Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
File:                     8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft (raw, json)
Hash identifier:          XScdGOrGoEZd91n8CGzGB9W60ZXI86yNqzHNebyY3s4=
Subject key identifier:   96:D8:A5:B9:1D:A6:12:A5:79:1A:61:DF:44:BB:8C:AE:23:7F:56:99
Authority key identifier: 8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5
Certificate issuer:       /CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
Certificate serial:       7E7E3FDA9883E2E4FD17A3979BA8A763605FE3F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
Manifest number:          017D
Signing time:             Sat 21 Mar 2026 04:06:52 +0000
Manifest this update:     Sat 21 Mar 2026 04:01:52 +0000
Manifest next update:     Thu 26 Mar 2026 06:42:52 +0000
Files and hashes:         1: 34352e3137372e3130382e302f32342d3234203d3e203237393531.roa (hash: FQOijIFL5swjZ1bxEJkHU93lGq3iBteKK5DjHs4COIY=)
                          2: 323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa (hash: 1/4cOPDOeKFWNK1klirp4zaGgR3ezAg3OFNHd3B3LOE=)
                          3: 34352e3137372e3131312e302f32342d3234203d3e20323637383537.roa (hash: WYGAE0xls6+7i2OVhuCaL0WgYP2AmxT6JrofqpGylfs=)
                          4: 8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl (hash: ne0SEsqebdsixY4hWd3T/bbgYqyUHmWqY3+hzhLuy60=)
                          5: 34352e3137372e3131302e302f32342d3234203d3e20323637383537.roa (hash: c3zSVEH2stc7Ga7P4dkoMP4nGJugURdM3tZR8TKq4Hg=)
                          6: 34352e3137372e3130382e302f32342d3234203d3e20323637383537.roa (hash: lYppe92oV2wxWFUc6Gq+IqdH7+oUcyKiXZjkKaSvQsE=)
                          7: 34352e3137372e3130392e302f32342d3234203d3e20323637383537.roa (hash: GbEmjq+v78pS2fKbyMP7qZjAXhibk50GhbJY4JL/Tcc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 02:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7e:3f:da:98:83:e2:e4:fd:17:a3:97:9b:a8:a7:63:60:5f:e3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
        Validity
            Not Before: Mar 21 04:01:52 2026 GMT
            Not After : Mar 26 06:42:52 2026 GMT
        Subject: CN=96D8A5B91DA612A5791A61DF44BB8CAE237F5699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:f0:e4:f9:60:a7:be:a0:f4:7b:93:cf:a9:
                    56:a8:90:5d:cc:8f:57:f9:a6:00:c1:55:aa:9f:02:
                    e6:15:8a:99:67:ca:d4:94:fa:b7:5c:89:81:a5:c4:
                    61:d0:cc:cf:1c:1d:17:31:22:ae:00:9a:8e:c8:63:
                    4f:a1:a4:3c:40:9b:26:66:21:c6:1f:19:02:a1:93:
                    7a:8b:92:5d:73:18:3d:fe:82:00:a7:2f:0c:17:a4:
                    a7:7f:08:b5:56:9b:ad:35:eb:66:97:dc:98:9a:20:
                    8a:62:36:12:96:e5:cd:ef:00:63:4b:9e:ef:8c:ca:
                    8d:ee:b3:41:b1:fc:a9:be:b1:80:76:16:53:c2:12:
                    9a:97:95:62:6f:10:1c:cb:8c:e3:29:b2:cf:7a:11:
                    c6:de:66:83:58:7d:0c:6a:69:54:88:df:95:fa:95:
                    54:b2:5c:f3:41:21:9d:ae:37:6f:e5:bb:7d:a2:22:
                    f5:d8:c4:df:c5:5a:fd:9a:68:6f:1c:fb:15:e4:80:
                    70:04:df:bd:85:46:28:3f:34:b5:dd:6d:7d:be:76:
                    77:f3:09:c3:60:db:cc:99:88:2e:dc:3b:78:73:0a:
                    92:75:66:54:26:0b:a8:37:c2:7b:a8:cb:10:69:0d:
                    0a:7e:42:91:cd:ee:9d:a8:64:65:e0:7c:b7:54:8b:
                    9a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D8:A5:B9:1D:A6:12:A5:79:1A:61:DF:44:BB:8C:AE:23:7F:56:99
            X509v3 Authority Key Identifier:
                keyid:8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b3:54:33:36:ab:f2:47:24:51:1c:c0:d9:53:7b:c3:31:14:
         21:5f:41:32:19:e0:40:37:ba:f7:86:e0:f6:e7:91:ad:ce:67:
         84:86:72:c4:4c:ae:b3:ae:b0:c1:88:fe:ce:17:ef:a0:c9:d8:
         63:19:fa:ff:6e:b0:99:37:7b:64:9a:b4:b3:8c:12:d8:d4:66:
         6b:a4:d1:03:39:6c:d9:cb:42:5d:ed:05:91:e3:7a:92:de:9a:
         54:7e:83:01:f5:1f:13:36:d7:2c:02:ad:fa:33:cc:59:46:1e:
         ec:d3:d3:89:f7:dc:cf:19:b9:05:4a:28:ce:0d:8b:c6:98:e4:
         51:16:37:4d:d2:56:cb:b9:e0:c6:f5:f7:2b:44:84:5a:1b:77:
         7a:56:9f:40:3e:de:69:01:5a:96:a6:33:0d:c0:23:19:cd:a6:
         27:35:2f:43:8f:9d:c2:54:e2:32:d0:31:01:b7:24:1c:26:8b:
         af:77:ce:3e:8c:d8:ad:ac:67:46:93:80:91:50:0b:16:7e:1f:
         32:37:fa:85:9e:3a:3e:3b:bb:73:73:bc:6f:b7:fd:7e:77:a3:
         33:7a:20:ae:ca:f1:6e:07:b2:64:3b:35:a4:f8:69:80:30:43:
         5c:4e:a1:6b:37:e7:23:f9:a8:66:0c:62:c2:49:2c:80:ab:aa:
         5a:5c:76:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 23:49:25 2026 by rpki-client