This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
File:                     D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json)
Hash identifier:          HOimOShXon+gCPrg+CqTYx3u2Fx7zOQqrgk4fYztXtE=
Subject key identifier:   A7:94:18:A0:DD:D4:62:1F:8E:95:45:54:3C:4C:C7:A6:6C:64:35:A0
Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9
Certificate issuer:       /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
Certificate serial:       2AF4B296B491152A736630F5CFABA639408851A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
Manifest number:          0157
Signing time:             Sun 25 Jan 2026 02:26:48 +0000
Manifest this update:     Sun 25 Jan 2026 02:21:48 +0000
Manifest next update:     Fri 30 Jan 2026 04:39:48 +0000
Files and hashes:         1: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: 4LFf4uRlMxMf2oudTQtCgNr/ddYwiQolDdMBxGwEJcg=)
                          2: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: Um86cEkZc1cblKMuUA3/7tQwstJEkeehuPwQs3wj8OI=)
                          3: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: P2P+KEmBtde+JAnLZFBft9OuaJMTn8R3lEx1OKNqYZE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Jan 2026 02:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f4:b2:96:b4:91:15:2a:73:66:30:f5:cf:ab:a6:39:40:88:51:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
        Validity
            Not Before: Jan 25 02:21:48 2026 GMT
            Not After : Jan 30 04:39:48 2026 GMT
        Subject: CN=A79418A0DDD4621F8E9545543C4CC7A66C6435A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:22:4b:fe:06:b0:bf:43:c3:62:0c:d8:b0:
                    3e:1c:ee:f9:9a:6a:f2:4e:a9:b6:c0:7c:3a:98:84:
                    ee:07:5c:38:b2:75:8d:79:3d:d6:5e:bc:8b:f7:14:
                    a0:3d:53:58:eb:72:d9:11:78:0c:be:76:47:f3:e5:
                    37:52:e2:5e:9f:9b:c8:5b:73:49:2b:31:72:2c:14:
                    ad:fd:84:d7:00:54:c6:83:10:7b:81:ac:e2:ac:43:
                    60:1f:0e:87:3d:a7:50:b9:5a:35:41:c2:a4:a7:98:
                    32:47:95:0c:e9:ca:26:a3:1f:43:cb:05:d8:42:e0:
                    3a:0e:71:9d:7c:a3:95:de:b3:90:9d:73:52:20:fc:
                    e9:e9:37:8e:8a:91:87:f8:54:72:4f:5a:10:8a:28:
                    c0:da:be:00:31:8a:0d:d6:c7:1e:2f:96:30:a1:de:
                    b5:ac:35:3e:1b:ac:08:ca:02:57:c3:81:1f:0a:6d:
                    98:4f:02:4f:da:ad:f7:4f:e1:08:1b:e2:1c:03:7b:
                    85:e3:5b:da:d2:b0:f8:b2:6f:16:5d:f2:63:9a:a1:
                    e6:00:bf:29:08:bb:08:d5:db:f1:58:98:84:44:eb:
                    e5:fb:55:ce:71:89:81:3e:b6:b4:74:7e:65:71:ed:
                    52:08:49:c2:fa:37:b2:c5:65:84:b8:10:4d:48:d0:
                    b7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:94:18:A0:DD:D4:62:1F:8E:95:45:54:3C:4C:C7:A6:6C:64:35:A0
            X509v3 Authority Key Identifier:
                keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:77:c4:87:79:7e:ce:66:8b:6e:ef:12:80:48:45:10:4b:
         f1:9d:5d:47:f9:42:9f:6a:49:58:14:a6:88:75:c2:57:13:d4:
         78:b1:b6:5a:23:48:36:6a:63:7f:c3:3c:3d:e7:4b:90:3d:11:
         37:37:f7:93:ee:e2:30:09:7a:68:e1:96:ee:7a:02:6d:e6:6d:
         34:13:1a:76:3b:e4:82:e8:15:dd:5b:d4:9f:e3:65:d6:e0:1d:
         9a:9f:c8:b8:7f:a2:e9:bc:47:7c:e4:82:da:d6:21:cc:f2:3e:
         c8:a0:23:61:d3:98:38:df:b0:a2:70:27:37:ab:69:00:77:7c:
         57:3e:d5:73:0f:bf:aa:55:9e:0b:08:68:9b:2a:6b:75:00:f3:
         8d:c6:b4:b0:5f:40:3f:ea:bb:6d:14:dc:28:1c:17:59:91:a1:
         ca:4f:56:39:f5:18:b2:7b:92:43:8a:25:2d:90:a2:98:d7:d8:
         9e:61:a4:a1:cb:b5:05:a0:30:69:3f:65:d7:91:a4:0d:65:62:
         0f:02:b9:e0:69:da:c1:fa:7b:1b:f2:0c:e3:48:2e:75:ff:8b:
         42:c2:33:23:4d:9e:5c:a8:e6:98:80:61:eb:bd:bd:89:e8:22:
         2a:3e:0a:4b:dd:e7:bc:09:cb:23:e1:e3:d8:64:9c:1d:3d:30:
         cf:1f:5a:28
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUKvSylrSRFSpzZjD1z6umOUCIUaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG
MzU5RkFEOTAeFw0yNjAxMjUwMjIxNDhaFw0yNjAxMzAwNDM5NDhaMDMxMTAvBgNV
BAMTKEE3OTQxOEEwRERENDYyMUY4RTk1NDU1NDNDNENDN0E2NkM2NDM1QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOrCJL/gawv0PDYgzYsD4c7vma
avJOqbbAfDqYhO4HXDiydY15PdZevIv3FKA9U1jrctkReAy+dkfz5TdS4l6fm8hb
c0krMXIsFK39hNcAVMaDEHuBrOKsQ2AfDoc9p1C5WjVBwqSnmDJHlQzpyiajH0PL
BdhC4DoOcZ18o5Xes5Cdc1Ig/OnpN46KkYf4VHJPWhCKKMDavgAxig3Wxx4vljCh
3rWsNT4brAjKAlfDgR8KbZhPAk/arfdP4Qgb4hwDe4XjW9rSsPiybxZd8mOaoeYA
vykIuwjV2/FYmIRE6+X7Vc5xiYE+trR0fmVx7VIIScL6N7LFZYS4EE1I0Lc7AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUp5QYoN3UYh+OlUVUPEzHpmxkNaAwHwYDVR0j
BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1
MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB
RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG
NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0
MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wL0Q4NkYwQzBCREZEQTcxQUZCNEY3NTc0
N0Y3NkE5QUY3RjM1OUZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVoXfEh3l+zmaLbu8SgEhFEEvx
nV1H+UKfaklYFKaIdcJXE9R4sbZaI0g2amN/wzw950uQPRE3N/eT7uIwCXpo4Zbu
egJt5m00Exp2O+SC6BXdW9Sf42XW4B2an8i4f6LpvEd85ILa1iHM8j7IoCNh05g4
37CicCc3q2kAd3xXPtVzD7+qVZ4LCGibKmt1APONxrSwX0A/6rttFNwoHBdZkaHK
T1Y59Riye5JDiiUtkKKY19ieYaShy7UFoDBpP2XXkaQNZWIPArngadrB+nsb8gzj
SC51/4tCwjMjTZ5cqOaYgGHrvb2J6CIqPgpL3ee8Ccsj4ePYZJwdPTDPH1oo
-----END CERTIFICATE-----