Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
File:                     85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft (raw, json)
Hash identifier:          Ti6S/JcD+96Ifx05uv0EYvo5bYJ0LhHSrMVPpLsH40w=
Subject key identifier:   CF:03:FF:F0:C9:10:50:26:90:5E:97:D5:07:75:19:C3:C2:B6:58:DF
Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
Certificate issuer:       /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Certificate serial:       2036E767F605DCAA76F0429CB97269D3D282CD07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
Manifest number:          01B2
Signing time:             Thu 09 Jul 2026 12:02:36 +0000
Manifest this update:     Thu 09 Jul 2026 11:57:36 +0000
Manifest next update:     Tue 14 Jul 2026 04:08:36 +0000
Files and hashes:         1: 323830333a363934303a3a2f33322d3438203d3e203631353132.roa (hash: DqMANk4vZp9DYozZY7/LK84MoeJ/wSo+DIdfnbXAnc0=)
                          2: 85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl (hash: IrcVxh8yHAi5P5zzI7DqasqtK+8OteehTUfiHAL1xGE=)
                          3: 3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa (hash: ltmWI9h4QzLb1beDrfNlEL4sNrMAbCe6RIciFmQe1II=)
                          4: 3134332e3235352e3134302e302f32322d3234203d3e203631353132.roa (hash: XXr/7MkPUsKcGPLwZnxpKdVYADOH8Md848BLqn18jKg=)
                          5: 3134332e3235352e3134302e302f32322d3332203d3e20323032.roa (hash: rYZb4iJPvLD48DXR2HMXMHWJZNKHF3nVf03MhYz16WM=)
                          6: 34352e3136312e3233362e302f32322d3234203d3e203631353132.roa (hash: SdzwWw6dcvaS4XdRSsV3w69+iMp+QDvuAVHag7agkAE=)
                          7: 3134332e3235352e3134302e302f32322d3332203d3e20323033.roa (hash: cqbVZiWp5CmZDOkbVxT/fYs85Y9wjbS/MZnP0Z6WQc0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 14 Jul 2026 04:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:36:e7:67:f6:05:dc:aa:76:f0:42:9c:b9:72:69:d3:d2:82:cd:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
        Validity
            Not Before: Jul  9 11:57:36 2026 GMT
            Not After : Jul 14 04:08:36 2026 GMT
        Subject: CN=CF03FFF0C9105026905E97D5077519C3C2B658DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:a3:0a:2a:9d:fa:75:9f:ce:bb:bf:b2:5c:
                    ba:7f:da:32:23:06:92:da:1e:55:f3:19:db:fa:fb:
                    f9:2b:ed:2f:d6:7d:0d:7a:00:a1:b6:7b:b7:30:87:
                    11:f8:7b:b1:f9:9e:33:d0:2b:4f:80:95:c7:47:ee:
                    43:a6:f8:1f:b6:1e:64:b7:cc:10:01:70:b6:84:fa:
                    4f:19:82:97:45:5a:ba:fe:49:0e:f7:d5:79:51:cc:
                    1e:31:d1:24:92:e3:5e:49:80:12:ae:d4:60:f3:75:
                    2e:a9:d1:54:6f:c8:94:07:b1:3e:28:59:64:f2:bb:
                    ea:c1:de:47:bf:0f:f5:6f:14:99:b8:89:99:ad:19:
                    fe:b3:f8:4f:de:c6:2e:a9:b2:76:3e:e9:c3:ba:f0:
                    67:c8:5e:5a:9e:69:f4:53:f6:cd:14:90:19:15:90:
                    fd:10:ca:5d:d4:d9:66:84:cc:b2:40:8a:aa:12:ec:
                    72:bd:90:4d:0d:f7:fe:77:5b:8f:70:b4:dc:0c:ed:
                    5a:84:17:aa:0f:8a:68:f7:76:b7:78:45:a8:dc:42:
