This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
File:                     85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft (raw, json)
Hash identifier:          FBG97N8OgTDa9tAIUlDnSh90TjYAoA8bMmoYKdKaNUs=
Subject key identifier:   38:C1:2A:B2:1B:1E:EF:96:F6:EB:23:1F:4E:00:C8:C7:D5:4E:20:C1
Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
Certificate issuer:       /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Certificate serial:       456C26ADAC60DD9C63FB42BAFE7CAD1D6603BEB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
Manifest number:          015E
Signing time:             Tue 20 Jan 2026 15:53:56 +0000
Manifest this update:     Tue 20 Jan 2026 15:48:56 +0000
Manifest next update:     Sun 25 Jan 2026 19:14:56 +0000
Files and hashes:         1: 3134332e3235352e3134302e302f32322d3234203d3e203631353132.roa (hash: XXr/7MkPUsKcGPLwZnxpKdVYADOH8Md848BLqn18jKg=)
                          2: 85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl (hash: LbW4TA3Rb6/JraFcSz+qU2rqZW+8x24mfHUM4MAsVhU=)
                          3: 3134332e3235352e3134302e302f32322d3332203d3e20323033.roa (hash: cqbVZiWp5CmZDOkbVxT/fYs85Y9wjbS/MZnP0Z6WQc0=)
                          4: 323830333a363934303a3a2f33322d3438203d3e203631353132.roa (hash: DqMANk4vZp9DYozZY7/LK84MoeJ/wSo+DIdfnbXAnc0=)
                          5: 3134332e3235352e3134302e302f32322d3332203d3e20323032.roa (hash: rYZb4iJPvLD48DXR2HMXMHWJZNKHF3nVf03MhYz16WM=)
                          6: 34352e3136312e3233362e302f32322d3234203d3e203631353132.roa (hash: SdzwWw6dcvaS4XdRSsV3w69+iMp+QDvuAVHag7agkAE=)
                          7: 3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa (hash: ltmWI9h4QzLb1beDrfNlEL4sNrMAbCe6RIciFmQe1II=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6c:26:ad:ac:60:dd:9c:63:fb:42:ba:fe:7c:ad:1d:66:03:be:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
        Validity
            Not Before: Jan 20 15:48:56 2026 GMT
            Not After : Jan 25 19:14:56 2026 GMT
        Subject: CN=38C12AB21B1EEF96F6EB231F4E00C8C7D54E20C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:79:14:64:8a:97:18:2c:76:74:32:50:a3:f3:
                    35:bc:7b:55:56:f5:67:09:28:0d:a8:16:64:96:d9:
                    3f:37:dc:cc:4b:fd:d2:4e:0c:c6:48:a5:0c:8a:7c:
                    ec:aa:0f:12:ad:7d:af:f5:2f:42:2c:8e:83:d0:26:
                    fb:a5:9c:8c:ea:0e:55:05:66:11:16:71:73:f7:71:
                    bb:59:6e:83:5e:c4:b6:a5:9d:a8:9a:2e:e4:17:87:
                    b8:a0:ed:75:6c:99:7e:cd:8b:d4:af:dc:2f:6b:93:
                    d7:e6:c1:26:a4:7e:16:39:6f:11:8b:39:b8:e8:71:
                    1b:ed:0c:41:ec:57:6a:d8:15:59:03:c7:d1:91:68:
                    e6:9d:e6:aa:c8:85:0a:3f:97:d6:22:57:77:ae:ce:
                    72:fb:a2:e1:68:54:cd:53:20:09:7e:86:7d:f6:90:
                    8c:b1:bb:3e:dc:3b:08:22:d6:e1:28:a3:81:1e:f5:
                    34:54:30:82:5f:ce:58:6e:8c:0d:bb:bc:2d:10:c1:
                    2c:66:f8:08:0c:45:90:39:48:26:48:7b:f5:b5:9c:
                    c3:f7:aa:e3:79:5e:1b:bb:52:f4:b3:0b:45:34:b0:
