This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.mft
File:                     3D5D41606E30358D02DDFE121E52934DFD96EEFE.mft (raw, json)
Hash identifier:          3+FVNBkwUqgiIcnhao9z0PfWBwXlNjP+H7KQGNk02F0=
Subject key identifier:   19:CE:67:9D:91:66:8D:27:7A:D2:0E:66:59:06:87:F5:8A:D8:DD:96
Authority key identifier: 3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE
Certificate issuer:       /CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE
Certificate serial:       117AFF45DCFBEBD97BA2C9D43238B176229EC141
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.mft
Manifest number:          0150
Signing time:             Fri 19 Dec 2025 09:30:17 +0000
Manifest this update:     Fri 19 Dec 2025 09:25:17 +0000
Manifest next update:     Wed 24 Dec 2025 21:26:17 +0000
Files and hashes:         1: 34352e3139302e31332e302f32342d3234203d3e20323639393334.roa (hash: 6DpoS2ub0Oe6jtzGJjfaNCWTx+fv8Cqw+0eeQNzkGT8=)
                          2: 3139302e38332e322e302f32332d3234203d3e20323639393334.roa (hash: K/V1hkTirrgJDCSsTqUKOKgHzBHij5lay4Lqrr5HEqI=)
                          3: 323830333a346165303a3a2f33322d3332203d3e20323639393334.roa (hash: hdgeGQDZMoqviQXyUQZ/mhR48rGyAhks5HnpEm8NInc=)
                          4: 3D5D41606E30358D02DDFE121E52934DFD96EEFE.crl (hash: WpJDlxt8HU8VAdrGW8M2tWyWg+DRxhbxpiOPDk+0N4Y=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 08:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7a:ff:45:dc:fb:eb:d9:7b:a2:c9:d4:32:38:b1:76:22:9e:c1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE
        Validity
            Not Before: Dec 19 09:25:17 2025 GMT
            Not After : Dec 24 21:26:17 2025 GMT
        Subject: CN=19CE679D91668D277AD20E66590687F58AD8DD96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:bc:32:2a:a8:a7:5c:cc:12:1e:0b:6d:21:
                    4a:06:d7:56:8f:65:a9:4f:38:9d:7f:bf:ea:9a:af:
                    9d:25:4d:50:9c:9f:83:a8:ce:75:da:5c:35:f0:73:
                    7b:ed:af:c7:05:58:df:3b:1f:33:35:fc:0e:27:a5:
                    8f:b7:ec:c8:fa:27:3c:a5:b8:16:8c:94:0d:6c:76:
                    47:07:0f:4d:35:dc:fc:2c:f1:8c:ec:2e:ca:c2:1a:
                    84:09:52:30:e1:af:d8:08:13:49:1d:68:a5:9e:cf:
                    76:db:0c:e1:20:d0:7b:4e:98:49:79:cb:2a:5b:eb:
                    62:e9:d4:a0:76:67:6a:87:ba:30:6a:87:29:9f:0b:
                    af:97:76:05:2b:ce:7b:1f:d8:d2:49:52:75:86:a1:
                    f3:de:7b:31:73:ee:03:9b:a0:42:84:f3:fb:9d:5f:
                    63:69:99:a0:61:ca:b8:1a:4a:01:f8:92:fe:c7:01:
                    d4:09:27:95:11:1c:8d:dd:94:12:34:8a:8f:ba:ba:
                    57:da:f4:49:1a:7a:da:7a:c9:c7:05:33:3b:c6:42:
                    32:60:5f:2b:a8:7f:33:d3:70:80:81:8d:3b:fa:4e:
                    b5:d1:23:74:c3:07:35:f3:58:5f:ff:39:9b:91:d0:
                    7c:64:26:b7:d2:f1:6f:2f:99:18:e1:64:e1:3e:27:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CE:67:9D:91:66:8D:27:7A:D2:0E:66:59:06:87:F5:8A:D8:DD:96
            X509v3 Authority Key Identifier:
                keyid:3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4f:a6:4d:6c:27:0b:1e:f0:26:82:ed:b0:3c:be:69:b3:16:
         19:e8:ab:4a:2a:07:fc:f9:c1:46:f0:d1:87:5a:6b:1b:71:56:
         5c:bc:f1:1a:47:c7:61:dc:b4:1f:b4:b2:86:fb:c9:f0:f3:9b:
         86:db:76:8a:c4:3d:88:99:5f:15:12:23:bd:38:96:1d:98:b5:
         fc:30:91:17:d8:6d:2b:0e:3d:88:64:7b:2c:da:97:9e:c8:89:
         fb:ee:a6:48:d0:5c:48:6e:50:e0:72:c6:f4:d2:70:76:02:ae:
         78:9a:9d:ab:c3:5c:c6:09:1b:db:db:42:a6:26:62:df:c9:3e:
         94:03:f3:3c:9a:75:db:a7:6d:f0:85:a5:6d:a2:57:8a:51:84:
         91:c1:e9:69:63:b3:12:1a:49:86:12:3d:fc:53:3f:c1:97:16:
         97:d0:01:38:df:a2:dc:8f:12:5e:85:bf:f7:ea:4e:5d:1b:dc:
         f9:c2:9a:31:b1:52:ab:46:72:5b:ee:18:47:14:f4:41:2e:d0:
         5f:34:9e:27:aa:84:af:6c:a0:ea:43:b9:14:bf:bf:d8:b9:29:
         9d:4a:8b:2b:23:fa:1f:11:5a:dd:48:5c:9f:db:0e:d5:a9:69:
         7d:32:29:17:37:cc:7c:70:22:45:b4:61:74:15:90:46:ca:d4:
         44:15:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:10:43 2025 by rpki-client