Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
File:                     25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft (raw, json)
Hash identifier:          PsNM2umw/XI1SXZuLpBt/jACJNF+d4+qKsitRZtSbFY=
Subject key identifier:   B7:2D:2E:FE:55:89:23:01:6E:92:69:97:D0:59:D0:08:01:76:9A:A9
Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A
Certificate issuer:       /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
Certificate serial:       57D58A389639F9BD13F254F8983269CB8BBA774D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
Manifest number:          011D
Signing time:             Wed 17 Sep 2025 17:31:43 +0000
Manifest this update:     Wed 17 Sep 2025 17:26:43 +0000
Manifest next update:     Mon 22 Sep 2025 16:00:43 +0000
Files and hashes:         1: 34352e3136312e34342e302f32342d3234203d3e20323636393032.roa (hash: 9jaD8ScaSBtZgY1McxVIxZirAvjcAcgSOFZqFeK76+o=)
                          2: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl (hash: ZELpIgiM0jcBWvrZt3vgpS4HJGmBkyzaGTvNAOhUtZg=)
                          3: 323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa (hash: KyyYuN0Yyj5ZO2OssZou9c0xljNW9QC9IlHwmAWoHQg=)
                          4: 34352e3136312e34352e302f32342d3234203d3e20323636393032.roa (hash: /0gy1miHRoy/ostSkAVmkit9ibYLsGQ/IUPZTZwCW20=)
                          5: 34352e3136312e34362e302f32342d3234203d3e20323636393032.roa (hash: xDW4Lo9hVeYDQd0CfzQjVI0iUuT8tc/GgroA2Aw5kCM=)
                          6: 34352e3136312e34342e302f32322d3232203d3e20323636393032.roa (hash: wff5HMuPjRY+aZAF2OdCcw6nUxf458UNR9ehNwtR7m8=)
                          7: 34352e3136312e34372e302f32342d3234203d3e20323636393032.roa (hash: R49+wWAjZezXpnjFE7SoK205+j8QHF55FrOQnSN8YaY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d5:8a:38:96:39:f9:bd:13:f2:54:f8:98:32:69:cb:8b:ba:77:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
        Validity
            Not Before: Sep 17 17:26:43 2025 GMT
            Not After : Sep 22 16:00:43 2025 GMT
        Subject: CN=B72D2EFE558923016E926997D059D00801769AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:e0:8c:24:a9:e4:73:91:72:e0:f1:90:fc:
                    54:b1:80:6c:61:ae:6d:16:ad:9f:08:1d:c3:45:e5:
                    96:eb:2c:e4:85:c4:b6:37:c2:ad:61:23:5b:a0:35:
                    aa:24:a8:ee:04:0a:26:ef:80:c1:c1:65:91:2c:60:
                    4f:04:c2:2b:db:cf:bd:03:3e:c1:82:48:1f:a5:20:
                    46:98:35:ab:41:46:fc:5a:80:db:50:4c:e4:52:12:
                    57:79:34:0e:c8:f7:c0:10:37:9c:b4:c7:d7:fb:13:
                    2e:27:77:4f:6d:19:97:40:e5:12:aa:4c:9d:6d:37:
                    ef:4c:d6:2c:d6:4d:0a:4d:08:d2:93:b4:da:f5:4c:
                    27:69:da:fd:3a:45:74:1b:d5:e9:d1:7c:30:09:fd:
                    0b:5f:86:95:36:24:20:94:cb:a2:80:cf:f6:35:0c:
                    40:38:3f:22:dc:6d:8f:43:1a:7f:f2:2a:fc:96:c2:
                    15:7c:6b:81:eb:21:49:4d:ee:fd:f1:96:2e:3c:c9:
                    cd:ab:64:70:69:21:4e:99:b0:d7:56:89:67:ac:49:
                    ca:a3:99:b8:e8:f5:86:3e:39:dd:cb:5b:1e:ee:8e:
                    ee:d8:12:69:38:85:42:15:1c:2d:cb:bf:a9:60:87:
                    92:aa:a5:ec:e2:70:e2:c3:fe:2d:02:5f:58:80:e5:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2D:2E:FE:55:89:23:01:6E:92:69:97:D0:59:D0:08:01:76:9A:A9
            X509v3 Authority Key Identifier:
                keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7c:3e:1a:42:98:d7:88:aa:4a:d8:76:d5:7f:47:91:a0:83:
         d2:13:43:b3:07:b4:c4:f3:91:78:f9:a1:88:26:42:be:1b:ad:
         b8:3c:67:b8:6a:cc:5b:4d:00:c5:94:c1:07:44:4e:d8:5e:f4:
         11:72:e0:c1:f5:61:ab:f5:f9:40:84:6d:a4:bf:10:b4:b0:1f:
         e6:ce:fe:93:c2:fb:4d:d4:1d:c7:a9:b8:4e:68:4d:0d:18:93:
         5c:ca:fc:8e:69:f5:0c:ea:33:fe:ab:3b:22:11:a5:1d:47:ea:
         67:a5:e8:62:d5:ab:a6:0a:96:21:3c:5d:7c:af:0e:ad:f8:dc:
         de:42:5e:d3:8a:31:ba:ef:ac:44:7e:84:f8:d6:ea:ef:c3:2c:
         5b:85:fa:d2:43:06:b5:0d:19:dc:5a:9e:d6:21:87:16:8c:e8:
         d1:72:df:f9:17:4a:47:ca:39:17:99:82:07:cf:0d:a6:51:99:
         1e:e1:76:45:17:7b:fd:c4:f3:a8:38:81:01:35:91:bd:06:4e:
         aa:f2:69:83:09:d3:79:c8:88:54:36:89:57:41:4a:ad:e5:ea:
         35:e9:47:48:15:d5:bb:1c:9a:bb:00:63:47:5e:b8:ec:01:e7:
         6b:09:b8:42:b6:22:06:88:13:81:5c:42:c7:f4:d0:55:85:a6:
         4f:9f:62:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 04:17:29 2025 by rpki-client