This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
File:                     3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft (raw, json)
Hash identifier:          zZS8/JISVUAPoxwW78CDWoSUBoslxdBeNEvuYaBUTng=
Subject key identifier:   3F:B0:C1:BA:62:B8:B8:66:2C:E8:46:C5:DB:E5:64:49:05:58:4C:51
Authority key identifier: 3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB
Certificate issuer:       /CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
Certificate serial:       24482B5C76784DFB8D70B4FB3605C2C8D6CF16B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
Manifest number:          013E
Signing time:             Sat 06 Dec 2025 12:03:10 +0000
Manifest this update:     Sat 06 Dec 2025 11:58:10 +0000
Manifest next update:     Thu 11 Dec 2025 14:39:10 +0000
Files and hashes:         1: 3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl (hash: uJuI646fZSg9OLuYi+aV3Gi3B8zr5cXMshSoWcVChrU=)
                          2: 3133382e3235352e3135322e302f32322d3234203d3e203237393033.roa (hash: tcSyKroDDkFEDnZNkwSUFSepDYo2/AFFy5+Zf8V6ViQ=)
                          3: 3137302e302e3137362e302f32322d3234203d3e203237393033.roa (hash: KuS4uocwq7CC1bzagqCum2blivp4+7bOMYfskgg5uno=)
                          4: 3230302e38392e38302e302f32312d3234203d3e203237393033.roa (hash: 2p9tlY9TQBPixfbryqWYef1hnt2yiFgQ/i1yfF58uAA=)
                          5: 323830333a666134303a3a2f33322d3438203d3e203237393033.roa (hash: qMiiMHDHvBkGztXBjgcNPEdXbyD7Ihf7Jb/EBXOOxoA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:48:2b:5c:76:78:4d:fb:8d:70:b4:fb:36:05:c2:c8:d6:cf:16:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
        Validity
            Not Before: Dec  6 11:58:10 2025 GMT
            Not After : Dec 11 14:39:10 2025 GMT
        Subject: CN=3FB0C1BA62B8B8662CE846C5DBE5644905584C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:4d:9b:24:6f:80:b0:f6:82:49:26:92:ef:
                    71:6d:c9:7f:85:36:d0:f8:65:9b:38:27:bc:c7:7e:
                    ac:01:cd:c1:02:64:56:0b:b4:dc:61:10:87:b4:da:
                    93:7a:53:ae:14:c9:e3:3f:0d:fe:8f:86:a5:5d:a9:
                    29:f6:91:97:70:32:22:67:3f:26:df:79:d1:75:d4:
                    9f:ac:90:90:55:32:02:e3:35:97:5f:78:c1:c7:65:
                    eb:95:64:7b:05:0a:67:fd:db:1c:07:3e:83:d3:e5:
                    28:f4:ad:48:2e:af:4b:b8:ca:3f:f4:17:86:57:19:
                    ae:de:7c:b7:c7:7b:e5:0c:da:8b:57:06:fa:8f:3a:
                    92:63:53:b9:2e:00:dc:fa:9d:ff:79:0c:82:aa:d1:
                    df:b0:28:18:71:25:9a:7a:bb:a1:53:d9:69:a1:e8:
                    0e:c1:8c:65:eb:ba:df:7a:05:6d:d0:66:d7:d4:38:
                    ab:d1:43:83:f1:0f:c9:a9:b9:e2:09:3d:c8:97:5d:
                    2e:2b:ae:2c:18:69:3c:01:cf:7f:f4:55:57:d8:cd:
                    da:46:9a:13:b8:ab:8a:f1:93:b1:44:3c:7f:fc:3e:
                    8f:95:5d:27:f6:bc:02:ff:b2:3e:ff:2a:84:89:ab:
                    9b:f5:c0:90:43:b1:bb:6c:4c:47:c5:1e:6e:ce:fb:
                    ee:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B0:C1:BA:62:B8:B8:66:2C:E8:46:C5:DB:E5:64:49:05:58:4C:51
            X509v3 Authority Key Identifier:
                keyid:3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e3:e7:da:a5:de:af:32:2f:2f:6c:b9:61:9f:37:35:87:84:
         a9:91:20:5b:c9:0f:32:45:4e:15:64:a8:d1:ee:46:50:c4:b5:
         ca:5f:77:69:24:e1:63:ee:29:06:3a:82:63:8f:4b:7a:ad:e7:
         3b:70:76:c3:b1:09:8d:bd:ea:81:38:05:54:ca:76:05:1c:64:
         48:af:d4:76:1b:15:fd:ae:e1:f5:a6:07:06:0c:eb:04:79:04:
         65:23:58:e5:cd:b3:5d:a5:16:ec:85:8c:8f:b6:be:7a:7d:9b:
         0a:a3:b2:6c:f6:91:48:18:f0:9c:77:0d:54:af:e4:e9:91:30:
         09:f8:a7:f3:aa:5e:28:3e:28:c3:78:33:c5:b1:1b:0a:0b:5f:
         71:5f:12:34:cc:58:34:0f:89:7f:7a:e8:ff:76:44:c5:69:e4:
         b2:69:0e:37:4d:a2:64:41:19:ee:05:5b:e8:45:a4:bd:22:27:
         14:a3:e4:b5:c2:07:6a:b5:2c:b4:7f:8c:1f:08:e0:97:44:a3:
         da:9b:8b:41:6b:a9:ea:40:a4:e9:8a:92:b3:6f:13:10:99:8b:
         44:c3:df:de:6a:73:86:21:6e:84:98:4e:d5:c7:d6:1f:38:59:
         4c:bf:5e:4c:19:cd:99:28:8b:81:10:33:be:39:e7:34:8f:a2:
         04:2d:0f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:10:05 2025 by rpki-client