Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft
File:                     AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft (raw, json)
Hash identifier:          lGHfXuA9V4GiR2kdos6U5ADdYV2SdolGWkSmzfRXGtI=
Subject key identifier:   B1:B3:C5:42:F8:8F:A0:40:77:7B:01:66:5D:8C:12:47:DE:61:31:95
Authority key identifier: AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
Certificate issuer:       /CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Certificate serial:       4AA40E6502886E52B4E0CED904B3BDD8DCF2B6BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft
Manifest number:          01AF
Signing time:             Mon 27 Jul 2026 20:05:57 +0000
Manifest this update:     Mon 27 Jul 2026 20:00:57 +0000
Manifest next update:     Sat 01 Aug 2026 17:31:57 +0000
Files and hashes:         1: 323830363a3334353a3a2f34302d3430203d3e20323635353936.roa (hash: l1DL7aI8zgeuFWTcquLPj7iFf+16cUKzNBWIOVzZORg=)
                          2: 34352e3138312e34312e302f32342d3234203d3e20323635353936.roa (hash: YFBFGAU2pJgXebhltPDFRgy7Pbh1z3VfrIiKZ9mL2mM=)
                          3: 34352e3138312e34302e302f32342d3234203d3e20323635353936.roa (hash: X0ahrYyiagik/Bp2LqCCmpp2n2oViLWI3V+ItfDaHbE=)
                          4: 323830363a3334353a3a2f33322d3332203d3e20323635353936.roa (hash: ezy5QokvyZmLaG7FhA+u9Z4Vjopha9B4wZPpgpIctfQ=)
                          5: AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl (hash: i5UP98TFc4KHjo5gjl/v9AQjIAQ16cH6qEwZe68e4so=)
                          6: 34352e3138312e34302e302f32332d3233203d3e20323635353936.roa (hash: FPFyXFG+54r3Fw2EQUZxqh+tZgJMt2OxvLBMCoavg4g=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 17:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a4:0e:65:02:88:6e:52:b4:e0:ce:d9:04:b3:bd:d8:dc:f2:b6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
        Validity
            Not Before: Jul 27 20:00:57 2026 GMT
            Not After : Aug  1 17:31:57 2026 GMT
        Subject: CN=B1B3C542F88FA040777B01665D8C1247DE613195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8d:4c:db:0e:99:07:cd:f7:b6:76:86:b4:32:
                    8d:ba:ce:40:89:77:ce:4d:17:e3:da:b0:5f:b0:c2:
                    31:fa:96:12:48:fd:af:71:6a:8d:17:ac:fc:7f:d4:
                    6d:00:0a:6d:c7:09:8f:a7:8d:e3:6b:74:f9:64:b7:
                    07:75:e7:e4:19:59:f0:13:0c:f1:10:33:7f:0a:06:
                    41:45:9f:3c:c1:0f:24:fd:de:f3:33:d2:d4:a5:4a:
                    ac:af:a7:33:9d:48:17:f0:0b:80:2c:13:3b:af:af:
                    dc:5b:e9:f3:42:52:fd:d0:22:08:00:31:e7:33:21:
                    44:06:54:cd:47:71:ea:2d:41:e3:39:75:d4:f9:b3:
                    22:2b:57:d6:45:11:85:29:da:d9:e0:32:c0:28:cd:
                    34:82:f8:6f:94:b2:e9:2b:8b:01:5a:f1:23:ef:8b:
                    50:19:61:96:d8:8a:d4:2f:7c:0e:c2:a8:f4:43:6d:
                    b4:f4:69:63:3d:08:f6:32:2b:67:9c:0f:b5:d5:9a:
                    25:0f:e6:3d:1a:c5:72:cd:4d:55:b4:67:ff:6a:9d:
                    fb:45:56:dd:fa:5f:64:8f:df:70:19:18:00:11:e5:
                    bf:c5:d5:1c:79:d6:b5:02:83:6a:4d:b3:0d:ec:7c:
                    b3:2a:e6:53:8e:d4:d7:d7:b7:1a:ad:a5:57:d1:51:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B3:C5:42:F8:8F:A0:40:77:7B:01:66:5D:8C:12:47:DE:61:31:95
            X509v3 Authority Key Identifier:
                keyid:AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:1a:d8:5e:45:91:d1:91:ff:02:22:15:b1:d3:4f:06:e7:23:
         ff:25:f5:96:4f:dc:e3:3e:c4:f4:57:f6:b1:4d:62:fd:85:3d:
         4a:c9:97:fa:6e:59:04:a2:3a:25:a6:62:bf:f0:25:7a:6f:12:
         f3:81:d4:b1:3e:dd:bc:7d:5e:0e:82:a3:1b:9c:fe:0a:33:56:
         23:29:ed:28:72:9e:64:2a:2c:c2:2c:62:57:79:40:c4:58:12:
         a8:dd:70:48:2f:51:cd:a1:b8:5a:73:eb:40:58:f9:f2:54:e9:
         9a:90:ca:69:c5:2e:e4:8d:e4:64:76:c3:eb:64:23:e8:de:e7:
         f6:f4:b9:c2:e8:45:ff:55:ec:41:3c:ba:4f:db:67:1f:30:c0:
         3d:f4:ad:6d:80:cf:0b:e2:fe:e6:b2:b0:b1:76:16:f9:d6:38:
         3d:9f:50:49:46:3b:d6:9c:19:dc:bf:35:67:3f:36:eb:64:00:
         69:27:75:1c:65:fc:df:1f:35:d3:0c:90:55:32:2c:be:2f:94:
         8c:27:9f:28:bb:36:bc:2e:98:e7:5a:6a:0e:0b:71:5b:78:53:
         0a:11:49:28:1c:97:8b:83:ab:95:82:b4:c2:89:58:17:6c:5e:
         9f:7c:db:32:48:1e:39:4d:de:a0:ef:65:5e:4f:8b:13:26:13:
         9e:4f:95:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:55:44 2026 by rpki-client