Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.mft
File:                     4F99A2A558BEB359E92AC3908E9098C384DE72F7.mft (raw, json)
Hash identifier:          Cm/KNX9lIbt4DdZvtu7sebXMvApscFSzGPfsLBgrCEI=
Subject key identifier:   85:A2:10:FE:88:19:D1:FF:D3:AF:D4:1C:72:41:E5:00:00:6D:05:D3
Authority key identifier: 4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7
Certificate issuer:       /CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
Certificate serial:       08AE972D03D45A1D67441E1974E2A93EF49E2AD8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.mft
Manifest number:          0138
Signing time:             Thu 30 Oct 2025 10:30:59 +0000
Manifest this update:     Thu 30 Oct 2025 10:25:59 +0000
Manifest next update:     Wed 05 Nov 2025 10:15:59 +0000
Files and hashes:         1: 3139302e35372e3232342e302f31392d3234203d3e203230323037.roa (hash: cclPc0YrEb/NZ1Dwu/oeu+nw0VEKsY4Rzb04Q9aSvkY=)
                          2: 3133382e302e3135322e302f32322d3234203d3e203230323037.roa (hash: O6dFuL4qEj7P/1U3+7ZV24qId0rvAuiTE158Zv2b8/M=)
                          3: 323830333a316463303a3a2f33322d3438203d3e203230323037.roa (hash: YH7CCRK07YNZ+3n6lbuT9x1GNkjm8DY0pAcswLbhxV4=)
                          4: 3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa (hash: X+OTbABJO/Rk5REx54YJs//iSH/BaOKNkmCURymwnt8=)
                          5: 3230302e3232392e3134382e302f32322d3234203d3e203230323037.roa (hash: TBlrgGzQbcJ6WQjS4C3Gd24UXujkT1nZp0y0aKRFjmY=)
                          6: 3138312e3137342e3137322e302f32322d3234203d3e203230323037.roa (hash: KkamE9GF/+Tb57Yq4rlvuNGpCRtg+RR11EZVMFzCeNU=)
                          7: 4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl (hash: zbUwDKoJ3KLE8LRaDwS5EUmtqXD/oNj/IcpJmQX3jXU=)
                          8: 3139302e3138332e302e302f31362d3234203d3e203230323037.roa (hash: YS0Vhs5/otszj02iHrQfSmSlSVvn/K3qFdC4hmPfX44=)
                          9: 3133382e3132322e3132382e302f32322d3234203d3e203230323037.roa (hash: kunMq9J/RcuUEyuhw9lN9IMTvEs05PTQ97hRhFZdOuw=)
                          10: 34352e372e39362e302f32322d3234203d3e203230323037.roa (hash: ZVh+mRsPZbrdgalkXIFPnmIpCeL8/fe1Dh5ejjXMlWI=)
                          11: 323830333a636338303a3a2f33322d3438203d3e203230323037.roa (hash: KwFQmGwe2glxnkQG/qu32ftqAmxztUOYe9qIP+koRC4=)
                          12: 323830303a3666303a3a2f33322d3438203d3e203230323037.roa (hash: mNsk3bu3Sl4uSNB5eJpXaH3H95pd+Qhcb0fjbRH9pFk=)
                          13: 3137302e37382e3139322e302f32322d3234203d3e203230323037.roa (hash: itLLRDhq4XsO+7N+XmitpL/15n2i504EJBe9rQa4XlM=)
                          14: 3134332e3230322e31362e302f32322d3234203d3e203230323037.roa (hash: UQ1mMksE+wxGyO6patQy36m6BhF6AKCkjyQdEkrTh/Q=)
