Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.mft
File:                     D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.mft (raw, json)
Hash identifier:          I5RHuLDjF8uXk1EXWn7B/wkolM5HAp5QDPGG3++Kksc=
Subject key identifier:   A9:E7:F1:26:A7:B7:9C:A6:04:4D:0D:83:A8:A8:64:D5:43:16:CC:09
Authority key identifier: D8:8F:4C:A6:AD:DA:45:B1:B1:D8:BA:7E:BF:A5:ED:7C:5D:60:CC:FA
Certificate issuer:       /CN=D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA
Certificate serial:       3E16F7945222D4BB98A32FD672C02A44F7DE5C86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.mft
Manifest number:          37
Signing time:             Tue 28 Apr 2026 18:14:08 +0000
Manifest this update:     Tue 28 Apr 2026 18:09:08 +0000
Manifest next update:     Sun 03 May 2026 05:56:08 +0000
Files and hashes:         1: 3230302e33332e3137302e302f32342d3234203d3e2037303837.roa (hash: 06WWTeOemu5katZsG+ompdSbIShLHz/BIesx9BnkTr8=)
                          2: D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.crl (hash: bKLeh45Y1lHNMhbWoas7Zvo6C2aawvjOAeOIyM1EYtA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 05:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:16:f7:94:52:22:d4:bb:98:a3:2f:d6:72:c0:2a:44:f7:de:5c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA
        Validity
            Not Before: Apr 28 18:09:08 2026 GMT
            Not After : May  3 05:56:08 2026 GMT
        Subject: CN=A9E7F126A7B79CA6044D0D83A8A864D54316CC09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:19:b4:d7:b3:18:a8:7a:7a:11:59:61:e2:
                    df:63:78:08:eb:d5:7c:cf:ea:24:40:26:a1:9f:fa:
                    80:d0:d1:b2:c6:8d:5b:b1:6c:15:f3:25:6a:eb:2c:
                    4c:43:61:5a:70:bc:6e:87:01:5c:d0:5b:70:99:bd:
                    11:6d:d5:2d:fd:29:89:2a:ae:a6:81:2b:bf:5e:5a:
                    f3:4a:f7:9d:37:1b:0b:ef:bf:3a:58:a9:86:12:d3:
                    ca:e9:d2:ce:28:f7:60:49:ea:fd:3d:d8:45:e4:b5:
                    1e:60:6e:e4:82:36:b9:5d:8d:f8:81:a5:4d:f6:98:
                    7f:64:29:da:3f:53:96:d6:6e:d1:45:72:ef:31:5b:
                    87:1a:f1:01:74:cf:c2:c9:1b:b5:b3:24:b1:fa:56:
                    31:52:f6:24:ac:68:9f:68:1f:7c:68:54:de:03:b0:
                    51:5f:02:aa:81:52:b1:7e:aa:1b:54:d7:2a:43:db:
                    37:89:09:25:a9:f9:df:d1:a2:68:e4:b5:d6:94:0d:
                    e6:d0:2b:94:b2:44:22:b1:64:70:b4:55:8f:b0:9e:
                    aa:c5:eb:0f:d7:ac:07:37:b0:1f:86:f8:6c:12:95:
                    12:98:01:77:31:c5:31:b8:f8:f8:bf:62:9c:61:31:
                    28:17:47:5f:5e:3b:9a:a7:e4:26:68:27:39:6a:12:
                    71:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E7:F1:26:A7:B7:9C:A6:04:4D:0D:83:A8:A8:64:D5:43:16:CC:09
            X509v3 Authority Key Identifier:
