Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft
File:                     65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft (raw, json)
Hash identifier:          R7blEJIcGUJJmFwd819LQljTsHfxmlHSsMoxISFThSE=
Subject key identifier:   A6:50:2E:43:3C:67:77:06:DD:DD:D6:F6:57:B6:90:48:1B:23:DA:CE
Authority key identifier: 65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2
Certificate issuer:       /CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2
Certificate serial:       6331F0199613BBF887D8FF4C54BBBFA78B917CF3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft
Manifest number:          01A7
Signing time:             Sun 01 Nov 2026 00:36:55 +0000
Manifest this update:     Sun 01 Nov 2026 00:31:55 +0000
Manifest next update:     Thu 05 Nov 2026 21:28:55 +0000
Files and hashes:         1: 34352e3138322e3132382e302f32322d3234203d3e203532343638.roa (hash: sZyXf5+yIoCyD2CqssqLvAZ8d5Ksc6bgDw7uCECrId0=)
                          2: 323830333a373936303a3a2f33322d3438203d3e20323639373438.roa (hash: h7WaZxq5CTSD4+LXQsZMbxI6QnokAlU1ZT+9U50sXuU=)
                          3: 65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl (hash: HbS41op2FFl/EwsLdm/saH/N6cesuTam79hz5Dwiyyk=)
                          4: 34352e3138322e3132382e302f32322d3234203d3e20323639373438.roa (hash: /KUwMOzEYLfNgsluG7uHe3SWArcYAhrR9J4j+s73U5Q=)
                          5: 34352e3138322e3132382e302f32322d3234203d3e203631353132.roa (hash: 90sETu0hr1X5fO/QcuqJzl3s33A47i+akpkmqj3JbZg=)
                          6: 34352e3138322e3132382e302f32322d3234203d3e20323633373137.roa (hash: rpYgfkW1miR6XwYPDqWvybHO6b1xF3z8ckAC0W9hCXI=)
                          7: 34352e3138322e3132382e302f32322d3234203d3e20323639373833.roa (hash: 6ldV9jpCI9oJ0cTWOrUWwdDuAXz9cF0MLzOXZsrYURM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:31:f0:19:96:13:bb:f8:87:d8:ff:4c:54:bb:bf:a7:8b:91:7c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2
        Validity
            Not Before: Nov  1 00:31:55 2026 GMT
            Not After : Nov  5 21:28:55 2026 GMT
        Subject: CN=A6502E433C677706DDDDD6F657B690481B23DACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:d6:01:20:05:23:55:bb:54:1c:44:ff:dc:
                    3a:5d:39:c4:c2:4a:70:76:51:2a:13:94:86:4a:38:
                    d8:2d:95:3b:9f:b0:6c:78:4b:92:6c:25:4f:77:56:
                    50:3f:df:c3:c2:d3:5d:f3:31:35:e3:32:0c:b2:97:
                    f8:21:a4:7a:54:6c:e3:a2:29:61:f9:e2:ab:d3:05:
                    3e:ae:82:c9:18:31:9b:d0:a8:88:17:7c:bc:c2:0f:
                    aa:48:c9:2c:13:c7:e1:03:d8:1d:47:a8:c7:c0:52:
                    fa:fe:b4:2b:0d:12:cd:93:41:87:2c:a7:27:d5:ea:
                    cc:24:5f:74:14:1f:3b:8d:44:1e:a9:af:b7:b1:0e:
                    ff:09:85:0f:f6:32:6c:0a:1f:9c:5c:fc:b9:d9:27:
                    7a:8b:5d:0e:8e:90:0d:87:12:7d:45:e7:b7:c1:77:
                    e8:57:01:04:4d:b7:f9:73:55:77:46:a0:16:62:92:
                    f9:1b:13:b4:b4:a2:43:fc:cc:91:75:7e:9b:8e:ec:
                    b7:10:b4:c4:cf:f5:43:46:51:8d:f3:4f:7f:bd:c3:
                    da:df:e9:d4:81:d5:d0:8d:f1:c9:73:f4:41:19:18:
                    df:b1:0c:95:63:0d:53:f6:45:63:d5:a9:94:04:da:
                    4b:af:3c:63:99:b4:57:e3:c6:b2:11:fd:f5:c6:dd:
                    0d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:50:2E:43:3C:67:77:06:DD:DD:D6:F6:57:B6:90:48:1B:23:DA:CE
            X509v3 Authority Key Identifier:
                keyid:65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:14:3a:53:d5:ec:50:78:08:31:c5:44:3f:09:4e:c0:6a:44:
         7e:2a:e5:4e:6b:71:93:c7:f4:f7:49:3d:87:4e:1c:84:33:09:
         b7:6e:42:39:fe:9b:a6:d0:fb:9c:76:eb:3d:9d:26:18:49:d0:
         65:0d:fa:7d:3f:b6:c3:aa:00:0d:9a:2f:01:61:cb:be:3d:cf:
         64:e4:50:07:5a:af:cc:df:49:4e:05:6b:71:af:16:f9:6a:be:
         97:85:26:25:70:db:34:74:04:1a:c7:ae:54:a4:76:8f:2f:29:
         28:00:cf:d7:9d:81:db:a7:b8:15:fe:b1:1f:35:42:75:27:bd:
         68:dc:86:a1:4e:b7:c2:01:35:d4:a0:75:47:bb:86:61:f4:8f:
         17:0d:d4:8b:85:c8:c1:c5:b7:64:9f:63:4b:c8:d7:73:35:5d:
         c1:a6:7f:5b:0f:e6:e9:de:87:3b:ce:80:75:cf:79:09:c4:ce:
         cc:31:9b:53:ff:12:f6:13:fd:19:3f:cb:9e:cf:7c:a3:21:7f:
         31:e9:ae:78:75:7a:81:54:96:09:61:32:72:e8:9d:cb:b1:ff:
         6f:72:14:0d:f1:bf:38:92:6f:47:e2:18:49:7b:58:6c:ef:9d:
         bb:e2:4d:fc:8c:2e:06:fd:ab:4d:96:94:05:0e:3b:e1:d9:d5:
         aa:d4:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:07:18 2026 by rpki-client