This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft
File:                     3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft (raw, json)
Hash identifier:          NtNl+cPpLXrEbvfl9aZ3KH/7RSGYZM3x836ToZNPtFI=
Subject key identifier:   CE:33:83:E0:66:A5:43:D5:CE:94:1A:5B:30:85:5C:3B:31:4D:83:E1
Authority key identifier: 3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27
Certificate issuer:       /CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27
Certificate serial:       5654CBB2F020A6501361639D36CF6014FA7D520E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft
Manifest number:          010D
Signing time:             Fri 05 Dec 2025 14:51:12 +0000
Manifest this update:     Fri 05 Dec 2025 14:46:12 +0000
Manifest next update:     Thu 11 Dec 2025 13:14:12 +0000
Files and hashes:         1: 3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl (hash: FLjvq/DllYfvyvz5otYWDFqT7dGwV7fb04OBFprugCs=)
                          2: 3138372e3130322e3232392e302f32342d3234203d3e20323733323830.roa (hash: UjH8uRWjG8Ut49YxqXvAmJPaNA3fGdCfKDBGUGrCSiI=)
                          3: 3138372e3130322e3232382e302f32332d3234203d3e20323730313135.roa (hash: T5qcA5Hg+4yxfH7EqrPAjjz2OExW8ImItq8qjroLAnQ=)
                          4: 3138372e3130322e3233302e302f32342d3234203d3e20323730313630.roa (hash: a0k+CwYndo/yJVuwlwMwgfTqpZBa1L3iIsbKzuB2Ssk=)
                          5: 323830363a3362373a3a2f33322d3332203d3e20323730313135.roa (hash: ApUEMcIFcj7OmyMwoOymjdorssjQseVK3/CqqZnrHys=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:54:cb:b2:f0:20:a6:50:13:61:63:9d:36:cf:60:14:fa:7d:52:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27
        Validity
            Not Before: Dec  5 14:46:12 2025 GMT
            Not After : Dec 11 13:14:12 2025 GMT
        Subject: CN=CE3383E066A543D5CE941A5B30855C3B314D83E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0e:42:bd:26:a8:cc:56:93:2c:c4:bf:43:b1:
                    5e:1e:00:82:fe:ba:70:c0:9f:78:49:28:e8:1f:66:
                    db:8c:ee:51:08:0b:55:74:af:dc:48:f7:46:da:5c:
                    17:54:4c:e1:8f:a4:df:03:08:c6:14:66:7e:9e:a4:
                    85:3b:b5:fb:1b:d9:b9:9a:bc:96:8c:5f:4f:ae:ed:
                    f8:b7:1f:59:02:b9:64:3e:b2:c0:03:de:30:6f:e2:
                    7e:50:5a:4b:9c:d7:99:2d:02:ee:5c:37:28:96:b8:
                    1b:ae:e0:db:b1:5d:6e:35:1b:76:24:4d:70:93:4e:
                    81:c6:81:75:b8:1d:68:73:de:e8:ba:1c:bb:b6:bc:
                    06:51:dc:17:44:c0:08:90:c4:62:e1:25:0c:73:f7:
                    78:ff:6f:7b:8a:70:a8:af:23:b3:a8:43:d5:29:6f:
                    fb:e4:10:bb:95:e4:dc:ce:76:7e:30:78:87:5a:01:
                    e7:90:06:75:1c:1b:45:39:3f:cb:e0:d3:f8:0d:01:
                    34:fe:78:54:01:f0:bc:8a:ed:bf:22:76:ce:55:e9:
                    8d:82:98:1f:0d:40:85:91:da:1d:73:84:02:a0:48:
                    b4:49:8c:4a:b4:94:af:b5:f8:2d:7e:44:dd:fd:df:
