Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.mft
File:                     2CF1E43493BF6D8C874D42F3C1C2E968854077DF.mft (raw, json)
Hash identifier:          pewF3KyBAd/4RSaJl414coFdUWk6J8u7plAIhD7+VA0=
Subject key identifier:   F2:B7:51:20:42:10:1E:AE:3B:35:97:C3:89:D9:9C:90:A3:84:92:50
Authority key identifier: 2C:F1:E4:34:93:BF:6D:8C:87:4D:42:F3:C1:C2:E9:68:85:40:77:DF
Certificate issuer:       /CN=2CF1E43493BF6D8C874D42F3C1C2E968854077DF
Certificate serial:       14F218DE9A9EB6C496193A693D0A7903C5C64CCC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.mft
Manifest number:          2A
Signing time:             Sun 26 Apr 2026 02:04:27 +0000
Manifest this update:     Sun 26 Apr 2026 01:59:27 +0000
Manifest next update:     Fri 01 May 2026 17:17:27 +0000
Files and hashes:         1: 2CF1E43493BF6D8C874D42F3C1C2E968854077DF.crl (hash: SIoEO7hIr2JbD8+wBrlDjmRyhHNJ1sL7GnJtcz6cutg=)
                          2: 3230302e332e3139342e302f32342d3234203d3e203238303834.roa (hash: a1D1858i3vsaTVBpTh/YdCH58rW7bRMnPGx5ABK4PXM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 May 2026 01:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f2:18:de:9a:9e:b6:c4:96:19:3a:69:3d:0a:79:03:c5:c6:4c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CF1E43493BF6D8C874D42F3C1C2E968854077DF
        Validity
            Not Before: Apr 26 01:59:27 2026 GMT
            Not After : May  1 17:17:27 2026 GMT
        Subject: CN=F2B7512042101EAE3B3597C389D99C90A3849250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:02:24:a5:02:9f:e0:df:99:ca:67:bc:b3:
                    9d:19:c6:ea:34:4a:34:0b:9d:07:41:cf:ca:f9:c2:
                    d6:d4:b1:6f:e9:5d:f7:12:3a:d6:fd:9c:0f:b7:19:
                    89:00:88:94:d0:09:96:25:19:ad:76:7c:4d:6a:7a:
                    0a:18:0d:6c:19:2a:63:81:7b:39:d2:64:5d:02:44:
                    fd:30:09:32:85:c0:4b:a7:ba:40:95:46:94:f5:35:
                    a9:60:55:43:40:54:d3:97:49:47:76:aa:9d:20:3c:
                    ff:b9:cc:b2:89:a2:2e:cc:02:72:75:bb:f4:2f:25:
                    ed:4b:e3:6a:29:0d:7f:91:1e:1d:5b:8c:fe:a6:cb:
                    43:80:63:fb:df:c6:40:d0:8f:46:20:37:8c:be:92:
                    65:3a:49:65:ba:99:6b:6a:57:85:e3:31:0c:4d:08:
                    21:c7:40:b7:a6:99:c7:35:1d:54:47:73:53:07:fb:
                    94:9c:76:2d:3b:48:06:08:53:9c:b6:60:b8:ae:97:
                    cc:48:99:35:71:c6:83:bf:9c:5b:24:72:4d:5f:0a:
                    22:0b:7c:92:ca:f5:7f:e7:26:da:8d:f4:80:f8:cf:
                    86:f9:59:f8:12:5f:1e:e3:e2:67:47:c4:94:5b:d9:
                    b0:e8:9a:89:92:af:22:9b:df:87:86:2c:20:22:f5:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B7:51:20:42:10:1E:AE:3B:35:97:C3:89:D9:9C:90:A3:84:92:50
            X509v3 Authority Key Identifier:
