Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft
File:                     98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft (raw, json)
Hash identifier:          e0+8bbXyvskzYpOTZlTK9PPkj9iQ+N4NnFbTSh+Zy5Y=
Subject key identifier:   E6:79:AD:8B:A2:BE:CE:DB:64:85:83:74:85:C8:19:A0:86:8E:C8:5F
Authority key identifier: 98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97
Certificate issuer:       /CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
Certificate serial:       7FB88797327CFBCAD513C23DE88B77A4E3834539
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft
Manifest number:          0138
Signing time:             Sat 08 Nov 2025 04:33:47 +0000
Manifest this update:     Sat 08 Nov 2025 04:28:47 +0000
Manifest next update:     Fri 14 Nov 2025 03:29:47 +0000
Files and hashes:         1: 3230312e3133302e38322e302f32332d3234203d3e203631343731.roa (hash: NlXu+I/ANmbGZatScmf6DcY8t9/DtOLI6gViduCzc1E=)
                          2: 323830313a31313a613030303a3a2f34382d3438203d3e2038303438.roa (hash: 6/bWVIl4IMs8EX0zqFMc/ojM7TmrynkH5+wNxbc9/HM=)
                          3: 98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl (hash: FTNqoxKnHYvCpVh+KfPkdJ+8oPmKBMz7KcnQpI0syL8=)
                          4: 3230312e3133302e38322e302f32332d3234203d3e2038303438.roa (hash: S//LHcc7wojKGG4NTPYvS5eEtGhj9EIbUUvWAygR4iY=)
                          5: 323830313a31313a613030303a3a2f34382d3438203d3e2033353439.roa (hash: HjkRjIZBzR0bUtSaH1vlrfykMFmDoA/7k3yKCV24D5s=)
                          6: 3230312e3133302e38322e302f32332d3234203d3e2033353439.roa (hash: dTAkOi8B7701NqKGR/rPMDI4roFxvLPO18mQYprd+bo=)
                          7: 323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa (hash: N09RkeNrqOI6bacArMRUR/y1HyXat+Dq1F3hUmMYodk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Nov 2025 03:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b8:87:97:32:7c:fb:ca:d5:13:c2:3d:e8:8b:77:a4:e3:83:45:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
        Validity
            Not Before: Nov  8 04:28:47 2025 GMT
            Not After : Nov 14 03:29:47 2025 GMT
        Subject: CN=E679AD8BA2BECEDB6485837485C819A0868EC85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:e3:1b:e7:0d:e8:45:82:22:da:57:5a:1a:
                    87:cb:c3:68:2f:59:be:d3:70:bc:d4:80:be:13:1f:
                    3b:57:76:0f:b9:b2:1e:d6:c2:89:b1:af:83:fc:7e:
                    f6:b7:4b:70:e2:0a:c9:c9:79:79:95:b6:b8:4a:9a:
                    30:f0:8a:8d:6d:49:17:7f:cf:22:05:68:03:b0:84:
                    b6:12:a1:64:82:9a:5e:5f:ea:e4:e7:68:35:2f:19:
                    1b:0d:45:24:5f:b0:e4:49:42:28:25:20:8c:20:1c:
                    3a:51:02:b5:1e:77:20:28:e2:c4:92:f0:a2:46:4c:
                    28:3c:3d:99:eb:55:b2:d1:d3:b7:94:fc:ea:9e:17:
                    7f:03:ca:d5:39:60:b4:5a:d2:9c:8b:b3:d4:02:d5:
                    90:47:09:33:3f:18:61:9b:2a:5c:e7:be:4c:79:29:
                    9c:a3:78:57:13:2c:d1:1b:fb:3f:a5:ae:cc:90:9a:
                    ed:9f:d2:2b:6a:97:71:cf:b8:ea:e7:d3:60:e1:99:
                    4f:c9:38:da:a6:6d:84:7f:12:1f:e7:cf:5d:6c:0c:
                    0a:62:56:47:25:83:ec:bf:33:ad:81:14:71:c9:40:
                    d2:10:fc:f7:89:b0:67:24:2f:67:0d:dd:84:66:42:
                    ca:ab:04:aa:16:7a:82:ec:f8:a6:2c:80:3b:d0:92:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:79:AD:8B:A2:BE:CE:DB:64:85:83:74:85:C8:19:A0:86:8E:C8:5F
            X509v3 Authority Key Identifier:
                keyid:98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a3:c9:b1:8b:44:8a:6f:55:45:9e:3c:50:70:7d:a9:9b:dd:
         f3:5c:ce:50:e6:ed:ca:99:08:5d:a8:85:dd:a5:d8:fa:6c:12:
         1d:10:40:fc:5a:ad:12:2d:cd:19:86:aa:e9:c0:03:a7:d9:8c:
         d5:4e:6f:eb:24:4b:e0:c0:42:2e:83:7d:78:00:af:5f:00:5e:
         2e:1a:d7:e5:3d:db:ef:a2:bc:ab:8d:81:47:a7:7f:1a:18:65:
         8d:a0:97:99:57:c3:88:fd:9e:cb:d0:85:52:54:4c:db:e5:d4:
         8a:1b:f9:1d:1c:c6:c0:f0:d6:84:a6:d9:b7:71:19:4e:33:99:
         ea:6f:40:cd:64:16:73:51:9e:04:8f:a5:d2:36:c6:75:b2:bc:
         02:a2:2c:50:0d:2a:67:d3:15:88:da:0a:36:8c:99:74:d7:fe:
         91:5a:c1:3f:7b:20:36:76:50:4c:b7:cc:96:91:a9:c8:7e:dc:
         2e:97:cc:68:2c:6f:b9:0d:4b:be:af:b9:7a:7c:f4:a8:3c:1f:
         cb:61:18:03:94:6d:c2:5e:91:72:33:37:5e:17:49:13:a4:4f:
         eb:0a:75:c9:50:a1:ce:b3:21:9e:c4:ca:7a:43:42:89:62:35:
         36:3b:77:41:21:cd:62:2a:bd:a5:b7:f8:eb:62:53:b0:ba:e2:
         17:29:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 00:04:11 2025 by rpki-client