Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
File:                     85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft (raw, json)
Hash identifier:          GM9REbhwzK5sgZ5WwqWG/s+Cf2QG3MObuWszaGWBAIY=
Subject key identifier:   AE:9D:D5:D3:B2:AB:15:67:40:38:82:C5:16:70:1F:9B:95:1C:46:13
Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
Certificate issuer:       /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Certificate serial:       689C0D1B15DF740D89C7DAFD4BE4CA4A927A4984
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
Manifest number:          01D1
Signing time:             Fri 04 Sep 2026 19:08:27 +0000
Manifest this update:     Fri 04 Sep 2026 19:03:27 +0000
Manifest next update:     Wed 09 Sep 2026 19:48:27 +0000
Files and hashes:         1: 323830333a363934303a3a2f33322d3438203d3e203631353132.roa (hash: DqMANk4vZp9DYozZY7/LK84MoeJ/wSo+DIdfnbXAnc0=)
                          2: 3134332e3235352e3134302e302f32322d3234203d3e203631353132.roa (hash: XXr/7MkPUsKcGPLwZnxpKdVYADOH8Md848BLqn18jKg=)
                          3: 3134332e3235352e3134302e302f32322d3332203d3e20323032.roa (hash: URq863u2Hs2b9T0a4LUN+Bvfw7foRCcrfmNFmjhPMog=)
                          4: 3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa (hash: TpcaeL6skmysWmxFBrYKN2U0wVzG/cfdRq15VQ+yTiU=)
                          5: 34352e3136312e3233362e302f32322d3234203d3e203631353132.roa (hash: SdzwWw6dcvaS4XdRSsV3w69+iMp+QDvuAVHag7agkAE=)
                          6: 85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl (hash: G0qg74Tzp76gV7lmpgJV5ZLZwI9rPStaNlPRMNi5tEM=)
                          7: 3134332e3235352e3134302e302f32322d3332203d3e20323033.roa (hash: 92uTyaEa4PjviLtfeXtEwVDE1zjNjdwFtuWsQa58ahg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 19:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9c:0d:1b:15:df:74:0d:89:c7:da:fd:4b:e4:ca:4a:92:7a:49:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
        Validity
            Not Before: Sep  4 19:03:27 2026 GMT
            Not After : Sep  9 19:48:27 2026 GMT
        Subject: CN=AE9DD5D3B2AB1567403882C516701F9B951C4613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:09:ed:0a:43:80:7d:75:7d:f9:65:73:4c:
                    f7:21:1f:c0:40:37:d2:64:8e:6c:5c:5d:3d:eb:fc:
                    06:a9:07:db:e1:8d:df:f2:eb:34:aa:6d:66:c3:d8:
                    33:f3:d4:a7:3a:f8:45:30:7a:ac:81:ea:85:e8:5f:
                    68:df:96:d4:c0:a1:21:a7:13:e6:3d:6a:e3:bb:31:
                    89:28:10:ef:07:c9:4d:4b:9a:60:2a:e9:f5:76:28:
                    89:93:fb:61:b6:b5:98:e8:dd:d5:d5:03:f3:6c:92:
                    9c:e0:e7:b2:5b:1e:6b:bf:40:aa:8c:62:9f:15:61:
                    eb:69:4f:73:64:d6:66:e2:b2:b8:1f:07:d7:fe:7e:
                    5e:b9:82:80:9f:83:0e:24:7e:ce:61:53:f5:55:4f:
                    5b:9e:29:3a:7d:b2:51:4f:62:ee:89:97:7d:88:83:
                    db:88:f2:9c:93:9b:0a:56:74:1b:90:ca:04:c2:ed:
                    cf:a0:2e:6b:65:96:45:cd:be:61:f0:70:a6:f3:2b:
                    96:d8:4d:50:be:5e:98:ee:1d:b8:17:5d:f8:24:35:
                    5d:33:18:27:06:f9:6d:29:36:ba:7c:ff:5c:12:75:
                    20:45:90:71:79:15:41:58:e7:7f:bc:9b:ae:1e:88:
                    db:e8:55:40:49:dd:54:50:58:5d:41:40:f8:ba:13:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9D:D5:D3:B2:AB:15:67:40:38:82:C5:16:70:1F:9B:95:1C:46:13
            X509v3 Authority Key Identifier:
                keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:35:2d:dc:34:cd:8e:3a:16:35:57:f7:4a:91:aa:6d:50:e9:
         9b:ca:af:5a:2c:58:a3:7a:9f:a6:f0:29:63:89:2d:d0:f3:e0:
         f6:87:b9:eb:b9:b3:26:5d:13:c4:fe:02:26:fe:bf:39:68:64:
         85:87:e9:1d:60:a9:ac:63:88:14:2f:4a:23:7b:00:58:4f:42:
         1d:c1:a0:ca:d2:2b:88:08:fa:14:1f:30:e8:a8:57:44:45:a8:
         24:38:af:b8:93:de:14:7e:b0:41:c3:53:62:45:f1:46:82:67:
         16:86:40:fc:05:af:ec:54:66:10:cd:23:dd:68:bf:08:c3:da:
         b5:45:db:be:be:06:f9:a9:6b:0e:00:27:01:16:79:8e:8a:ce:
         9a:88:2b:77:8d:69:14:70:dc:71:2b:38:ff:db:02:60:18:27:
         81:98:44:0f:eb:42:92:5a:75:ab:7c:29:73:68:81:91:31:82:
         07:37:cf:dd:6c:63:27:8b:d9:62:2d:61:21:6e:82:64:35:4a:
         4d:a2:43:ec:8e:57:1c:1c:67:c3:f4:76:bf:dc:d5:51:98:bb:
         63:99:11:89:7d:59:e2:6a:dd:22:80:a4:7a:3f:95:d9:ad:bd:
         aa:44:29:ab:fa:71:bf:f4:5c:f8:72:ee:a2:4a:03:53:52:78:
         83:02:2b:86
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUaJwNGxXfdA2Jx9r9S+TKSpJ6SYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVCRjM4RkE0MzhGNEY4NzI0NThFRDM2NDIzRDFBQTdG
ODVEQjUyQTAeFw0yNjA5MDQxOTAzMjdaFw0yNjA5MDkxOTQ4MjdaMDMxMTAvBgNV
BAMTKEFFOURENUQzQjJBQjE1Njc0MDM4ODJDNTE2NzAxRjlCOTUxQzQ2MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lQntCkOAfXV9+WVzTPchH8BA
N9JkjmxcXT3r/AapB9vhjd/y6zSqbWbD2DPz1Kc6+EUweqyB6oXoX2jfltTAoSGn
E+Y9auO7MYkoEO8HyU1LmmAq6fV2KImT+2G2tZjo3dXVA/Nskpzg57JbHmu/QKqM
Yp8VYetpT3Nk1mbisrgfB9f+fl65goCfgw4kfs5hU/VVT1ueKTp9slFPYu6Jl32I
g9uI8pyTmwpWdBuQygTC7c+gLmtllkXNvmHwcKbzK5bYTVC+XpjuHbgXXfgkNV0z
GCcG+W0pNrp8/1wSdSBFkHF5FUFY53+8m64eiNvoVUBJ3VRQWF1BQPi6E7cNAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUrp3V07KrFWdAOILFFnAfm5UcRhMwHwYDVR0j
BBgwFoAUhb84+kOPT4ckWO02Qj0ap/hdtSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTlGQjJCRDBDRDk3ODdBNTYzOTY1MUU4QUM0MjExNjBC
NTFGMzEyRkJCNkZEMUE1QTAxRDBEQkM2MEUxOUU5LzAvODVCRjM4RkE0MzhGNEY4
NzI0NThFRDM2NDIzRDFBQTdGODVEQjUyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUJGMzhGQTQzOEY0Rjg3MjQ1
OEVEMzY0MjNEMUFBN0Y4NURCNTJBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDE5RkIyQkQwQ0Q5Nzg3QTU2Mzk2NTFFOEFDNDIxMTYwQjUxRjMxMkZC
QjZGRDFBNUEwMUQwREJDNjBFMTlFOS8wLzg1QkYzOEZBNDM4RjRGODcyNDU4RUQz
NjQyM0QxQUE3Rjg1REI1MkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVNS3cNM2OOhY1V/dKkaptUOmb
yq9aLFijep+m8CljiS3Q8+D2h7nrubMmXRPE/gIm/r85aGSFh+kdYKmsY4gUL0oj
ewBYT0IdwaDK0iuICPoUHzDoqFdERagkOK+4k94UfrBBw1NiRfFGgmcWhkD8Ba/s
VGYQzSPdaL8Iw9q1Rdu+vgb5qWsOACcBFnmOis6aiCt3jWkUcNxxKzj/2wJgGCeB
mEQP60KSWnWrfClzaIGRMYIHN8/dbGMni9liLWEhboJkNUpNokPsjlccHGfD9Ha/
3NVRmLtjmRGJfVniat0igKR6P5XZrb2qRCmr+nG/9Fz4cu6iSgNTUniDAiuG
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:29:33 2026 by rpki-client