Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
File:                     87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft (raw, json)
Hash identifier:          cRzC7kqSq75tYG6uGndygX8QRUtxjbtcV6uRP21mHc0=
Subject key identifier:   C1:84:43:A0:14:DA:61:39:12:E3:23:D5:46:73:EC:FB:4D:FE:76:5A
Authority key identifier: 87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
Certificate issuer:       /CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Certificate serial:       43C6C3792F1A030F23B847743CE792C2FB650617
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
Manifest number:          017C
Signing time:             Mon 16 Mar 2026 14:07:16 +0000
Manifest this update:     Mon 16 Mar 2026 14:02:16 +0000
Manifest next update:     Sat 21 Mar 2026 06:11:16 +0000
Files and hashes:         1: 34352e3136302e3230322e302f32342d3234203d3e20323636383834.roa (hash: 2ONXDPpJaXZq1W1nivLPeQ81rwNO/WEJ9CO7MffC4vc=)
                          2: 34352e3136302e3230332e302f32342d3234203d3e20323636383834.roa (hash: bjKojhJBPGHl4ub6cWRsVvdzgZ61hGsGykgjJxXheCw=)
                          3: 34352e3136302e3230312e302f32342d3234203d3e20323636383834.roa (hash: UC8T2o2RHmYHlP7LcowN8ZpHiNoyWfk0v0HMpQp9PJE=)
                          4: 323830333a3661303a3a2f33322d3332203d3e20323636383834.roa (hash: 8j9senoiLGTPFHaariWkyy2eeHkjut46JElbitmqtYI=)
                          5: 87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl (hash: Ew5TB3uh56hS6OZs41Dbi3jBjxJ0gtmS7/xAt78b4Yo=)
                          6: 34352e3136302e3230302e302f32322d3232203d3e20323636383834.roa (hash: 0Ymp1Lbk/KsPvoLZmIOGvY1lMLjXX691mU3BvhHuELg=)
                          7: 34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa (hash: hjz0rslP7hHiQKvtSqllZk+Ti18RUAKh55qr9P9/TRA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Mar 2026 21:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c6:c3:79:2f:1a:03:0f:23:b8:47:74:3c:e7:92:c2:fb:65:06:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
        Validity
            Not Before: Mar 16 14:02:16 2026 GMT
            Not After : Mar 21 06:11:16 2026 GMT
        Subject: CN=C18443A014DA613912E323D54673ECFB4DFE765A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:2d:a6:dc:85:b6:00:9b:0a:13:a7:89:3b:
                    01:04:f3:0f:2f:5c:69:82:9f:67:34:0c:fd:90:84:
                    48:72:69:d5:a5:c0:3d:a4:e2:b0:1b:36:53:4c:11:
                    d5:4a:96:6a:ea:f1:c1:9c:bd:76:72:d6:94:03:60:
                    48:8c:fa:46:97:fd:42:62:26:0a:31:5c:8e:80:d1:
                    e8:1b:c8:40:ca:51:c9:db:4f:f3:e8:92:c2:64:12:
                    fa:18:dd:c4:fe:0d:89:ef:0c:59:e9:1d:48:ca:06:
                    f9:52:da:0e:55:ee:df:e2:85:c8:24:c8:67:0a:ba:
                    cc:53:b1:9b:14:97:05:d3:b7:d6:67:b7:90:27:7b:
                    cb:cd:63:8a:8c:d1:96:67:34:ad:44:c6:1e:d7:00:
                    1b:e4:fc:69:11:91:84:ef:b5:de:84:88:aa:3a:1d:
                    af:cd:49:48:9e:dd:2d:cc:78:e2:f1:39:47:c3:4e:
                    91:4e:ee:9a:ac:4f:3c:e7:c9:ad:fa:dd:46:8d:6e:
                    b2:01:82:89:44:1a:3a:81:81:93:32:4d:e8:43:dc:
                    f2:59:be:a3:b2:8a:f9:07:be:5d:17:b6:19:4a:87:
                    03:32:09:84:12:cc:8a:cf:ca:f5:6b:ec:3f:41:6d:
                    c0:f1:87:6d:20:90:c2:b0:1a:af:3b:a3:1c:af:ec:
                    45:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:84:43:A0:14:DA:61:39:12:E3:23:D5:46:73:EC:FB:4D:FE:76:5A
            X509v3 Authority Key Identifier:
                keyid:87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:cd:dd:98:9b:14:9d:f2:82:68:ce:5c:db:bf:af:e1:53:8e:
         83:f2:84:93:89:74:89:ee:ab:85:19:38:5a:62:29:5c:f7:2d:
         48:9d:b1:c5:b1:e0:4f:6f:58:7b:c3:cc:89:0d:23:a1:3c:da:
         3f:5f:c5:88:c4:ca:70:e4:b0:93:e6:99:a6:e4:1c:ec:ad:3e:
         a5:75:f9:d2:d7:ae:65:ae:4c:97:8e:28:8d:89:a3:0c:ff:c2:
         04:24:c4:5d:29:fc:94:61:ef:26:a2:90:10:32:0a:67:2f:65:
         85:22:0f:b5:58:89:b1:fd:a9:d1:c2:03:b8:0d:d9:10:31:ca:
         12:1d:3b:9f:65:b9:2c:31:92:4e:a8:97:ba:16:06:9c:d9:f9:
         ba:b4:b3:dd:1d:d7:36:55:93:2d:e7:55:1e:94:c6:f2:40:6f:
         ef:b4:e6:9c:20:5f:b5:cc:3a:84:c5:bc:b8:0b:cd:8e:17:89:
         af:1f:fc:b2:e2:d2:e1:9c:eb:f2:eb:fd:02:b8:35:d0:5a:31:
         e5:07:5f:ea:54:07:1d:45:33:44:f0:dd:97:e4:c7:66:3f:d6:
         b7:97:a8:43:d1:06:5d:1b:3a:49:b4:35:f5:28:1f:f9:cb:9e:
         42:95:33:3b:6d:9b:43:e4:a8:a9:66:c6:47:09:ee:6f:97:a2:
         ec:df:31:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 18:50:20 2026 by rpki-client