This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.mft
File:                     6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.mft (raw, json)
Hash identifier:          ADAa1bu29vwnEkHPWn3s3Bhnim6cfQPGk/l+d1BVVao=
Subject key identifier:   DC:F0:AE:A3:36:A5:72:D4:0C:E4:EA:83:42:57:BE:88:95:15:49:07
Authority key identifier: 6B:38:B8:C5:3E:C1:C9:8F:73:63:65:5F:62:F1:AD:6C:C7:E6:71:7D
Certificate issuer:       /CN=6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D
Certificate serial:       31C4918669E3710323F4D1BFE9A0276E90F8A117
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.mft
Manifest number:          35
Signing time:             Tue 09 Dec 2025 01:54:40 +0000
Manifest this update:     Tue 09 Dec 2025 01:49:40 +0000
Manifest next update:     Sat 13 Dec 2025 14:23:40 +0000
Files and hashes:         1: 323830333a376564303a3a2f33322d3438203d3e20323734313233.roa (hash: mmorgycZuVptE0GRCVCRHDnoXUDlcjCodGhtwUTKStw=)
                          2: 6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.crl (hash: UG/Y1OeH18PM2an3N0SD8iSdiW60hFbEiskUtYDy3XU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Dec 2025 14:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c4:91:86:69:e3:71:03:23:f4:d1:bf:e9:a0:27:6e:90:f8:a1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D
        Validity
            Not Before: Dec  9 01:49:40 2025 GMT
            Not After : Dec 13 14:23:40 2025 GMT
        Subject: CN=DCF0AEA336A572D40CE4EA834257BE8895154907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:81:37:1f:76:37:68:3a:4f:bc:06:d9:b6:
                    97:69:05:4e:55:37:4c:20:2d:cf:21:f2:27:a6:86:
                    fd:e4:41:43:13:b7:0c:f6:7d:35:f1:d3:4a:ed:a5:
                    63:75:b1:15:d3:e5:5e:4a:de:da:4c:32:7b:ee:5d:
                    3b:36:34:7e:5d:ff:79:61:c7:2d:28:e2:9f:68:af:
                    f8:75:84:dc:a5:fe:49:da:9f:5e:dc:06:7a:ca:e9:
                    e8:60:7b:df:53:af:ee:18:9b:02:ce:03:b4:36:4a:
                    7a:8f:6b:de:42:f0:2b:70:a5:70:82:32:a4:29:1f:
                    da:41:bd:f7:97:2b:02:0b:00:2d:41:68:4d:a1:f2:
                    2e:59:da:aa:8a:9a:50:de:8e:30:88:63:ca:43:c8:
                    45:d6:3e:c2:ad:13:e4:06:0d:e9:a9:aa:a3:36:b4:
                    31:94:09:0d:ef:08:47:2d:d4:48:bc:58:91:3b:05:
                    a2:55:67:f4:7d:c4:cd:c3:2f:f2:74:0d:a2:fd:b6:
                    5d:48:ce:d4:30:40:d9:49:29:65:7d:87:28:96:b7:
                    14:f4:b0:5a:03:4a:31:f5:ad:ce:78:ec:e9:32:03:
                    49:94:12:64:e2:4e:2d:31:4e:1d:de:b6:a1:4b:2c:
                    c0:16:d8:c7:5a:de:84:2c:a5:2b:80:93:be:96:1e:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F0:AE:A3:36:A5:72:D4:0C:E4:EA:83:42:57:BE:88:95:15:49:07
            X509v3 Authority Key Identifier:
                keyid:6B:38:B8:C5:3E:C1:C9:8F:73:63:65:5F:62:F1:AD:6C:C7:E6:71:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4c:9e:b5:27:65:6a:ef:07:44:d8:19:8e:21:ad:eb:2c:b4:
         d5:1c:bc:8a:71:91:1e:e8:c8:26:51:9b:8d:8e:7e:2c:bf:58:
         a9:b6:d7:cb:18:45:e3:b8:84:2e:be:77:39:4d:82:f2:04:29:
         70:49:3c:bc:2a:d8:26:46:f4:89:d2:96:76:79:51:ed:a9:c0:
         f6:fa:d1:d8:bc:00:ac:95:40:cd:91:5d:22:fa:d0:89:1c:47:
         f6:41:1c:6d:bc:75:00:69:fa:4f:f2:cc:24:d1:f4:31:4f:68:
         8b:77:df:57:2f:a3:e2:9b:af:89:ec:dc:66:55:17:7e:f0:b1:
         cd:27:92:22:ee:08:c8:26:bd:be:15:f6:b8:55:01:c3:61:ee:
         9f:a3:e0:9e:30:14:38:29:56:18:a5:8c:8c:79:b8:8c:f8:db:
         9c:e8:a4:45:58:1f:39:a2:06:df:f8:8d:26:cf:ae:1c:e8:fa:
         6b:ca:1a:18:2f:32:90:98:1b:be:1f:ed:fd:b9:77:35:0d:9c:
         08:69:66:d5:cb:81:e1:4a:92:de:b4:0a:c9:c9:71:f3:d6:6e:
         2a:1f:4d:f7:c7:25:f3:60:36:87:f7:08:6b:14:29:fa:31:d3:
         95:25:89:3e:46:3d:9f:0d:40:b1:93:5e:d2:d3:02:65:00:67:
         29:26:cd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----