This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft
File:                     322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft (raw, json)
Hash identifier:          Y+K6DUWerbj//QGXVfDS996RD08kpNiGyb+vaSofpbc=
Subject key identifier:   1E:71:F8:0B:DC:05:33:E0:FF:40:CD:EB:4A:58:4D:8A:59:BA:7E:D2
Authority key identifier: 32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4
Certificate issuer:       /CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
Certificate serial:       506A8738D61543E0142AC1F0391900C34E354702
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft
Manifest number:          0157
Signing time:             Wed 28 Jan 2026 17:17:38 +0000
Manifest this update:     Wed 28 Jan 2026 17:12:38 +0000
Manifest next update:     Tue 03 Feb 2026 03:23:38 +0000
Files and hashes:         1: 34352e3138392e3235322e302f32342d3234203d3e20323635363133.roa (hash: gWqcR/oF+g1Fr8pS+6/53npLiuWDHxOFfad6LX/OY+w=)
                          2: 34352e3138392e3235342e302f32342d3234203d3e20323635363133.roa (hash: rVIiu5WVqu8Y4cV98xhMjmLXT3IdAb8P0MOsNFgJoxw=)
                          3: 34352e3138392e3235332e302f32342d3234203d3e20323635363133.roa (hash: Xsgy2qe+wczCeKg+r9ZdI4pcSf+EWqwQZgYPMUyqD6E=)
                          4: 322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl (hash: b7BbxHquXUopGpMZSPvVisyWFlpghFqmVR2iUlXr5gE=)
                          5: 34352e3138392e3235352e302f32342d3234203d3e20323635363133.roa (hash: cG/mNGqly/Dgb1V+TfniMYfR9vSbFZ7r9NAfWI49Q78=)
                          6: 323830363a3336613a3a2f33322d3332203d3e20323635363133.roa (hash: RVkraetJuiIdKtdHb1fF1cPrjatIXf3uMxWNkxIjB10=)
                          7: 34352e3138392e3235322e302f32322d3232203d3e20323635363133.roa (hash: fpRofg/WkeajogIoXLXx/PRbjxg7qXB0QYj+DCcQ8kk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6a:87:38:d6:15:43:e0:14:2a:c1:f0:39:19:00:c3:4e:35:47:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
        Validity
            Not Before: Jan 28 17:12:38 2026 GMT
            Not After : Feb  3 03:23:38 2026 GMT
        Subject: CN=1E71F80BDC0533E0FF40CDEB4A584D8A59BA7ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:d4:5e:ff:66:3e:69:7e:73:d8:60:c4:95:
                    9c:91:52:83:3d:47:0b:fc:e1:a7:fc:b5:c3:88:22:
                    b5:a7:26:24:e7:36:d2:8a:2f:d6:3f:25:ae:f1:ad:
                    64:fb:f6:77:80:bd:f0:98:fa:f3:7f:59:be:39:b4:
                    7f:c1:e0:e1:35:a0:77:a9:ee:fb:1c:82:cd:bb:8d:
                    2d:e4:3b:a9:0f:ad:24:e7:3c:28:74:e6:90:37:b9:
                    09:fd:f2:1a:2c:a5:42:69:aa:bd:80:9d:a4:67:00:
                    72:0d:1b:63:10:ce:14:c3:30:2e:b6:e3:b5:d8:46:
                    da:9c:89:98:f2:96:31:87:17:0b:d4:b1:8f:2d:cb:
                    3c:45:08:9e:91:10:b6:e8:be:d6:25:2e:65:61:df:
                    45:9f:73:21:0d:c6:6d:a9:00:66:ed:cd:46:c1:2f:
                    36:41:e1:0c:67:4b:19:c5:c5:6e:9a:69:7a:a1:bc:
                    3e:6a:a4:3b:5c:d0:5f:4b:fb:c7:24:a5:e4:da:37:
                    0e:47:9c:18:85:1a:b2:62:ac:a6:91:f1:76:5c:64:
                    4e:48:2c:e6:61:4e:db:c8:52:c0:bd:eb:f8:17:f3:
                    6e:86:cc:d0:7e:73:90:06:f8:36:e4:cb:9e:61:6d:
                    68:9e:86:04:b3:b0:8d:58:7f:cd:67:6e:b6:2a:dc:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:71:F8:0B:DC:05:33:E0:FF:40:CD:EB:4A:58:4D:8A:59:BA:7E:D2
            X509v3 Authority Key Identifier:
                keyid:32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:22:14:99:74:ea:ea:f0:51:f8:ab:70:3a:3a:bc:b3:1c:98:
         c0:d3:a4:5d:26:44:7b:60:2a:3b:ee:c5:87:b6:51:39:60:d5:
         e3:f1:1f:70:f7:f6:33:85:db:4e:5c:16:e7:bb:45:f9:be:e8:
         7c:bf:80:19:69:d5:a5:0a:b2:44:72:04:32:0c:30:1a:b3:d9:
         32:a9:8e:49:1c:29:83:f5:ad:cb:8d:4e:69:dc:21:67:7d:b3:
         10:50:b6:17:24:bf:f1:24:fe:3c:d4:8d:ff:5b:55:2e:00:c3:
         2a:74:f4:cc:78:a3:fe:99:97:6c:78:03:c2:71:5c:8b:96:0f:
         72:a4:34:66:74:c2:0f:52:65:b4:43:95:d2:af:8d:44:82:4e:
         4f:0f:7e:e4:7d:40:b7:b1:ba:44:15:b7:93:16:52:44:4e:6b:
         41:e6:e1:ea:58:c9:3d:88:93:23:a6:f9:00:a5:89:e3:7d:3e:
         98:d0:30:b7:48:b1:19:70:9c:11:09:91:81:af:ad:61:4f:c5:
         0d:51:8b:45:3d:72:4c:08:db:b0:cc:7e:e2:a9:d4:17:b9:dc:
         fe:9d:e6:19:92:f6:a8:4a:f1:e8:ff:14:d4:50:9c:94:7d:cd:
         4f:00:c3:34:90:4d:a9:fa:3b:b6:ca:68:ea:1a:c5:05:3b:b1:
         32:cb:58:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 03:51:24 2026 by rpki-client