Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
File:                     DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft (raw, json)
Hash identifier:          5p9JxUZ1MDvlnP+tZl8oxP7Eu+xTPSGxMi9PK+vk5ww=
Subject key identifier:   1F:CF:F2:8A:A2:10:03:44:95:CC:5F:75:38:24:34:A6:89:A2:32:46
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       2A9F3756A04EF4C20DDAD91EB77676597FD21B4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
Manifest number:          0138
Signing time:             Sat 01 Nov 2025 19:01:51 +0000
Manifest this update:     Sat 01 Nov 2025 18:56:51 +0000
Manifest next update:     Fri 07 Nov 2025 00:20:51 +0000
Files and hashes:         1: AS21578.roa (hash: ZIhuq49rsXerAm2Bj3uvDnQXMlXpwRmFJC1W0XIzpeM=)
                          2: AS263804.roa (hash: SDD7J7VL3iqKjGjgGdo15ihZ6yTVJ4D3ETAK8x1P9es=)
                          3: AS52256.roa (hash: t3gBTd4OFmze4jitOXkOJ34ELMEC3+sBz56Ih6CKFow=)
                          4: AS262182.roa (hash: y9551sd6v1mJ6rRd0zojHdkWEPo9FPiaUgWdXbQqh18=)
                          5: AS27817.roa (hash: o2iEXtpaR8PwZ1seWpf2LS4ruckheEZ6+4XgeeQljVQ=)
                          6: AS22368.roa (hash: E9eO+4YM/YU5OW7TGosPZHKx4Rwf1qqNmig2fmk/0iw=)
                          7: AS27921.roa (hash: aOHZ68SD8tP5JcbRD8D57qvzDCv3qGAjDAoGe4DFs5E=)
                          8: AS263719.roa (hash: FMFxsH4WiqIBUZxYT1epF23IRDaEmaXcFqiFXB0TQbA=)
                          9: DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl (hash: J1JTv1imcIpvBnYdoL//PR2bnNsNzzrrFdf2/X4M9uM=)
                          10: AS3816.roa (hash: zx4QvNJynRa9jAFtvN72i5FLTAbXL5p9XuaGXKAtEzw=)
                          11: AS12956.roa (hash: aEZQshqhwvvdXh3mmH2TMuIhlcrF0IwGl068kC4NuiM=)
                          12: AS34991.roa (hash: i15YA0vALEPLvwTSHHLEZFik4fl71jJ0T1roBdMKcZE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 21:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9f:37:56:a0:4e:f4:c2:0d:da:d9:1e:b7:76:76:59:7f:d2:1b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Nov  1 18:56:51 2025 GMT
            Not After : Nov  7 00:20:51 2025 GMT
        Subject: CN=1FCFF28AA210034495CC5F75382434A689A23246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:eb:ce:53:ab:f9:c1:82:ab:c4:ea:b0:52:0d:
                    4a:9c:fd:79:b2:d1:3d:db:86:55:b9:d8:f1:09:99:
                    0b:26:ec:42:9f:75:e6:31:36:0b:de:31:f9:b4:9f:
                    ba:01:5d:f0:fa:f1:95:db:b1:bd:17:f5:bd:7e:04:
                    e4:86:9d:f9:54:69:7e:b5:10:09:a9:21:9c:ab:8e:
                    7b:99:48:6f:9e:a4:37:88:18:ec:02:29:84:4b:04:
                    6a:75:a1:7a:9a:56:f2:e3:57:aa:68:53:e8:9b:f0:
                    e6:c3:1d:7c:a4:8c:4d:b4:79:68:7b:bf:4f:b9:ec:
                    7f:08:9c:e4:dc:ea:6e:61:09:69:c5:6a:39:19:2a:
                    51:58:ab:ca:8b:1e:47:6a:e2:43:0c:c4:64:82:66:
                    85:cc:2d:ae:88:1a:95:b1:ac:4e:83:4e:a5:f4:b5:
                    04:76:fc:a0:ca:55:f0:8e:e0:cc:8d:59:6a:c1:c2:
                    62:16:99:f5:bb:7f:1a:fb:29:34:b7:33:f5:1a:84:
                    b1:6a:e8:ef:14:90:98:11:d3:c3:5e:ae:4e:c2:3f:
                    67:52:d2:9b:c6:04:08:0d:fc:49:e6:0a:75:fc:12:
                    9a:bc:0c:2a:95:6e:e6:f1:a3:4e:b5:fe:28:81:0c:
                    0c:7b:91:48:ba:5c:bd:bf:c2:43:12:6b:59:c0:39:
                    da:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CF:F2:8A:A2:10:03:44:95:CC:5F:75:38:24:34:A6:89:A2:32:46
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:67:4a:0c:a5:df:bc:97:a2:69:c9:34:af:4a:aa:aa:4b:
         e3:ed:01:bf:9f:73:6b:88:c5:df:6f:5d:a7:b2:f4:f8:cb:19:
         d9:f8:37:29:7d:e9:23:89:6b:ec:e9:10:6a:ee:da:08:03:81:
         d0:84:ce:ef:ce:49:91:72:17:96:40:1d:27:ee:29:df:72:a0:
         c2:51:29:1a:74:85:30:ca:a5:ed:74:1e:b7:a3:d9:f9:83:3a:
         3f:6f:be:f7:74:6a:c0:13:0c:e6:46:a3:d3:72:b8:65:9b:f0:
         89:5f:0b:bb:20:92:f6:4e:b1:ac:fd:88:b5:3a:be:d1:40:75:
         ce:06:93:0f:01:66:04:46:bc:56:b7:66:e0:22:4e:0f:bd:e4:
         d2:7b:30:01:e2:5f:e9:84:32:c0:34:bc:e5:4d:44:44:7a:01:
         b4:9d:cd:52:92:f7:98:e5:42:07:5f:99:e5:5e:37:0c:9f:26:
         56:0b:6d:01:ad:dc:3d:bb:7a:f7:94:7e:ed:0a:25:e1:36:19:
         5f:97:2f:7e:54:0b:4f:91:df:80:e0:aa:03:83:6c:7d:dd:fe:
         d1:cf:0c:b1:11:b1:66:8e:49:ef:80:ae:cb:f2:41:6d:cc:4d:
         47:83:80:29:25:6b:e8:c2:a6:f8:ba:0f:0e:8c:0e:4b:e0:c4:
         81:8c:19:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 07:07:17 2025 by rpki-client