This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft
File:                     3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft (raw, json)
Hash identifier:          a0STAOhV8IdJSfm9PIVRi6wEpH2Fs5S6oh603vnA7yk=
Subject key identifier:   8B:2E:D8:DE:83:0B:18:1E:E1:46:12:24:86:84:1F:44:26:74:D9:B3
Authority key identifier: 3B:34:90:6C:A2:BE:71:1E:56:5A:DA:84:35:6D:DA:DC:6B:48:AA:3E
Certificate issuer:       /CN=3B34906CA2BE711E565ADA84356DDADC6B48AA3E
Certificate serial:       02DA6FB1A1AD29E1D8824B89131C9D747068FC99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft
Manifest number:          09
Signing time:             Wed 17 Dec 2025 19:45:00 +0000
Manifest this update:     Wed 17 Dec 2025 19:40:00 +0000
Manifest next update:     Tue 23 Dec 2025 17:11:00 +0000
Files and hashes:         1: 3B34906CA2BE711E565ADA84356DDADC6B48AA3E.crl (hash: 2l3vs5EsUVWDGHuLIRvpOrMVID7xsALh8zlttSaS1mU=)
                          2: AS13999.roa (hash: La+1FDJCXszcnp1JgZa0OqgC67dybKT5sQ+6omFPcXY=)
                          3: AS262916.roa (hash: 30qt0c7cj0qbK+E4Npx8y+5Y9fRMNAeetXqcFrwIYRg=)
                          4: AS28541.roa (hash: 2cBtWF+eAXo93bL98SXH6W7beb1XxxyXyLHqIv+1JR0=)
                          5: AS28481.roa (hash: mkR7nvWjJ+bJ/k29EiyZFpsCaweL4LuwVfRsKTmeY3M=)
                          6: AS27672.roa (hash: rizYxCEPEtHcpvYhbTbVmNkgs20er3MDt4iW6EhEoTc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 17:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:da:6f:b1:a1:ad:29:e1:d8:82:4b:89:13:1c:9d:74:70:68:fc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B34906CA2BE711E565ADA84356DDADC6B48AA3E
        Validity
            Not Before: Dec 17 19:40:00 2025 GMT
            Not After : Dec 23 17:11:00 2025 GMT
        Subject: CN=8B2ED8DE830B181EE146122486841F442674D9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:70:ef:50:88:5e:96:8f:80:7f:a9:ae:0d:
                    4d:29:3b:09:a6:eb:9f:bb:69:0d:fe:48:c1:1d:85:
                    be:7e:d6:c3:de:36:f1:de:00:cb:a9:4e:64:25:d0:
                    e0:6c:e7:f4:c3:a9:53:f7:bb:05:b4:2f:da:f8:08:
                    00:a0:13:54:32:e0:71:85:80:19:d9:d1:83:6f:56:
                    bc:9a:82:92:72:89:69:bb:e7:06:75:b4:21:5f:8c:
                    b5:7f:ec:4c:a9:eb:89:73:22:e5:5f:c1:d5:89:56:
                    50:62:95:1d:55:c7:78:cd:3e:d6:c3:8b:13:00:9b:
                    2e:76:ed:15:ac:81:3d:5a:df:1b:24:f9:47:25:3b:
                    6c:16:a6:0d:5b:8a:ce:ba:64:64:81:16:5d:13:f9:
                    ba:17:02:6a:19:42:aa:18:51:b4:a9:e9:a9:17:3d:
                    5f:78:55:7b:29:41:ca:f9:70:03:66:4d:03:da:94:
                    78:44:2b:31:90:d8:d0:f0:e7:ec:42:0f:e5:cc:9d:
                    70:50:99:7b:5c:5a:f1:82:0d:7e:a0:fe:d1:a2:06:
                    e7:30:26:85:21:34:82:21:e8:c4:83:7f:29:4c:bb:
                    fd:cf:d4:0f:30:97:d8:59:30:64:a6:a5:b2:9b:04:
                    4a:41:0b:8c:1e:11:f9:49:dc:20:58:4e:53:19:1a:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2E:D8:DE:83:0B:18:1E:E1:46:12:24:86:84:1F:44:26:74:D9:B3
            X509v3 Authority Key Identifier:
                keyid:3B:34:90:6C:A2:BE:71:1E:56:5A:DA:84:35:6D:DA:DC:6B:48:AA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c2:5c:9a:c3:9f:17:91:85:44:26:c3:82:f3:d8:d4:62:84:
         83:83:5a:6b:23:34:3f:57:e7:06:47:9c:10:77:15:76:5b:20:
         ef:b3:ca:d9:5f:64:37:7e:24:08:6e:79:4b:7b:96:e5:ea:e3:
         5f:58:3d:bd:14:a7:8c:c4:4d:56:73:1b:6d:8c:08:df:2f:68:
         e9:ad:5a:21:a7:80:3e:0e:10:ee:1c:93:b3:1f:3c:17:a5:17:
         4c:48:a1:aa:04:20:ac:6b:9b:9d:d1:7f:e7:cc:30:7d:2b:b4:
         8a:d0:4d:5e:85:70:85:fa:e9:6d:9d:40:ff:94:2d:2f:fb:b8:
         83:81:0c:80:b4:73:d1:7e:35:6e:42:28:3e:c5:51:a3:13:ef:
         01:91:45:97:94:f1:31:b6:18:a2:6f:73:06:d8:a2:12:ba:5c:
         1e:ca:e0:ea:e3:61:df:89:36:a4:53:8f:d3:26:71:5b:11:8f:
         4b:0a:96:1b:39:47:6f:9a:8b:69:18:c9:7f:89:b2:90:ee:53:
         7b:69:ee:c7:dd:0d:4e:1c:ac:a9:eb:b3:53:c3:fe:79:2d:b2:
         95:72:d7:d4:fd:d5:44:7d:fd:be:f9:c2:d9:74:27:42:32:11:
         f5:ef:52:d0:ea:4b:2f:94:1b:7d:e6:0f:ce:f7:f8:bb:c9:81:
         5b:8f:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----