Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
File:                     D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json)
Hash identifier:          9i814/sFNX0kvZZ2WZxgKZ+yqSZkZ77CC18NeVMuOS8=
Subject key identifier:   15:63:35:FF:8D:C7:98:7E:C3:F1:3E:4D:05:C8:F6:70:53:B9:6D:D5
Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9
Certificate issuer:       /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
Certificate serial:       156F2C694ED0403AB66D35CF60C04594BC0B5EEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
Manifest number:          01CD
Signing time:             Thu 17 Sep 2026 18:24:25 +0000
Manifest this update:     Thu 17 Sep 2026 18:19:25 +0000
Manifest next update:     Tue 22 Sep 2026 18:28:25 +0000
Files and hashes:         1: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: Um86cEkZc1cblKMuUA3/7tQwstJEkeehuPwQs3wj8OI=)
                          2: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: McZ4Be96M1L/jbKaCqXQcV4ak/UpD08hXS9h3yb0m1U=)
                          3: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: 4LFf4uRlMxMf2oudTQtCgNr/ddYwiQolDdMBxGwEJcg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6f:2c:69:4e:d0:40:3a:b6:6d:35:cf:60:c0:45:94:bc:0b:5e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
        Validity
            Not Before: Sep 17 18:19:25 2026 GMT
            Not After : Sep 22 18:28:25 2026 GMT
        Subject: CN=156335FF8DC7987EC3F13E4D05C8F67053B96DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:47:3c:6d:a2:b7:9d:25:ce:7e:97:a6:e2:
                    9c:70:4a:cd:3c:83:93:21:24:68:18:b2:c5:4c:15:
                    57:b3:8d:83:61:58:cd:56:64:7d:26:c3:84:cc:50:
                    d9:fa:d5:12:53:fc:5b:f0:f3:b4:71:44:5f:e9:ba:
                    38:ad:72:e0:e5:77:dd:ff:bb:9e:21:c7:26:28:be:
                    84:ef:de:00:de:54:2b:a1:91:e1:df:9c:5b:a6:7a:
                    b5:0f:55:37:4e:8f:22:71:e3:41:08:f4:86:4a:0b:
                    51:e1:51:5b:bd:a9:b2:4b:2e:88:71:39:a5:c3:4c:
                    a8:15:a2:e6:d2:4a:9a:48:63:b5:6f:79:38:44:9f:
                    a1:4a:db:1a:66:13:13:8c:78:dd:f8:ee:96:b9:c9:
                    61:4b:71:2a:ee:90:e2:71:63:3c:31:57:e4:59:94:
                    7e:d8:3d:b9:09:5a:b8:6d:fc:39:25:1b:8e:69:e9:
                    28:b7:67:f8:86:d8:f7:af:a2:f2:fe:c8:b9:c5:65:
                    03:84:1f:29:81:fa:7b:b3:af:fa:2c:b4:69:f2:aa:
                    27:5f:f0:e7:da:e0:19:05:25:d6:32:84:17:09:d2:
                    9c:95:6e:32:b9:5c:6f:c4:3d:95:57:2a:b8:14:9c:
                    fb:8f:ad:7f:49:3f:5f:45:a9:4b:a9:98:cd:16:cd:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:63:35:FF:8D:C7:98:7E:C3:F1:3E:4D:05:C8:F6:70:53:B9:6D:D5
            X509v3 Authority Key Identifier:
                keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:08:b7:5d:9d:a4:d9:8e:61:b6:b9:b7:e7:75:a4:a1:46:68:
         2a:6f:1d:ef:1f:36:4e:03:7c:5e:52:0b:38:41:37:40:a4:aa:
         0a:0b:ab:fd:11:1c:c0:6f:06:7d:44:e0:94:03:11:33:86:3c:
         e3:ec:0e:43:41:f5:91:8a:83:4f:9d:00:68:fd:a4:15:38:32:
         73:fe:bf:c2:73:cd:6b:3c:e2:bd:c4:e7:59:53:e4:26:a2:ac:
         80:7f:82:b4:59:1f:f3:8a:53:8f:70:c4:be:ed:e3:e1:b2:3a:
         97:cd:b1:73:de:89:6f:50:02:84:49:50:45:95:42:83:df:89:
         b6:c9:a1:7d:67:c7:90:b5:98:d0:86:fc:d0:bf:ed:1d:1f:dc:
         c4:7c:ac:1d:a5:39:74:f3:ae:63:2b:6f:35:24:b5:e4:f3:d3:
         87:79:fd:41:7f:dc:0f:e3:9b:61:bc:9e:87:e0:e3:af:f9:93:
         29:c4:46:84:64:cb:38:2a:0e:5f:1d:07:74:d4:54:5f:21:33:
         c4:4e:5a:46:69:8f:06:c2:ad:6b:96:84:6e:ce:88:9f:80:9c:
         85:97:89:de:84:d9:1a:17:4d:d9:52:c9:24:cd:e8:3f:49:bc:
         61:7f:81:0c:2b:0f:af:e4:ac:c8:e8:ca:24:e9:ee:0d:1d:ce:
         0b:fb:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:14:34 2026 by rpki-client