This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft
File:                     3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft (raw, json)
Hash identifier:          iYdaQEoDGBuAEBFuVQemCtEfG2ROCZdzzvIvwlP4KcM=
Subject key identifier:   7B:E6:60:F8:68:F2:F0:36:2A:7E:DC:80:8C:E8:96:47:B5:E0:25:44
Authority key identifier: 3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44
Certificate issuer:       /CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844
Certificate serial:       43AFA6EF0E5924BCD65D43544B5121320A5248C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft
Manifest number:          0151
Signing time:             Tue 06 Jan 2026 19:08:51 +0000
Manifest this update:     Tue 06 Jan 2026 19:03:51 +0000
Manifest next update:     Sun 11 Jan 2026 12:43:51 +0000
Files and hashes:         1: 323830333a646234303a3a2f33322d3438203d3e203634313030.roa (hash: DFc7zbTUOIUJNZtSLHMgbVSaLItdujuhnIALjNstqEY=)
                          2: 3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl (hash: XA+1bb0TEtkxycj/mbajI9YNGIjwve+qYAbJCUlPpPk=)
                          3: 3137302e38342e3233322e302f32322d3234203d3e203634313030.roa (hash: NJ06Ja0c8lj6Ns+IM+8yPehdPN0Xn+5AJLx9JPJdqBU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 12:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:af:a6:ef:0e:59:24:bc:d6:5d:43:54:4b:51:21:32:0a:52:48:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844
        Validity
            Not Before: Jan  6 19:03:51 2026 GMT
            Not After : Jan 11 12:43:51 2026 GMT
        Subject: CN=7BE660F868F2F0362A7EDC808CE89647B5E02544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:4c:c0:72:be:2d:f7:d6:4d:50:e9:fe:69:
                    20:53:e8:d1:c0:2b:95:1e:32:ea:d6:10:47:3d:94:
                    00:d4:3f:d6:96:51:db:60:9b:e7:da:14:64:5c:4c:
                    bc:fe:bf:b5:6d:f2:61:2f:48:06:88:5a:c4:61:a5:
                    49:28:78:b5:4f:03:89:ad:81:e0:ca:fc:d7:fe:fb:
                    43:9d:2d:da:3b:f2:ed:1c:16:f9:48:9d:7e:87:c7:
                    6e:cd:d6:a6:14:17:3e:df:df:4f:dc:e5:37:3d:c2:
                    d5:c7:8a:0e:22:df:e2:62:35:5b:c0:b6:dd:3d:d9:
                    a3:0a:87:08:e5:32:cf:20:56:8b:51:97:0a:89:66:
                    b7:3c:cb:d7:0b:12:51:90:e3:26:d0:f3:ec:a7:8c:
                    fb:8c:e2:16:8a:83:d2:e2:53:4c:1c:f0:f0:57:4a:
                    21:5f:50:55:87:2f:7e:e2:e3:60:33:aa:be:ec:94:
                    98:88:93:3a:76:07:f7:62:4a:cd:0f:9a:66:0a:59:
                    eb:7a:48:83:19:73:d7:03:16:cc:41:d9:d0:e8:ea:
                    97:e7:a7:90:d1:ea:04:2b:a3:b4:91:6e:4f:6f:8f:
                    b0:83:0e:25:84:dd:40:8c:05:83:b9:f2:f1:cb:00:
                    04:90:84:b2:69:9d:23:8e:fd:f9:da:96:9c:e9:cc:
                    b3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E6:60:F8:68:F2:F0:36:2A:7E:DC:80:8C:E8:96:47:B5:E0:25:44
            X509v3 Authority Key Identifier:
                keyid:3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d1:80:c2:eb:cc:40:80:b3:5f:73:00:cf:8e:95:76:10:34:
         2e:ea:ab:69:6e:c5:de:03:45:88:b4:8f:d8:3e:86:e3:aa:62:
         8d:1c:b5:c0:22:b3:ae:ef:ad:8a:fc:8b:02:80:a1:d0:53:97:
         aa:8d:42:cc:1d:9d:ce:51:51:15:32:d2:fb:1a:ad:fc:4c:4e:
         e4:b8:0b:61:2b:bd:0a:5f:25:47:97:77:cd:dc:da:22:9c:d9:
         69:0c:14:6a:69:f0:b3:9d:0c:9f:b6:41:b8:16:5e:59:f0:38:
         8a:ab:ab:17:a1:dc:1a:a2:4e:ee:66:1b:d3:be:fa:24:fe:12:
         94:0b:d4:fc:22:b5:a5:2a:ec:41:68:cb:1a:44:3d:17:d4:a6:
         26:60:5c:bc:42:e2:00:97:e9:e3:5f:dd:11:a4:99:af:66:0f:
         d7:b9:dd:db:80:29:2a:af:01:76:e1:d2:ae:c6:c6:00:06:3f:
         6f:ca:bb:1c:5d:d7:89:88:35:2c:4d:22:a2:6c:19:09:60:b3:
         c6:00:86:ad:09:76:d5:d2:3e:c5:30:34:39:2a:e6:99:21:ae:
         d2:81:d4:8c:73:54:d1:d9:6d:f6:bb:86:29:5e:74:32:a6:1f:
         d7:e3:b0:4a:52:ae:3b:bc:64:f9:68:52:68:74:6a:fa:5f:2f:
         1e:48:c4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 04:01:42 2026 by rpki-client