Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
File:                     2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft (raw, json)
Hash identifier:          94ivL+cGKSMheGEeEyFRgazSCCYRzBBzn7UwxkSw3WI=
Subject key identifier:   46:F2:54:B3:0F:6C:C6:80:6E:D5:09:59:DB:5F:C9:4B:74:DC:B3:D9
Authority key identifier: 2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
Certificate issuer:       /CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Certificate serial:       24F05710927A90984CD02DFAD6243098219D32D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
Manifest number:          01DB
Signing time:             Wed 16 Sep 2026 14:59:34 +0000
Manifest this update:     Wed 16 Sep 2026 14:54:34 +0000
Manifest next update:     Mon 21 Sep 2026 13:42:34 +0000
Files and hashes:         1: 34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa (hash: 4r/Ycb2It+axZdCPW4Gpw/M49d95d7cextIQ5hDQMwg=)
                          2: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl (hash: 0FtAdvYcJyTEv0w0CztgxykUsEO+m8RbsQ/39IHMBs0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 13:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f0:57:10:92:7a:90:98:4c:d0:2d:fa:d6:24:30:98:21:9d:32:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
        Validity
            Not Before: Sep 16 14:54:34 2026 GMT
            Not After : Sep 21 13:42:34 2026 GMT
        Subject: CN=46F254B30F6CC6806ED50959DB5FC94B74DCB3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:bd:a5:27:4c:87:ba:14:78:6d:2b:b8:3d:
                    5c:57:aa:4f:a4:24:84:19:c8:19:1b:cb:93:44:2d:
                    fa:45:78:01:cc:3d:10:0c:ed:ed:29:9d:cc:77:3d:
                    1d:7c:a1:92:35:31:d1:0b:09:a0:03:e7:3a:f8:31:
                    a6:16:79:b2:6d:7c:80:2d:39:b4:59:7d:8c:23:f3:
                    ae:7b:7c:b8:2d:c4:ac:e9:2d:a1:7d:8f:1e:91:fe:
                    58:f8:73:b4:2d:54:43:25:96:25:20:cc:e0:da:6c:
                    e2:23:77:c2:02:8a:bc:a5:ce:8a:60:fb:11:f0:3a:
                    34:aa:20:8d:90:84:59:fa:8c:22:c0:36:a9:75:be:
                    e8:96:61:07:26:4b:47:f7:f8:66:6d:05:fa:c0:87:
                    53:3c:e8:84:94:ca:98:76:2c:f1:27:ce:de:f8:ae:
                    3c:a9:d8:c4:39:23:d5:7f:5b:6a:54:1b:8e:94:bd:
                    03:12:37:cc:06:e2:08:17:ab:d1:9e:69:d9:09:05:
                    4b:34:3b:94:38:07:2d:08:d3:ed:b7:aa:57:98:84:
                    18:cf:1d:0a:0d:e6:e1:08:8c:58:24:36:2e:1b:8b:
                    10:12:5d:07:f7:95:00:3e:01:03:e4:1b:5d:db:89:
                    56:4e:59:ec:a6:45:00:50:26:dc:4e:9c:90:37:4e:
                    be:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F2:54:B3:0F:6C:C6:80:6E:D5:09:59:DB:5F:C9:4B:74:DC:B3:D9
            X509v3 Authority Key Identifier:
                keyid:2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:42:8e:0a:d5:d3:34:96:42:ec:75:94:97:13:40:17:7e:42:
         4c:d6:be:b4:df:a4:f6:d7:43:c0:5d:3e:e6:8f:14:17:7a:e8:
         43:14:87:b5:24:1a:88:af:4f:5c:ef:53:f3:3e:62:d3:aa:da:
         0b:9d:52:dd:6e:83:eb:97:1a:b0:50:24:f8:47:3b:9d:9e:cc:
         35:c7:9c:f0:4a:be:40:60:f8:59:cf:a4:4f:c4:f0:94:b3:be:
         db:7d:c1:b2:fb:a3:35:a5:a0:ec:58:90:f8:d0:24:b2:35:02:
         7d:9f:37:29:84:a1:27:01:75:6f:26:e4:e1:76:46:8a:5f:d7:
         f8:95:17:b1:49:58:51:4c:57:08:2c:96:89:3e:c7:3e:33:b5:
         75:a6:97:84:f9:2d:8b:b5:65:1e:6e:e6:a6:b9:8c:4e:6d:7f:
         dc:18:15:42:29:e2:6e:84:3a:8d:2a:4a:b0:cf:63:c9:f7:c5:
         de:07:a6:a7:83:e8:d4:68:eb:f4:f7:a4:ff:ea:36:d8:1b:77:
         e5:8a:84:66:e6:71:44:af:60:0e:44:3e:ea:8b:cc:11:d8:6b:
         62:ea:98:2a:77:4e:21:2a:19:a1:7d:e5:1b:0f:e0:b8:28:0d:
         03:e0:b1:3d:00:09:9e:ee:2c:29:3e:d9:3f:d5:43:f8:13:4b:
         92:c6:77:99
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUJPBXEJJ6kJhM0C361iQwmCGdMtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNEMEEwOEUwN0M1QzFFREVBNkJDM0RDRkQwRkRGMkQ1
MjE4OEFCRDAeFw0yNjA5MTYxNDU0MzRaFw0yNjA5MjExMzQyMzRaMDMxMTAvBgNV
BAMTKDQ2RjI1NEIzMEY2Q0M2ODA2RUQ1MDk1OURCNUZDOTRCNzREQ0IzRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmzb2lJ0yHuhR4bSu4PVxXqk+k
JIQZyBkby5NELfpFeAHMPRAM7e0pncx3PR18oZI1MdELCaAD5zr4MaYWebJtfIAt
ObRZfYwj8657fLgtxKzpLaF9jx6R/lj4c7QtVEMlliUgzODabOIjd8ICirylzopg
+xHwOjSqII2QhFn6jCLANql1vuiWYQcmS0f3+GZtBfrAh1M86ISUyph2LPEnzt74
rjyp2MQ5I9V/W2pUG46UvQMSN8wG4ggXq9GeadkJBUs0O5Q4By0I0+23qleYhBjP
HQoN5uEIjFgkNi4bixASXQf3lQA+AQPkG13biVZOWeymRQBQJtxOnJA3Tr7DAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQURvJUsw9sxoBu1QlZ21/JS3Tcs9kwHwYDVR0j
BBgwFoAULNCgjgfFwe3qa8Pc/Q/fLVIYir0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80ODkzQkE0M0JCNzY0RTQzMDQwQjk1QjUzRUEwNUQ5OTk4
QkY4MTMwQThBNEUwMTRFMkNBNDJFMDI2RTg2OUU4LzAvMkNEMEEwOEUwN0M1QzFF
REVBNkJDM0RDRkQwRkRGMkQ1MjE4OEFCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQ0QwQTA4RTA3QzVDMUVERUE2
QkMzRENGRDBGREYyRDUyMTg4QUJELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDg5M0JBNDNCQjc2NEU0MzA0MEI5NUI1M0VBMDVEOTk5OEJGODEzMEE4
QTRFMDE0RTJDQTQyRTAyNkU4NjlFOC8wLzJDRDBBMDhFMDdDNUMxRURFQTZCQzNE
Q0ZEMEZERjJENTIxODhBQkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwQo4K1dM0lkLsdZSXE0AXfkJM
1r6036T210PAXT7mjxQXeuhDFIe1JBqIr09c71PzPmLTqtoLnVLdboPrlxqwUCT4
Rzudnsw1x5zwSr5AYPhZz6RPxPCUs77bfcGy+6M1paDsWJD40CSyNQJ9nzcphKEn
AXVvJuThdkaKX9f4lRexSVhRTFcILJaJPsc+M7V1ppeE+S2LtWUebuamuYxObX/c
GBVCKeJuhDqNKkqwz2PJ98XeB6ang+jUaOv096T/6jbYG3flioRm5nFEr2AORD7q
i8wR2Gti6pgqd04hKhmhfeUbD+C4KA0D4LE9AAme7iwpPtk/1UP4E0uSxneZ
-----END CERTIFICATE-----
Generated at Thu Sep 17 19:22:26 2026 by rpki-client