Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
File:                     2D420DA52C4FED64C64081F978E8485CD8161A81.mft (raw, json)
Hash identifier:          FKixsFyZZj9WNmGGSl47wZgp/SmGCx+8CX4LiGhXgjQ=
Subject key identifier:   0A:2D:62:96:B6:38:FC:A2:39:73:B3:F6:0D:EA:29:D5:DF:4E:30:AB
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Certificate issuer:       /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial:       2FA2C13D174CB137A97C448E89E430B2A8723611
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
Manifest number:          017A
Signing time:             Tue 07 Apr 2026 03:41:35 +0000
Manifest this update:     Tue 07 Apr 2026 03:36:35 +0000
Manifest next update:     Sun 12 Apr 2026 14:37:35 +0000
Files and hashes:         1: 3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa (hash: +DpAbksORTScTSriBErvBnV4AH2ePw0j36QFfH02aFI=)
                          2: 3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa (hash: RmhvMSewm57XjZWYjQ6FqQiuRZEOLVHefEqSR3AIuXM=)
                          3: 3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa (hash: sIOThUcQTanpBtFFWyJfRelgsmR3o4AWTlypmW/lm64=)
                          4: 2D420DA52C4FED64C64081F978E8485CD8161A81.crl (hash: vyQM2U0+euamrKO50wfGhZ8nH5sTLNdg9cOgOWSDPfs=)
                          5: 323830333a633036303a3a2f33322d3332203d3e203631343531.roa (hash: L+ywmizwf83korHEOAc77B04u3MNpX37wQ9frbNDUX0=)
                          6: 34352e3137332e302e302f32322d3234203d3e203631343531.roa (hash: AdjIKz6Nels2dhwXWp6EKIPfwBZmvhJdNx8CyYWHGao=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a2:c1:3d:17:4c:b1:37:a9:7c:44:8e:89:e4:30:b2:a8:72:36:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
        Validity
            Not Before: Apr  7 03:36:35 2026 GMT
            Not After : Apr 12 14:37:35 2026 GMT
        Subject: CN=0A2D6296B638FCA23973B3F60DEA29D5DF4E30AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:4a:1a:5a:bc:1d:bd:02:5c:4b:6b:11:9e:
                    a7:5c:16:32:e1:47:02:7e:ab:cc:48:30:09:50:7c:
                    5a:89:e9:b5:82:7b:c7:cb:3e:37:65:66:15:a3:4f:
                    5e:1b:5f:3b:13:2a:b6:32:8a:ff:be:94:36:8e:17:
                    96:c4:cb:87:a2:eb:7f:2b:ea:6a:84:57:7e:62:be:
                    cc:28:22:d9:33:34:a3:59:41:3d:7c:76:41:09:25:
                    2d:22:ee:b2:61:7d:9d:b7:23:a5:8b:35:13:90:f2:
                    86:19:99:e9:5c:cf:4a:20:bf:4d:92:fe:cd:91:60:
                    3e:27:97:45:db:79:38:a9:c1:37:ce:f3:47:81:b5:
                    ca:cd:32:4c:b0:cc:a0:10:15:a8:86:7f:22:f8:e4:
                    81:5d:a0:a1:8f:44:6b:6e:00:d1:27:fc:6c:f2:cd:
                    c8:27:b6:40:c6:5e:00:45:d7:9f:e5:a5:b6:00:82:
                    77:da:05:28:34:25:29:e5:b1:49:df:67:68:77:82:
                    ed:5c:d6:73:dd:74:51:cf:5a:7c:6d:49:91:38:d9:
                    5f:9e:3b:2e:5a:45:39:ef:d9:d9:b4:f4:b8:b5:87:
                    74:37:ca:19:0e:fd:79:3f:b6:58:a0:3d:05:bb:3f:
                    3f:88:9f:1c:27:b9:ad:91:13:2b:e0:b3:91:35:6e:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2D:62:96:B6:38:FC:A2:39:73:B3:F6:0D:EA:29:D5:DF:4E:30:AB
            X509v3 Authority Key Identifier:
                keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:03:8f:39:51:c4:18:ac:f6:2a:b8:5d:62:dc:5e:b3:93:d5:
         ff:ec:e2:15:39:01:97:67:fa:02:05:c8:05:a9:b9:62:e9:c9:
         ef:20:d4:16:95:38:fa:a6:15:15:60:6e:51:24:13:a3:4a:cc:
         67:24:87:72:62:7c:99:da:27:06:b1:cd:70:60:db:a3:5c:8c:
         66:9a:b1:f8:40:ac:0f:e9:d8:dc:ec:da:d8:0e:60:05:82:25:
         3b:e9:fa:fe:f4:3f:63:38:a5:3a:76:41:87:2e:d5:42:11:c8:
         8f:76:9f:31:28:b2:45:3b:42:7d:f0:84:93:09:7f:35:00:02:
         da:24:a1:4f:c2:14:75:82:7b:61:b9:b5:2e:16:89:bc:ec:4b:
         dc:55:55:f6:4f:d7:5c:42:fd:de:b7:cf:c7:50:70:51:d6:70:
         8a:81:05:9b:71:94:65:41:e7:ed:62:e2:1c:76:fe:88:fb:e9:
         19:cf:29:c7:99:20:40:e7:3e:6b:b2:3d:9e:cd:44:9b:5a:aa:
         63:f2:f9:68:b7:ea:85:54:dd:e9:97:c2:39:b0:53:79:2b:9f:
         96:79:13:bf:07:6b:45:c1:ba:e0:7e:ef:c0:76:1b:31:23:3d:
         82:3c:50:25:a4:32:ee:4f:fe:84:a2:46:39:fb:40:dd:04:d4:
         af:e4:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 08:35:41 2026 by rpki-client