This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
File:                     CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json)
Hash identifier:          oIVWFqAGrLN667wkz7t3OOV7yKXWLIP9PhBbH+WEn4A=
Subject key identifier:   49:4C:63:DD:2F:B4:07:4D:80:C3:3B:04:F8:CB:42:30:D2:A8:FD:19
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Certificate issuer:       /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial:       0F08E3A766CFD85BB05CE680C5C22E5DC5707676
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
Manifest number:          0159
Signing time:             Fri 09 Jan 2026 15:39:19 +0000
Manifest this update:     Fri 09 Jan 2026 15:34:19 +0000
Manifest next update:     Thu 15 Jan 2026 01:45:19 +0000
Files and hashes:         1: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: /FnY1L0xo7I43hYkrg8BD1UEnVfF75vK+cswmDkkP/U=)
                          2: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: XE2awn9T+5ggVHcwpgRTfWKLa6eNnQYDkphDSuamOgQ=)
                          3: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: dbTjuGS3PzrURh7F2dZU8q1IyUt3ByHVC9cX7x0Huss=)
                          4: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: kgjgwHarhaMs6Iouvoz80koNaPks3R7U+aIkHqr9IWM=)
                          5: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: L57VWgacj/zmSjf7yEB+iUGkpSFTYzflOQWN6Q62GvI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 01:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:08:e3:a7:66:cf:d8:5b:b0:5c:e6:80:c5:c2:2e:5d:c5:70:76:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
        Validity
            Not Before: Jan  9 15:34:19 2026 GMT
            Not After : Jan 15 01:45:19 2026 GMT
        Subject: CN=494C63DD2FB4074D80C33B04F8CB4230D2A8FD19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b7:ec:8d:93:1d:aa:05:dd:eb:46:b9:82:eb:
                    c0:08:7e:13:2b:60:9e:ac:8a:d6:f8:f7:f2:d8:bd:
                    e6:0a:75:d8:96:19:60:6e:5c:9f:59:55:0a:5a:21:
                    6a:8e:08:76:32:fa:25:70:16:eb:c1:0b:b9:05:14:
                    28:34:08:3f:8f:26:32:81:62:77:50:fa:27:36:f4:
                    1e:0b:23:6d:38:ae:21:d1:3e:c3:ce:1c:70:85:dc:
                    03:cf:dc:f8:28:03:1a:5e:be:68:89:ea:e1:93:98:
                    52:b7:f0:21:27:2d:e8:ff:ce:de:a5:50:8d:c9:9b:
                    31:f3:06:71:38:bf:dc:a7:7d:a4:7e:85:af:43:72:
                    89:34:73:b4:57:5d:e8:8f:46:81:63:73:29:b9:83:
                    87:d2:d8:e0:60:78:cc:00:0d:d1:2d:f6:6b:c9:76:
                    03:11:95:19:bf:da:66:c4:fc:db:0c:c8:68:10:ae:
                    16:54:72:9a:12:41:cb:99:4e:17:8f:8f:16:07:5f:
                    a1:ee:27:95:e5:87:3c:75:a9:09:02:76:64:d4:fa:
                    08:42:77:84:52:85:a4:27:b1:ff:60:76:69:62:fc:
                    ba:74:3a:81:c6:aa:af:b1:78:30:86:8f:d7:4f:66:
                    2a:1c:81:91:f3:fc:21:e6:89:0a:4d:d5:48:1a:ec:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4C:63:DD:2F:B4:07:4D:80:C3:3B:04:F8:CB:42:30:D2:A8:FD:19
            X509v3 Authority Key Identifier:
                keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:59:c0:bb:27:c8:86:44:9d:af:d4:5b:a8:03:1b:0c:f6:81:
         9b:21:e1:e0:1b:8e:dd:c0:ad:8c:d9:ff:7e:cd:fc:ee:b1:d2:
         5d:54:ab:83:a5:c9:f0:d2:79:35:02:5c:6a:ee:b8:27:f3:b1:
         66:6e:dc:53:81:52:46:94:58:eb:a7:1b:8c:5f:cb:c1:50:e0:
         84:70:e6:24:7c:1b:a8:de:bc:f1:7e:cf:db:bd:a3:a5:a3:40:
         c3:5b:40:71:aa:d3:07:b3:a4:9d:44:a9:2d:48:ff:95:f8:9b:
         b2:c7:2c:48:f5:c6:9c:a3:17:b9:5e:6e:a7:e7:32:60:a2:aa:
         49:19:8d:1c:28:90:8b:f0:a5:1c:f6:78:fd:4a:da:75:e0:09:
         dc:d3:ba:9d:d8:84:e2:59:59:4d:3a:00:0d:31:c8:d9:92:7a:
         e0:93:b8:30:9f:97:fb:7d:95:4b:d2:09:d8:25:4c:92:5e:5d:
         6d:de:5e:aa:3a:13:e8:92:f8:4c:51:1a:36:a4:fb:6f:3e:91:
         d7:89:4c:68:14:9f:fc:b2:6f:c7:b7:8a:ae:eb:80:3a:b4:45:
         22:d7:27:53:58:e3:fd:cd:fb:dc:f3:73:43:5d:17:7f:90:41:
         e0:4e:3c:29:76:87:51:8f:fd:4b:26:dd:5d:aa:c5:57:31:49:
         f1:ea:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----