This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
File:                     3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft (raw, json)
Hash identifier:          7+C0fPqq1YR8g4y0cw6dR9epjGDAm3g93jBgk8utlto=
Subject key identifier:   96:59:1E:79:E4:FF:E1:39:56:66:DA:68:E4:1E:39:10:62:F9:1C:5B
Authority key identifier: 3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB
Certificate issuer:       /CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
Certificate serial:       50D864FF6E3D5B818F5D48D30F9F8B9007A75225
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
Manifest number:          0145
Signing time:             Fri 19 Dec 2025 18:45:33 +0000
Manifest this update:     Fri 19 Dec 2025 18:40:33 +0000
Manifest next update:     Wed 24 Dec 2025 09:26:33 +0000
Files and hashes:         1: 3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl (hash: Sn31BD6RjXDHAPmoZn9GyrAmr8lEDn/RMHmm5y5iey4=)
                          2: 3137302e302e3137362e302f32322d3234203d3e203237393033.roa (hash: KuS4uocwq7CC1bzagqCum2blivp4+7bOMYfskgg5uno=)
                          3: 3230302e38392e38302e302f32312d3234203d3e203237393033.roa (hash: 2p9tlY9TQBPixfbryqWYef1hnt2yiFgQ/i1yfF58uAA=)
                          4: 323830333a666134303a3a2f33322d3438203d3e203237393033.roa (hash: qMiiMHDHvBkGztXBjgcNPEdXbyD7Ihf7Jb/EBXOOxoA=)
                          5: 3133382e3235352e3135322e302f32322d3234203d3e203237393033.roa (hash: tcSyKroDDkFEDnZNkwSUFSepDYo2/AFFy5+Zf8V6ViQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d8:64:ff:6e:3d:5b:81:8f:5d:48:d3:0f:9f:8b:90:07:a7:52:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
        Validity
            Not Before: Dec 19 18:40:33 2025 GMT
            Not After : Dec 24 09:26:33 2025 GMT
        Subject: CN=96591E79E4FFE1395666DA68E41E391062F91C5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3c:87:da:e4:4e:05:7a:c5:51:2e:91:a5:c9:
                    6d:a5:31:c3:21:97:42:40:65:b5:d7:10:5f:91:cf:
                    3d:58:e4:d0:4c:e7:28:cd:40:5b:57:35:06:27:39:
                    99:94:c9:a3:eb:7c:5a:f8:eb:8a:72:c1:7c:4d:e7:
                    af:8c:7c:79:7e:12:53:9a:ba:6e:da:95:6b:68:03:
                    8e:b8:fd:ad:bc:90:f4:29:6e:92:ec:97:59:93:87:
                    26:c1:01:93:18:6e:7d:d6:98:7b:63:f3:b7:28:c7:
                    99:78:c3:ce:7e:2a:0a:e3:85:bc:d4:32:6f:e3:d9:
                    0f:6d:bb:e5:c2:be:1a:2b:75:66:4f:ef:da:fd:14:
                    2c:f9:0f:e2:d0:6f:c4:ca:08:cf:45:4e:9f:55:92:
                    7d:86:c9:d6:de:21:42:c0:99:2c:da:7b:10:7f:91:
                    4e:63:3c:af:b8:cc:40:1a:a4:9c:ee:01:e4:66:db:
                    77:b5:fb:f6:67:a3:72:9f:99:29:d9:49:35:94:4a:
                    30:16:6e:81:68:22:f8:ef:e5:81:b8:57:ca:75:b2:
                    9e:a9:dd:55:f6:8b:03:16:61:d2:e8:f5:d1:9f:1a:
                    dd:e1:aa:3f:1b:c4:7f:9d:ee:1e:5b:88:ba:41:f6:
                    a4:af:99:9b:ca:db:67:a5:4f:42:10:91:d7:29:76:
                    2c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:59:1E:79:E4:FF:E1:39:56:66:DA:68:E4:1E:39:10:62:F9:1C:5B
            X509v3 Authority Key Identifier:
                keyid:3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:56:ca:ca:30:98:95:69:b7:fc:25:f1:a5:ae:01:fb:a4:ae:
         6b:16:e8:3d:09:b9:34:97:fe:a6:a9:c1:75:02:f7:8d:4e:5a:
         73:bd:a3:37:ab:5e:26:42:97:82:7f:27:75:18:45:56:da:0c:
         12:d8:98:30:13:a9:a6:67:1e:fc:1e:57:e8:81:c9:cf:67:cc:
         a5:ff:34:b7:31:98:63:ce:eb:dc:1f:fa:1d:3f:1c:3f:5c:1c:
         9e:34:73:03:12:99:d2:6a:be:1d:54:47:77:ce:55:5e:c0:0f:
         e2:a3:eb:18:3a:3f:9a:b2:24:b5:45:2c:58:ba:3e:e6:4a:c2:
         1a:8f:f0:ab:dc:f6:c4:38:0a:9e:8a:ac:7b:1c:7a:f0:a3:81:
         22:75:62:03:50:5c:20:2b:50:51:74:c0:10:94:00:ba:e2:82:
         ca:9e:27:3a:4f:a8:46:37:e6:a0:64:1b:15:ed:c4:4c:bb:6c:
         18:f6:3b:d5:9a:07:a3:79:c7:c3:00:f7:06:0b:0c:10:7b:2c:
         12:29:f1:70:1d:e2:4d:9d:14:af:cd:93:b4:b7:a4:6e:90:1c:
         6c:41:58:e0:03:5d:62:6c:d1:5a:20:79:74:cb:40:a6:5a:49:
         10:19:db:9a:9e:a4:e4:cb:a2:b6:b9:86:74:ca:a7:d1:ed:ec:
         81:db:e4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:57:22 2025 by rpki-client