This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft
File:                     D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft (raw, json)
Hash identifier:          3YCBQLGUhaaWlCGrMwtQsro5+Q/rsJpCtYp920VzXWI=
Subject key identifier:   54:C3:C1:F4:06:03:FB:48:43:BF:B0:F2:05:7A:A3:C2:5B:76:1E:EE
Authority key identifier: D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
Certificate issuer:       /CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Certificate serial:       03F4083902617EB4D214B7A4ABCD38B8D58DBC90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft
Manifest number:          0154
Signing time:             Fri 23 Jan 2026 22:57:30 +0000
Manifest this update:     Fri 23 Jan 2026 22:52:30 +0000
Manifest next update:     Wed 28 Jan 2026 16:58:30 +0000
Files and hashes:         1: 3136372e3235302e3230372e302f32342d3234203d3e20323632323533.roa (hash: G9z+CEgK69FZBJdiG0UrzqOOY1x+cGoUIyfLhG3W5is=)
                          2: 3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa (hash: 67Uzt+lTxD5vbInsb/O3NZUUyrRHy7eeNo9v6DYQ350=)
                          3: D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl (hash: 4E0q2eHibCqgqiq1Zn2f539cbEmdnkXZz8bSbRzjsgs=)
                          4: 3136372e3235302e3230342e302f32322d3232203d3e20323632323533.roa (hash: k1rr8+y8isBNllxl/JaMvyz2O3gxKybRb0wWq2upkTo=)
                          5: 3136372e3235302e3230352e302f32342d3234203d3e20323632323533.roa (hash: v5BWulkGKX862GvPc1TkWYz/mUXcE8Pf8EOztgQtIfI=)
                          6: 3136372e3235302e3230362e302f32342d3234203d3e20323632323533.roa (hash: udH8+g4aR9Jj7IWUvrXNya816gvkBxPg1ErFLczcJJI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f4:08:39:02:61:7e:b4:d2:14:b7:a4:ab:cd:38:b8:d5:8d:bc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
        Validity
            Not Before: Jan 23 22:52:30 2026 GMT
            Not After : Jan 28 16:58:30 2026 GMT
        Subject: CN=54C3C1F40603FB4843BFB0F2057AA3C25B761EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:31:cd:93:d0:9e:88:87:a1:63:4c:5b:dc:
                    e9:ec:ee:b2:59:83:7b:37:1f:d8:c8:96:d0:2c:d2:
                    78:20:34:9a:bf:de:05:e4:7d:40:56:02:9f:53:74:
                    de:f3:2b:2f:8a:5e:ea:01:0e:b5:5d:c2:c7:d8:5e:
                    2d:3d:be:9f:b3:a1:bb:3f:c1:a1:78:a3:d8:19:89:
                    5e:15:e5:3b:c1:f9:54:ef:2b:77:db:e1:ff:c6:96:
                    9e:a1:f6:a3:74:7d:8f:21:21:7a:35:0d:1a:94:68:
                    39:d2:1f:e3:c0:1e:52:e4:c8:0f:2b:47:2b:6e:db:
                    f5:88:bc:11:46:f0:d5:b5:2e:a2:2d:5b:d6:e7:e0:
                    18:87:e2:39:21:47:b2:aa:84:f6:0e:fd:31:8d:44:
                    5d:dd:f2:12:c6:09:5b:78:30:35:5f:d5:57:e3:be:
                    9c:47:49:87:5d:ee:77:b5:f3:e2:cd:c2:7f:ab:56:
                    3b:d7:c6:2e:7d:ef:c0:54:24:4b:ce:2c:b0:f3:fb:
                    fd:c9:85:82:4e:5b:c8:34:bf:ca:df:80:75:ec:3b:
                    60:d9:1b:a3:3b:e1:00:82:48:fc:29:8f:48:74:0b:
                    54:65:b5:2c:ff:6b:0a:86:47:7c:0e:cd:4a:5c:fb:
                    25:be:9b:35:ff:60:b7:27:f5:16:e7:13:ea:5f:46:
                    af:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C3:C1:F4:06:03:FB:48:43:BF:B0:F2:05:7A:A3:C2:5B:76:1E:EE
            X509v3 Authority Key Identifier:
                keyid:D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:32:f3:c5:7c:df:27:07:d8:52:23:3b:f2:e2:51:48:5b:c4:
         fe:07:e5:9c:91:03:5e:8e:98:30:eb:06:a9:61:42:56:09:81:
         0c:37:5b:6d:58:bb:96:b3:0b:83:b7:ce:66:4b:50:bd:e5:ca:
         0f:a3:fe:28:a6:93:41:d8:bd:fd:0e:ec:c6:90:97:05:f0:fa:
         86:10:c4:4e:50:c3:23:b1:27:3f:22:8d:53:cd:b7:39:8c:4a:
         b2:18:3d:42:91:4c:95:6e:bf:68:01:c5:6f:e7:b9:bf:87:5c:
         5a:59:53:38:7d:64:0e:4f:10:0b:f2:1b:1f:ef:21:33:40:17:
         c6:c9:31:8b:96:43:7d:50:df:a6:ef:17:78:21:dd:14:09:84:
         0d:92:9e:f1:b8:47:f3:ed:cb:d2:d5:10:30:08:5f:00:5e:57:
         3b:ab:7e:d8:5e:13:96:f8:17:b0:97:90:7e:e7:14:b7:3c:47:
         06:55:a7:44:f5:3d:3f:a8:b9:7a:a9:ff:dd:12:73:39:28:e2:
         62:3c:ec:ec:bd:93:b7:cb:10:cb:e6:da:01:54:3c:39:ba:cc:
         13:74:06:0b:a4:3a:be:35:a0:ff:2d:4f:30:db:af:ed:57:3a:
         2d:5f:90:7e:c4:ae:0c:f0:1e:a2:ab:86:d5:31:6a:b9:71:5e:
         51:43:3b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:13 2026 by rpki-client