Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft
File:                     8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft (raw, json)
Hash identifier:          K+3xgpkFJZa4sBuKdpwemJe9cQ5NSGk5yIVp8W+IHVU=
Subject key identifier:   6E:F8:E4:F2:84:60:1D:98:40:32:68:93:7B:76:02:4F:EC:80:0A:95
Authority key identifier: 88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72
Certificate issuer:       /CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72
Certificate serial:       06E6D4A0F085892B53C7412487DF3238037B2ADB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft
Manifest number:          BA
Signing time:             Thu 30 Apr 2026 00:57:36 +0000
Manifest this update:     Thu 30 Apr 2026 00:52:36 +0000
Manifest next update:     Tue 05 May 2026 15:12:36 +0000
Files and hashes:         1: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl (hash: BOOCRGONnO/lLwspuEN/udb6cJnCHIw1lXyi9VM7m8g=)
                          2: 323830333a6164303a3a2f33322d3332203d3e20323734303634.roa (hash: DHa6ditwZtXxLeFd36RN4E+BZavo/NTHMbYI6UBbsnM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e6:d4:a0:f0:85:89:2b:53:c7:41:24:87:df:32:38:03:7b:2a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72
        Validity
            Not Before: Apr 30 00:52:36 2026 GMT
            Not After : May  5 15:12:36 2026 GMT
        Subject: CN=6EF8E4F284601D98403268937B76024FEC800A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:42:17:1b:2f:d5:18:f3:47:c2:0f:be:78:5a:
                    17:8f:0e:f1:37:c0:a1:3d:a2:1b:9e:76:42:6b:32:
                    e7:d3:e8:72:e3:81:98:50:09:31:3e:39:02:b8:0d:
                    80:2e:f7:db:84:6e:bd:d2:31:d5:65:69:2a:1d:88:
                    5b:2e:b5:c5:80:b4:37:07:cb:e6:81:41:ff:d2:0d:
                    d6:4c:10:18:c3:5e:9e:18:1c:5a:3c:a5:74:03:3e:
                    5e:d0:ed:fc:40:70:67:4b:30:59:40:10:0d:e9:0d:
                    dd:8c:6b:3b:94:af:7d:c2:d0:93:28:dc:b2:bf:22:
                    01:f2:5c:ff:ef:35:9d:a9:f1:82:2b:42:5e:67:12:
                    86:fd:34:1a:12:bb:e2:cd:96:06:f7:65:4f:40:48:
                    f5:1e:f2:40:b5:9a:13:02:be:78:0c:8f:48:4c:1b:
                    0b:53:11:35:df:ae:1c:20:81:c4:3c:d2:08:71:40:
                    0b:4e:6c:cf:96:19:2d:56:ed:21:14:0a:ab:26:f5:
                    54:85:3c:64:b7:62:e6:05:3d:09:65:42:b9:ef:bb:
                    3e:32:c4:9b:ea:ee:32:fe:17:4c:f7:9c:1e:99:84:
                    6f:9c:cd:27:9d:f3:49:8d:27:ba:0a:dc:e7:0e:c1:
                    26:d9:3d:ac:6d:d2:05:60:1c:67:db:55:c4:40:d2:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F8:E4:F2:84:60:1D:98:40:32:68:93:7B:76:02:4F:EC:80:0A:95
            X509v3 Authority Key Identifier:
