This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft
File:                     3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft (raw, json)
Hash identifier:          hDXyRPegci4Wdi12+RVKMic/vncklzuCn6a2z6HYkMc=
Subject key identifier:   0C:F8:9E:42:30:B4:D9:8E:75:5D:28:11:CC:9C:60:2E:AB:BB:F1:AC
Authority key identifier: 39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4
Certificate issuer:       /CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
Certificate serial:       4A3E46C9463D81CC5D218D9F681B4BA6568278A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft
Manifest number:          0156
Signing time:             Fri 23 Jan 2026 12:20:45 +0000
Manifest this update:     Fri 23 Jan 2026 12:15:45 +0000
Manifest next update:     Wed 28 Jan 2026 13:09:45 +0000
Files and hashes:         1: 34352e37302e3230322e302f32332d3234203d3e203532343638.roa (hash: GiyELPiBRmq0a4NX4zCALmTOvy6joBfe3/N5QL92m/I=)
                          2: 323830333a626332303a3a2f33322d3438203d3e20323634363638.roa (hash: a5ycwLhnVVxe2VnaBoI+o+Xl+68YGKgRgslBdLTI1js=)
                          3: 3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl (hash: suQtHhVujm6LWwXE9xbFdSmG5XVCJbNuGk4KcuzC/58=)
                          4: 34352e37302e3230322e302f32332d3234203d3e20323634363638.roa (hash: KeLbQxNd66iMhHZZSuq3o8XEpTdend3WzIPhdXYK6N4=)
                          5: 323830333a626332303a3a2f33322d3438203d3e203532343638.roa (hash: BxShP4F4YvVOxtomzhpqF76WqydwZ7MB/bp9O4r3/MQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3e:46:c9:46:3d:81:cc:5d:21:8d:9f:68:1b:4b:a6:56:82:78:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
        Validity
            Not Before: Jan 23 12:15:45 2026 GMT
            Not After : Jan 28 13:09:45 2026 GMT
        Subject: CN=0CF89E4230B4D98E755D2811CC9C602EABBBF1AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:87:9b:65:9c:ac:64:ef:97:04:b1:19:7f:
                    55:d0:b8:9f:d9:74:e9:93:86:52:44:63:9b:c4:2b:
                    b3:47:01:d7:72:f1:f3:57:35:2c:95:73:04:56:a1:
                    99:2c:17:09:a6:e7:66:7a:f7:4e:28:3c:68:0e:90:
                    5d:3a:39:88:3a:1c:f6:9b:a7:a1:5f:45:78:83:31:
                    32:84:ed:7b:97:e9:f7:26:10:bd:c8:43:2b:40:c8:
                    02:a4:c7:e9:51:0a:68:98:09:5e:f6:3d:54:4e:c7:
                    e4:c3:c9:0d:f0:31:c4:bf:76:db:f8:cb:bc:62:a2:
                    1a:b5:7e:8a:98:19:f9:e8:64:aa:43:63:67:49:a7:
                    ba:37:a9:60:ee:1d:f3:57:82:e0:21:c1:64:f2:8d:
                    cf:74:71:17:d5:14:67:12:eb:49:4a:6b:b1:f3:7e:
                    23:b8:f8:7a:f6:28:cd:f2:43:3d:69:f7:0d:36:c6:
                    d0:da:28:9b:10:69:39:1f:78:a9:2f:13:22:0c:35:
                    0e:74:67:1c:64:2a:30:ac:6c:fb:8d:d3:a7:35:2a:
                    8b:5f:78:64:eb:08:ed:b2:37:6a:e8:01:14:90:11:
                    e2:7e:a5:0b:63:14:e0:47:4b:87:9f:23:95:bb:03:
                    73:5b:60:c8:06:25:e1:c7:96:33:4f:77:2e:d0:b6:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F8:9E:42:30:B4:D9:8E:75:5D:28:11:CC:9C:60:2E:AB:BB:F1:AC
            X509v3 Authority Key Identifier:
                keyid:39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d8:d7:f9:db:d7:e9:49:9a:cf:64:83:33:a5:73:f7:68:af:
         3d:fa:a8:d5:19:46:81:c5:7b:e3:c9:2e:1e:39:bc:33:13:47:
         c8:2d:49:91:10:6d:d3:7e:4d:c4:c3:4d:53:77:e1:1f:64:da:
         f9:24:2f:cc:8e:eb:14:7d:55:8a:3d:2b:82:a1:9e:28:00:48:
         51:c7:5f:2c:2e:9b:c1:db:77:ba:68:27:6f:f9:e7:23:5a:1d:
         58:9b:de:3f:9a:db:68:b0:cc:35:d4:01:fa:76:ce:68:a6:8f:
         61:89:0a:58:9f:6c:9c:83:3a:7f:72:49:5b:2c:21:e0:81:ed:
         bb:b7:e9:0c:ef:a9:be:64:56:2d:95:67:f5:2a:03:fd:10:d5:
         aa:c0:e3:3c:d5:af:6b:57:e2:84:9a:94:ad:44:c5:ba:0b:3e:
         d9:f1:00:51:52:9e:c6:83:af:ef:89:3b:4b:58:bc:89:52:67:
         3f:4a:b3:7b:b6:7e:38:10:85:ce:26:27:44:63:43:eb:2f:4c:
         3b:f8:62:72:fa:24:8d:22:46:60:b0:82:e7:e7:67:0a:69:76:
         1d:e9:ec:57:ae:5f:27:12:16:de:46:f1:6d:06:51:a0:8a:0a:
         d4:8f:93:e4:02:6c:29:b2:db:a3:d6:9f:64:d1:09:29:66:40:
         ad:73:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----