Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft
File:                     7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft (raw, json)
Hash identifier:          OpvaXcin16jNWhMyiAZLpzJWYMvIcwO78lTWoyov3WQ=
Subject key identifier:   27:A1:1F:E3:DC:97:4F:17:9C:5A:FA:57:32:1F:E5:53:5F:32:89:72
Authority key identifier: 7D:2B:B7:E5:CE:DF:B7:0C:3C:52:61:F6:75:61:FA:D8:4A:29:45:7C
Certificate issuer:       /CN=7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C
Certificate serial:       597142ACB58F2B76C77C35E9DC85F4D35A8A67DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft
Manifest number:          017A
Signing time:             Sat 04 Apr 2026 16:01:15 +0000
Manifest this update:     Sat 04 Apr 2026 15:56:15 +0000
Manifest next update:     Thu 09 Apr 2026 01:54:15 +0000
Files and hashes:         1: 7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.crl (hash: NXAhjnxPsr9+VeNUJhtJi93f+5edR6No5IuFGaypNEI=)
                          2: 323830333a363931303a3a2f33322d3332203d3e20323732303034.roa (hash: FAeZulcYcIoI2qnOBgSucj3/OhXRX5gAX7qcYy40HhM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:71:42:ac:b5:8f:2b:76:c7:7c:35:e9:dc:85:f4:d3:5a:8a:67:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C
        Validity
            Not Before: Apr  4 15:56:15 2026 GMT
            Not After : Apr  9 01:54:15 2026 GMT
        Subject: CN=27A11FE3DC974F179C5AFA57321FE5535F328972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:24:30:33:43:49:c2:89:08:84:00:16:2e:
                    ec:a5:cb:2e:ea:b6:a9:99:97:d1:33:59:49:d3:1f:
                    13:7e:89:38:de:fd:f6:26:18:00:51:32:09:fd:6e:
                    5f:42:7c:45:2c:8c:e4:74:cf:c1:fd:ca:94:3b:31:
                    28:d0:e6:4f:eb:38:46:30:b7:4e:ea:d4:23:bf:f7:
                    6e:cd:a0:71:41:88:1b:38:69:06:9e:54:bd:1e:47:
                    a9:ee:88:f7:ac:85:7b:6f:cd:42:7d:0e:ff:78:b0:
                    de:cf:46:6a:ae:7a:f7:b9:da:fa:fa:d0:00:70:88:
                    46:61:1b:80:ff:55:72:c9:5e:5a:63:85:4b:72:09:
                    cb:21:97:ef:76:b2:ad:c8:b0:2c:80:69:47:31:ac:
                    b1:a7:88:2b:a9:85:ee:98:65:12:32:1f:d1:6a:42:
                    32:25:6a:e8:e5:34:57:07:4d:04:21:3a:93:d2:37:
                    ea:d9:46:14:97:1a:61:48:b5:14:c8:28:00:8b:bf:
                    9c:6a:1b:79:85:66:f9:f8:e1:ae:25:5a:ae:08:3e:
                    f0:f3:40:17:db:75:f8:4f:1a:47:a8:7c:d5:4a:f1:
                    39:d8:d9:ad:d7:fd:79:5d:1e:c2:d4:bb:3e:70:74:
                    1b:02:c0:89:6a:ed:1f:38:21:33:98:c1:49:bf:b1:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A1:1F:E3:DC:97:4F:17:9C:5A:FA:57:32:1F:E5:53:5F:32:89:72
            X509v3 Authority Key Identifier:
                keyid:7D:2B:B7:E5:CE:DF:B7:0C:3C:52:61:F6:75:61:FA:D8:4A:29:45:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:07:b2:5c:21:9c:61:d9:f7:0e:77:63:85:61:04:32:c3:78:
         b1:99:b6:34:72:c9:41:24:19:b4:ce:3d:3c:94:cd:02:ed:20:
         8c:09:61:7b:70:ce:61:95:ad:0f:5c:e8:3c:60:9c:78:25:f1:
         1b:a4:e2:cd:09:c7:ca:cf:86:f6:1b:60:4c:62:e8:b0:e9:a0:
         a8:b9:6c:44:09:2a:5d:90:dd:76:4d:13:0d:a8:fa:6b:ff:a1:
         b1:b8:1e:ff:48:49:7b:1f:4d:7b:73:7c:24:8b:1e:83:3d:19:
         8d:de:8c:29:ce:bf:c4:4d:52:72:9f:28:31:e2:38:37:d0:33:
         25:e6:34:24:19:44:a3:74:e3:d6:83:1e:93:2d:54:24:1d:8a:
         1a:89:dd:5d:9b:84:c9:50:9e:18:08:e0:8d:3f:23:fb:10:a9:
         ca:50:7f:97:5b:c2:d3:60:6a:fd:66:7f:e1:98:80:6d:9d:a7:
         c6:3b:3f:32:eb:ae:28:aa:0b:bd:ce:c5:d0:9f:3d:b9:e4:d7:
         9b:7e:7d:fd:95:ae:bc:b3:43:4b:9b:dd:1e:75:e6:bf:a6:77:
         79:65:93:fc:98:dc:34:09:8c:a8:0f:18:dc:64:06:bf:64:d7:
         5d:fb:55:9d:1d:1f:49:19:3b:e6:c6:10:38:e0:c1:85:1d:03:
         52:04:0a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:08:40 2026 by rpki-client