This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
File:                     87170FE663930DA5DB9475CEAC8B0600B2C02832.mft (raw, json)
Hash identifier:          lCne19FpCs9minuVOIL71GvINLVB18oOFD6TOVWCSQI=
Subject key identifier:   8A:19:12:CC:AE:D3:31:4A:CF:F3:88:4D:5B:D9:83:7C:EA:9D:8D:14
Authority key identifier: 87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
Certificate issuer:       /CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Certificate serial:       7BFB07031828F522FAD19257A374B324330EFB85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
Manifest number:          015D
Signing time:             Sun 18 Jan 2026 17:51:58 +0000
Manifest this update:     Sun 18 Jan 2026 17:46:58 +0000
Manifest next update:     Fri 23 Jan 2026 19:01:58 +0000
Files and hashes:         1: 34352e3232342e39362e302f32322d3234203d3e203532343638.roa (hash: pCiFgLbfotTPb1YPOzAPqQc/ACVAIx/2QqAgtV6BC3k=)
                          2: 323830333a396332303a3a2f33322d3438203d3e20323634363638.roa (hash: zRzppmdk//4dvk6K3AhfrgKNJiPIMusm93rHYhETNzU=)
                          3: 34352e3232342e39382e302f32342d3234203d3e203237393437.roa (hash: lHkM1tCtccjEIA7rCUm6qynGilC5EVcNujhdiJ5buPs=)
                          4: 323830333a396332303a3a2f33322d3438203d3e203532343638.roa (hash: +72Fkja4/TCVNee1FDgLJNhdqYW8fYNmMRz71S1BW2c=)
                          5: 87170FE663930DA5DB9475CEAC8B0600B2C02832.crl (hash: fVKyjXduDyD+BKixowMrzTrT65i+BRWCisFP0bOAMLw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Jan 2026 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fb:07:03:18:28:f5:22:fa:d1:92:57:a3:74:b3:24:33:0e:fb:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
        Validity
            Not Before: Jan 18 17:46:58 2026 GMT
            Not After : Jan 23 19:01:58 2026 GMT
        Subject: CN=8A1912CCAED3314ACFF3884D5BD9837CEA9D8D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:01:1d:93:96:30:c2:b8:b7:84:2c:27:30:3a:
                    9d:aa:bf:51:34:c3:4c:7e:82:55:87:98:b3:c1:a9:
                    a5:ec:c6:4b:1d:f2:8d:24:bd:31:b8:56:90:ba:23:
                    5d:c1:79:e4:9d:09:d4:35:5f:10:57:a7:bb:8e:df:
                    47:16:ca:9d:36:b5:18:82:96:b7:20:45:a5:40:94:
                    d4:9e:2b:b6:fc:66:db:23:9f:dd:32:cc:ef:84:43:
                    2a:b0:45:33:cd:7b:78:f6:69:18:33:aa:88:bd:d1:
                    04:b9:7c:63:6b:2d:79:ec:17:3c:02:ca:18:89:5b:
                    c5:54:79:18:db:1b:5c:94:df:79:fd:39:e6:e8:c0:
                    a8:ca:fd:9a:97:5b:b7:76:45:ea:2f:0e:ac:ff:5c:
                    8a:09:68:96:61:61:10:be:1a:05:da:28:c6:e8:ee:
                    41:c9:15:31:d7:ae:8b:70:56:fa:22:9f:0a:09:4f:
                    a6:9f:af:89:11:ff:2d:c7:0e:f0:e0:a2:3d:a0:69:
                    f2:3b:f3:e2:8c:ea:bc:cb:60:78:96:e7:53:cb:1a:
                    cb:b7:a1:19:22:01:d2:bc:e8:09:d5:4e:a5:ad:5c:
                    82:3b:2f:00:ba:33:9b:00:02:40:e5:1c:ea:ed:34:
                    d7:da:65:2f:25:ee:32:fc:e2:53:58:e6:9d:8c:70:
                    0e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:19:12:CC:AE:D3:31:4A:CF:F3:88:4D:5B:D9:83:7C:EA:9D:8D:14
            X509v3 Authority Key Identifier:
                keyid:87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:68:36:88:40:86:08:fb:4f:5f:17:e9:11:ac:f9:66:ae:f4:
         76:b4:9a:b8:8d:32:28:04:3c:d7:40:e3:5b:25:f5:c0:2b:22:
         81:ba:c0:6f:0d:7e:c9:8a:0b:1d:4d:9b:4b:4e:73:83:50:aa:
         81:7f:8a:ba:56:0d:4c:a8:dc:2a:09:f1:a4:e4:0f:d1:cd:64:
         21:be:7b:6a:cb:6d:69:39:84:2a:e4:34:4d:fc:a0:fa:7c:ba:
         21:05:8a:5a:df:88:1f:f0:c8:6d:aa:f5:25:30:b9:a5:b9:f3:
         81:41:2e:b1:63:3f:95:e8:91:00:55:3f:9b:2a:1c:16:e7:52:
         09:7c:dc:de:d1:75:3f:43:3b:3a:9f:85:10:71:fe:d7:9c:30:
         e8:72:99:d1:a0:bb:38:d7:de:75:5f:8c:69:69:88:d4:c0:0f:
         d1:90:b3:c1:2a:df:0b:52:bc:75:5e:7b:49:41:68:cd:1e:18:
         8e:fa:b0:da:f8:6a:53:6f:4e:fa:db:15:6e:08:f4:56:3a:0a:
         c4:89:80:ee:fd:b2:22:82:46:ca:91:a6:03:c2:62:1e:13:e1:
         ab:95:b5:e9:1c:6f:94:ea:7c:1c:b0:53:8d:d3:01:60:3f:ff:
         8c:8a:35:6c:5b:bf:e6:56:26:6b:1d:6c:bd:77:93:6a:47:a9:
         7c:c3:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:08:12 2026 by rpki-client