This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
File:                     A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft (raw, json)
Hash identifier:          X1kthmzjUhKzQK33c14+8W69ZaoSf3hgpv3G7Tpb2g8=
Subject key identifier:   56:4A:B8:74:80:8E:8A:38:B6:EA:1F:52:73:E0:37:E4:54:3A:E9:65
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       3A43BDFBA26E21DEEDDBB2E8749E7E9515291281
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
Manifest number:          0157
Signing time:             Sat 10 Jan 2026 20:24:36 +0000
Manifest this update:     Sat 10 Jan 2026 20:19:36 +0000
Manifest next update:     Fri 16 Jan 2026 02:32:36 +0000
Files and hashes:         1: 3139302e3130372e3234302e302f32342d3234203d3e20323634363838.roa (hash: 4AAtgangznWb64TU5QVpB1sqsHivcRb57S7lRi0JA70=)
                          2: 3139302e3139362e3233302e302f32342d3234203d3e20323634363838.roa (hash: BS+u7sbiqsY86ALoorXtTqaQKTI/cRYYUBP/j+FgLag=)
                          3: 3139302e3139362e3233322e302f32342d3234203d3e20323634363838.roa (hash: eYS+d15/4aoEmtgMInU5L3BxSKD4MrEjwIIBXcI5XrA=)
                          4: 3139302e3130372e3234372e302f32342d3234203d3e20323634363838.roa (hash: Q0HkAfRYpdZkCMQgEZifAIjs/J2ktXoUb7dcQpJiw9o=)
                          5: 3139302e3139362e3232382e302f32322d3232203d3e20323634363838.roa (hash: /plBcZTMN5PU/Vpi7/FJb4FKnXQkIvYnO/mJ+lZ1Hlc=)
                          6: 3139302e3139362e3233332e302f32342d3234203d3e20323634363838.roa (hash: zBCLe9UX2wwfcepCQnskAyycLuiICT7o16/bqzwfc7g=)
                          7: 3139302e3139362e3233362e302f32342d3234203d3e20323634363838.roa (hash: ff8CJlWiogxLWSzx3XnOPdO0beeiJX03t00y6I1Jy8s=)
                          8: 3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa (hash: 2qyavwEjPquU1Q523bpdF4qJsQFHl3BzGZK4Fl8cvMw=)
                          9: 3139302e3139362e3232342e302f32302d3230203d3e20323634363838.roa (hash: XGZp+7yWszc41l8aCWKKaQUUmP6eT13WEZjdjMq5z08=)
                          10: 3139302e3139362e3233382e302f32342d3234203d3e20323634363838.roa (hash: lf+qe/BvpvNo4FyNmnP0hrLpfQYIS9A35RRV9WO67Ms=)
                          11: 3139302e3130372e3234302e302f32312d3234203d3e20323634363838.roa (hash: fi9R+KqZsT2OJqvMNRaMYr4Tgr+3uhBqOoMQP1mLwpw=)
                          12: 3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa (hash: lluQWXLtT4JZchjWAptCT5AS7U9IVePUVSRjaAfqKHg=)
                          13: 3139302e3139362e3233342e302f32342d3234203d3e20323634363838.roa (hash: Kcy0VeGlXswj//6xarU3ULosIx/O5Qn8ivN68cF+Jvs=)
                          14: 3139302e3139362e3232382e302f32342d3234203d3e20323634363838.roa (hash: ySSDqy0SwhG6Cngpp+VjUwfP29n2b/iAmAcXfSv0LKg=)
                          15: 3139302e3139362e3233372e302f32342d3234203d3e20323634363838.roa (hash: OJN78T2ofDoOw4YeuNqBs/4E0LyCUPwePzZrNOm095E=)
                          16: 3139302e3130372e3234362e302f32342d3234203d3e20323634363838.roa (hash: V67oiEO2tX8QAa62esaZJJP5I9nsH/4Uve+NLp8EQkQ=)
                          17: 3139302e3139362e3232392e302f32342d3234203d3e20323634363838.roa (hash: QKZXhHz174EKw4+d0RXkbOwgP7hrNuOc5Mp+1Mazxm8=)
                          18: 3139302e3139362e3232362e302f32342d3234203d3e20323634363838.roa (hash: Q1DiLfNg0e7ivyueNJvQeVaJfscvJfa0QcTfCQLxq4o=)
                          19: 3139302e3139362e3232342e302f32342d3234203d3e20323634363838.roa (hash: wPH8lsnnYP5MnPvu/XdW/mCbOi5pewWhshVLa40xqqY=)
                          20: 3139302e3130372e3234322e302f32342d3234203d3e20323634363838.roa (hash: M4FVVdOKj3IcGmXlkraoxK9jwqValAjuUGHGBt3Gw7g=)
                          21: 3139302e3130372e3234352e302f32342d3234203d3e20323634363838.roa (hash: v107hEcLYJcgvFd0FYk2jNBcr4+jnxlLlKWakiFOtFE=)