                keyid:2C:F1:E4:34:93:BF:6D:8C:87:4D:42:F3:C1:C2:E9:68:85:40:77:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:59:c5:b2:c3:ef:b6:fe:ef:63:68:e7:f6:d4:ee:68:9b:85:
         40:af:5e:e2:ea:4b:fd:3c:d3:e6:25:30:fa:ce:fa:ba:da:3a:
         22:29:27:b1:22:8c:00:3d:41:28:fd:28:c7:1e:9c:84:39:4c:
         11:37:46:4f:c5:ff:4d:cc:33:8a:88:78:77:da:f9:05:73:47:
         37:95:95:5b:20:e7:fd:6b:21:20:2a:56:86:07:e4:c7:54:d2:
         bc:1a:70:97:ab:5e:4f:4c:58:3c:45:69:4d:17:34:03:0b:0f:
         63:a8:98:63:e1:b3:35:c3:5c:72:b9:a3:7f:2a:12:d3:7c:72:
         96:33:53:c4:8d:07:26:5d:f5:cc:77:3f:7f:68:0d:ed:0f:55:
         ad:2d:95:3d:87:e6:f6:e1:9b:b7:46:9c:b5:be:4b:fe:0d:8b:
         9c:45:81:bd:f1:a0:8f:ce:cf:c1:67:aa:70:48:dd:94:4a:9c:
         46:55:a8:cf:09:58:88:84:aa:9b:90:90:1d:ce:1a:70:dd:ac:
         e3:48:41:f3:2f:bd:22:87:10:e3:6e:bc:77:1c:24:77:9b:12:
         62:a6:3c:28:d2:98:cc:7f:a6:b0:71:6e:c3:7c:cc:37:a5:89:
         d8:71:43:4f:d9:07:21:ab:f4:6e:63:1a:dd:71:03:1e:22:08:
         fb:12:dc:cc
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUFPIY3pqetsSWGTppPQp5A8XGTMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNGMUU0MzQ5M0JGNkQ4Qzg3NEQ0MkYzQzFDMkU5Njg4
NTQwNzdERjAeFw0yNjA0MjYwMTU5MjdaFw0yNjA1MDExNzE3MjdaMDMxMTAvBgNV
BAMTKEYyQjc1MTIwNDIxMDFFQUUzQjM1OTdDMzg5RDk5QzkwQTM4NDkyNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSQIkpQKf4N+Zyme8s50Zxuo0
SjQLnQdBz8r5wtbUsW/pXfcSOtb9nA+3GYkAiJTQCZYlGa12fE1qegoYDWwZKmOB
eznSZF0CRP0wCTKFwEunukCVRpT1NalgVUNAVNOXSUd2qp0gPP+5zLKJoi7MAnJ1
u/QvJe1L42opDX+RHh1bjP6my0OAY/vfxkDQj0YgN4y+kmU6SWW6mWtqV4XjMQxN
CCHHQLemmcc1HVRHc1MH+5Scdi07SAYIU5y2YLiul8xImTVxxoO/nFskck1fCiIL
fJLK9X/nJtqN9ID4z4b5WfgSXx7j4mdHxJRb2bDomomSryKb34eGLCAi9TopAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU8rdRIEIQHq47NZfDidmckKOEklAwHwYDVR0j
BBgwFoAULPHkNJO/bYyHTULzwcLpaIVAd98wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRTA5MTVBOTY5NjRCNDlDNTMzN0UzMDhGNUM0QjIyOTUw
QzQyRUQzOTc5RDRBOEFDM0NFQjBGQjVBRjZERTExLzAvMkNGMUU0MzQ5M0JGNkQ4
Qzg3NEQ0MkYzQzFDMkU5Njg4NTQwNzdERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQ0YxRTQzNDkzQkY2RDhDODc0
RDQyRjNDMUMyRTk2ODg1NDA3N0RGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEUwOTE1QTk2OTY0QjQ5QzUzMzdFMzA4RjVDNEIyMjk1MEM0MkVEMzk3
OUQ0QThBQzNDRUIwRkI1QUY2REUxMS8wLzJDRjFFNDM0OTNCRjZEOEM4NzRENDJG
M0MxQzJFOTY4ODU0MDc3REYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxWcWyw++2/u9jaOf21O5om4VA
r17i6kv9PNPmJTD6zvq62joiKSexIowAPUEo/SjHHpyEOUwRN0ZPxf9NzDOKiHh3
2vkFc0c3lZVbIOf9ayEgKlaGB+THVNK8GnCXq15PTFg8RWlNFzQDCw9jqJhj4bM1
w1xyuaN/KhLTfHKWM1PEjQcmXfXMdz9/aA3tD1WtLZU9h+b24Zu3Rpy1vkv+DYuc
RYG98aCPzs/BZ6pwSN2USpxGVajPCViIhKqbkJAdzhpw3azjSEHzL70ihxDjbrx3
HCR3mxJipjwo0pjMf6awcW7DfMw3pYnYcUNP2Qchq/RuYxrdcQMeIgj7EtzM
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:43:43 2026 by rpki-client