This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
File:                     20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft (raw, json)
Hash identifier:          7LPTDnXyTQrELNLvrUtdRdaRh2DMUE4qxvW26mhQkuw=
Subject key identifier:   E0:E5:88:A7:9F:28:BC:37:3E:36:AF:31:F7:3A:60:54:D3:30:55:94
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Certificate issuer:       /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial:       4AF90C6E17F6CD65928D89F3DB052E6A181A5398
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
Manifest number:          0155
Signing time:             Fri 23 Jan 2026 12:25:49 +0000
Manifest this update:     Fri 23 Jan 2026 12:20:49 +0000
Manifest next update:     Wed 28 Jan 2026 18:17:49 +0000
Files and hashes:         1: 3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa (hash: PBLaMVSKpAeS+l0vIKmtM2omSi0up4GGuP3iwTFSVNY=)
                          2: 34352e3138392e3233352e302f32342d3234203d3e20323733303036.roa (hash: l6Px/cfx17p77guA4BogJ/Eyp53nnxwxjHHvSY7vDUM=)
                          3: 323830333a383465303a3a2f33322d3332203d3e20323733303036.roa (hash: Mb2m0k7C4vb1eifoEedb1d+l1x7QSKnJ6BRI9UyKuAw=)
                          4: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl (hash: Kq9suWo7GP4zaCI+fDoEgEN5UEmdYYXSNB0JcOvqsWM=)
                          5: 3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa (hash: 9LJetJ8G5qWqyqJMt7HfccEJLqmf8O70FC7AvkBWuRA=)
                          6: 3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa (hash: /inl45FgHMmimgaoHswEbZwqHUN5h6utXgHufK7wkDk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f9:0c:6e:17:f6:cd:65:92:8d:89:f3:db:05:2e:6a:18:1a:53:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
        Validity
            Not Before: Jan 23 12:20:49 2026 GMT
            Not After : Jan 28 18:17:49 2026 GMT
        Subject: CN=E0E588A79F28BC373E36AF31F73A6054D3305594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a9:58:4e:1a:fc:f5:eb:b1:9f:83:21:d7:27:
                    38:cb:41:30:ae:9d:dd:9c:00:1f:98:1e:61:c8:34:
                    19:c2:4e:45:ba:fd:b5:d8:0f:bb:4b:a1:bc:a5:9b:
                    ad:e4:2d:05:db:ee:da:69:9b:1a:b2:49:d1:ff:bf:
                    cd:09:a6:c8:04:ca:84:59:4a:f9:a5:20:d4:69:b5:
                    7b:2c:38:bf:6d:b7:8a:cd:75:60:e5:02:12:ec:06:
                    28:4f:43:ad:20:ba:14:bf:a5:b2:ba:dc:dc:7f:86:
                    51:77:6c:53:3d:a5:61:f2:de:16:b4:51:9a:b3:03:
                    f7:c2:18:ec:dc:37:e3:10:2f:44:f9:54:ef:1f:7c:
                    c0:78:3e:e6:67:97:df:da:e4:07:67:1e:39:62:68:
                    53:af:4d:3a:4e:af:d0:ed:45:1b:7b:4c:7e:b0:fe:
                    fa:a6:a6:0c:69:d8:41:2f:5a:5e:b7:03:70:2f:b8:
                    66:97:83:f4:9f:57:df:7d:60:25:fd:fc:12:33:6b:
                    c6:66:12:83:c4:15:52:c9:23:ce:9b:21:30:f9:18:
                    1e:ee:e3:f0:1b:2c:93:73:17:5c:b6:6c:fd:ed:ff:
                    ca:9e:8b:e6:83:ce:3d:a1:3a:5b:65:36:99:6e:e4:
                    e4:3b:66:6e:0b:c2:96:ec:dd:52:75:c4:93:4f:88:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E5:88:A7:9F:28:BC:37:3E:36:AF:31:F7:3A:60:54:D3:30:55:94
            X509v3 Authority Key Identifier:
                keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:2d:d4:99:fd:60:8c:7c:cc:88:1f:37:7e:a4:84:ec:fb:3e:
         97:4e:28:dd:51:1f:ec:62:5c:1a:cb:1a:cd:b3:07:f7:3c:33:
         3c:60:46:f1:d2:11:df:6c:28:4a:c2:81:0f:db:b0:b7:e4:d6:
         c3:1d:20:1c:90:54:c2:98:e0:76:9b:01:47:f6:df:8c:5c:ec:
         8c:21:33:27:48:ce:e3:76:5d:30:b9:ba:7f:59:ff:9e:fb:2f:
         b9:66:04:14:64:9b:a3:b8:64:a2:1b:ce:b2:94:a1:15:ee:e0:
         65:1a:68:d7:50:92:86:01:88:e5:f9:90:c9:44:44:5b:82:85:
         a1:ed:ef:1a:18:f9:42:67:fe:d9:85:7f:89:be:46:13:d2:7b:
         f8:d2:f1:5f:6b:d7:b4:82:47:68:1e:d4:d7:52:37:eb:c2:5e:
         b2:98:9a:f9:7b:3f:41:eb:6f:06:d6:72:cd:9b:9d:a3:9b:74:
         76:10:b5:36:2e:97:81:3e:ab:74:cb:7c:63:96:b5:db:ec:6b:
         09:5f:37:2e:b7:b6:f6:4f:c0:02:22:5b:e8:c7:a5:f8:34:22:
         c2:0a:19:ff:ce:49:af:ba:ac:85:85:f8:ee:5a:79:79:59:25:
         8c:4b:9f:d5:62:a1:b8:7d:2e:73:b2:66:2f:c7:2d:1c:b8:f3:
         9d:83:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----