This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.mft
File:                     C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.mft (raw, json)
Hash identifier:          oZPOofj5TlCymx1gjKzVyFDLwtPZUyJglCKti1wpJ9Q=
Subject key identifier:   0D:A2:D0:24:78:24:EF:7D:40:B0:08:56:F4:56:2D:A0:54:B5:49:B3
Authority key identifier: C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF
Certificate issuer:       /CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF
Certificate serial:       0EA0A5EB670121CD61BF1D66652B17FD55BC0C26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.mft
Manifest number:          0153
Signing time:             Wed 21 Jan 2026 00:54:50 +0000
Manifest this update:     Wed 21 Jan 2026 00:49:50 +0000
Manifest next update:     Mon 26 Jan 2026 07:52:50 +0000
Files and hashes:         1: 323830313a303a3237303a3a2f34382d3438203d3e20323632323132.roa (hash: P+DlUdtUB/z4peVmAjIrsrOEOMtYNHVjOl/R68a+MS8=)
                          2: 3139322e3138382e35372e302f32342d3234203d3e20323632323132.roa (hash: k0J4uoUIx80viL4kEL/fk+d5xvbhSXhMFfNrRanmYvI=)
                          3: 3139322e3138382e35372e33322f32392d3239203d3e203631343638.roa (hash: biFYeUeuLdkVPHAAc+Hd4IQeNIsLihC9T7r7W8erNy0=)
                          4: C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl (hash: Gq/HFWBrVf+BsQdkYKdD/J71KiJ0RHcNR5222Eg0KTM=)
                          5: 3139302e39362e3130342e302f32312d3231203d3e20323632323132.roa (hash: iiMJmUZuQeA+kxvHvpxKl0rmzB4IoJmCEWhY09neORk=)
                          6: 3139302e39362e3131312e302f32342d3234203d3e203631343638.roa (hash: IHnLJFBNqFnxiiGcBjJeccdU6P9tNZcSd/uOXLhIb1E=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a0:a5:eb:67:01:21:cd:61:bf:1d:66:65:2b:17:fd:55:bc:0c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF
        Validity
            Not Before: Jan 21 00:49:50 2026 GMT
            Not After : Jan 26 07:52:50 2026 GMT
        Subject: CN=0DA2D0247824EF7D40B00856F4562DA054B549B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:12:85:6c:18:5d:9e:39:1a:49:1d:29:76:
                    bd:e1:4d:4b:4f:37:7d:7d:09:84:12:d8:48:f0:30:
                    e3:dc:2b:a3:26:3c:bf:8e:f6:22:1a:70:d7:11:b8:
                    95:30:08:80:aa:8f:16:15:d6:46:dd:a2:42:29:4b:
                    67:3a:66:7a:0d:6f:47:41:79:5e:24:b3:8b:9b:97:
                    a4:0d:c1:69:d3:4e:5c:b8:e3:0b:cb:a5:cd:68:aa:
                    89:65:3d:d5:2f:55:23:f7:46:2a:f3:f3:f7:5b:16:
                    37:af:da:8b:5e:3d:89:1b:f4:7f:9b:ce:58:5f:33:
                    a7:2d:77:fc:4d:3b:18:58:75:31:07:df:1e:ee:18:
                    72:b0:de:3f:62:1e:7a:f4:14:a3:eb:a5:af:9d:96:
                    49:c2:c3:78:c6:8f:19:24:b9:bf:ae:c2:4e:67:8d:
                    fb:76:6a:ae:85:9a:75:41:21:92:75:89:8a:44:af:
                    b3:bc:e5:29:b7:8b:c6:c6:9f:60:38:6f:4a:1d:ed:
                    03:bd:fa:4d:cd:b1:9f:a3:c5:a2:ed:94:75:ec:10:
                    90:2d:44:5a:ff:9e:48:7d:44:1f:10:61:3a:3d:0f:
                    c5:5c:71:60:1c:a7:78:f8:c1:7d:b8:b4:cf:bd:77:
                    91:d3:a8:cb:16:c7:58:7e:79:cf:d1:2e:79:86:fa:
                    e5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A2:D0:24:78:24:EF:7D:40:B0:08:56:F4:56:2D:A0:54:B5:49:B3
            X509v3 Authority Key Identifier:
                keyid:C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cc:f1:b7:78:52:b1:78:ab:30:2d:ef:f2:23:df:a1:8f:62:
         8b:54:f6:99:f3:0f:7b:d8:2d:bb:3a:3e:6c:b2:e0:02:97:28:
         30:8c:e9:9b:b8:7b:75:73:f8:ff:f9:b1:3d:99:fd:27:02:67:
         0e:77:9f:c2:ba:7f:ab:9a:82:ee:4e:7b:25:be:6f:78:26:59:
         80:0f:80:b5:87:c8:37:e9:42:67:f8:b1:59:8c:61:9a:f7:fa:
         57:38:a1:62:d2:7d:a5:af:8b:de:8a:ec:a7:77:ab:bd:b3:ba:
         2d:b4:5a:a7:e1:5a:3c:52:58:9f:fe:6a:47:10:2c:d9:75:f4:
         da:e9:1b:a6:72:c3:1a:70:de:fe:60:ed:a8:80:a1:6c:5a:a9:
         46:c2:bb:60:4f:a6:86:f4:ff:5e:fc:ab:0c:41:b5:48:08:60:
         bb:ed:82:ed:48:94:cd:f0:6f:40:e8:4f:7d:18:c3:8e:63:be:
         83:0b:f8:69:de:53:1a:10:a2:03:9b:e9:b4:2d:1c:01:39:bc:
         8e:f5:4f:d2:1a:a5:bc:c9:af:35:80:59:91:c2:b7:2e:8c:65:
         b3:af:44:56:5a:6a:d9:48:3f:8e:fa:76:f3:38:e0:be:15:26:
         65:82:16:c6:3c:dc:9d:bb:59:28:2f:54:9d:7c:15:e5:e5:d4:
         22:f2:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 18:49:07 2026 by rpki-client