This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
File:                     35D619733A3D3A776B2D5FB84305186B942E249A.mft (raw, json)
Hash identifier:          VR39EKkVrSUeZ9BsdLsQ3nAGJAOj99MQQm6zia2ARlM=
Subject key identifier:   11:62:BB:B2:F9:BA:D9:93:77:E5:AC:6C:49:9C:FE:96:37:44:BE:C7
Authority key identifier: 35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A
Certificate issuer:       /CN=35D619733A3D3A776B2D5FB84305186B942E249A
Certificate serial:       6757893541AB5883D3A820A4ED87734AC8C0B49B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
Manifest number:          0150
Signing time:             Sat 20 Dec 2025 21:52:31 +0000
Manifest this update:     Sat 20 Dec 2025 21:47:31 +0000
Manifest next update:     Thu 25 Dec 2025 08:41:31 +0000
Files and hashes:         1: 323830363a3230393a3a2f33322d3634203d3e20323730313536.roa (hash: hZV1guPYhSmEJdBPb1pmv2tiE0YV74XhLiE3oneSZcs=)
                          2: 3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa (hash: O6BnIOAS+8L0M3wsNqlmxFo8FVjSJjL+BMueCf7+jP4=)
                          3: 323830363a3230393a3a2f33322d3634203d3e20323635353031.roa (hash: nS1OJQh7flpXAeDVq3QSsIPGwMJxKtKknh6/2e/vaZQ=)
                          4: 35D619733A3D3A776B2D5FB84305186B942E249A.crl (hash: C9fLu4aqUFc4XZUpuszj0jGxP4RZORoCRq6wLQGDJq4=)
                          5: 3133382e3235352e3131362e302f32322d3234203d3e20323635353031.roa (hash: LY8m5iymGqWKvIirfivufBi5WC9W6dyP1Ast3ViSTKo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 08:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:57:89:35:41:ab:58:83:d3:a8:20:a4:ed:87:73:4a:c8:c0:b4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35D619733A3D3A776B2D5FB84305186B942E249A
        Validity
            Not Before: Dec 20 21:47:31 2025 GMT
            Not After : Dec 25 08:41:31 2025 GMT
        Subject: CN=1162BBB2F9BAD99377E5AC6C499CFE963744BEC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:0f:95:62:50:22:de:0f:bc:9b:bc:45:a9:
                    8c:f6:20:82:bb:79:ed:69:20:6c:68:34:29:fe:4d:
                    e9:c7:9b:b3:e8:2c:9a:ab:19:70:23:cf:86:a6:b4:
                    15:f8:02:d0:00:07:1b:9a:7e:a8:35:a3:c4:ce:b5:
                    6f:01:82:43:79:4f:93:87:6e:b5:48:45:18:54:c8:
                    74:59:7b:02:ac:0e:5e:eb:04:98:ab:5f:f5:61:0c:
                    8c:b9:10:82:02:4a:9b:bd:72:f6:47:f8:ba:f9:0e:
                    a2:44:25:1e:99:d7:8c:e5:b9:a4:00:aa:cf:57:94:
                    22:37:33:94:99:9b:1c:86:78:e2:60:5d:3d:0e:8f:
                    de:6b:6b:a4:2c:c8:dd:ca:24:31:b4:71:6b:d1:0f:
                    ed:b4:41:8f:24:4a:2b:55:23:31:85:76:b6:35:70:
                    5e:be:1a:e3:ff:70:de:8b:4f:39:5d:d4:79:be:45:
                    bf:b5:6c:dc:bb:a6:4b:18:9b:f0:e6:92:62:f3:9b:
                    4e:a6:0b:de:4c:3d:52:4a:da:eb:26:44:91:29:76:
                    5a:c0:10:50:77:4e:cf:d6:b4:9a:70:36:b6:73:8a:
                    b7:a3:0a:66:db:85:80:fc:b6:d6:f8:8a:62:c8:90:
                    29:89:53:60:95:25:b5:f9:56:4f:9e:a5:27:08:51:
                    ab:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:62:BB:B2:F9:BA:D9:93:77:E5:AC:6C:49:9C:FE:96:37:44:BE:C7
            X509v3 Authority Key Identifier:
                keyid:35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:99:32:3f:5c:8b:c4:de:2f:a3:94:df:03:90:3d:35:fa:5b:
         06:94:aa:09:19:40:d9:23:b8:4f:5c:73:24:10:49:5a:5f:d6:
         01:cc:4d:76:cc:33:c0:09:81:96:19:39:0f:0f:18:71:2c:47:
         48:fd:ec:70:bf:1c:97:88:39:c7:ad:39:e8:46:34:2c:4c:c7:
         78:a7:f2:f8:ba:3f:14:2c:c3:b8:47:94:45:0a:44:7d:6e:b3:
         0b:28:55:08:08:cc:d2:fa:67:92:e4:29:9b:41:c2:61:49:c5:
         cb:52:91:47:fb:18:4f:f3:40:e5:00:6c:95:17:c8:55:6d:f6:
         6e:ce:bc:f0:a6:d3:cc:19:6d:9c:bf:db:ce:98:fb:0e:98:b0:
         fe:3d:f0:5c:79:01:db:82:62:37:6b:bd:2a:38:1b:03:63:1b:
         0a:d2:63:ad:94:f0:92:39:d5:73:40:5d:fd:19:94:2e:8b:0b:
         54:c5:ff:60:90:ab:b7:47:3c:14:7b:d7:96:a1:a7:f4:36:e0:
         fd:a0:1e:97:68:46:8b:55:5a:c8:ff:49:54:71:9a:e0:a7:db:
         d0:77:4e:3d:ae:da:e4:4e:4f:70:bf:b3:9c:0f:82:4b:47:f0:
         d8:10:16:1d:8b:58:ec:e7:2d:74:cd:13:a8:11:77:ce:5d:46:
         ca:28:16:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----