Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft
File:                     BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft (raw, json)
Hash identifier:          eN1cmglglwQ1klefuM1Pgtjn7H2t95SvCJi7STKoaW8=
Subject key identifier:   34:17:FE:59:FB:29:73:FD:5B:AC:23:60:98:B7:E4:BE:37:39:B0:CD
Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31
Certificate issuer:       /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
Certificate serial:       5EFD83179CE970B71CFA31CAC504D872D6E9F0D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft
Manifest number:          0132
Signing time:             Thu 23 Oct 2025 20:06:58 +0000
Manifest this update:     Thu 23 Oct 2025 20:01:58 +0000
Manifest next update:     Wed 29 Oct 2025 11:33:58 +0000
Files and hashes:         1: 323830313a3161393a323a3a2f34382d3438203d3e203133343839.roa (hash: 4pqXtyNR1cdBXvl8jwrUrWGiszl1G1HyLjHhjjvJYUg=)
                          2: BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl (hash: u+b6B7kaghxwoWQ73EO59+YzA62ttZKh2oA7EqwG87Y=)
                          3: 323830313a3161393a313a3a2f34382d3438203d3e203237393531.roa (hash: haQKWGzAtczsGATj/yhluLoYQ339sYxmKpuh2HnsIxQ=)
                          4: 323830313a3161393a323a3a2f34382d3438203d3e20323732393039.roa (hash: NLmHZcdbPUfzGQF5ph8LKk3OdDi2P2fZcoNM/8+cYbc=)
                          5: 323830313a3161393a313a3a2f34382d3438203d3e203133343839.roa (hash: PDG1rxd0xSpA7YJfDLKobi7Tz7Q2e5GwLEKlvtcynNc=)
                          6: 323830313a3161393a313a3a2f34382d3438203d3e20323732393039.roa (hash: MHwjKnPfFiWifCAARHkgAqmkoQtUP4/3oCj9tT/fC9I=)
                          7: 323830313a3161393a3a2f34342d3434203d3e20323732393039.roa (hash: n/IU6ZeFHkr/FBQwZ+yzODeAvAeeU92wWP6veG3yiKY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Oct 2025 12:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fd:83:17:9c:e9:70:b7:1c:fa:31:ca:c5:04:d8:72:d6:e9:f0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
        Validity
            Not Before: Oct 23 20:01:58 2025 GMT
            Not After : Oct 29 11:33:58 2025 GMT
        Subject: CN=3417FE59FB2973FD5BAC236098B7E4BE3739B0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:15:bc:bd:89:8e:79:1f:52:1e:2e:85:99:
                    74:b4:38:e3:60:59:1e:67:ea:3e:ae:ed:1e:5d:bb:
                    87:e9:c9:93:15:6e:ed:3e:9a:ae:b5:eb:8e:7d:9c:
                    fd:24:90:05:77:e2:b5:84:18:76:31:05:bb:37:22:
                    69:8b:e4:2a:eb:dc:a4:75:0a:af:8c:dd:5b:3e:af:
                    43:5b:19:d4:7f:9b:9a:29:88:b8:3b:cd:4c:8a:dd:
                    fb:39:ac:b4:b0:19:5c:e6:d7:a1:11:aa:19:b5:f8:
                    54:4e:24:1c:ac:5c:2c:d6:a0:49:02:72:d8:3f:0e:
                    69:cc:22:a9:43:03:15:7a:ed:b3:81:ee:ea:b2:e0:
                    4f:25:c9:42:5b:81:c6:a3:36:a8:73:35:7d:bc:58:
                    f4:4f:99:8b:ee:a9:31:d1:56:b1:c5:e2:4d:5b:b8:
                    1a:03:58:cc:4c:dd:71:5f:97:fa:32:41:e4:23:fa:
                    61:f5:4a:47:8b:af:4d:72:f6:10:7f:30:5f:ec:84:
                    82:68:bc:5e:67:83:73:17:c9:67:30:f7:1b:9c:6c:
                    76:b3:42:64:9d:02:6a:6b:64:e3:db:35:b7:27:20:
                    2b:32:02:dc:38:c5:97:f2:47:ee:04:74:2e:93:8a:
                    f6:fe:22:47:cd:1d:f8:1d:f8:18:13:76:8b:a9:29:
                    05:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:17:FE:59:FB:29:73:FD:5B:AC:23:60:98:B7:E4:BE:37:39:B0:CD
            X509v3 Authority Key Identifier:
                keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:02:ed:37:86:fa:aa:3b:43:c3:f2:2a:52:3f:9b:7b:f6:03:
         1e:f8:be:e7:ed:f9:59:f7:39:5d:72:dc:9c:bc:b1:b3:e7:ba:
         64:e3:86:52:cd:56:27:e2:22:d7:fa:0e:1f:17:5b:c3:f6:ce:
         b4:a0:db:71:06:af:4f:59:3f:e2:0c:e1:a4:f8:e6:24:ca:60:
         4e:77:9d:a4:69:38:44:61:17:71:fa:c1:3c:0a:68:16:5f:6d:
         12:58:0d:89:78:3d:a1:20:96:4a:89:c2:7a:92:88:94:b5:50:
         11:98:37:23:f4:f6:62:2a:2a:bb:57:e6:98:3d:87:9e:c0:7b:
         9a:ce:08:ab:f7:a1:8a:00:e7:f8:39:97:f7:0b:66:24:ef:a2:
         72:61:0f:8c:4b:c7:ce:08:0a:6d:bd:64:ba:3e:ae:23:f2:34:
         c5:df:91:d1:a3:16:26:22:f6:29:23:3b:62:3f:45:0c:b0:46:
         f0:14:e5:af:c2:e1:ce:63:37:12:db:c9:53:b7:66:e0:70:cd:
         b9:0d:16:ca:9d:aa:b3:90:de:ed:54:f8:1e:83:49:a6:a5:9d:
         13:b9:da:ea:e1:a7:ee:8c:70:ec:bf:51:c5:3d:c1:d8:e6:db:
         3a:24:64:9f:46:4c:71:27:dd:fd:a1:a7:ed:25:06:8f:43:30:
         8f:72:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:43:02 2025 by rpki-client