                          22: 3139302e3139362e3233352e302f32342d3234203d3e20323634363838.roa (hash: D/WkHkh5YKzbsZE98lFM1oqck9P9v/Itlgem3WKfeJM=)
                          23: 3139302e3130372e3234312e302f32342d3234203d3e20323634363838.roa (hash: WvFuSLD0+9IM0FPIPuKusNYC8+R0MvXVlyz/f9vtXSk=)
                          24: 3139302e3130372e3234342e302f32342d3234203d3e20323634363838.roa (hash: oGpKeeUc5UUtqKkSjJtqE/Zuqw85/p1zhawUeNkBqYM=)
                          25: A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl (hash: obMARPTRIQjYnGrh7KEe7zaTG27c6terd7EQmx4gCqI=)
                          26: 3139302e3139362e3232352e302f32342d3234203d3e20323634363838.roa (hash: dok3tqyHTijMsPpDlI4/md8q6OydWDuyISLsevkOlUk=)
                          27: 3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa (hash: OrjJrQINz2tyxgyIin9ciu2j8UzQ7L8l5EUDsTGeXLQ=)
                          28: 3139302e3139362e3233392e302f32342d3234203d3e20323634363838.roa (hash: XffSnS2lsjH1xTmdSjw2o7nsi+uaRTygSrGsw3mzfx0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:43:bd:fb:a2:6e:21:de:ed:db:b2:e8:74:9e:7e:95:15:29:12:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Jan 10 20:19:36 2026 GMT
            Not After : Jan 16 02:32:36 2026 GMT
        Subject: CN=564AB874808E8A38B6EA1F5273E037E4543AE965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:d7:85:d5:5d:02:23:2c:21:70:20:2d:42:
                    66:16:30:05:2f:8f:3b:d3:42:7b:c4:2a:6a:dd:7f:
                    64:01:95:e7:d8:9f:41:54:cf:f5:d1:6e:8b:cc:4c:
                    02:c6:54:dc:15:35:37:f5:24:d0:68:d5:5d:80:19:
                    b3:79:f0:bf:53:a7:ff:15:bc:a9:18:21:a4:68:30:
                    75:2b:b0:0d:88:fb:3d:82:54:23:96:a7:42:a8:e3:
                    02:fc:97:da:5e:79:f8:2a:70:18:88:6f:cf:10:91:
                    2a:16:0f:80:8d:1d:f8:4a:14:3b:08:80:03:eb:5a:
                    9f:b5:18:55:fc:f2:e4:a6:f2:0d:76:dd:d2:d7:79:
                    5a:8a:d8:4a:49:c1:17:f8:67:de:d9:85:18:5c:f7:
                    3f:f7:c4:0f:8b:87:3f:35:e2:c4:e3:ef:48:d3:0e:
                    eb:a8:15:a2:5b:e4:5d:65:7b:5b:b8:eb:21:c1:de:
                    7f:e3:37:aa:87:89:22:a1:f2:52:18:e8:c8:8e:66:
                    c9:7b:2b:ac:08:1b:76:f4:d2:a0:29:3e:64:b2:e7:
                    23:42:f7:66:0c:5e:94:7c:86:91:f1:84:57:1f:a7:
                    9c:64:b1:6f:ac:5b:8c:36:03:8d:f8:b8:50:b7:47:
                    9c:b1:fe:a0:80:85:7a:6b:af:51:7d:9f:b2:6e:09:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4A:B8:74:80:8E:8A:38:B6:EA:1F:52:73:E0:37:E4:54:3A:E9:65
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:5f:25:a6:5c:3f:fc:53:fa:04:b6:e6:48:21:69:91:00:49:
         d1:30:64:be:96:ed:2a:74:dd:72:47:7f:97:6f:b5:92:0e:a5:
         92:b4:04:e3:33:1b:f7:ad:78:3d:39:ef:af:48:ad:97:93:f6:
         29:5f:50:bb:29:0f:3a:95:ac:8b:08:09:ae:ce:43:15:12:19:
         ff:90:4e:46:83:59:92:f0:4b:3d:f5:a0:9f:a7:7c:39:60:1c:
         2a:8c:11:dd:e3:1c:76:fe:cb:9b:39:cc:4d:58:24:fd:6b:ec:
         67:24:f4:d1:75:ea:54:b7:74:2f:2c:53:76:48:8e:06:1b:b3:
         9a:b9:8c:8a:39:3b:a7:ed:5b:92:26:67:08:61:6d:38:13:9b:
         91:db:28:cb:5c:3b:6a:c7:f7:82:f5:3d:d6:91:96:1f:e8:de:
         20:a8:55:d0:c3:f7:bc:ea:af:06:96:f8:82:00:78:89:c8:7a:
         f2:8c:6d:a3:29:a2:3b:09:3f:b2:16:29:40:1d:04:e0:b9:e9:
         1c:aa:cb:1d:34:66:9b:41:f3:83:e8:66:08:76:db:fb:db:1d:
         9c:73:f5:fb:48:84:f1:fa:0a:bd:71:02:50:99:71:0f:aa:f0:
         75:e6:9c:d9:fd:2d:71:a1:f8:84:ea:da:28:50:3c:cb:49:50:
         c0:a0:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:21:22 2026 by rpki-client