02:f5:13:06:cc:eb:
                    8d:6b:51:7f:10:8d:db:57:4b:18:c2:2b:8d:ae:c0:
                    99:e3:a9:1e:d0:19:35:5b:74:36:f0:69:7d:0a:70:
                    3c:fc:2e:e6:fa:95:68:b6:73:56:77:35:bb:65:09:
                    29:a8:14:75:a0:8e:a3:f4:e6:41:f4:9e:1c:2e:86:
                    0b:af:ab:69:9f:07:ee:0a:f1:35:75:29:28:b6:cb:
                    c5:6c:56:44:1b:f9:da:2b:a3:17:34:24:93:45:38:
                    b9:65:ba:f7:32:90:f4:41:19:dc:9c:f8:5c:6a:92:
                    12:f3:40:cc:75:c5:c1:ca:dc:e3:09:fe:29:50:c8:
                    35:0f:d6:81:2b:9a:2e:7c:3f:f1:55:35:23:27:45:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:25:4E:7A:79:F3:D1:BD:69:C7:6C:75:C7:E7:00:A6:7D:B4:86:BF
            X509v3 Authority Key Identifier:
                keyid:35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2f:7f:90:57:cf:ed:92:b1:72:91:15:29:f2:28:51:74:27:
         09:41:d6:cf:e8:77:5c:18:62:cb:23:be:49:50:a2:1f:2c:e8:
         b9:bb:6a:79:39:9d:14:5e:41:40:c9:8d:39:00:b2:a7:02:86:
         1d:07:b1:99:78:a2:9f:f0:6d:b6:88:02:ae:d2:d5:95:6b:37:
         14:b3:e7:95:b2:a8:f4:c8:9f:1b:e3:0a:7c:95:f4:cb:05:2d:
         9f:61:31:06:57:8f:a8:89:69:2c:ab:8d:ec:c1:ab:01:33:9d:
         a6:2c:04:91:af:cc:a6:fa:72:c5:f9:da:50:4d:5c:d7:7d:1d:
         b3:3a:e3:6d:ec:bf:61:99:22:57:7a:fc:11:21:ba:4a:65:c2:
         d1:cc:80:2c:29:8b:5b:b1:77:63:0d:e9:5a:63:ef:da:65:53:
         c1:b9:4d:01:e1:5f:70:df:46:b8:2e:ae:79:60:11:15:27:ed:
         5d:76:59:4e:02:0c:87:23:9d:1a:04:a7:4c:62:92:73:bd:4b:
         55:bb:ac:13:2b:10:67:2a:37:77:bc:96:ca:3a:59:9d:29:c3:
         33:ab:e0:60:c5:c9:ac:4b:30:b5:6a:9e:89:1d:df:b9:44:df:
         66:e6:5b:59:5e:5c:4a:2d:e1:2e:5a:2d:a5:98:f3:b7:73:b8:
         59:93:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:33:20 2025 by rpki-client