This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
File:                     21412A097D724851BE961D093E8521CC77A7B163.mft (raw, json)
Hash identifier:          b6I6icAdbL0RsD2VHryDV4pSmAn+FQbkbxZuBQnWivc=
Subject key identifier:   54:00:01:8B:BC:2E:3B:AA:B1:24:DF:15:34:B0:A8:19:39:1B:2F:90
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       70350228A654B9C3C7D9E1C18A541118B449A8B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
Manifest number:          0159
Signing time:             Thu 29 Jan 2026 03:44:07 +0000
Manifest this update:     Thu 29 Jan 2026 03:39:07 +0000
Manifest next update:     Mon 02 Feb 2026 15:00:07 +0000
Files and hashes:         1: 3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa (hash: BgzWGi1u7XU6EwxRXpJDFX+7GwVX96ehd91NR27id5w=)
                          2: 3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa (hash: KsRXuXUX3sQGnSdVlG2rk+sDaByFM9jgtExztJ1/r+A=)
                          3: 323830333a633863303a3a2f33322d3634203d3e203532353037.roa (hash: 5WgNOr+feOV1jMihscDf1FuaaT0GsJL+P79ce2ggMxM=)
                          4: 21412A097D724851BE961D093E8521CC77A7B163.crl (hash: QI0JTKi3vi3jDJZvC2yvgIoCMTJ7YAfQLLv1f65p5JI=)
                          5: 3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa (hash: YKl011lPvTQ41pw4zKa1MVySnbQlQGICr5ywtvast3k=)
                          6: 323830333a633863303a3a2f33322d3634203d3e20323634373736.roa (hash: SONnPDsxL1tdG4rp5dD2+U8frHcRRTD/5ypjNT8d7gk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:35:02:28:a6:54:b9:c3:c7:d9:e1:c1:8a:54:11:18:b4:49:a8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Jan 29 03:39:07 2026 GMT
            Not After : Feb  2 15:00:07 2026 GMT
        Subject: CN=5400018BBC2E3BAAB124DF1534B0A819391B2F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e7:af:54:07:b0:fc:4c:7a:2b:e2:0b:3b:bc:
                    56:e2:ed:2e:e9:cd:1b:ca:cc:70:93:01:c0:87:2d:
                    ac:76:65:7d:6e:0f:ad:1d:cd:c3:b4:24:48:4c:5f:
                    2b:82:6b:b3:b7:a8:b6:55:03:43:fa:16:09:eb:b0:
                    2c:67:7b:4e:e3:f3:49:13:e1:d3:ec:64:be:d5:ac:
                    4f:59:9e:e5:ba:97:47:0b:c4:1e:b8:22:a0:fb:8c:
                    d2:43:da:c8:8f:fc:ca:c6:86:11:5a:1c:22:51:cd:
                    79:44:ba:2c:5f:3e:7a:53:4e:7a:a7:f3:b7:55:d3:
                    a9:a4:d7:c7:46:f3:10:ba:35:5f:62:3b:f0:bc:05:
                    a3:86:be:8c:6d:58:30:88:fb:0f:37:18:5e:f2:5f:
                    c6:0e:11:ba:42:6b:d6:aa:25:77:73:55:2a:8f:f3:
                    54:dd:b7:7a:fb:db:94:39:df:e9:83:de:d6:75:0c:
                    37:7c:df:91:e2:1b:19:4f:21:33:91:f0:24:e2:50:
                    b0:e3:c6:30:5c:21:95:b5:bc:4f:af:a8:4c:a7:71:
                    4f:d0:2a:22:de:8f:f2:d3:15:0d:a7:9c:98:2e:69:
                    ae:54:ef:ba:ab:f6:5b:ca:a8:2d:60:86:7c:97:86:
                    08:75:85:04:7b:27:a1:93:4c:26:c7:22:a9:9b:89:
                    b7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:00:01:8B:BC:2E:3B:AA:B1:24:DF:15:34:B0:A8:19:39:1B:2F:90
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:69:f6:4b:fe:51:86:41:46:94:10:dc:af:52:e7:58:20:0b:
         0b:13:f6:6e:e6:30:5e:15:99:d4:ad:7a:9c:51:13:8f:82:9d:
         96:7d:7e:dd:6e:98:d4:ba:96:07:86:21:55:59:5a:df:9a:8c:
         5f:91:6a:00:cc:95:6c:54:3e:b1:7c:b9:65:ea:69:2f:9a:9c:
         9c:ee:27:f5:0d:97:d9:86:db:ce:b9:b1:a8:3c:b1:4e:b3:05:
         ce:ec:89:ac:2d:77:80:78:23:4b:cb:51:77:45:c6:92:68:8b:
         37:ff:56:04:17:f4:67:da:b5:f8:08:fd:15:39:b1:c5:bb:9c:
         37:5c:76:8a:2b:52:36:53:63:99:22:10:7f:9a:93:ca:9d:73:
         2d:0e:84:ff:fd:a4:3b:d1:5c:40:09:88:08:63:34:f0:1a:68:
         4e:05:f6:b4:27:21:6a:08:9e:e4:5d:c7:2a:46:ec:95:6c:46:
         39:6a:e4:88:19:e2:9a:0c:0a:fe:47:11:c9:31:fe:7a:a3:14:
         59:34:80:81:69:bc:b5:20:c0:4a:14:14:26:05:b6:37:fe:07:
         64:1b:5c:14:e8:69:1e:cd:09:df:05:7b:d9:79:e5:7c:20:05:
         73:8f:44:05:1f:dc:e4:e2:76:31:46:ad:ff:e8:5f:0b:87:63:
         ce:d3:3c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 14:09:54 2026 by rpki-client