Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.mft
File:                     32AE7493892249577E99292721D77996C23DC982.mft (raw, json)
Hash identifier:          P9MpBGagv7Rn1v72vLWOh7VOx79VhNplqKj5c5ZaIVQ=
Subject key identifier:   D9:7A:2A:0B:26:A0:40:7A:83:2C:3C:FC:F4:5F:85:94:BF:FB:1B:F5
Authority key identifier: 32:AE:74:93:89:22:49:57:7E:99:29:27:21:D7:79:96:C2:3D:C9:82
Certificate issuer:       /CN=32AE7493892249577E99292721D77996C23DC982
Certificate serial:       2B5AFE833B1025413E0C69C74AB2018D1321320D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32AE7493892249577E99292721D77996C23DC982.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.mft
Manifest number:          42
Signing time:             Wed 29 Apr 2026 21:25:28 +0000
Manifest this update:     Wed 29 Apr 2026 21:20:28 +0000
Manifest next update:     Sun 03 May 2026 23:32:28 +0000
Files and hashes:         1: 3139302e3139362e3139322e302f32302d3234203d3e203237373539.roa (hash: 0igPRNt8W/QBowt+rXqDnBeF7WwQmGZubuJKCnILVEs=)
                          2: 32AE7493892249577E99292721D77996C23DC982.crl (hash: uMzhN/WpckbOsSJkNN80ecfIhejs3XyRYH5sHwe5MGg=)
                          3: 3230302e342e3136302e302f32302d3234203d3e203237373539.roa (hash: sfRL6YYVU4tRTULbF8uGURxVK9oJ8ftyRAULHx4iNW8=)
                          4: 3230302e342e3137362e302f32302d3234203d3e203237373539.roa (hash: 2wWJfCy+omjrTfS8g6La7hTzzoO/gs/tDElAnKWD5YE=)
                          5: 3230312e3135302e3130342e302f32322d3234203d3e203237373539.roa (hash: 2CDaGmNhAxZgu6rBacRb3G27PVNONqgmV5CjSh8ZqZM=)
                          6: 3136382e3139372e3130302e302f32322d3234203d3e203237373539.roa (hash: xgVBuXxqP6Eer26H9mnfv739GzOh8UVPifrLb2ScsaQ=)
                          7: 323830333a613538303a3a2f33322d3332203d3e203237373539.roa (hash: QuwRbuKyzr/ZU1QVdJafiMoOtmqzlynBN6yE7bZt9mk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32AE7493892249577E99292721D77996C23DC982.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 23:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5a:fe:83:3b:10:25:41:3e:0c:69:c7:4a:b2:01:8d:13:21:32:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32AE7493892249577E99292721D77996C23DC982
        Validity
            Not Before: Apr 29 21:20:28 2026 GMT
            Not After : May  3 23:32:28 2026 GMT
        Subject: CN=D97A2A0B26A0407A832C3CFCF45F8594BFFB1BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:dd:77:f6:df:d9:7b:87:d1:3d:d7:b9:1a:
                    a5:f3:ed:11:cf:05:97:eb:3d:07:b5:75:25:fa:32:
                    0b:5c:6e:53:e6:a9:15:3f:dd:0d:04:20:15:03:1f:
                    37:8c:8e:c5:ab:51:24:e2:e0:b0:c4:75:6a:d8:30:
                    23:7c:7e:31:dc:e3:69:c3:70:c2:b9:52:e1:2d:75:
                    ef:73:be:7d:1a:f8:ed:6e:87:4d:f8:97:38:e9:34:
                    89:10:b5:71:89:98:0e:40:0b:1f:30:43:67:21:15:
                    f6:21:2b:4d:f8:3d:51:74:e4:74:4f:89:c6:b2:82:
                    1d:5b:53:65:b7:e2:92:d4:0c:bd:71:b7:d0:36:bd:
                    93:25:ef:c6:6c:cb:74:d7:c5:ab:71:cc:8c:8e:bb:
                    11:b2:3d:4d:c0:85:4e:9a:57:36:55:8c:bb:74:e7:
                    b0:f5:4f:16:21:37:18:80:79:81:b4:db:90:c3:6e:
                    16:dc:6a:3e:0c:07:27:8e:9c:dd:10:34:e2:d2:bf:
                    34:e5:85:1b:18:c9:c9:66:29:e9:d8:8c:53:90:d6:
                    60:c5:7a:81:23:3c:ec:82:0b:50:2b:eb:f2:a0:9e:
                    b8:ea:1e:df:f0:cd:d4:41:80:71:c5:49:1c:5b:aa:
                    18:f0:fd:22:d8:97:4e:d4:ab:de:90:86:46:9f:f8:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7A:2A:0B:26:A0:40:7A:83:2C:3C:FC:F4:5F:85:94:BF:FB:1B:F5
            X509v3 Authority Key Identifier:
                keyid:32:AE:74:93:89:22:49:57:7E:99:29:27:21:D7:79:96:C2:3D:C9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32AE7493892249577E99292721D77996C23DC982.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:18:86:20:5f:83:6b:65:39:9b:15:ff:b1:f7:04:a8:0b:6f:
         86:b1:64:ec:e7:2b:87:e2:07:18:15:cb:26:19:2d:77:cf:56:
         ef:d8:27:43:e7:aa:e4:a0:ce:9d:d0:23:58:1e:a7:81:b3:d8:
         29:b2:83:3c:bc:0c:4a:99:95:4f:d9:b9:4e:a6:5a:36:db:c0:
         36:11:ab:ed:48:c2:b8:79:8f:8e:aa:ec:1e:57:0f:66:2e:53:
         3d:28:ff:4c:5d:28:92:73:84:ec:3d:58:77:dd:0d:ea:54:ca:
         5a:4d:72:0b:15:16:22:4e:3d:88:77:e0:ad:30:3a:90:0f:28:
         e4:3d:49:71:d6:b9:d4:4d:cf:00:a5:34:1b:cb:31:db:11:7c:
         26:9a:b0:03:69:58:a0:f8:0f:b7:d7:69:98:3f:de:fb:4e:64:
         0a:a5:77:b1:86:d3:c0:6a:72:68:f2:ed:e5:f1:7a:49:82:e6:
         c8:d2:0f:31:4e:f8:0e:08:f5:fa:a4:fb:b1:57:96:21:ec:74:
         59:0b:6a:2a:99:fd:16:a5:d9:1f:b0:84:16:9f:9b:91:90:c1:
         7a:b4:98:2b:8d:7d:5e:67:d5:a4:b8:be:2a:90:5a:b9:bb:46:
         16:54:18:73:73:80:13:88:ef:52:6f:a3:db:79:74:b4:9b:4b:
         c9:3f:f3:bd
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUK1r+gzsQJUE+DGnHSrIBjRMhMg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBRTc0OTM4OTIyNDk1NzdFOTkyOTI3MjFENzc5OTZD
MjNEQzk4MjAeFw0yNjA0MjkyMTIwMjhaFw0yNjA1MDMyMzMyMjhaMDMxMTAvBgNV
BAMTKEQ5N0EyQTBCMjZBMDQwN0E4MzJDM0NGQ0Y0NUY4NTk0QkZGQjFCRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGHN139t/Ze4fRPde5GqXz7RHP
BZfrPQe1dSX6MgtcblPmqRU/3Q0EIBUDHzeMjsWrUSTi4LDEdWrYMCN8fjHc42nD
cMK5UuEtde9zvn0a+O1uh034lzjpNIkQtXGJmA5ACx8wQ2chFfYhK034PVF05HRP
icaygh1bU2W34pLUDL1xt9A2vZMl78Zsy3TXxatxzIyOuxGyPU3AhU6aVzZVjLt0
57D1TxYhNxiAeYG025DDbhbcaj4MByeOnN0QNOLSvzTlhRsYyclmKenYjFOQ1mDF
eoEjPOyCC1Ar6/KgnrjqHt/wzdRBgHHFSRxbqhjw/SLYl07Uq96Qhkaf+Iv/AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU2XoqCyagQHqDLDz89F+FlL/7G/UwHwYDVR0j
BBgwFoAUMq50k4kiSVd+mSknIdd5lsI9yYIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yN0ExQjBERDdFOUU1MjM0MEFDQzU1NDBCMkRGMjM0QUQx
OTdDNzI5REE4RkEyNDMzNDAyNEZGQjUyMENCQTc2LzAvMzJBRTc0OTM4OTIyNDk1
NzdFOTkyOTI3MjFENzc5OTZDMjNEQzk4Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMkFFNzQ5Mzg5MjI0OTU3N0U5
OTI5MjcyMUQ3Nzk5NkMyM0RDOTgyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjdBMUIwREQ3RTlFNTIzNDBBQ0M1NTQwQjJERjIzNEFEMTk3QzcyOURB
OEZBMjQzMzQwMjRGRkI1MjBDQkE3Ni8wLzMyQUU3NDkzODkyMjQ5NTc3RTk5Mjky
NzIxRDc3OTk2QzIzREM5ODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKGIYgX4NrZTmbFf+x9wSoC2+G
sWTs5yuH4gcYFcsmGS13z1bv2CdD56rkoM6d0CNYHqeBs9gpsoM8vAxKmZVP2blO
plo228A2EavtSMK4eY+OquweVw9mLlM9KP9MXSiSc4TsPVh33Q3qVMpaTXILFRYi
Tj2Id+CtMDqQDyjkPUlx1rnUTc8ApTQbyzHbEXwmmrADaVig+A+312mYP977TmQK
pXexhtPAanJo8u3l8XpJgubI0g8xTvgOCPX6pPuxV5Yh7HRZC2oqmf0WpdkfsIQW
n5uRkMF6tJgrjX1eZ9WkuL4qkFq5u0YWVBhzc4ATiO9Sb6PbeXS0m0vJP/O9
-----END CERTIFICATE-----
Generated at Thu Apr 30 05:50:45 2026 by rpki-client