This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
File:                     84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft (raw, json)
Hash identifier:          JgX++guI/xXbnZ7hZ7z9cI+kmPo0igvAKvLJ57DFM6Y=
Subject key identifier:   52:FB:EE:68:EF:3E:C0:31:9E:EA:E4:63:2B:95:E9:89:FA:D1:11:BF
Authority key identifier: 84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E
Certificate issuer:       /CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
Certificate serial:       0B8723D9001529E565634CE3A2F0416F99B6C8CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
Manifest number:          0154
Signing time:             Sun 04 Jan 2026 11:57:56 +0000
Manifest this update:     Sun 04 Jan 2026 11:52:56 +0000
Manifest next update:     Fri 09 Jan 2026 03:57:56 +0000
Files and hashes:         1: 323830363a3333633a3a2f33322d3438203d3e20323635353837.roa (hash: 7xiCWr2aOsqXzAqRAqwNIT4EL+ITgtVmg+wIDJZUubc=)
                          2: 84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl (hash: 3EgKK/gK40ta6TMooKogZ12+sqzlfo3+dyySteVeqy8=)
                          3: 34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa (hash: 0yX7u6biszxE6RR/9ymdpIsRGp4J89CZIfVvJYcKuVo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 03:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:87:23:d9:00:15:29:e5:65:63:4c:e3:a2:f0:41:6f:99:b6:c8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
        Validity
            Not Before: Jan  4 11:52:56 2026 GMT
            Not After : Jan  9 03:57:56 2026 GMT
        Subject: CN=52FBEE68EF3EC0319EEAE4632B95E989FAD111BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:bd:bb:61:96:9e:47:db:77:d3:f3:e2:2f:
                    ac:a4:f2:20:44:ea:69:ec:3c:60:7e:21:44:98:45:
                    94:56:07:d0:41:90:1e:bf:c4:81:9e:89:ab:03:99:
                    32:f7:30:a7:9b:0f:6a:ca:89:e5:a3:77:40:6a:d5:
                    05:48:86:7d:23:39:f7:0d:b7:75:1b:f0:04:47:88:
                    1e:92:82:60:5f:10:55:10:28:27:1b:63:1a:b7:7b:
                    03:7f:e3:81:74:83:83:08:84:2f:94:b0:d9:48:c6:
                    c4:0d:2c:22:63:c0:16:04:09:25:8c:6b:5e:4f:c1:
                    31:89:2e:d5:2e:95:e1:31:03:1b:a2:29:1a:26:54:
                    e7:ef:18:a6:ae:77:af:ca:4b:7d:9f:cb:50:82:56:
                    4d:c4:8c:5d:ca:5b:58:7c:4b:64:a2:76:8b:96:b9:
                    3c:73:ef:8a:8f:d9:59:b1:07:a7:91:a3:9f:64:3b:
                    0f:d5:4a:c2:6b:05:14:a2:81:16:10:5b:d8:25:ba:
                    49:fe:5f:53:2a:bf:87:c9:e2:db:1c:05:c2:78:b7:
                    f6:61:66:52:91:c2:f5:a0:69:95:64:da:6f:3d:ec:
                    e2:b7:7c:85:0a:f7:93:a1:25:f1:a7:70:9e:16:fa:
                    65:ce:e2:5e:19:9b:d4:4a:d9:05:76:68:7f:59:a0:
                    c9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FB:EE:68:EF:3E:C0:31:9E:EA:E4:63:2B:95:E9:89:FA:D1:11:BF
            X509v3 Authority Key Identifier:
                keyid:84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:8a:95:18:67:34:a6:69:40:ff:f8:18:a1:2c:5b:b2:24:44:
         44:ca:0b:27:0a:c4:81:ed:df:b2:6e:0b:2d:f6:50:21:59:0d:
         ee:a3:3f:18:7d:89:db:d9:1c:05:46:59:8f:64:bb:f1:76:93:
         d4:35:33:4f:f0:a3:84:38:b0:95:48:33:9c:d6:f9:46:18:f3:
         ea:af:36:b2:2d:5c:dc:b7:8d:c7:7d:ad:24:bf:1c:39:8b:a3:
         79:1a:a5:91:b7:80:21:89:34:7b:49:bc:15:12:d4:9d:2b:8f:
         db:53:91:13:64:9d:83:2c:d1:2b:fa:b1:15:92:61:36:47:fa:
         44:04:68:f6:04:a3:97:1b:3e:59:fb:83:f5:23:13:06:b3:77:
         e3:44:c3:ca:84:8d:e0:84:bd:2c:a9:9d:a3:71:95:2d:15:22:
         3a:db:9b:22:c6:e6:07:e5:d1:9a:cf:78:a0:1f:e0:ca:2b:d0:
         4c:4b:63:df:e8:13:95:19:32:55:4f:55:cc:7a:70:c8:91:a6:
         75:1d:16:1d:a9:ca:c0:ed:f4:fe:41:ba:1c:bf:03:e4:e0:c1:
         b6:42:62:d3:e8:8c:b0:c1:ba:60:55:c8:44:80:d1:f5:af:2f:
         b9:e5:5a:27:ac:59:42:79:d3:fe:cb:90:39:6f:11:f4:1f:f8:
         d8:ad:d9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----