This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft
File:                     AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft (raw, json)
Hash identifier:          aH6pZN7VlwYShAR3ECg3Tz+Xx7IwGRVP1D4QaCU5t8c=
Subject key identifier:   87:EF:96:09:0D:C0:34:AC:C2:D5:A4:84:13:C5:25:2E:1E:DA:11:A2
Authority key identifier: AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
Certificate issuer:       /CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Certificate serial:       6B74A456B1FA173132D37EFA52D7346FBFC4162D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft
Manifest number:          0159
Signing time:             Wed 28 Jan 2026 00:36:03 +0000
Manifest this update:     Wed 28 Jan 2026 00:31:03 +0000
Manifest next update:     Sun 01 Feb 2026 15:35:03 +0000
Files and hashes:         1: 34352e3138312e34312e302f32342d3234203d3e20323635353936.roa (hash: YFBFGAU2pJgXebhltPDFRgy7Pbh1z3VfrIiKZ9mL2mM=)
                          2: AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl (hash: Eop3SWlhk3x079bueKvQHrj7/+As9yLewY/1LEudJlc=)
                          3: 323830363a3334353a3a2f34302d3430203d3e20323635353936.roa (hash: l1DL7aI8zgeuFWTcquLPj7iFf+16cUKzNBWIOVzZORg=)
                          4: 34352e3138312e34302e302f32332d3233203d3e20323635353936.roa (hash: FPFyXFG+54r3Fw2EQUZxqh+tZgJMt2OxvLBMCoavg4g=)
                          5: 323830363a3334353a3a2f33322d3332203d3e20323635353936.roa (hash: ezy5QokvyZmLaG7FhA+u9Z4Vjopha9B4wZPpgpIctfQ=)
                          6: 34352e3138312e34302e302f32342d3234203d3e20323635353936.roa (hash: X0ahrYyiagik/Bp2LqCCmpp2n2oViLWI3V+ItfDaHbE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:74:a4:56:b1:fa:17:31:32:d3:7e:fa:52:d7:34:6f:bf:c4:16:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
        Validity
            Not Before: Jan 28 00:31:03 2026 GMT
            Not After : Feb  1 15:35:03 2026 GMT
        Subject: CN=87EF96090DC034ACC2D5A48413C5252E1EDA11A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:bb:5d:4d:48:d6:db:c2:b6:79:f8:07:af:
                    49:3f:83:e0:ef:bb:6e:11:eb:fc:2b:7e:52:ad:0a:
                    f1:f1:d6:04:0b:02:8d:59:27:41:7a:b3:6a:f5:23:
                    80:08:b5:b8:6b:40:0d:39:89:8d:45:af:31:76:c8:
                    36:7a:9f:30:c6:fb:d8:fe:34:f7:3a:2e:84:c3:bd:
                    51:9f:60:c2:4e:17:8b:c6:a9:8b:db:e7:33:81:5f:
                    5b:72:5a:da:85:5f:b2:20:05:fa:07:03:c6:28:9c:
                    b3:2f:f0:f0:cd:f4:68:c4:74:f9:60:b2:d2:97:b2:
                    59:49:80:1c:d0:eb:e4:2a:39:bb:4a:4f:6b:cd:1c:
                    9d:2d:63:dc:35:67:d6:25:2e:e5:ea:6f:74:6f:45:
                    76:ac:96:b7:45:2b:90:c5:66:49:0e:c5:db:25:2b:
                    8c:fd:71:72:b0:f6:da:14:bb:d1:b0:c9:66:88:e5:
                    86:a3:56:77:15:58:c6:82:85:64:74:98:83:88:6f:
                    57:70:e2:fb:cf:a8:5c:36:7f:3c:53:f1:a2:44:81:
                    d2:3a:6a:e8:3c:94:77:88:4e:87:df:81:e1:dd:9e:
                    5c:c5:43:be:67:d5:d6:3a:6a:93:a5:fd:a7:18:c4:
                    14:c5:fc:23:58:cf:02:6c:69:7a:d9:6b:14:8e:30:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EF:96:09:0D:C0:34:AC:C2:D5:A4:84:13:C5:25:2E:1E:DA:11:A2
            X509v3 Authority Key Identifier:
                keyid:AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9f:d4:8b:25:35:95:98:75:1f:b4:82:67:fb:9b:6e:4a:7b:
         28:95:34:36:49:ca:b3:58:ba:d2:d9:1d:e2:6d:c7:0b:b4:66:
         c6:04:bc:d6:db:7e:12:78:4e:0f:5d:db:a0:26:3d:34:59:00:
         4c:b7:88:14:16:c8:78:8a:43:99:64:11:e8:b2:bf:40:8e:a4:
         96:e2:e8:a0:7b:cb:b0:57:e8:5f:3d:98:79:58:a5:43:f6:78:
         1f:74:31:1b:22:f8:26:6e:c9:43:3c:3e:4a:cd:71:a8:83:e4:
         bf:dc:99:f7:8c:76:d0:7f:c7:77:64:25:41:73:17:cf:66:14:
         2c:36:9f:86:e8:46:ad:c1:e8:0b:53:e1:80:4e:3a:50:9c:c4:
         2a:bc:25:5c:53:c1:d2:c1:b3:12:12:94:d1:a8:c0:4b:60:61:
         f4:0c:38:9e:69:49:a2:70:20:4c:71:c5:4c:50:c1:b5:07:77:
         72:65:ae:0a:6a:6b:a2:0e:e4:fa:ae:16:f2:f8:7e:1b:f7:6b:
         40:2b:bb:89:4b:4b:cc:c5:c5:38:12:a4:31:72:8c:a0:f8:58:
         e9:87:3f:a2:27:f4:fc:b5:0a:f4:ce:30:05:a3:06:34:fc:94:
         86:52:12:80:fe:9f:6e:55:d8:74:db:f0:06:b9:4c:27:8b:32:
         49:df:46:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 03:43:17 2026 by rpki-client