                          15: 3139302e372e302e302f31382d3234203d3e203230323037.roa (hash: vDI8X/9F27wQEm3acu/7WQmjVYhiJ9pPw1QteDYNCyQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 10:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ae:97:2d:03:d4:5a:1d:67:44:1e:19:74:e2:a9:3e:f4:9e:2a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
        Validity
            Not Before: Oct 30 10:25:59 2025 GMT
            Not After : Nov  5 10:15:59 2025 GMT
        Subject: CN=85A210FE8819D1FFD3AFD41C7241E500006D05D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:47:76:52:a9:72:0f:67:01:ad:4b:75:99:
                    a5:07:b7:be:b8:97:e3:7b:fd:aa:d4:3d:e3:e4:bf:
                    35:3a:cd:b9:52:d0:25:b5:38:a6:2e:77:d1:bd:70:
                    7d:f2:d3:92:0e:16:ad:aa:cc:33:e8:a2:b4:0e:a5:
                    dc:e9:ba:43:cd:35:ba:53:60:5b:11:7c:30:06:a4:
                    5a:6b:14:db:c9:1e:f9:8b:a8:72:0b:b1:84:f5:a9:
                    4a:11:53:01:de:6d:f9:92:2d:e0:5f:f5:d2:1a:ff:
                    9d:62:90:58:22:17:46:22:bc:2d:ef:1d:54:1f:85:
                    c5:94:09:7c:ee:ec:e8:5a:02:43:37:c0:59:13:65:
                    35:f0:0f:c7:60:56:60:e0:17:73:3f:db:59:5f:82:
                    c1:33:76:33:68:e1:9a:35:7e:0d:7a:3f:4e:1f:1f:
                    c9:82:1e:4b:cd:5d:7b:3d:e5:6b:49:09:12:d4:72:
                    dc:af:48:bd:bf:f8:51:b0:22:42:5b:38:63:af:90:
                    e9:fe:1c:05:39:18:8c:22:2b:cc:c3:60:77:bc:3f:
                    42:cf:9c:a6:e4:87:fb:1b:1a:0c:a2:c1:95:c4:1f:
                    2e:8c:b7:f1:48:41:6d:a0:00:95:fd:89:cc:16:8f:
                    e1:1a:56:ad:18:95:e2:0a:1f:80:66:d9:e2:f0:ff:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A2:10:FE:88:19:D1:FF:D3:AF:D4:1C:72:41:E5:00:00:6D:05:D3
            X509v3 Authority Key Identifier:
                keyid:4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:44:ab:a2:b1:c7:50:75:9d:e4:5c:13:ff:85:13:83:27:7e:
         42:df:39:db:32:9c:7b:2e:41:7e:31:ea:f1:31:2c:ed:0b:dd:
         76:4c:c9:25:81:f9:a3:c5:19:c6:ec:f1:6b:12:b9:9d:6e:4b:
         9e:29:5e:7a:87:bc:b2:c1:ba:a0:c2:90:23:c3:52:7e:76:26:
         8c:f5:76:41:92:63:db:51:11:15:c5:9c:4f:0b:9e:45:17:f0:
         cd:59:be:b0:f4:f7:9e:ca:87:12:4b:3d:86:52:70:ec:90:ba:
         7a:02:c3:ea:4a:6a:3e:8a:f8:1a:1a:ba:09:9b:06:84:46:a5:
         ac:a1:1b:f4:17:19:cf:60:ac:ac:b2:19:4c:7d:56:af:43:e1:
         50:9b:a4:b6:97:b0:04:57:d9:65:a9:b0:b8:9a:60:c1:fb:68:
         ce:9d:9a:15:4e:5b:81:72:25:e2:9c:84:c6:30:2a:ba:29:82:
         7e:82:04:e6:d3:23:d0:62:c9:6a:9e:d4:18:01:61:48:92:0d:
         97:41:82:f8:47:7e:62:2c:c0:7a:8f:29:96:17:1a:16:66:d3:
         46:bb:5c:c9:70:b4:ff:07:1a:8b:bf:15:1a:3b:55:96:11:c9:
         06:13:be:9a:2a:b6:11:71:19:13:8f:ef:8f:0a:d4:f3:9e:ae:
         b9:f1:54:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 10:21:45 2025 by rpki-client