                    fd:0f:bc:c4:8a:31:65:bd:86:da:3f:38:c0:52:8c:
                    c5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:33:83:E0:66:A5:43:D5:CE:94:1A:5B:30:85:5C:3B:31:4D:83:E1
            X509v3 Authority Key Identifier:
                keyid:3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:50:fd:97:40:f1:56:3d:5f:94:95:b4:6a:bf:c1:fb:dd:3d:
         d4:41:dc:f1:ee:1d:d2:32:c7:2b:72:6e:16:eb:af:28:7d:db:
         21:68:93:6d:83:88:7f:b8:dd:2e:0a:fa:bd:c4:81:18:6e:ab:
         bf:5f:2b:cd:08:c1:07:c4:a3:73:8c:8a:b8:ac:2a:a5:a0:b7:
         f3:0d:4e:44:df:22:2c:1f:11:49:5c:5d:18:57:27:0b:d8:31:
         a1:41:de:b2:02:7c:e0:7a:d1:7c:1a:d4:c3:4d:8b:4d:98:39:
         50:65:14:a9:7d:e9:01:10:32:45:80:cb:22:1d:e6:86:9b:a0:
         70:2e:b1:a4:cc:20:99:af:80:47:f7:b6:94:5a:48:01:82:a3:
         6d:1d:ea:1c:8e:7d:af:04:d7:78:9e:89:91:70:f2:15:5d:05:
         01:f3:e4:9f:08:f8:a4:ae:5e:39:9b:7e:66:18:08:1d:e2:fc:
         2d:05:01:bc:ce:86:41:6b:db:fe:65:3e:83:94:a0:ff:c6:9b:
         c1:52:c2:0b:a2:ff:f1:de:4f:20:48:7a:90:9b:05:a2:f6:3e:
         fc:38:2d:e2:e5:8c:50:9d:ff:76:26:86:65:c1:d8:1d:70:e1:
         74:42:f4:8b:af:66:75:59:31:b7:ab:e4:66:40:c8:6d:17:3b:
         c4:41:cc:d0
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUVlTLsvAgplATYWOdNs9gFPp9Ug4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E0QTI5REVCRDU5QzdBMDRFNjE5M0E0MkE1RUZDM0My
NDRCMkQyNzAeFw0yNTEyMDUxNDQ2MTJaFw0yNTEyMTExMzE0MTJaMDMxMTAvBgNV
BAMTKENFMzM4M0UwNjZBNTQzRDVDRTk0MUE1QjMwODU1QzNCMzE0RDgzRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3DkK9JqjMVpMsxL9DsV4eAIL+
unDAn3hJKOgfZtuM7lEIC1V0r9xI90baXBdUTOGPpN8DCMYUZn6epIU7tfsb2bma
vJaMX0+u7fi3H1kCuWQ+ssAD3jBv4n5QWkuc15ktAu5cNyiWuBuu4NuxXW41G3Yk
TXCTToHGgXW4HWhz3ui6HLu2vAZR3BdEwAiQxGLhJQxz93j/b3uKcKivI7OoQ9Up
b/vkELuV5NzOdn4weIdaAeeQBnUcG0U5P8vg0/gNATT+eFQB8LyK7b8ids5V6Y2C
mB8NQIWR2h1zhAKgSLRJjEq0lK+1+C1+RN393/0PvMSKMWW9hto/OMBSjMX7AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUzjOD4GalQ9XOlBpbMIVcOzFNg+EwHwYDVR0j
BBgwFoAUOkop3r1Zx6BOYZOkKl78PCRLLScwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQ0FBQ0RCQzIyMkQ2NEQ0OUU1QzJFQkJCN0YyN0Y4NjEw
ODU4OTBFMjY1QjhDNjUxQ0FGNTlDNzI1QUE3RDFFLzAvM0E0QTI5REVCRDU5QzdB
MDRFNjE5M0E0MkE1RUZDM0MyNDRCMkQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTRBMjlERUJENTlDN0EwNEU2
MTkzQTQyQTVFRkMzQzI0NEIyRDI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0NBQUNEQkMyMjJENjRENDlFNUMyRUJCQjdGMjdGODYxMDg1ODkwRTI2
NUI4QzY1MUNBRjU5QzcyNUFBN0QxRS8wLzNBNEEyOURFQkQ1OUM3QTA0RTYxOTNB
NDJBNUVGQzNDMjQ0QjJEMjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASUP2XQPFWPV+UlbRqv8H73T3U
Qdzx7h3SMscrcm4W668ofdshaJNtg4h/uN0uCvq9xIEYbqu/XyvNCMEHxKNzjIq4
rCqloLfzDU5E3yIsHxFJXF0YVycL2DGhQd6yAnzgetF8GtTDTYtNmDlQZRSpfekB
EDJFgMsiHeaGm6BwLrGkzCCZr4BH97aUWkgBgqNtHeocjn2vBNd4nomRcPIVXQUB
8+SfCPikrl45m35mGAgd4vwtBQG8zoZBa9v+ZT6DlKD/xpvBUsILov/x3k8gSHqQ
mwWi9j78OC3i5YxQnf92JoZlwdgdcOF0QvSLr2Z1WTG3q+RmQMhtFzvEQczQ
-----END CERTIFICATE-----