Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
File:                     CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft (raw, json)
Hash identifier:          VZmtwWuT8B5rXu5l1hpj/wqPg8uaOc7ZS2ADH0gmr1M=
Subject key identifier:   50:0A:04:DE:DA:2A:98:7B:E2:0B:7C:00:94:68:6E:02:F4:31:F5:EC
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       40C21C8E02B8553E144A855EFCB98BE54DA5E588
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
Manifest number:          01DA
Signing time:             Thu 10 Sep 2026 01:22:34 +0000
Manifest this update:     Thu 10 Sep 2026 01:17:34 +0000
Manifest next update:     Mon 14 Sep 2026 14:52:34 +0000
Files and hashes:         1: 3139312e39372e31372e302f32342d3234203d3e20323732383635.roa (hash: EvOcMBD6Ht9q9SNbchUJa+WWVgkVV9eXloCXy7sq/R0=)
                          2: 3139312e39372e31362e302f32322d3234203d3e20323634383434.roa (hash: MEOX8cb/xn0PzPSkD5BZOrCXIBBzlral/GxElCiDJtI=)
                          3: 3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa (hash: UOxffU8Cq9dGbKc/4yTBm3REFxfZR/iie/Kxnn1AGoo=)
                          4: 323830333a383238303a3a2f33322d3332203d3e20323634383434.roa (hash: kMz8Zk/AWDRwAVGLJFvvyvYKJjpACmuyP6pcjkl4MGA=)
                          5: CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl (hash: hvM7VOePfugmlIwHdUo1v9SAxWt2roDI2ZQMFI5oAqg=)
                          6: 3137302e3234342e39302e302f32342d3234203d3e20323734323836.roa (hash: GGfLY6BRQ+QI9UGn4V3fE744iMNkhhp7g8Sx5ZWa6OA=)
                          7: 3137302e3234342e39312e302f32342d3234203d3e20323734323836.roa (hash: IZybJ8lSsdTOaHxHo31O41uHsQAYuKaFg5V8MK38y40=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Sep 2026 14:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c2:1c:8e:02:b8:55:3e:14:4a:85:5e:fc:b9:8b:e5:4d:a5:e5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Sep 10 01:17:34 2026 GMT
            Not After : Sep 14 14:52:34 2026 GMT
        Subject: CN=500A04DEDA2A987BE20B7C0094686E02F431F5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:f1:99:27:45:ad:41:27:23:24:dd:1b:8b:
                    cc:31:9f:f2:23:c4:55:3c:1e:40:4c:3a:38:fb:c6:
                    95:d0:94:9d:65:b9:58:86:37:7f:66:c8:a1:1c:36:
                    e9:c0:bf:15:96:50:9f:15:50:9e:3a:87:61:ca:50:
                    36:35:28:92:1f:1f:46:4e:23:5c:c2:b4:ab:c5:1d:
                    86:be:d9:b2:81:48:50:b8:ea:1c:d0:ee:35:c8:00:
                    79:41:00:ff:68:13:49:72:06:54:85:0a:e2:f7:fc:
                    1a:83:06:a6:96:54:3e:50:31:1e:c4:70:e9:dd:0f:
                    76:12:43:41:80:f5:8a:af:2b:f8:16:87:72:47:78:
                    16:e4:49:5f:c4:92:65:46:ad:1c:d8:fb:21:0e:30:
                    ca:7d:34:c2:ff:0f:7a:4b:7f:db:dc:dc:13:0b:6d:
                    33:23:1f:be:30:30:d3:e6:1b:9f:b0:33:9b:38:7e:
                    f8:29:0e:2f:6a:c5:dd:67:c3:db:49:d7:66:99:49:
                    5f:83:9b:5c:16:31:0a:9f:b0:7e:11:d6:ee:7c:5e:
                    d1:f7:97:b6:d0:b0:0b:fe:d6:f4:7d:c4:ff:fb:36:
