This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
File:                     D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft (raw, json)
Hash identifier:          UH2CcMNHM0sLp43GeeA7qNKU3WZB6+aQyBJQy3N0hI4=
Subject key identifier:   7F:A6:04:F4:9C:43:B4:05:C5:EF:AC:C8:F0:67:10:62:8F:45:4D:AE
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       620AEDC7B3ABE64680E2FABA87A171FF29E42695
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
Manifest number:          0161
Signing time:             Thu 22 Jan 2026 23:21:39 +0000
Manifest this update:     Thu 22 Jan 2026 23:16:39 +0000
Manifest next update:     Wed 28 Jan 2026 12:35:39 +0000
Files and hashes:         1: D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl (hash: +Nbh9M1jcBkcVae7g98UUohbx30NXRzuS1GpynoDqxc=)
                          2: 3230302e35302e3135342e302f32342d3234203d3e20323733313131.roa (hash: XaHCApzJcXFCm+X2NfUeGZoV56JdbktQI+iF2ku8n+Y=)
                          3: 323830333a323835303a3a2f33322d3438203d3e20323733313131.roa (hash: nm1/JV+H51+tPU6WsvB6c1Y+U18+q926bawGupsbi4Q=)
                          4: 3230302e35302e3135322e302f32332d3233203d3e20323733313131.roa (hash: o9Kx7EjrpdORa0+u2Z8vtqBeO+rsHev//e8Q5Fd0fmw=)
                          5: 3230302e35302e3135352e302f32342d3234203d3e20323732383732.roa (hash: r6QdnU0s3HLwXhmSlEg2rPuFaGC9tqizh8btNJswYAs=)
                          6: 3230302e35302e3135332e302f32342d3234203d3e20323733313131.roa (hash: w0JIK8/X4fFR6iQhLqJjBdIBCRwqS+IZJysffWmaRa8=)
                          7: 3230302e35302e3135322e302f32342d3234203d3e20323733313131.roa (hash: EJzf6mLoLR96n6XoxESmv1IcnH91n3PMdZ9SlWvdmOY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0a:ed:c7:b3:ab:e6:46:80:e2:fa:ba:87:a1:71:ff:29:e4:26:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: Jan 22 23:16:39 2026 GMT
            Not After : Jan 28 12:35:39 2026 GMT
        Subject: CN=7FA604F49C43B405C5EFACC8F06710628F454DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:47:4b:84:84:20:c7:73:1d:6f:2d:7b:6e:
                    eb:81:b7:cc:cd:4a:03:de:42:6d:9e:ec:de:f0:92:
                    0c:27:60:f2:eb:a1:86:83:00:d1:82:32:89:b9:34:
                    7f:8f:30:74:97:23:47:93:e5:07:6e:13:9e:e7:97:
                    db:6d:e7:ed:d6:cf:40:d2:3f:25:15:36:1a:e3:7c:
                    4a:30:b5:1c:01:a7:34:04:fb:f8:54:b2:41:4b:fd:
                    63:97:a7:2e:e8:a2:4f:9c:c7:09:ed:b3:9f:85:be:
                    db:3f:9b:25:41:7e:09:23:39:4f:b1:41:b8:55:07:
                    b5:6f:ec:d3:98:10:b5:4b:17:43:a4:c7:c1:ff:f3:
                    34:5c:8e:71:f8:e4:ba:74:8a:df:eb:05:b2:21:a6:
                    48:65:6d:20:fa:e2:7f:ca:0e:c8:7f:df:f5:77:80:
                    a7:b9:5c:58:2c:5e:48:bf:a6:48:b5:6d:45:f5:d8:
                    5b:94:4d:92:6f:26:56:60:48:95:9f:cd:cd:04:20:
                    ae:b3:7e:e7:82:c1:84:b3:9c:07:82:5c:96:22:fc:
                    ae:31:5d:e0:a5:d5:13:39:ab:8c:2f:d2:ac:00:64:
                    a1:99:a2:ec:48:eb:01:a6:ab:c4:11:24:6c:be:01:
                    40:b7:fb:78:5d:63:c1:5a:30:49:b4:96:13:56:3f:
                    0f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A6:04:F4:9C:43:B4:05:C5:EF:AC:C8:F0:67:10:62:8F:45:4D:AE
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:7e:5b:38:7c:6b:13:52:ed:97:61:26:c0:7e:82:63:74:c7:
         46:00:8a:41:a5:e5:3f:ec:f8:a4:f3:96:09:a5:d4:db:35:04:
         55:41:95:7b:ae:47:31:fa:71:17:52:6b:b8:8f:80:8f:aa:10:
         6f:39:a6:15:ca:26:9b:ff:e8:43:50:f7:7a:0a:79:43:b1:52:
         61:04:86:18:06:29:28:f0:3f:98:6e:b1:d3:f9:a6:42:4b:d4:
         a2:b4:e5:10:80:a6:51:f7:b2:f4:c3:dd:7e:3a:0d:bd:8e:73:
         63:f9:a3:7f:ed:91:7c:82:31:ef:d3:53:da:5a:f2:a9:01:cf:
         6b:fd:54:c0:2a:95:15:d1:a1:8a:43:35:56:f5:bc:1b:3c:47:
         75:13:55:34:59:f2:28:99:26:86:71:93:75:aa:83:e1:92:8e:
         22:d7:e8:09:1b:f2:fe:91:9c:c3:16:66:ac:ca:a0:8c:7c:bd:
         fb:cc:fb:78:11:5a:f6:ce:5e:12:34:d3:53:1a:0f:a8:cc:d9:
         db:6d:bc:a8:53:eb:3d:89:86:6c:bd:fb:76:9e:fe:88:ad:0e:
         74:00:94:99:55:6b:98:e0:f8:82:47:cf:b2:4a:d0:73:af:9b:
         67:71:7e:0a:29:71:71:83:7f:2c:ba:f5:ac:74:d9:cb:20:c4:
         ff:b7:e3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:44 2026 by rpki-client