Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft
File:                     FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft (raw, json)
Hash identifier:          AgakvROJYck4q4KvjN7LyMFjpPKKQWR9NSaZVsAxfMg=
Subject key identifier:   76:FF:62:A6:44:63:5D:7E:82:FE:DA:19:5D:AF:BF:E1:5B:75:DA:DA
Authority key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57
Certificate issuer:       /CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
Certificate serial:       669C8A912CFB254132EABF71E964C4FCF457D182
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft
Manifest number:          0128
Signing time:             Mon 20 Oct 2025 07:26:31 +0000
Manifest this update:     Mon 20 Oct 2025 07:21:31 +0000
Manifest next update:     Sat 25 Oct 2025 20:49:31 +0000
Files and hashes:         1: 3138312e3232342e36342e302f32322d3232203d3e20323732303235.roa (hash: HnWtUYYthwF+HZDpfOzq9DOtaHLYVyY2kh3xbBNI7Y8=)
                          2: 3138312e3232342e36342e302f32342d3234203d3e20323732303235.roa (hash: qMBNAvvFIyvREFsCgcHpCKsK73Fa4+zjCgqcpaKmpPM=)
                          3: 3138312e3232342e36372e302f32342d3234203d3e20323732303235.roa (hash: DypEPZbbiFDGuAzSJXjS3RnCu5DIaqu1X8zxGp+K+q4=)
                          4: FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl (hash: syx09kMld1XRxndHZcO4XtGiolJXvqkvynADs7BLQBw=)
                          5: 3138312e3232342e36352e302f32342d3234203d3e20323732303235.roa (hash: XP386BbVK9HzB1394L1M8IAOMh/j6J8sED1LLe3Mk4o=)
                          6: 3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa (hash: Vqp3h8+rcTavUXPA2bt/FSZfli3j06jIFG3kltZ1wJE=)
                          7: 323830333a613531303a3a2f33322d3332203d3e20323732303235.roa (hash: kglHi5raMfeiD+sr0IcjRx/ESDVtIITOcjCIwGtraPA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9c:8a:91:2c:fb:25:41:32:ea:bf:71:e9:64:c4:fc:f4:57:d1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
        Validity
            Not Before: Oct 20 07:21:31 2025 GMT
            Not After : Oct 25 20:49:31 2025 GMT
        Subject: CN=76FF62A644635D7E82FEDA195DAFBFE15B75DADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:79:d0:61:8e:ea:7d:ff:2b:99:68:ce:75:
                    cd:ef:86:ac:52:0d:fd:0d:40:89:8d:b0:3e:c0:d7:
                    bb:b8:c8:b8:65:15:3a:36:ca:de:df:d0:fd:59:5a:
                    85:bc:34:ba:17:6d:12:30:78:ef:c9:e9:ca:f6:71:
                    ec:75:50:82:74:f7:cb:f9:06:81:ce:ed:68:a1:07:
                    9b:cf:d4:ff:e0:75:52:09:ba:c7:e3:8e:bf:2d:0e:
                    72:4c:d5:d6:e6:97:77:64:2b:09:7b:e3:60:41:29:
                    f6:22:61:6b:4c:eb:44:58:81:f7:03:32:94:f8:a2:
                    1c:e4:31:4c:a9:27:af:c4:42:fb:54:6a:49:df:7b:
                    89:67:5a:0f:52:c7:5e:bf:e2:ba:ec:f3:5b:72:8a:
                    4c:74:0d:be:78:63:f5:3a:96:1c:68:9e:e2:23:8a:
                    10:e5:cb:a3:76:33:f2:50:24:06:5d:22:72:fa:3f:
                    d7:15:5e:48:36:46:a3:d1:e0:0d:70:3f:18:e0:bb:
                    f8:f3:6f:f9:d4:39:71:e8:88:d7:27:41:6a:f7:a0:
                    28:0b:ba:bb:55:97:fc:df:2c:13:0d:f1:d6:0d:cd:
                    64:71:59:a4:57:cb:e6:ca:36:a4:72:bf:95:7e:2a:
                    e2:36:e3:de:f2:37:c8:c0:71:08:f7:8b:c9:5e:e7:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FF:62:A6:44:63:5D:7E:82:FE:DA:19:5D:AF:BF:E1:5B:75:DA:DA
            X509v3 Authority Key Identifier:
                keyid:FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:50:1f:10:70:e6:67:a1:5b:dc:24:50:5b:6d:ee:05:85:26:
         fc:65:69:e9:84:f1:57:8d:f8:27:91:0a:4e:2f:cb:00:3c:07:
         80:83:51:b1:32:7d:33:99:0f:58:37:1a:7f:15:fa:14:5a:65:
         9f:ae:53:a0:e3:20:9a:35:ea:92:2b:5b:c4:6c:24:30:f2:4e:
         d0:b2:b6:e4:a3:77:c9:91:74:e4:59:ce:be:c9:4a:db:ac:4b:
         37:2d:a0:8f:78:b6:53:21:82:e1:99:03:74:3e:aa:b3:5a:aa:
         fa:49:2e:dd:42:b7:ba:34:88:d7:8f:7e:65:1d:df:e7:4b:14:
         dc:11:a2:2a:29:7e:46:4f:22:0f:92:03:ba:91:6e:5b:f0:0b:
         69:80:bd:1a:7e:65:f7:4f:ee:eb:6a:39:79:bc:eb:85:5d:4b:
         cc:7f:ad:5a:a4:4a:96:32:06:f3:b2:fe:38:06:57:ae:3a:fb:
         22:42:13:61:75:02:e5:17:bb:ce:fc:a6:25:d5:b7:c7:ad:88:
         90:f7:89:0d:a6:02:00:41:2f:fa:ae:7a:c9:7b:e4:fa:78:a3:
         30:bb:18:ce:34:a3:37:0e:1f:ad:2c:5f:f2:b9:d8:76:27:df:
         ee:1d:9d:b6:a6:5e:48:d5:cc:96:2a:7c:67:e8:7c:49:52:c6:
         21:7f:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:24:36 2025 by rpki-client