                    31:98:99:32:5b:26:3e:e3:94:3e:c1:bd:71:e1:f3:
                    1e:13:47:fa:a4:6c:04:9d:a7:a3:a3:10:44:2d:01:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0A:04:DE:DA:2A:98:7B:E2:0B:7C:00:94:68:6E:02:F4:31:F5:EC
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:4a:22:52:df:14:ed:79:86:b7:b4:38:0d:41:3e:50:8d:b6:
         86:e9:28:2b:fe:cf:65:eb:8e:3a:a3:42:94:08:72:3b:25:08:
         8b:25:ff:e7:f1:f5:a1:78:f5:94:e6:70:84:80:e9:1d:ef:5a:
         c8:a3:6e:7d:c7:e7:fc:54:97:0b:bd:47:e4:25:c5:d4:cb:f8:
         a1:9b:07:16:40:b4:7e:f6:4b:78:bc:0c:df:d4:7f:0a:52:f2:
         52:2c:b7:4f:ed:db:05:17:92:12:f9:b3:19:35:76:7c:b9:41:
         19:f9:b0:e0:f8:54:63:77:b4:19:ca:40:0d:c2:ac:57:2d:93:
         fd:c5:d6:09:36:8e:db:99:51:27:77:00:98:3a:e5:52:15:b5:
         b4:e6:fb:6d:30:d5:83:9b:3b:f4:5d:d3:e0:5d:91:ff:ae:69:
         1c:37:a1:68:19:e7:b6:73:81:fd:86:59:7a:74:13:e8:10:c4:
         f7:ce:70:98:71:76:a7:b4:2f:34:79:7d:91:c3:af:6a:10:7c:
         80:68:14:2a:fb:1d:59:20:fa:1b:c1:fe:fe:dd:f6:46:9e:58:
         01:6c:92:98:24:51:59:c3:9b:d5:66:a4:20:50:ae:66:8b:c3:
         7f:c7:ea:86:29:4b:a7:51:bf:54:ef:ca:a0:03:c7:60:11:a9:
         49:a3:01:ee
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUQMIcjgK4VT4USoVe/LmL5U2l5YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGRjU4NTA3QUYxQTA2QUVGREE2N0REOEQ2NTEyNUMz
NjRBNERFQzAeFw0yNjA5MTAwMTE3MzRaFw0yNjA5MTQxNDUyMzRaMDMxMTAvBgNV
BAMTKDUwMEEwNERFREEyQTk4N0JFMjBCN0MwMDk0Njg2RTAyRjQzMUY1RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOfGZJ0WtQScjJN0bi8wxn/Ij
xFU8HkBMOjj7xpXQlJ1luViGN39myKEcNunAvxWWUJ8VUJ46h2HKUDY1KJIfH0ZO
I1zCtKvFHYa+2bKBSFC46hzQ7jXIAHlBAP9oE0lyBlSFCuL3/BqDBqaWVD5QMR7E
cOndD3YSQ0GA9YqvK/gWh3JHeBbkSV/EkmVGrRzY+yEOMMp9NML/D3pLf9vc3BML
bTMjH74wMNPmG5+wM5s4fvgpDi9qxd1nw9tJ12aZSV+Dm1wWMQqfsH4R1u58XtH3
l7bQsAv+1vR9xP/7NjGYmTJbJj7jlD7BvXHh8x4TR/qkbASdp6OjEEQtAdifAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUUAoE3toqmHviC3wAlGhuAvQx9ewwHwYDVR0j
BBgwFoAUzv9YUHrxoGrv2mfdjWUSXDZKTewwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNURDOTc2OEVBMEFBQ0Y0NkRDOTExRTgxRDBEOUQwNDk5
MjdEMjRBQUNBRjA2ODVDQjM2N0Q1NENFRTJCRDk1LzAvQ0VGRjU4NTA3QUYxQTA2
QUVGREE2N0REOEQ2NTEyNUMzNjRBNERFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUZGNTg1MDdBRjFBMDZBRUZE
QTY3REQ4RDY1MTI1QzM2NEE0REVDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVEQzk3NjhFQTBBQUNGNDZEQzkxMUU4MUQwRDlEMDQ5OTI3RDI0QUFD
QUYwNjg1Q0IzNjdENTRDRUUyQkQ5NS8wL0NFRkY1ODUwN0FGMUEwNkFFRkRBNjdE
RDhENjUxMjVDMzY0QTRERUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7SiJS3xTteYa3tDgNQT5QjbaG
6Sgr/s9l6446o0KUCHI7JQiLJf/n8fWhePWU5nCEgOkd71rIo259x+f8VJcLvUfk
JcXUy/ihmwcWQLR+9kt4vAzf1H8KUvJSLLdP7dsFF5IS+bMZNXZ8uUEZ+bDg+FRj
d7QZykANwqxXLZP9xdYJNo7bmVEndwCYOuVSFbW05vttMNWDmzv0XdPgXZH/rmkc
N6FoGee2c4H9hll6dBPoEMT3znCYcXantC80eX2Rw69qEHyAaBQq+x1ZIPobwf7+
3fZGnlgBbJKYJFFZw5vVZqQgUK5mi8N/x+qGKUunUb9U78qgA8dgEalJowHu
-----END CERTIFICATE-----
Generated at Fri Sep 11 16:30:55 2026 by rpki-client