This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
File:                     20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft (raw, json)
Hash identifier:          bQYyUByWhSM6pNEcM7T/KRH9PgO63UJoOPNxsQaBvGM=
Subject key identifier:   4E:FA:DE:79:E7:3C:89:2D:CF:53:83:22:48:DE:2A:71:36:66:28:FB
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Certificate issuer:       /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial:       19191A07457032CC68741E8888B2BAC8778E9B2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
Manifest number:          0150
Signing time:             Mon 12 Jan 2026 02:02:24 +0000
Manifest this update:     Mon 12 Jan 2026 01:57:24 +0000
Manifest next update:     Sun 18 Jan 2026 00:10:24 +0000
Files and hashes:         1: 34352e3138392e3233352e302f32342d3234203d3e20323733303036.roa (hash: l6Px/cfx17p77guA4BogJ/Eyp53nnxwxjHHvSY7vDUM=)
                          2: 3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa (hash: 9LJetJ8G5qWqyqJMt7HfccEJLqmf8O70FC7AvkBWuRA=)
                          3: 323830333a383465303a3a2f33322d3332203d3e20323733303036.roa (hash: Mb2m0k7C4vb1eifoEedb1d+l1x7QSKnJ6BRI9UyKuAw=)
                          4: 3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa (hash: PBLaMVSKpAeS+l0vIKmtM2omSi0up4GGuP3iwTFSVNY=)
                          5: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl (hash: ZUJbavUm2fYeYUJEc3oHiha9yZuieBq7kNiMA7ZVI+g=)
                          6: 3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa (hash: /inl45FgHMmimgaoHswEbZwqHUN5h6utXgHufK7wkDk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 00:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:19:1a:07:45:70:32:cc:68:74:1e:88:88:b2:ba:c8:77:8e:9b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
        Validity
            Not Before: Jan 12 01:57:24 2026 GMT
            Not After : Jan 18 00:10:24 2026 GMT
        Subject: CN=4EFADE79E73C892DCF53832248DE2A71366628FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:f3:77:27:74:f9:f4:27:bf:de:f2:a9:27:
                    1f:b2:a6:37:51:ae:27:b3:6d:bc:22:9b:9c:c9:37:
                    c3:40:c7:4a:b7:4b:57:ab:b4:69:fd:05:74:c7:98:
                    e2:d8:0e:9b:9e:e0:6d:a0:ed:2c:36:f9:6e:98:1a:
                    34:6a:c0:b3:1c:3e:f9:ac:3d:21:fd:05:12:48:12:
                    1f:57:87:88:e2:f5:b8:d8:e5:5d:59:f7:dd:3a:db:
                    24:f8:09:5e:7c:1e:30:31:1f:d7:81:ac:8f:3e:fb:
                    66:66:a1:0b:e6:6c:d3:fb:b3:83:b1:d1:55:ed:80:
                    66:f4:aa:a7:be:2e:e4:83:d7:21:dd:31:d8:e9:c3:
                    a5:40:e5:d6:77:58:2a:83:f9:9a:c6:3e:0e:d2:25:
                    95:01:2a:d7:02:cd:83:d2:a4:e1:c9:b4:23:0f:70:
                    2c:a8:a5:a7:e0:0d:e5:50:a8:f4:78:e0:56:31:5b:
                    87:61:83:df:24:aa:eb:d3:92:30:12:a8:f6:c0:85:
                    d7:01:04:36:d5:0b:9a:71:61:85:41:e5:ca:03:05:
                    f0:20:6c:1c:03:a5:2b:86:b6:8d:30:30:3d:ca:ed:
                    6c:6d:0a:a9:5d:9f:cc:1f:e1:2f:80:0a:d5:15:41:
                    0a:66:5e:a2:d9:dc:44:22:ab:f3:41:15:34:c7:4d:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FA:DE:79:E7:3C:89:2D:CF:53:83:22:48:DE:2A:71:36:66:28:FB
            X509v3 Authority Key Identifier:
                keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:09:15:ae:12:fe:6f:ff:b6:4a:ef:7a:f5:e7:5d:cf:36:15:
         ba:8a:c8:22:3a:56:3b:ba:a2:d0:bd:c6:27:5d:c1:a5:0b:75:
         d9:ac:76:69:24:3d:8e:a6:18:d7:b5:6d:51:a4:e2:10:61:bf:
         8a:78:b9:73:a7:51:58:ed:ca:aa:4e:ee:a6:05:a1:a5:8a:14:
         c3:6e:3a:e0:ae:47:4f:32:85:ee:b5:f0:40:29:5a:19:a8:8a:
         7c:e0:26:5c:6e:f3:0d:a5:66:15:4b:4b:38:07:b4:c4:da:a3:
         5f:77:db:4b:9b:ec:6d:b5:c9:f2:81:31:97:29:3d:bd:7f:e0:
         2c:c8:33:11:e7:31:2d:4a:c5:d7:ee:22:56:1b:2a:be:21:26:
         cb:7f:ad:2e:62:79:20:5a:65:e4:7f:9f:5e:ce:e3:44:1a:a9:
         86:01:1c:fb:86:9f:34:69:84:0c:c6:3b:17:19:63:40:27:31:
         a4:11:93:74:94:e8:ba:fe:19:1d:77:1e:9b:b8:9e:5e:7d:1f:
         48:a1:80:63:5a:de:07:45:bc:e8:6b:c7:bb:14:0e:2e:11:f3:
         97:82:d8:1d:19:66:eb:37:68:ae:66:13:f4:1a:a8:ec:6d:84:
         09:e9:4b:35:4d:59:62:1d:ec:d0:f8:8d:e0:85:ed:de:a4:83:
         6b:b8:59:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:55:59 2026 by rpki-client