This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
File:                     35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft (raw, json)
Hash identifier:          j5PHM0BqW1PXQp68aLJCF7xrsqTQBHpgb9LecwaP9GY=
Subject key identifier:   07:4E:53:96:D8:B5:50:E9:EF:A8:28:81:50:2F:1A:33:17:14:EB:7F
Authority key identifier: 35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
Certificate issuer:       /CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Certificate serial:       77BF58DDBA4B92CC933445BC3D8922864524EE1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
Manifest number:          0144
Signing time:             Fri 05 Dec 2025 08:02:23 +0000
Manifest this update:     Fri 05 Dec 2025 07:57:23 +0000
Manifest next update:     Wed 10 Dec 2025 16:39:23 +0000
Files and hashes:         1: 3230302e31342e36332e302f32342d3234203d3e20323731383935.roa (hash: R/xlQioDY89XcDeeG5I0NudslmN4l6JszCL8g4ImE1w=)
                          2: 3230302e31342e36302e302f32342d3234203d3e20323639393633.roa (hash: McTQN/gzt40lO4XLEn/bnLDx+L42Yp/wvNHlFn+nfiA=)
                          3: 3230302e31342e36322e302f32342d3234203d3e20323731383934.roa (hash: +uBzTORbQf53oDCI78NsvBd//pCTklRu2qH9JmQll10=)
                          4: 323830313a31383a323830303a3a2f34382d3438203d3e20323639393633.roa (hash: iHmUij6tGAnaB8sGgGBn4Tc6WTxYiLVE8QxsUg/ECUk=)
                          5: 35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl (hash: fV6mWGLt+9SamdD0jdMOMneSRqJq0Ci+k24uC1PxnxI=)
                          6: 3230302e31342e36312e302f32342d3234203d3e20323731383933.roa (hash: tBHwKNBqu8izLIAZtsYF9Sv3+6hDKWBOzuv5AFnbq0s=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 16:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bf:58:dd:ba:4b:92:cc:93:34:45:bc:3d:89:22:86:45:24:ee:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
        Validity
            Not Before: Dec  5 07:57:23 2025 GMT
            Not After : Dec 10 16:39:23 2025 GMT
        Subject: CN=074E5396D8B550E9EFA82881502F1A331714EB7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:00:5e:fb:34:ec:c1:ea:ce:59:93:c3:c5:
                    fa:c3:62:3d:4e:a0:69:e5:02:91:eb:2d:64:61:5c:
                    3f:0a:f6:e4:92:fc:72:04:81:be:bf:04:2b:62:c0:
                    cf:36:dc:3d:04:80:02:e8:e1:d5:2b:2e:e1:48:07:
                    b1:79:55:35:33:61:92:01:3f:b6:2b:01:fe:20:23:
                    b9:cd:56:e0:3a:c8:24:d8:fc:2b:01:fe:ac:c4:4f:
                    98:12:b5:dc:3b:0e:16:98:ab:da:7e:8d:b9:23:a4:
                    f8:ae:cb:0c:3b:81:a2:6e:12:ec:2a:3e:68:36:3d:
                    84:39:26:b0:0f:e7:03:00:ce:d4:59:b3:82:b9:62:
                    0d:03:bc:00:ab:fa:ba:92:15:c8:1d:99:03:e6:c9:
                    ca:80:85:cf:df:d0:39:ff:a3:b9:75:4d:6b:3b:da:
                    0b:fe:26:66:75:9f:5b:0b:da:6b:18:a8:fb:60:14:
                    7f:e0:19:f8:4a:fa:43:7b:f3:55:3e:3a:f9:ad:1f:
                    72:ab:b0:44:46:dc:b4:23:47:5e:63:4e:e6:8b:e7:
                    19:34:02:bd:90:20:5d:98:61:ce:5a:e6:12:8f:f7:
                    78:39:a3:cc:89:be:d0:9e:48:d5:30:e6:31:e5:71:
                    0d:8e:ba:d3:9d:ad:67:ec:f8:10:f8:22:bd:89:32:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4E:53:96:D8:B5:50:E9:EF:A8:28:81:50:2F:1A:33:17:14:EB:7F
            X509v3 Authority Key Identifier:
                keyid:35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:ba:a5:f4:16:19:fd:90:84:80:02:67:45:09:0b:7e:ad:
         b5:16:02:4f:77:d3:4a:6e:fc:39:24:56:14:21:31:67:56:dc:
         0a:70:3f:d3:00:08:f2:d3:ab:2a:61:81:0a:41:88:a1:20:79:
         73:77:eb:d0:2a:bf:82:d6:ae:e7:e9:cb:20:0e:54:3a:93:52:
         23:96:02:e5:cc:08:a7:58:49:b8:2f:7d:15:17:11:12:06:7b:
         6e:05:e9:32:cd:c8:9f:f6:1b:28:d3:15:c3:18:0a:81:da:49:
         f2:4c:e0:94:ab:94:c4:a9:22:66:25:2c:6c:b3:b1:66:7c:cf:
         d8:6b:3f:ff:e5:c1:c9:19:0d:a8:78:04:2c:c7:95:9f:b4:6d:
         86:cd:87:b6:28:5d:43:80:20:82:b3:f1:5b:c7:31:f5:f8:1a:
         ce:07:cb:c5:ab:07:56:a2:91:49:ea:f8:c5:b1:c7:51:3f:22:
         4c:11:12:5c:1f:d7:67:43:f8:8b:f3:4d:37:cd:48:ca:25:2b:
         34:57:b4:f9:73:ed:b9:bb:03:76:2e:9e:bc:e1:b6:8a:44:f6:
         f0:ec:9f:f6:c4:37:f2:50:3f:5c:37:9d:72:89:98:c0:be:a9:
         02:36:e3:92:4b:c1:12:a8:4d:db:ad:69:da:8e:0f:f9:36:d5:
         ef:32:35:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:11:13 2025 by rpki-client