                    a1:bb:22:68:eb:04:54:c8:54:38:ee:99:76:da:c6:
                    2b:b6:5d:14:6a:73:52:b4:0d:35:3b:ce:b9:24:2d:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C1:2A:B2:1B:1E:EF:96:F6:EB:23:1F:4E:00:C8:C7:D5:4E:20:C1
            X509v3 Authority Key Identifier:
                keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f8:8e:4e:32:5f:4a:7b:88:92:2c:60:bb:f7:6f:ac:e0:53:
         07:cc:4d:17:56:93:0f:da:ba:24:9c:8d:05:c8:96:3b:9b:d7:
         35:05:be:f6:e6:81:da:99:dd:2f:99:67:44:32:f5:d1:87:9d:
         7c:86:da:c2:c1:4c:c3:47:c9:c8:d1:ef:66:f8:d9:b2:ea:25:
         0e:f0:3c:35:4b:06:d1:ff:4b:ca:61:1c:74:f3:c3:9a:ee:a4:
         5b:0c:08:f5:f6:7b:cd:e0:2d:1b:ee:e4:34:41:90:0b:73:8a:
         5d:b4:69:06:29:99:e8:df:23:6b:9f:4d:66:55:f0:e3:9c:2d:
         6b:03:78:fb:1f:ae:77:e7:04:53:80:89:89:79:7f:79:84:e3:
         5c:59:5f:e7:5b:4f:bf:3c:29:3e:2b:56:23:a4:5d:57:26:da:
         07:2e:99:85:b5:76:a8:dd:cc:2c:8e:2e:d1:67:33:62:28:81:
         c0:34:69:2a:06:d0:c4:ce:5f:d7:3c:eb:13:ae:6e:0a:b3:01:
         fb:3b:72:48:65:04:6a:c5:6b:fb:18:b0:50:e1:90:90:11:9e:
         6c:a6:68:ce:ed:43:1f:5e:2b:91:0b:bd:25:6e:b4:83:e2:b2:
         d2:7c:2b:be:ca:ea:5b:15:67:05:75:83:87:11:de:9c:6b:1d:
         87:43:7e:5d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIURWwmraxg3Zxj+0K6/nytHWYDvrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVCRjM4RkE0MzhGNEY4NzI0NThFRDM2NDIzRDFBQTdG
ODVEQjUyQTAeFw0yNjAxMjAxNTQ4NTZaFw0yNjAxMjUxOTE0NTZaMDMxMTAvBgNV
BAMTKDM4QzEyQUIyMUIxRUVGOTZGNkVCMjMxRjRFMDBDOEM3RDU0RTIwQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjeRRkipcYLHZ0MlCj8zW8e1VW
9WcJKA2oFmSW2T833MxL/dJODMZIpQyKfOyqDxKtfa/1L0IsjoPQJvulnIzqDlUF
ZhEWcXP3cbtZboNexLalnaiaLuQXh7ig7XVsmX7Ni9Sv3C9rk9fmwSakfhY5bxGL
ObjocRvtDEHsV2rYFVkDx9GRaOad5qrIhQo/l9YiV3euznL7ouFoVM1TIAl+hn32
kIyxuz7cOwgi1uEoo4Ee9TRUMIJfzlhujA27vC0QwSxm+AgMRZA5SCZIe/W1nMP3
quN5Xhu7UvSzC0U0sKG7ImjrBFTIVDjumXbaxiu2XRRqc1K0DTU7zrkkLQzvAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUOMEqshse75b26yMfTgDIx9VOIMEwHwYDVR0j
BBgwFoAUhb84+kOPT4ckWO02Qj0ap/hdtSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTlGQjJCRDBDRDk3ODdBNTYzOTY1MUU4QUM0MjExNjBC
NTFGMzEyRkJCNkZEMUE1QTAxRDBEQkM2MEUxOUU5LzAvODVCRjM4RkE0MzhGNEY4
NzI0NThFRDM2NDIzRDFBQTdGODVEQjUyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUJGMzhGQTQzOEY0Rjg3MjQ1
OEVEMzY0MjNEMUFBN0Y4NURCNTJBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDE5RkIyQkQwQ0Q5Nzg3QTU2Mzk2NTFFOEFDNDIxMTYwQjUxRjMxMkZC
QjZGRDFBNUEwMUQwREJDNjBFMTlFOS8wLzg1QkYzOEZBNDM4RjRGODcyNDU4RUQz
NjQyM0QxQUE3Rjg1REI1MkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBC+I5OMl9Ke4iSLGC792+s4FMH
zE0XVpMP2roknI0FyJY7m9c1Bb725oHamd0vmWdEMvXRh518htrCwUzDR8nI0e9m
+Nmy6iUO8Dw1SwbR/0vKYRx088Oa7qRbDAj19nvN4C0b7uQ0QZALc4pdtGkGKZno
3yNrn01mVfDjnC1rA3j7H6535wRTgImJeX95hONcWV/nW0+/PCk+K1YjpF1XJtoH
LpmFtXao3cwsji7RZzNiKIHANGkqBtDEzl/XPOsTrm4KswH7O3JIZQRqxWv7GLBQ
4ZCQEZ5spmjO7UMfXiuRC70lbrSD4rLSfCu+yupbFWcFdYOHEd6cax2HQ35d
-----END CERTIFICATE-----
Generated at Thu Jan 22 05:30:40 2026 by rpki-client