                keyid:88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ac:d6:d9:e6:87:1e:04:bc:aa:30:18:01:cf:a8:e2:31:8b:
         54:5f:e8:b7:9e:bc:a7:20:f9:8f:17:f7:ef:40:4e:c4:db:45:
         f6:e3:f3:f3:2c:a0:99:d4:52:8f:a6:a6:fd:39:03:f9:b2:f2:
         3d:26:f9:94:bc:c6:63:d6:e1:15:a1:26:8e:b8:63:87:d7:dc:
         af:df:3f:60:89:bc:79:7d:60:a5:46:aa:cf:84:36:ea:cb:32:
         74:ce:3b:7e:be:35:f4:0f:a7:74:b6:b4:00:9e:59:0f:1f:69:
         ef:bd:36:12:f8:01:c2:7e:c1:1b:19:1b:c9:dc:fa:26:4e:ee:
         87:40:1b:31:35:f5:4d:fa:78:9a:68:2d:19:78:b3:3b:eb:5c:
         c0:90:0c:66:bb:ae:06:04:a0:30:4b:df:4c:a9:85:0b:d3:ea:
         70:20:8e:eb:12:aa:3e:7b:f0:89:51:6d:e0:9d:59:ff:f5:9a:
         5c:93:4e:89:05:87:95:28:fe:d9:6d:c2:9a:c9:91:e7:56:e2:
         1a:ba:89:de:76:81:7c:8f:4b:2f:08:7c:37:6d:02:de:8f:8e:
         64:00:dc:83:9c:b4:6e:42:30:89:67:18:47:62:bf:68:6c:43:
         dc:1f:06:76:d7:9a:10:75:3a:67:25:ca:4e:4d:7a:a1:e0:ee:
         62:31:84:68
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUBubUoPCFiStTx0Ekh98yOAN7KtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg0MkJCRUVGQTg1RkUzNzFCREVCQzREQkIxNzA5RUI2
NzFCMEE3MjAeFw0yNjA0MzAwMDUyMzZaFw0yNjA1MDUxNTEyMzZaMDMxMTAvBgNV
BAMTKDZFRjhFNEYyODQ2MDFEOTg0MDMyNjg5MzdCNzYwMjRGRUM4MDBBOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQhcbL9UY80fCD754WhePDvE3
wKE9ohuedkJrMufT6HLjgZhQCTE+OQK4DYAu99uEbr3SMdVlaSodiFsutcWAtDcH
y+aBQf/SDdZMEBjDXp4YHFo8pXQDPl7Q7fxAcGdLMFlAEA3pDd2MazuUr33C0JMo
3LK/IgHyXP/vNZ2p8YIrQl5nEob9NBoSu+LNlgb3ZU9ASPUe8kC1mhMCvngMj0hM
GwtTETXfrhwggcQ80ghxQAtObM+WGS1W7SEUCqsm9VSFPGS3YuYFPQllQrnvuz4y
xJvq7jL+F0z3nB6ZhG+czSed80mNJ7oK3OcOwSbZPaxt0gVgHGfbVcRA0tbpAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUbvjk8oRgHZhAMmiTe3YCT+yACpUwHwYDVR0j
BBgwFoAUiEK77vqF/jcb3rxNuxcJ62cbCnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjY5OTRCMjA3OTkwQjFCRDM3MUNFRjExNDRFRjc3NEFF
RTM0MDdBOEEyOTM2QzVGREU5NDkyQTZCRUU1RDMyLzAvODg0MkJCRUVGQTg1RkUz
NzFCREVCQzREQkIxNzA5RUI2NzFCMEE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODQyQkJFRUZBODVGRTM3MUJE
RUJDNERCQjE3MDlFQjY3MUIwQTcyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY2OTk0QjIwNzk5MEIxQkQzNzFDRUYxMTQ0RUY3NzRBRUUzNDA3QThB
MjkzNkM1RkRFOTQ5MkE2QkVFNUQzMi8wLzg4NDJCQkVFRkE4NUZFMzcxQkRFQkM0
REJCMTcwOUVCNjcxQjBBNzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBErNbZ5oceBLyqMBgBz6jiMYtU
X+i3nrynIPmPF/fvQE7E20X24/PzLKCZ1FKPpqb9OQP5svI9JvmUvMZj1uEVoSaO
uGOH19yv3z9gibx5fWClRqrPhDbqyzJ0zjt+vjX0D6d0trQAnlkPH2nvvTYS+AHC
fsEbGRvJ3PomTu6HQBsxNfVN+niaaC0ZeLM761zAkAxmu64GBKAwS99MqYUL0+pw
II7rEqo+e/CJUW3gnVn/9Zpck06JBYeVKP7ZbcKayZHnVuIauonedoF8j0svCHw3
bQLej45kANyDnLRuQjCJZxhHYr9obEPcHwZ215oQdTpnJcpOTXqh4O5iMYRo
-----END CERTIFICATE-----
Generated at Thu Apr 30 05:51:57 2026 by rpki-client