Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
File:                     85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft (raw, json)
Hash identifier:          0jFL+4Y52QMoFg4JmXA1l+nmERPocFDP1hLCpFwsGPY=
Subject key identifier:   4D:F1:36:95:57:11:E1:73:BB:A9:DB:91:41:BF:CD:C7:F0:D5:68:88
Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
Certificate issuer:       /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Certificate serial:       2C9EF23DB7CF5B2360B181A4C74D07921D948DD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
Manifest number:          01D7
Signing time:             Wed 16 Sep 2026 23:00:55 +0000
Manifest this update:     Wed 16 Sep 2026 22:55:55 +0000
Manifest next update:     Tue 22 Sep 2026 16:08:55 +0000
Files and hashes:         1: 34352e3136312e3233362e302f32322d3234203d3e203631353132.roa (hash: SdzwWw6dcvaS4XdRSsV3w69+iMp+QDvuAVHag7agkAE=)
                          2: 3134332e3235352e3134302e302f32322d3332203d3e20323033.roa (hash: 92uTyaEa4PjviLtfeXtEwVDE1zjNjdwFtuWsQa58ahg=)
                          3: 85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl (hash: qJGoanJbOT1NHlKVUmwBKdBP2Hd5F/YHizHamrF81fE=)
                          4: 3134332e3235352e3134302e302f32322d3332203d3e20323032.roa (hash: URq863u2Hs2b9T0a4LUN+Bvfw7foRCcrfmNFmjhPMog=)
                          5: 323830333a363934303a3a2f33322d3438203d3e203631353132.roa (hash: DqMANk4vZp9DYozZY7/LK84MoeJ/wSo+DIdfnbXAnc0=)
                          6: 3134332e3235352e3134302e302f32322d3234203d3e203631353132.roa (hash: XXr/7MkPUsKcGPLwZnxpKdVYADOH8Md848BLqn18jKg=)
                          7: 3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa (hash: TpcaeL6skmysWmxFBrYKN2U0wVzG/cfdRq15VQ+yTiU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9e:f2:3d:b7:cf:5b:23:60:b1:81:a4:c7:4d:07:92:1d:94:8d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
        Validity
            Not Before: Sep 16 22:55:55 2026 GMT
            Not After : Sep 22 16:08:55 2026 GMT
        Subject: CN=4DF136955711E173BBA9DB9141BFCDC7F0D56888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:db:56:bc:83:ae:83:50:c4:39:20:51:4a:f5:
                    bc:5f:1f:54:e3:3e:d6:e6:0d:76:05:42:d0:db:54:
                    0d:53:6a:9b:ae:27:26:53:08:64:bc:70:f0:50:56:
                    9a:36:12:a2:ea:fb:ab:db:46:e5:f0:b2:3f:0a:4d:
                    5c:7b:46:c9:a4:3b:6b:de:88:b4:74:a4:50:ad:a1:
                    b4:e9:f2:ff:fb:8c:7c:14:81:f9:2c:74:89:f2:e2:
                    7b:ef:0f:8a:37:1a:9f:a4:4c:4b:d7:3d:74:51:68:
                    8e:4e:61:e8:72:78:25:33:ea:07:20:30:43:8c:db:
                    b7:47:54:cb:fc:1a:d3:fa:4c:15:67:3f:ea:d8:81:
                    4c:9e:de:35:b5:b3:7c:5a:0f:ce:a7:45:58:d8:85:
                    8f:f1:f4:f7:43:99:bb:bf:96:2c:2c:2e:cc:9b:03:
                    d7:fc:4b:7b:98:68:97:0a:50:7a:f7:9f:8d:e6:6b:
                    07:6d:fa:fa:db:e8:b4:68:8c:85:ea:47:c6:62:fa:
                    0a:18:70:fd:0f:0f:53:ba:80:4b:c7:49:37:a8:b8:
                    df:bc:86:0e:97:7c:8b:53:2b:9f:55:84:99:e9:0b:
