Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
File:                     AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft (raw, json)
Hash identifier:          BHhanG6AIK8Px73QBsbL28GfH5rydzCW98TBdpUS/Qk=
Subject key identifier:   87:1E:21:A0:3D:CF:63:5E:37:D5:AD:5A:81:FC:A1:2A:9F:20:67:A4
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       53B0F59FA5DF92D65AD83CF53FC79404A89CD2BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
Manifest number:          0101
Signing time:             Sun 15 Mar 2026 14:01:58 +0000
Manifest this update:     Sun 15 Mar 2026 13:56:58 +0000
Manifest next update:     Thu 19 Mar 2026 15:57:58 +0000
Files and hashes:         1: 34352e3232372e352e302f32342d3234203d3e20323636363639.roa (hash: HfOybiIfu235zllloZ80pZ0gdq3lu/Y7tdktYlXwuWE=)
                          2: 34352e3232372e352e302f32342d3234203d3e2031383030.roa (hash: YMzkOV2W9zteVGbvUwYV4ersUMzSznNRyo4zH+H6D9U=)
                          3: AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl (hash: J03VO7oE87xIi+wKEldMXjruU1rutWtCzjl8TZ7OkaQ=)
                          4: 323830313a3135343a3a2f34322d3432203d3e20323636363639.roa (hash: qx6ZrM/CZi2D1yQlfkZHijlcZbSoex48xmP1mELcyPs=)
                          5: 34352e3232372e352e302f32342d3234203d3e203138373437.roa (hash: +HBLuVL0tjTd2NEDtVOOZzUoVAZ8SfmExObtH1UZGB4=)
                          6: 323830313a3135343a3a2f34322d3432203d3e2031383030.roa (hash: UpWBj9ONTa/+9aOYO02DwEhbYSFaq2S3swV8AVaaaDo=)
                          7: 323830313a3135343a3a2f34322d3432203d3e203138373437.roa (hash: Z0KZ+EZtV+PkrkLEgz6j1L1LlhloxfodeQd6NifyECA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b0:f5:9f:a5:df:92:d6:5a:d8:3c:f5:3f:c7:94:04:a8:9c:d2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: Mar 15 13:56:58 2026 GMT
            Not After : Mar 19 15:57:58 2026 GMT
        Subject: CN=871E21A03DCF635E37D5AD5A81FCA12A9F2067A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:14:df:2f:ca:19:a4:5e:f9:d4:b9:ec:f2:51:
                    90:06:60:97:cf:fc:a9:4f:78:07:07:5f:f0:78:af:
                    6f:c6:3f:f5:73:3a:29:49:98:a9:a0:28:f8:05:43:
                    1b:60:f3:6e:6e:28:62:8b:b7:f4:c5:f7:29:b6:6e:
                    80:ab:4f:40:21:a9:62:fd:e5:6a:df:dd:98:98:62:
                    25:f0:cb:44:0e:a7:6b:3c:e9:f6:29:fb:d0:47:d5:
                    90:bf:27:31:a3:dc:a7:f7:c4:03:79:cc:66:b5:38:
                    4c:bb:1b:70:2e:47:d5:82:d4:95:68:ab:84:59:2d:
                    29:f2:45:f2:55:0a:ed:ff:eb:5c:d0:cc:59:05:cc:
                    88:5d:fd:8a:21:d1:62:2c:73:aa:dd:73:71:61:1e:
                    80:3c:c4:cc:87:a8:be:99:9f:6f:f7:16:c9:5e:b4:
                    54:a4:2a:43:d5:26:22:70:94:25:70:49:c6:d0:5c:
                    21:90:1b:39:f7:41:d4:1a:72:15:9e:5b:d5:2b:b3:
                    6b:94:e5:69:95:6f:34:a3:10:2c:03:12:63:b3:ae:
                    10:f7:2f:9d:66:bf:51:4f:a9:c2:1c:75:72:22:60:
                    15:4f:a6:83:99:d6:23:1a:8e:b3:9c:0f:20:76:96:
                    09:b8:08:d4:65:49:f4:a7:2e:f4:d2:07:a6:41:fc:
                    74:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1E:21:A0:3D:CF:63:5E:37:D5:AD:5A:81:FC:A1:2A:9F:20:67:A4
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:50:99:a4:af:18:bd:7e:50:7f:06:c2:d0:ce:57:e2:21:e6:
         55:1f:a3:1b:90:39:08:54:b1:8d:b3:af:1a:84:50:e3:0a:fe:
         dd:3c:9d:16:43:3f:e7:12:78:b7:94:f9:ec:8f:33:d2:01:b2:
         0b:4a:e5:8e:ed:d5:be:e2:42:91:50:7d:ef:65:ab:d2:e2:a0:
         6a:7c:56:25:ff:89:52:12:37:a3:bb:93:a9:c4:80:94:14:ad:
         1f:dd:8c:32:64:43:10:45:26:62:1f:4f:92:23:bd:58:4e:3e:
         6a:87:0c:53:96:af:75:49:65:05:6f:54:7d:73:11:e3:cc:d3:
         e7:e3:77:a2:f6:56:5c:4c:cc:08:75:50:86:13:f0:2c:d9:d2:
         37:f1:bd:a0:df:27:ef:59:62:b9:25:6f:81:24:3a:0a:51:40:
         e6:63:95:73:37:e7:96:4c:e0:d5:4d:83:5e:90:7e:df:99:a0:
         d0:59:73:78:5b:9f:99:57:fa:3a:5a:55:e4:88:0e:88:92:28:
         ac:85:dd:0f:ba:27:4e:a1:b1:ba:c6:3a:46:94:6d:d4:f5:15:
         b7:bd:fb:7d:84:4a:68:22:0d:66:f8:09:66:d2:ea:ba:fd:99:
         d8:f8:99:ae:80:d0:85:85:ea:d0:b0:a5:5c:2f:5d:b9:03:c3:
         3d:14:e7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:52:43 2026 by rpki-client