Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
File:                     CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json)
Hash identifier:          XKobmQ2vpjwRrG/EaniNUFChj5tWw4ZuJEI7gpAU7yc=
Subject key identifier:   10:71:EC:A8:89:6B:3C:68:93:9F:3E:A8:01:1A:3D:25:08:20:86:20
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Certificate issuer:       /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial:       69621C9C389096ECBFB6358D4E86F4DAF0B07102
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
Manifest number:          01A2
Signing time:             Fri 29 May 2026 18:06:03 +0000
Manifest this update:     Fri 29 May 2026 18:01:03 +0000
Manifest next update:     Wed 03 Jun 2026 11:19:03 +0000
Files and hashes:         1: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: dbTjuGS3PzrURh7F2dZU8q1IyUt3ByHVC9cX7x0Huss=)
                          2: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: kgjgwHarhaMs6Iouvoz80koNaPks3R7U+aIkHqr9IWM=)
                          3: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: TDNaloFksvCDvMAFQ3/FEFyLh3P6ZrIML35T5ZcPUpo=)
                          4: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: L57VWgacj/zmSjf7yEB+iUGkpSFTYzflOQWN6Q62GvI=)
                          5: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: XE2awn9T+5ggVHcwpgRTfWKLa6eNnQYDkphDSuamOgQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:62:1c:9c:38:90:96:ec:bf:b6:35:8d:4e:86:f4:da:f0:b0:71:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
        Validity
            Not Before: May 29 18:01:03 2026 GMT
            Not After : Jun  3 11:19:03 2026 GMT
        Subject: CN=1071ECA8896B3C68939F3EA8011A3D2508208620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:1a:16:b9:45:5a:91:ba:b6:23:b6:08:5f:
                    4e:f9:05:1c:60:36:9e:69:3c:78:d6:a4:54:18:f2:
                    81:5a:64:a8:1e:a9:f5:ca:72:40:93:37:ff:b9:df:
                    79:96:97:7c:4f:be:d8:12:20:ca:16:d1:96:81:c7:
                    c7:fa:2b:d2:98:43:39:10:13:5a:b8:54:00:5e:57:
                    a1:6a:ce:38:a7:9b:b2:96:7d:19:a7:e3:1e:a9:65:
                    24:82:f7:7c:b7:8f:60:77:9d:d1:c5:24:cc:00:e3:
                    cc:fc:66:53:18:1e:0b:99:74:37:fb:9f:cf:eb:e7:
                    de:6f:50:93:3d:b3:82:d4:ec:70:3d:db:2c:cd:97:
                    d5:82:85:7b:17:b2:d3:10:cd:0f:ca:55:ff:13:27:
                    f1:8e:38:01:59:02:c8:53:a7:1f:e1:70:05:dc:9e:
                    a7:b8:76:41:1a:86:32:a2:59:70:80:f7:fc:d4:15:
                    96:ed:bf:39:45:8e:96:be:3e:37:aa:69:c0:97:40:
                    3b:7c:ff:df:96:88:93:43:7a:de:27:67:fe:2c:b3:
                    17:d4:c2:a1:1a:8e:16:fd:37:95:5d:84:25:20:c4:
                    20:86:e3:10:1e:e9:5e:44:2b:84:5f:4a:9c:0a:1e:
                    a7:b9:56:7f:a0:c3:2c:a7:a6:9d:25:40:09:f7:3f:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:71:EC:A8:89:6B:3C:68:93:9F:3E:A8:01:1A:3D:25:08:20:86:20
            X509v3 Authority Key Identifier:
                keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:75:5c:4a:22:f8:c1:3e:28:26:6f:9d:0b:cd:cb:d3:1e:98:
         f3:8e:eb:b3:62:b1:b2:e9:80:76:29:b8:fd:2d:f5:f9:f3:f1:
         1f:7c:1c:79:2e:c8:d4:78:84:03:62:a9:14:5f:f9:07:c9:00:
         a6:0b:bb:f0:71:44:06:2c:5f:65:59:c9:08:1f:57:83:fd:38:
         b3:81:84:c8:62:3e:45:57:db:a0:59:49:2f:30:e7:24:42:c1:
         33:cd:f3:02:05:dd:c6:2f:64:3b:08:3d:70:3e:c8:d2:74:41:
         a8:c7:88:f5:ef:85:09:49:f2:a9:4a:c3:56:97:87:df:24:79:
         ba:21:89:19:9b:2e:1b:81:01:54:a7:a4:0f:ed:de:c2:cc:71:
         aa:55:44:5a:8e:02:db:07:13:4a:d8:0c:d4:07:42:a2:99:85:
         92:85:f1:9d:e4:d2:27:56:26:ce:f8:20:99:0a:40:59:3b:92:
         93:22:24:52:51:09:62:90:13:b7:09:47:7d:1c:1d:3e:bf:70:
         2d:b9:f4:9b:10:96:fc:6d:fc:57:d5:b2:c3:0e:b9:5a:22:f5:
         4e:91:b8:ab:84:30:34:71:78:1c:b7:0b:dc:53:b4:95:03:ab:
         a6:5a:6f:ef:cd:41:6f:38:6d:bf:d7:48:32:73:6c:01:91:2f:
         45:5e:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 12:49:45 2026 by rpki-client