Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
File:                     C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft (raw, json)
Hash identifier:          UUA2QIQgw9ffEKXDkpv/IR7HWiDrxXsUnDabL541y38=
Subject key identifier:   46:B1:AE:32:AC:C0:8B:10:B9:01:66:E6:66:83:3A:64:8A:E6:38:61
Authority key identifier: C2:3C:6D:A8:7C:DE:76:54:CE:5B:5A:DD:EC:74:8B:19:EE:F5:EE:1A
Certificate issuer:       /CN=C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A
Certificate serial:       40CB193D25DEE27B16BBA3B3D7A456664639F31D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
Manifest number:          3D
Signing time:             Sat 14 Mar 2026 12:21:35 +0000
Manifest this update:     Sat 14 Mar 2026 12:16:35 +0000
Manifest next update:     Fri 20 Mar 2026 05:57:35 +0000
Files and hashes:         1: C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl (hash: tdSKAmZzFACNIYXDeGdKmVu0p5xrk0HN4lN7ucFwcL0=)
                          2: 323830333a346631303a3a2f33322d3438203d3e20323732313138.roa (hash: cfqpMesVtTCJW/gXILlWyOfzQXanZJn3CLqfjz47nrA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Mar 2026 04:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cb:19:3d:25:de:e2:7b:16:bb:a3:b3:d7:a4:56:66:46:39:f3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A
        Validity
            Not Before: Mar 14 12:16:35 2026 GMT
            Not After : Mar 20 05:57:35 2026 GMT
        Subject: CN=46B1AE32ACC08B10B90166E666833A648AE63861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:73:c9:16:6c:84:2a:a6:5b:36:cf:5b:96:
                    99:94:28:ca:b1:f6:85:ec:c7:0d:e9:44:12:57:3b:
                    e6:96:57:3e:5f:e6:fb:1f:db:af:74:bd:ee:e5:1a:
                    52:7d:50:d2:dd:c8:36:44:45:00:0a:5d:7f:79:1e:
                    c4:f7:ac:da:09:6d:6f:33:ba:7b:05:58:21:54:f2:
                    ae:e9:af:d9:1c:13:ff:29:e6:93:a0:bd:77:cc:e1:
                    db:73:56:2f:13:d4:1b:02:29:82:1d:65:c4:7b:8c:
                    2d:44:a7:6f:0b:fe:2c:19:9d:16:25:17:be:01:be:
                    cd:51:5b:17:f5:88:88:2e:5b:39:53:85:fb:e6:c1:
                    cd:3c:a5:67:e8:1f:32:dc:6a:c8:08:d1:fc:25:fb:
                    f2:03:05:b6:54:0f:05:be:56:ef:7e:6d:2a:13:ed:
                    9a:4a:a2:30:e3:54:1f:e4:0e:80:a8:66:a0:3f:a5:
                    6c:e3:6f:de:5a:f0:7b:36:2f:3f:59:38:fe:51:52:
                    11:28:c9:da:e0:8c:dd:48:7c:75:7b:a9:05:62:d4:
                    b0:27:e1:d1:7c:58:08:0a:d3:92:66:ec:0b:22:5e:
                    fa:a7:ab:86:77:4a:39:ac:f7:52:6e:5b:57:c3:5a:
                    ea:78:f0:0a:06:26:f6:04:66:f9:14:ec:e0:a0:f7:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B1:AE:32:AC:C0:8B:10:B9:01:66:E6:66:83:3A:64:8A:E6:38:61
            X509v3 Authority Key Identifier:
                keyid:C2:3C:6D:A8:7C:DE:76:54:CE:5B:5A:DD:EC:74:8B:19:EE:F5:EE:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:41:a0:f2:f2:c4:45:df:9b:e8:a0:ae:80:da:39:12:a1:e7:
         6d:e2:3f:f2:b9:85:24:0e:b1:bd:0a:a3:47:36:0c:85:5e:30:
         c4:cc:0e:b3:e6:a8:0f:39:81:2a:ea:b1:52:4d:5b:5a:3a:de:
         2f:2c:2d:43:5b:44:a8:79:15:d3:fb:43:a6:33:94:44:a4:25:
         85:37:38:62:8f:d8:39:eb:06:fe:44:de:be:b0:ea:35:ea:cc:
         e5:06:68:d6:a5:44:1a:7c:b9:5a:fe:65:95:80:18:3e:28:83:
         53:f8:3d:0b:dc:b4:97:30:08:43:cd:47:df:78:ca:dd:6f:ad:
         56:e2:e6:77:4e:4a:ee:de:73:ab:d8:e4:7a:f5:98:93:25:25:
         d5:34:1c:7f:4c:13:c1:9d:e4:1d:05:08:00:32:56:57:05:20:
         2a:95:c8:2f:55:6f:d4:bb:ae:e3:8d:a5:07:78:9d:c6:a6:14:
         08:0e:ba:48:12:15:bc:bc:5f:37:da:22:1d:8b:a5:ee:f3:29:
         be:b9:50:c9:02:5c:c8:91:da:e0:71:75:57:12:f7:b9:73:92:
         b1:2d:99:bf:9d:bc:8f:51:39:8e:98:02:93:96:c5:62:bc:41:
         ae:3b:3e:13:af:44:33:cd:0f:2e:53:7d:ee:7b:cd:18:6a:80:
         bb:f2:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:58:28 2026 by rpki-client