This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
File:                     D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft (raw, json)
Hash identifier:          804xaKx8Obyls2kjctH39sZOKACZTiUQuSGfOQ7S99E=
Subject key identifier:   35:6F:54:C7:BE:AF:7E:36:4C:93:0F:81:D0:59:CD:C4:46:10:9C:78
Authority key identifier: D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF
Certificate issuer:       /CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
Certificate serial:       0927D72EE488B96344FBF95F3C049EA549509D87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
Manifest number:          0155
Signing time:             Sat 10 Jan 2026 18:47:53 +0000
Manifest this update:     Sat 10 Jan 2026 18:42:53 +0000
Manifest next update:     Fri 16 Jan 2026 09:35:53 +0000
Files and hashes:         1: 3133312e3130382e3134302e302f32342d3234203d3e203631343930.roa (hash: wXy/+m3vHD1doNPtgFnEHpYTxBDSeeSA8VwZ6tDvngA=)
                          2: 3133312e3130382e3134302e302f32322d3232203d3e203631343930.roa (hash: 3l1sQmFDhXK1DeQIlcLshu/CBzPCAl5ef+fyeJ7zEvo=)
                          3: 3133312e3130382e3134332e302f32342d3234203d3e203631343930.roa (hash: GUYRfUDp4zx/WxYLKxY0/lEbFX0kAMIp0LNSAveRtRw=)
                          4: 3133312e3130382e3134312e302f32342d3234203d3e203631343930.roa (hash: 9eXRY37KbKzffSoiguSwhFB8Y7YRbL56tmiD5WyS/U8=)
                          5: 323830333a323338303a3a2f33322d3332203d3e203631343930.roa (hash: Ak3xXoHbWd0mnVPEOjNPO1RTUut2ivf1/UQFk1JSd0E=)
                          6: 3133312e3130382e3134322e302f32342d3234203d3e203631343930.roa (hash: mkXSPsyUxVmTObL8MQkMLxKBc2+Otz7jxKTrXcsj2nI=)
                          7: D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl (hash: 3syOayYNwD2sd4cxA4fIdvTZ6q69Cef0wvpYObDm9sM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 09:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:27:d7:2e:e4:88:b9:63:44:fb:f9:5f:3c:04:9e:a5:49:50:9d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
        Validity
            Not Before: Jan 10 18:42:53 2026 GMT
            Not After : Jan 16 09:35:53 2026 GMT
        Subject: CN=356F54C7BEAF7E364C930F81D059CDC446109C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:28:44:98:18:5e:39:13:2b:71:4d:45:65:b1:
                    b2:b8:df:8b:74:89:b8:41:d6:55:8d:e3:46:2e:be:
                    bb:40:f2:2b:0f:15:6c:57:2e:ea:b1:d0:8b:bb:b1:
                    ae:f3:b7:f2:4b:4f:a9:94:80:17:12:bc:8e:1d:e8:
                    8d:37:3a:ed:2d:61:7d:bd:d2:1f:0d:1c:fb:79:1b:
                    a2:cc:39:80:41:5b:fc:c1:f0:98:e2:de:38:74:ae:
                    d5:87:3e:ed:01:3a:84:de:90:a4:57:70:f9:e6:07:
                    e3:78:68:0f:be:88:e4:d2:b5:d1:2c:05:e2:50:3b:
                    d7:d0:55:35:8a:89:8d:b6:5c:f5:49:e9:a3:8f:bc:
                    02:8a:3a:43:9d:14:20:18:04:13:1d:40:44:bd:63:
                    42:72:cd:19:ad:f3:c2:1a:87:37:dd:6d:3e:b9:4d:
                    71:3f:b4:80:8d:0c:03:4c:aa:db:ff:ad:89:58:bc:
                    90:e8:5b:d2:84:5f:6e:1e:2c:49:e3:01:c0:42:3c:
                    ad:37:dc:5d:b4:c4:d5:21:3e:b6:68:5e:18:e5:c0:
                    3e:16:07:7c:e4:0d:09:61:e5:0f:ac:a6:56:f7:76:
                    c9:d9:8b:aa:41:23:b7:0a:c8:ad:d8:05:47:32:41:
                    01:74:25:d9:d4:98:2e:34:45:c5:43:9e:90:b4:8c:
                    f7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6F:54:C7:BE:AF:7E:36:4C:93:0F:81:D0:59:CD:C4:46:10:9C:78
            X509v3 Authority Key Identifier:
                keyid:D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fc:22:43:69:b7:65:94:1b:ae:d4:bc:04:2f:57:84:57:ca:
         87:ed:46:a8:8a:9a:a8:5c:14:b6:f5:53:35:12:28:38:2a:d3:
         93:16:3a:e0:84:80:d7:9f:59:50:bc:33:19:f0:5f:40:ec:78:
         df:59:90:6b:ea:c2:54:ac:1c:11:09:e5:11:f7:42:63:07:86:
         d4:a8:6e:1e:eb:73:0e:96:91:44:69:a7:01:14:c0:15:92:2b:
         a0:e5:1c:16:58:8b:ed:92:c3:16:ab:49:9a:0f:6d:9f:2f:af:
         02:72:37:56:9a:49:25:3d:27:b5:0f:67:c1:f1:37:8b:57:b5:
         c5:46:d1:82:92:3b:b9:b9:2c:af:e6:02:1d:9c:88:31:f4:08:
         91:07:ac:9b:38:26:a5:1c:4e:95:ba:54:1d:a7:87:59:06:b0:
         10:0e:53:39:7b:80:b3:dc:cc:e5:74:5f:27:d2:7b:da:88:cf:
         c8:21:36:b5:64:0e:be:6d:77:7a:b9:91:3e:42:e4:17:ff:b2:
         bb:16:70:29:87:dd:1e:41:65:a2:52:38:d4:a3:17:ad:d0:0e:
         8e:cf:1b:1b:52:71:2f:1d:89:9e:6a:53:c1:18:ec:f2:39:93:
         75:43:12:d3:e1:98:dd:34:6a:5d:d7:98:eb:7b:35:9a:3a:56:
         f2:b9:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:14:42 2026 by rpki-client