                keyid:D8:8F:4C:A6:AD:DA:45:B1:B1:D8:BA:7E:BF:A5:ED:7C:5D:60:CC:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1a:86:ae:d1:4c:aa:9c:86:f8:fe:f0:7f:b8:40:53:fd:9c:
         c1:99:12:a8:d6:f4:7e:b1:e9:2b:c0:a5:9d:a1:84:ae:fb:3c:
         fd:45:c8:09:03:53:43:46:0f:2b:2f:f5:ad:08:c9:35:bd:4b:
         b1:30:a4:ed:1f:53:e2:0f:30:c1:d6:46:34:4c:9a:a0:00:85:
         52:4c:be:21:64:a9:0d:24:56:59:af:3a:43:7c:84:21:5a:a0:
         13:3f:13:8d:03:c8:94:08:84:3d:90:20:64:58:2c:ca:66:ed:
         47:31:0f:e0:24:38:4d:55:e8:44:9b:1f:88:70:15:f1:5f:81:
         46:1c:42:bd:d9:12:9f:66:9c:a9:4d:9c:54:4c:c4:07:71:c0:
         4a:e7:dc:5a:2d:e7:3e:70:38:87:d2:0f:94:eb:b7:e0:71:44:
         fc:2f:ac:00:f0:0c:09:9d:53:ef:47:f2:40:3f:3b:04:11:29:
         8c:a3:10:c1:66:1c:56:b0:70:f0:46:ff:e6:e8:66:40:c6:ec:
         27:20:5e:51:49:c7:e2:d8:c3:68:ae:8e:5c:bb:58:7b:b6:a7:
         f6:e1:0e:ac:0f:68:4b:33:cd:29:16:68:37:ed:fb:a7:8a:af:
         df:5f:2f:0d:3a:de:2a:db:df:f9:bd:4d:86:99:91:91:37:5b:
         de:10:34:7c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPhb3lFIi1LuYoy/WcsAqRPfeXIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg4RjRDQTZBRERBNDVCMUIxRDhCQTdFQkZBNUVEN0M1
RDYwQ0NGQTAeFw0yNjA0MjgxODA5MDhaFw0yNjA1MDMwNTU2MDhaMDMxMTAvBgNV
BAMTKEE5RTdGMTI2QTdCNzlDQTYwNDREMEQ4M0E4QTg2NEQ1NDMxNkNDMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvhm017MYqHp6EVlh4t9jeAjr
1XzP6iRAJqGf+oDQ0bLGjVuxbBXzJWrrLExDYVpwvG6HAVzQW3CZvRFt1S39KYkq
rqaBK79eWvNK9503GwvvvzpYqYYS08rp0s4o92BJ6v092EXktR5gbuSCNrldjfiB
pU32mH9kKdo/U5bWbtFFcu8xW4ca8QF0z8LJG7WzJLH6VjFS9iSsaJ9oH3xoVN4D
sFFfAqqBUrF+qhtU1ypD2zeJCSWp+d/RomjktdaUDebQK5SyRCKxZHC0VY+wnqrF
6w/XrAc3sB+G+GwSlRKYAXcxxTG4+Pi/YpxhMSgXR19eO5qn5CZoJzlqEnHBAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUqefxJqe3nKYETQ2DqKhk1UMWzAkwHwYDVR0j
BBgwFoAU2I9Mpq3aRbGx2Lp+v6XtfF1gzPowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NTM4OEE2RkFGRTk0NTI2MzBDMDZBMUU0MTI0RkQwREE5
Mjg2QjQ5N0ExQkIzRDU3REE3QzI0REREOTQ3RDQ3LzAvRDg4RjRDQTZBRERBNDVC
MUIxRDhCQTdFQkZBNUVEN0M1RDYwQ0NGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODhGNENBNkFEREE0NUIxQjFE
OEJBN0VCRkE1RUQ3QzVENjBDQ0ZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTUzODhBNkZBRkU5NDUyNjMwQzA2QTFFNDEyNEZEMERBOTI4NkI0OTdB
MUJCM0Q1N0RBN0MyNERERDk0N0Q0Ny8wL0Q4OEY0Q0E2QUREQTQ1QjFCMUQ4QkE3
RUJGQTVFRDdDNUQ2MENDRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPGoau0UyqnIb4/vB/uEBT/ZzB
mRKo1vR+sekrwKWdoYSu+zz9RcgJA1NDRg8rL/WtCMk1vUuxMKTtH1PiDzDB1kY0
TJqgAIVSTL4hZKkNJFZZrzpDfIQhWqATPxONA8iUCIQ9kCBkWCzKZu1HMQ/gJDhN
VehEmx+IcBXxX4FGHEK92RKfZpypTZxUTMQHccBK59xaLec+cDiH0g+U67fgcUT8
L6wA8AwJnVPvR/JAPzsEESmMoxDBZhxWsHDwRv/m6GZAxuwnIF5RScfi2MNoro5c
u1h7tqf24Q6sD2hLM80pFmg37funiq/fXy8NOt4q29/5vU2GmZGRN1veEDR8
-----END CERTIFICATE-----
Generated at Thu Apr 30 05:50:07 2026 by rpki-client