This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
File:                     604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft (raw, json)
Hash identifier:          LoqesbgdOoTdGcjq/hVXthVitxG/O7HzT/q/jkdR+so=
Subject key identifier:   1A:27:42:19:A9:8E:65:76:DB:4A:F9:10:80:F1:4C:67:2E:DD:88:33
Authority key identifier: 60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81
Certificate issuer:       /CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
Certificate serial:       39F8C3682D96E231DAC8354CCC7EF46B6BB9CCBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
Manifest number:          0157
Signing time:             Mon 12 Jan 2026 13:20:41 +0000
Manifest this update:     Mon 12 Jan 2026 13:15:41 +0000
Manifest next update:     Sat 17 Jan 2026 13:55:41 +0000
Files and hashes:         1: 34352e342e3231362e302f32322d3234203d3e203532333631.roa (hash: DG+JWqwhJjga90s1ucgVlcfQqFjf125xa+Os07SKCbQ=)
                          2: 323830333a633163303a3a2f33322d3332203d3e20323635363739.roa (hash: afm5jY0NuCFd6RtY5P3k3HcaRfNthbbcxVUjLWtw7bo=)
                          3: 323830333a633163303a3a2f33322d3332203d3e203532333631.roa (hash: BX7w9FZmhP961CK46em5q2gkPg6yI0u6bhgOlpm49LI=)
                          4: 604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl (hash: JceAfPBs8LA12yXts2UDOUblwvFhn4gpw82MlN+VCy0=)
                          5: 34352e342e3231362e302f32322d3234203d3e20323635363739.roa (hash: /vRQfk1DMPyDjRljAblyHq4kXf42Q4kl2PXF3Jef2Kg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 13:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f8:c3:68:2d:96:e2:31:da:c8:35:4c:cc:7e:f4:6b:6b:b9:cc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
        Validity
            Not Before: Jan 12 13:15:41 2026 GMT
            Not After : Jan 17 13:55:41 2026 GMT
        Subject: CN=1A274219A98E6576DB4AF91080F14C672EDD8833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:09:48:4d:ab:3f:c4:9f:7c:ad:0d:1c:04:
                    dd:ed:27:74:4f:68:44:74:d9:38:22:6e:6b:9e:94:
                    13:e3:ad:46:9f:c4:77:1a:0b:40:b2:9e:a7:a0:86:
                    b1:1e:9f:b1:1f:bf:e0:3f:7b:5c:8d:41:de:e1:10:
                    2e:ef:82:8e:57:05:70:0e:26:93:93:07:de:8d:ca:
                    f5:4e:d9:28:76:f5:b7:28:f7:9b:9b:74:f8:40:39:
                    3a:5e:45:61:96:7b:a7:8d:ed:02:2b:09:d5:ab:fa:
                    19:45:80:32:25:31:7b:52:ab:93:ee:b9:d6:20:0d:
                    8f:25:57:e7:45:6b:a4:be:5f:19:61:5f:73:74:49:
                    0a:ff:9f:49:96:0e:bd:46:82:90:74:c5:10:4e:63:
                    2b:34:ab:91:48:fb:dc:8f:9b:c1:9b:32:3b:61:03:
                    92:ea:a4:ff:85:0a:48:27:12:ad:c2:f0:c4:13:57:
                    03:55:fd:4a:6d:a5:c3:59:24:a2:ff:fc:2b:e7:c8:
                    b5:32:3c:c0:6b:18:9d:fd:f4:df:e5:d0:21:e4:e8:
                    30:9a:77:10:d1:95:b4:ba:d6:55:fd:f9:d1:08:98:
                    23:a4:97:b7:08:51:95:d3:85:51:ea:d0:ee:fd:5f:
                    4d:d2:60:8d:33:10:15:db:a4:be:b0:55:e0:51:3b:
                    e3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:27:42:19:A9:8E:65:76:DB:4A:F9:10:80:F1:4C:67:2E:DD:88:33
            X509v3 Authority Key Identifier:
                keyid:60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:76:c5:9d:d1:8f:38:b6:ea:c9:8d:30:87:ce:ae:61:e7:5d:
         16:c0:ed:34:33:07:cf:f9:de:c3:90:2d:cb:34:7b:11:b3:15:
         c9:05:0c:ce:1f:38:a5:c4:70:88:7e:69:ab:a0:74:c4:95:63:
         c0:a2:8c:15:be:4e:79:5f:df:f3:66:2d:37:c4:ed:12:ee:c6:
         50:62:01:e4:eb:c1:b0:1d:9a:fc:05:5d:59:cc:62:2c:05:d2:
         6f:56:57:87:53:da:ac:2a:fa:83:ba:29:cc:49:74:31:18:a4:
         74:2b:dc:ee:c0:fe:85:4e:91:1e:16:ad:97:f0:d2:4f:fc:9c:
         85:88:49:4f:b8:16:81:94:17:46:a9:3b:ab:e7:a0:15:cb:ee:
         35:24:38:58:c3:dc:53:7d:1a:f7:b2:1f:46:c0:7c:be:fc:f8:
         a1:9b:cf:e9:a4:53:83:21:c3:d7:49:75:ae:28:b8:47:f3:d9:
         7a:80:8f:7d:d0:61:58:99:46:66:e8:83:5a:fe:02:43:8d:af:
         00:20:c8:e5:d3:30:9f:85:db:ee:60:62:42:b2:d4:50:91:df:
         79:60:7e:9f:b0:90:5b:5d:2c:71:f7:07:c6:91:ee:32:2d:b7:
         91:a1:43:83:ad:b2:2f:f1:6e:d6:e1:7d:15:d8:5d:77:bb:47:
         73:cd:7f:a5
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUOfjDaC2W4jHayDVMzH70a2u5zL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA0Qjk1M0U3Q0RGRDE1NkNENDRDN0U5QkVEQzM3QUU2
OUI0Mzg4MTAeFw0yNjAxMTIxMzE1NDFaFw0yNjAxMTcxMzU1NDFaMDMxMTAvBgNV
BAMTKDFBMjc0MjE5QTk4RTY1NzZEQjRBRjkxMDgwRjE0QzY3MkVERDg4MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGwlITas/xJ98rQ0cBN3tJ3RP
aER02TgibmuelBPjrUafxHcaC0CynqeghrEen7Efv+A/e1yNQd7hEC7vgo5XBXAO
JpOTB96NyvVO2Sh29bco95ubdPhAOTpeRWGWe6eN7QIrCdWr+hlFgDIlMXtSq5Pu
udYgDY8lV+dFa6S+XxlhX3N0SQr/n0mWDr1GgpB0xRBOYys0q5FI+9yPm8GbMjth
A5LqpP+FCkgnEq3C8MQTVwNV/UptpcNZJKL//CvnyLUyPMBrGJ399N/l0CHk6DCa
dxDRlbS61lX9+dEImCOkl7cIUZXThVHq0O79X03SYI0zEBXbpL6wVeBRO+MJAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUGidCGamOZXbbSvkQgPFMZy7diDMwHwYDVR0j
BBgwFoAUYEuVPnzf0VbNRMfpvtw3rmm0OIEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTM3OTY3MTg5RjRCMjVBMUE3RUJFRDNBMkE5QzQ1RUJD
OTlERTlCQjY4RUNBRTZENUY2MEQxMzU0RUQ2Mzg3LzAvNjA0Qjk1M0U3Q0RGRDE1
NkNENDRDN0U5QkVEQzM3QUU2OUI0Mzg4MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MDRCOTUzRTdDREZEMTU2Q0Q0
NEM3RTlCRURDMzdBRTY5QjQzODgxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUzNzk2NzE4OUY0QjI1QTFBN0VCRUQzQTJBOUM0NUVCQzk5REU5QkI2
OEVDQUU2RDVGNjBEMTM1NEVENjM4Ny8wLzYwNEI5NTNFN0NERkQxNTZDRDQ0QzdF
OUJFREMzN0FFNjlCNDM4ODEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqdsWd0Y84turJjTCHzq5h510W
wO00MwfP+d7DkC3LNHsRsxXJBQzOHzilxHCIfmmroHTElWPAoowVvk55X9/zZi03
xO0S7sZQYgHk68GwHZr8BV1ZzGIsBdJvVleHU9qsKvqDuinMSXQxGKR0K9zuwP6F
TpEeFq2X8NJP/JyFiElPuBaBlBdGqTur56AVy+41JDhYw9xTfRr3sh9GwHy+/Pih
m8/ppFODIcPXSXWuKLhH89l6gI990GFYmUZm6INa/gJDja8AIMjl0zCfhdvuYGJC
stRQkd95YH6fsJBbXSxx9wfGke4yLbeRoUODrbIv8W7W4X0V2F13u0dzzX+l
-----END CERTIFICATE-----
Generated at Tue Jan 13 22:13:12 2026 by rpki-client