This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft
File:                     3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft (raw, json)
Hash identifier:          nswzVAL4On8eBbBrBloOx2SyalnqIsApdBpI1/BDAL4=
Subject key identifier:   59:E7:14:97:AB:FE:36:85:34:B6:90:31:15:51:7E:C4:6B:A4:BF:3D
Authority key identifier: 3B:34:90:6C:A2:BE:71:1E:56:5A:DA:84:35:6D:DA:DC:6B:48:AA:3E
Certificate issuer:       /CN=3B34906CA2BE711E565ADA84356DDADC6B48AA3E
Certificate serial:       3B7334E6EE46BF2C6D2F9A401AD1D0472C68B49C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft
Manifest number:          05
Signing time:             Wed 10 Dec 2025 18:04:00 +0000
Manifest this update:     Wed 10 Dec 2025 17:58:59 +0000
Manifest next update:     Mon 15 Dec 2025 17:52:59 +0000
Files and hashes:         1: 3B34906CA2BE711E565ADA84356DDADC6B48AA3E.crl (hash: zYRpiUtPFYauYbjAPUBOV+yOGfgOzuV46OdZTpuHRdA=)
                          2: AS13999.roa (hash: 7WGrar3jo5h7JMf8YYBZqebqY/Pp/4W3kWPzcn+WRXg=)
                          3: AS28541.roa (hash: 2cBtWF+eAXo93bL98SXH6W7beb1XxxyXyLHqIv+1JR0=)
                          4: AS262916.roa (hash: 30qt0c7cj0qbK+E4Npx8y+5Y9fRMNAeetXqcFrwIYRg=)
                          5: AS28481.roa (hash: mkR7nvWjJ+bJ/k29EiyZFpsCaweL4LuwVfRsKTmeY3M=)
                          6: AS27672.roa (hash: rizYxCEPEtHcpvYhbTbVmNkgs20er3MDt4iW6EhEoTc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 08:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:73:34:e6:ee:46:bf:2c:6d:2f:9a:40:1a:d1:d0:47:2c:68:b4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B34906CA2BE711E565ADA84356DDADC6B48AA3E
        Validity
            Not Before: Dec 10 17:58:59 2025 GMT
            Not After : Dec 15 17:52:59 2025 GMT
        Subject: CN=59E71497ABFE368534B6903115517EC46BA4BF3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:15:72:2c:76:af:7a:49:6c:5c:22:71:a7:
                    f4:d3:be:e8:6d:7e:3f:70:7b:c4:08:6a:6a:4b:02:
                    60:5c:17:d1:80:0f:87:84:4b:d0:34:ab:09:79:d5:
                    b1:b5:24:37:ff:b8:6c:aa:26:c6:df:1f:8c:d5:ae:
                    f8:15:11:52:e7:3f:b9:11:ec:b2:18:fa:c0:d8:0d:
                    4f:94:57:0c:1e:57:79:52:3f:52:0c:2b:47:7e:81:
                    40:eb:6d:78:88:ee:79:1a:1c:17:fe:1e:4a:89:e2:
                    49:de:85:e6:47:3f:eb:6f:d9:94:0a:c1:4d:7c:0e:
                    8e:3c:3c:a4:4d:c7:05:2b:16:5c:40:7d:25:bd:0e:
                    3f:6a:4e:12:f5:4f:ac:63:42:5d:52:09:65:4b:e8:
                    65:5b:74:f5:f8:03:7e:3c:80:0f:e9:01:2f:d4:09:
                    c6:e3:2a:dd:39:cc:59:39:9e:ce:ae:ee:06:85:b9:
                    13:84:c5:0e:aa:b6:05:e8:63:50:1b:c2:a1:e0:32:
                    5e:ff:a1:e9:3a:13:7a:d4:5d:66:4d:7c:2d:1e:66:
                    26:a9:d0:26:32:74:fb:4a:9f:4a:9c:09:d2:a3:df:
                    9a:27:dd:85:a6:46:e3:72:6e:c6:ad:f7:43:57:7c:
                    0f:a9:b1:55:fe:dc:cc:d4:2b:6a:bd:6a:6d:aa:7e:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E7:14:97:AB:FE:36:85:34:B6:90:31:15:51:7E:C4:6B:A4:BF:3D
            X509v3 Authority Key Identifier:
                keyid:3B:34:90:6C:A2:BE:71:1E:56:5A:DA:84:35:6D:DA:DC:6B:48:AA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:99:57:cd:65:1f:ef:3a:35:1c:fc:4b:51:3f:c0:48:cc:b5:
         2d:cb:43:9b:09:4f:fb:29:90:90:f6:a3:11:1c:eb:21:d7:2e:
         e2:d0:c5:fc:d6:c6:5f:b7:4a:82:65:33:8f:e0:f2:1c:61:3c:
         79:0d:ea:78:15:23:05:87:29:86:9d:01:62:85:8d:13:28:5c:
         e1:54:60:00:8e:b9:90:f9:d9:38:af:45:d8:24:db:5b:20:f1:
         2d:10:5a:ab:39:de:8a:a3:b9:49:4f:20:0a:18:3d:49:03:2a:
         b3:9e:5c:95:d0:63:86:18:bc:0a:8e:3b:71:75:23:1a:03:b3:
         79:2d:70:a3:fa:ba:f5:5f:63:8a:b8:e3:98:52:b9:22:b5:b8:
         3f:4d:fe:c6:56:d6:38:6b:1e:44:03:38:f2:78:9f:6f:ff:b7:
         e1:b1:c4:ea:bd:0c:87:7c:eb:33:7d:18:3e:86:16:38:cd:ba:
         13:3d:01:c4:96:be:a7:a8:fb:97:16:bf:3f:ee:03:99:e4:54:
         7f:43:a3:74:2e:b3:5c:31:50:bd:38:45:72:0c:48:c7:d6:50:
         70:c2:a1:a4:18:22:58:f0:ae:37:eb:37:2f:e4:bc:01:66:c6:
         a5:08:3d:05:e5:fc:f5:81:8f:83:bc:04:32:66:b0:e9:e7:63:
         92:01:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----