This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
File:                     33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft (raw, json)
Hash identifier:          ZCGQVCQs7/rpS/bB+KOlfgBPZdJxD0KCsId38Ogwl0k=
Subject key identifier:   AF:F2:97:B8:FE:74:76:33:31:D1:88:5A:52:7E:13:6E:C8:69:A6:29
Authority key identifier: 33:88:7D:46:6E:F0:24:3F:A7:B3:C3:58:00:D7:0E:2D:B5:6A:26:A7
Certificate issuer:       /CN=33887D466EF0243FA7B3C35800D70E2DB56A26A7
Certificate serial:       340E12B0175A89F8B3C5FE3B3E7411CEDE1C997C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
Manifest number:          29
Signing time:             Tue 09 Dec 2025 15:58:36 +0000
Manifest this update:     Tue 09 Dec 2025 15:53:36 +0000
Manifest next update:     Sun 14 Dec 2025 08:00:36 +0000
Files and hashes:         1: 33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl (hash: PNJtl7d72tGFVrKy360nEce4NOz0X3HmU4JEHcbQAGU=)
                          2: 3133312e3139362e37322e302f32322d3234203d3e20323635373534.roa (hash: A3xXzpOaKCo1SvZ7OY8UcWolLdK5MkkAJljb47PcBNM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Dec 2025 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0e:12:b0:17:5a:89:f8:b3:c5:fe:3b:3e:74:11:ce:de:1c:99:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33887D466EF0243FA7B3C35800D70E2DB56A26A7
        Validity
            Not Before: Dec  9 15:53:36 2025 GMT
            Not After : Dec 14 08:00:36 2025 GMT
        Subject: CN=AFF297B8FE74763331D1885A527E136EC869A629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:88:d1:51:e0:57:91:57:e2:21:f6:02:c2:
                    4d:0b:5a:8c:a1:47:7a:bf:6e:c3:1d:b7:c6:f9:a1:
                    be:65:3c:92:96:a8:8d:83:aa:96:44:e9:a2:ae:ca:
                    10:24:e8:dc:20:58:0d:9f:4a:1a:82:04:3f:f2:f5:
                    b3:0b:ff:82:e9:4b:03:0a:43:28:56:6a:18:af:ef:
                    53:fb:1c:4a:7f:9f:4c:ae:b8:e3:75:6b:38:86:88:
                    12:91:96:5c:66:e6:30:9e:16:d5:62:13:1c:20:63:
                    d4:6e:e2:f0:c5:b6:bd:57:ef:e6:23:d1:38:ff:8c:
                    a3:24:9d:70:fa:a0:20:d5:68:17:ad:64:8b:79:ac:
                    c8:ec:86:09:e6:57:e3:1e:55:91:d4:2e:5f:ca:d0:
                    a6:48:06:53:b8:c5:95:28:08:f5:b1:eb:65:7f:23:
                    99:b2:53:56:f3:17:3d:81:0a:cb:19:bc:f7:19:27:
                    4e:e1:c5:66:6d:ad:65:7f:b9:78:b2:23:23:21:12:
                    7f:8c:33:13:ab:88:f0:d8:80:ab:d7:68:fd:e2:4a:
                    0f:b3:46:39:24:32:31:1f:e8:c4:b5:1d:17:b6:0e:
                    40:59:6b:89:ba:96:21:2d:b2:be:fd:aa:b4:85:cd:
                    4d:d2:75:c2:a5:26:65:0b:e1:aa:c0:af:03:0d:c9:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F2:97:B8:FE:74:76:33:31:D1:88:5A:52:7E:13:6E:C8:69:A6:29
            X509v3 Authority Key Identifier:
                keyid:33:88:7D:46:6E:F0:24:3F:A7:B3:C3:58:00:D7:0E:2D:B5:6A:26:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7b:1b:96:c7:ab:ee:bf:25:08:b4:2b:89:41:d0:f9:80:02:
         46:85:fd:a3:99:c1:cc:ce:4c:16:b6:16:16:42:ca:21:3e:55:
         e4:21:84:8d:77:80:f4:6c:d7:58:36:48:71:57:66:b4:8c:62:
         8e:ad:90:3c:68:7f:e1:4e:5e:a6:d5:79:63:75:f3:14:5c:29:
         35:10:1d:b5:d4:30:8e:57:71:40:d0:85:7f:fb:9b:49:a5:05:
         77:97:8f:77:13:dc:16:c2:cb:d0:63:9a:54:27:49:13:6a:f8:
         07:a9:ab:d4:88:bf:d2:9f:a2:da:b3:13:f2:c6:51:f5:ff:1d:
         fc:ab:09:a3:1a:8e:1e:fb:c3:f9:30:9c:ae:5b:3a:88:c0:77:
         89:19:56:f5:52:4c:39:ad:dd:1e:d1:d7:a7:6c:d7:97:5e:e3:
         d4:d5:66:c0:67:aa:71:97:e1:f6:54:fb:11:2f:27:9c:22:c3:
         4a:95:fd:f5:60:0c:c7:2f:c5:80:95:4b:f3:91:e8:ea:02:fe:
         f2:af:de:d7:68:41:77:96:3f:2c:ea:42:3e:c8:fc:4b:7d:f3:
         cf:ff:48:96:62:05:20:c3:23:f8:68:82:76:4c:f5:42:58:ed:
         96:9b:ae:98:f8:bd:35:a0:27:82:bb:55:c3:b2:b3:59:2d:70:
         d1:e9:32:da
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUNA4SsBdaifizxf47PnQRzt4cmXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM4ODdENDY2RUYwMjQzRkE3QjNDMzU4MDBENzBFMkRC
NTZBMjZBNzAeFw0yNTEyMDkxNTUzMzZaFw0yNTEyMTQwODAwMzZaMDMxMTAvBgNV
BAMTKEFGRjI5N0I4RkU3NDc2MzMzMUQxODg1QTUyN0UxMzZFQzg2OUE2MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB94jRUeBXkVfiIfYCwk0LWoyh
R3q/bsMdt8b5ob5lPJKWqI2DqpZE6aKuyhAk6NwgWA2fShqCBD/y9bML/4LpSwMK
QyhWahiv71P7HEp/n0yuuON1aziGiBKRllxm5jCeFtViExwgY9Ru4vDFtr1X7+Yj
0Tj/jKMknXD6oCDVaBetZIt5rMjshgnmV+MeVZHULl/K0KZIBlO4xZUoCPWx62V/
I5myU1bzFz2BCssZvPcZJ07hxWZtrWV/uXiyIyMhEn+MMxOriPDYgKvXaP3iSg+z
RjkkMjEf6MS1HRe2DkBZa4m6liEtsr79qrSFzU3SdcKlJmUL4arArwMNydBzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUr/KXuP50djMx0YhaUn4TbshppikwHwYDVR0j
BBgwFoAUM4h9Rm7wJD+ns8NYANcOLbVqJqcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMTE2MzQ2MDM5NjUzMTFCM0RGMDA2RjU0NEQ3MkIwMjU2
RjMwNEFFRjc2QjM1NjA0RTQyOEFBQzkwQzlEQzQ3LzAvMzM4ODdENDY2RUYwMjQz
RkE3QjNDMzU4MDBENzBFMkRCNTZBMjZBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzg4N0Q0NjZFRjAyNDNGQTdC
M0MzNTgwMEQ3MEUyREI1NkEyNkE3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjExNjM0NjAzOTY1MzExQjNERjAwNkY1NDRENzJCMDI1NkYzMDRBRUY3
NkIzNTYwNEU0MjhBQUM5MEM5REM0Ny8wLzMzODg3RDQ2NkVGMDI0M0ZBN0IzQzM1
ODAwRDcwRTJEQjU2QTI2QTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACexuWx6vuvyUItCuJQdD5gAJG
hf2jmcHMzkwWthYWQsohPlXkIYSNd4D0bNdYNkhxV2a0jGKOrZA8aH/hTl6m1Xlj
dfMUXCk1EB211DCOV3FA0IV/+5tJpQV3l493E9wWwsvQY5pUJ0kTavgHqavUiL/S
n6LasxPyxlH1/x38qwmjGo4e+8P5MJyuWzqIwHeJGVb1Ukw5rd0e0denbNeXXuPU
1WbAZ6pxl+H2VPsRLyecIsNKlf31YAzHL8WAlUvzkejqAv7yr97XaEF3lj8s6kI+
yPxLffPP/0iWYgUgwyP4aIJ2TPVCWO2Wm66Y+L01oCeCu1XDsrNZLXDR6TLa
-----END CERTIFICATE-----
Generated at Tue Dec 9 22:16:45 2025 by rpki-client