                    5b:bc:63:3b:e8:9b:a7:73:f5:49:88:4b:7d:4c:f4:
                    ff:6c:3b:74:7c:2a:89:fd:7e:37:b6:4d:44:3b:e2:
                    ce:6d:9a:e5:f6:d5:ba:c9:d3:be:11:2c:61:93:f4:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:03:FF:F0:C9:10:50:26:90:5E:97:D5:07:75:19:C3:C2:B6:58:DF
            X509v3 Authority Key Identifier:
                keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d0:77:f7:a0:7c:1f:5c:b0:28:3b:ab:66:14:09:20:2a:01:
         74:d1:8a:5c:9c:63:1e:bb:af:b6:ef:99:28:22:0e:f3:e9:83:
         26:3f:4d:db:16:57:1e:62:c2:68:ad:5a:c4:a3:37:80:da:5b:
         81:2a:3e:49:e9:39:0f:f8:79:66:12:e0:3b:e2:24:8b:f5:da:
         1e:5c:27:55:28:a7:f0:f8:1d:ad:39:af:33:4d:da:e5:e3:69:
         7d:4e:2f:23:ef:c6:2d:a6:a8:a4:f1:ac:81:7c:fa:94:91:b0:
         c8:d7:9d:e9:b2:f1:cd:71:4d:92:b7:86:6d:a4:2d:b3:90:6d:
         fc:17:ca:ec:27:c0:ac:08:29:b8:5e:0a:45:0c:2c:d8:5a:97:
         79:55:c9:6f:ee:b2:e4:50:9d:b0:d6:fb:1d:84:72:7a:61:a3:
         b2:b1:82:b2:67:43:37:fb:b9:c7:02:a9:3d:76:20:0c:3f:b7:
         79:08:81:e3:4c:1e:de:2e:6d:ac:8a:66:23:b0:ae:45:96:c1:
         25:3c:fe:c2:f3:2e:03:0f:d2:be:15:98:25:79:72:b0:69:65:
         c2:27:32:37:98:15:51:7e:5e:d8:8e:75:56:75:17:3d:4e:f6:
         bb:a6:5d:7d:33:4a:9b:96:ba:29:5f:f3:33:58:96:5f:06:82:
         7e:c8:dc:65
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIDbnZ/YF3Kp28EKcuXJp09KCzQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVCRjM4RkE0MzhGNEY4NzI0NThFRDM2NDIzRDFBQTdG
ODVEQjUyQTAeFw0yNjA3MDkxMTU3MzZaFw0yNjA3MTQwNDA4MzZaMDMxMTAvBgNV
BAMTKENGMDNGRkYwQzkxMDUwMjY5MDVFOTdENTA3NzUxOUMzQzJCNjU4REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOr6MKKp36dZ/Ou7+yXLp/2jIj
BpLaHlXzGdv6+/kr7S/WfQ16AKG2e7cwhxH4e7H5njPQK0+AlcdH7kOm+B+2HmS3
zBABcLaE+k8ZgpdFWrr+SQ731XlRzB4x0SSS415JgBKu1GDzdS6p0VRvyJQHsT4o
WWTyu+rB3ke/D/VvFJm4iZmtGf6z+E/exi6psnY+6cO68GfIXlqeafRT9s0UkBkV
kP0Qyl3U2WaEzLJAiqoS7HK9kE0N9/53W49wtNwM7VqEF6oPimj3drd4RajcQlu8
Yzvom6dz9UmIS31M9P9sO3R8Kon9fje2TUQ74s5tmuX21brJ074RLGGT9Ok5AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUzwP/8MkQUCaQXpfVB3UZw8K2WN8wHwYDVR0j
BBgwFoAUhb84+kOPT4ckWO02Qj0ap/hdtSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTlGQjJCRDBDRDk3ODdBNTYzOTY1MUU4QUM0MjExNjBC
NTFGMzEyRkJCNkZEMUE1QTAxRDBEQkM2MEUxOUU5LzAvODVCRjM4RkE0MzhGNEY4
NzI0NThFRDM2NDIzRDFBQTdGODVEQjUyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUJGMzhGQTQzOEY0Rjg3MjQ1
OEVEMzY0MjNEMUFBN0Y4NURCNTJBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDE5RkIyQkQwQ0Q5Nzg3QTU2Mzk2NTFFOEFDNDIxMTYwQjUxRjMxMkZC
QjZGRDFBNUEwMUQwREJDNjBFMTlFOS8wLzg1QkYzOEZBNDM4RjRGODcyNDU4RUQz
NjQyM0QxQUE3Rjg1REI1MkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCV0Hf3oHwfXLAoO6tmFAkgKgF0
0YpcnGMeu6+275koIg7z6YMmP03bFlceYsJorVrEozeA2luBKj5J6TkP+HlmEuA7
4iSL9doeXCdVKKfw+B2tOa8zTdrl42l9Ti8j78Ytpqik8ayBfPqUkbDI153psvHN
cU2St4ZtpC2zkG38F8rsJ8CsCCm4XgpFDCzYWpd5Vclv7rLkUJ2w1vsdhHJ6YaOy
sYKyZ0M3+7nHAqk9diAMP7d5CIHjTB7eLm2simYjsK5FlsElPP7C8y4DD9K+FZgl
eXKwaWXCJzI3mBVRfl7YjnVWdRc9Tva7pl19M0qblropX/MzWJZfBoJ+yNxl
-----END CERTIFICATE-----
Generated at Fri Jul 10 17:47:22 2026 by rpki-client