                    73:00:d7:d6:d7:a9:e3:d1:73:57:41:66:60:2d:b7:
                    cb:60:bf:57:0d:52:f3:d7:f9:c2:fc:64:9f:a1:a8:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F1:36:95:57:11:E1:73:BB:A9:DB:91:41:BF:CD:C7:F0:D5:68:88
            X509v3 Authority Key Identifier:
                keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:a8:b0:e8:86:af:f7:02:05:b3:ce:40:3b:08:9e:62:71:
         d5:d8:92:97:06:42:b3:8a:ee:86:46:98:d1:24:34:09:03:83:
         b9:c7:dd:7a:8a:8c:bc:81:d0:ae:2b:6d:25:7a:36:8c:5c:13:
         41:25:50:c4:8d:92:ff:60:86:8c:a7:b0:d1:fb:15:a4:ae:e0:
         a2:67:26:da:87:79:41:63:35:5a:7d:ed:34:36:9c:b3:1e:cd:
         6d:20:a5:73:0c:e3:f7:49:8e:93:aa:fd:79:37:4b:88:68:8e:
         70:b8:a5:30:16:30:a6:f6:45:f2:6a:e8:23:55:7a:b2:57:ab:
         a3:9f:ad:33:55:e4:d1:e8:d8:6c:63:53:43:a7:ab:e0:84:6b:
         87:8d:7e:b0:7e:4c:da:7e:f6:9c:21:3c:df:c0:41:d5:83:7e:
         43:8f:a5:0f:3d:ef:98:64:3c:aa:61:77:a0:5a:6d:fe:f7:34:
         0d:e9:01:ec:f7:fd:04:72:dc:9a:8f:3c:14:57:58:5a:d4:40:
         ac:68:0d:b5:49:8a:b3:06:63:3c:4f:bb:06:ff:c2:8d:10:93:
         33:81:ae:d4:51:20:8c:20:28:5c:c9:f7:a6:ca:f0:64:54:da:
         b5:a4:70:e2:20:f3:03:4e:06:f5:6d:76:21:27:76:32:b3:b2:
         b1:c8:70:e3
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIULJ7yPbfPWyNgsYGkx00Hkh2UjdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVCRjM4RkE0MzhGNEY4NzI0NThFRDM2NDIzRDFBQTdG
ODVEQjUyQTAeFw0yNjA5MTYyMjU1NTVaFw0yNjA5MjIxNjA4NTVaMDMxMTAvBgNV
BAMTKDRERjEzNjk1NTcxMUUxNzNCQkE5REI5MTQxQkZDREM3RjBENTY4ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm21a8g66DUMQ5IFFK9bxfH1Tj
PtbmDXYFQtDbVA1TapuuJyZTCGS8cPBQVpo2EqLq+6vbRuXwsj8KTVx7RsmkO2ve
iLR0pFCtobTp8v/7jHwUgfksdIny4nvvD4o3Gp+kTEvXPXRRaI5OYehyeCUz6gcg
MEOM27dHVMv8GtP6TBVnP+rYgUye3jW1s3xaD86nRVjYhY/x9PdDmbu/liwsLsyb
A9f8S3uYaJcKUHr3n43mawdt+vrb6LRojIXqR8Zi+goYcP0PD1O6gEvHSTeouN+8
hg6XfItTK59VhJnpC3MA19bXqePRc1dBZmAtt8tgv1cNUvPX+cL8ZJ+hqCdnAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUTfE2lVcR4XO7qduRQb/Nx/DVaIgwHwYDVR0j
BBgwFoAUhb84+kOPT4ckWO02Qj0ap/hdtSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTlGQjJCRDBDRDk3ODdBNTYzOTY1MUU4QUM0MjExNjBC
NTFGMzEyRkJCNkZEMUE1QTAxRDBEQkM2MEUxOUU5LzAvODVCRjM4RkE0MzhGNEY4
NzI0NThFRDM2NDIzRDFBQTdGODVEQjUyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUJGMzhGQTQzOEY0Rjg3MjQ1
OEVEMzY0MjNEMUFBN0Y4NURCNTJBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDE5RkIyQkQwQ0Q5Nzg3QTU2Mzk2NTFFOEFDNDIxMTYwQjUxRjMxMkZC
QjZGRDFBNUEwMUQwREJDNjBFMTlFOS8wLzg1QkYzOEZBNDM4RjRGODcyNDU4RUQz
NjQyM0QxQUE3Rjg1REI1MkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8Laiw6Iav9wIFs85AOwieYnHV
2JKXBkKziu6GRpjRJDQJA4O5x916ioy8gdCuK20lejaMXBNBJVDEjZL/YIaMp7DR
+xWkruCiZybah3lBYzVafe00NpyzHs1tIKVzDOP3SY6Tqv15N0uIaI5wuKUwFjCm
9kXyaugjVXqyV6ujn60zVeTR6NhsY1NDp6vghGuHjX6wfkzafvacITzfwEHVg35D
j6UPPe+YZDyqYXegWm3+9zQN6QHs9/0EctyajzwUV1ha1ECsaA21SYqzBmM8T7sG
/8KNEJMzga7UUSCMIChcyfemyvBkVNq1pHDiIPMDTgb1bXYhJ3Yys7KxyHDj
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:55:29 2026 by rpki-client