Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft
File:                     BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft (raw, json)
Hash identifier:          evECaxvyKL1Ap0+uKCEpVb6DpX8NGEnEgQ/a1c2Tkf8=
Subject key identifier:   8B:3E:89:2E:6A:8B:58:72:0B:DE:C6:9C:DE:EA:2D:23:3F:95:C7:22
Authority key identifier: BA:FB:10:BE:93:E0:3D:E3:AD:70:11:08:0A:4B:6D:0B:EC:28:18:F2
Certificate issuer:       /CN=BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2
Certificate serial:       1FBA5CC42A5277056D5A97085BC136DFBBC046BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft
Manifest number:          41
Signing time:             Fri 18 Sep 2026 18:16:46 +0000
Manifest this update:     Fri 18 Sep 2026 18:11:46 +0000
Manifest next update:     Thu 24 Sep 2026 05:14:46 +0000
Files and hashes:         1: BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.crl (hash: wuNrSnh42ObAOwgot0jzIukjToZFHFq07Sd47OTc8eQ=)
                          2: 323830333a6235303a3a2f33322d3438203d3e20323733393033.roa (hash: cLm/sOtijv9tUxv0gNYeq+uzl28t20gf139GQKEZj0g=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ba:5c:c4:2a:52:77:05:6d:5a:97:08:5b:c1:36:df:bb:c0:46:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2
        Validity
            Not Before: Sep 18 18:11:46 2026 GMT
            Not After : Sep 24 05:14:46 2026 GMT
        Subject: CN=8B3E892E6A8B58720BDEC69CDEEA2D233F95C722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:df:f1:98:3a:0a:55:ff:da:48:77:90:84:
                    91:35:8c:ad:63:02:19:de:de:a1:bb:ad:0a:91:bb:
                    9c:8c:6f:55:a3:44:08:6f:ea:88:7e:e7:58:01:f7:
                    a1:eb:5e:e7:83:83:97:14:96:4c:61:bd:af:c4:dc:
                    02:ed:f1:b8:e7:af:d1:ca:0f:af:5c:54:76:6e:21:
                    87:42:d5:1c:8a:d8:ee:03:9d:2a:b2:37:66:01:88:
                    f7:cc:13:2d:ff:f2:74:31:1d:0d:b0:a5:ff:94:5d:
                    cf:76:c6:9b:23:12:1b:da:31:f0:d0:c1:f0:1e:e9:
                    83:4b:9a:b0:a0:dd:7a:d0:2c:99:c1:f7:b7:6d:5d:
                    b4:b6:a0:a9:a9:06:72:a2:1c:3e:99:2c:7c:55:a1:
                    3e:31:0f:61:ee:bb:bd:19:95:ab:31:a5:ce:66:52:
                    88:9c:32:7e:b1:7a:2a:51:f7:98:9f:5f:d6:b3:4f:
                    2d:f2:06:40:24:5e:7b:b1:88:c7:33:d0:a4:25:98:
                    4a:34:d9:9f:a4:0f:af:32:94:5d:dc:7b:36:30:5a:
                    0d:56:40:1d:5c:dc:89:10:1c:d1:db:9f:e4:ef:45:
                    6c:93:d0:f8:32:82:90:de:ce:fc:1d:f8:2e:75:f6:
                    de:d3:04:2e:3c:5b:8a:0a:af:d5:24:34:71:aa:d2:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3E:89:2E:6A:8B:58:72:0B:DE:C6:9C:DE:EA:2D:23:3F:95:C7:22
            X509v3 Authority Key Identifier:
                keyid:BA:FB:10:BE:93:E0:3D:E3:AD:70:11:08:0A:4B:6D:0B:EC:28:18:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:87:81:d7:3b:68:5b:24:c3:ab:db:25:e2:2b:05:e5:b0:9f:
         11:28:a0:5f:10:42:ac:56:43:28:62:cc:6c:74:77:dd:19:94:
         af:51:9e:3f:d4:29:98:de:ad:30:e9:79:48:97:c5:67:fa:7d:
         63:9f:41:82:1f:24:83:68:b7:25:1a:43:81:24:68:b0:24:c0:
         14:1a:27:b1:4e:5a:7e:d2:dd:cb:65:3e:d8:e4:c7:7a:cd:8a:
         27:90:35:7d:01:bc:36:dd:9e:0a:a2:37:a5:66:2e:85:cc:52:
         77:15:8c:79:d8:c8:cb:90:13:77:c4:84:83:83:16:f8:37:d3:
         0b:91:6c:c6:70:bc:8d:99:ec:aa:dd:ea:d6:ba:fc:08:82:91:
         4f:d9:93:f3:d8:b2:f0:2f:87:0d:aa:63:aa:3a:67:27:c9:60:
         af:49:41:43:81:ab:ce:d7:87:9a:5c:3a:59:34:16:40:8e:21:
         06:f5:1f:22:f8:f7:43:fc:dd:ed:25:2e:9f:5e:4d:08:19:0a:
         2a:24:61:75:ad:09:d3:05:93:e3:c4:78:46:fb:8e:00:dc:fa:
         52:c4:90:cd:bd:46:83:3a:3d:f8:67:14:4b:19:2d:ba:3b:cf:
         bc:1f:4a:b6:96:26:27:e9:88:50:88:ba:21:d6:7d:1e:7d:e9:
         a2:29:b7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:26:41 2026 by rpki-client