Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.mft
File:                     DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.mft (raw, json)
Hash identifier:          Y7ZorlNh6i8VpVtN1mWuVZjNu4kQRNqKqxrTi4sYRvg=
Subject key identifier:   A1:5C:95:57:DA:49:29:5C:E6:9D:29:CE:0A:C5:03:C4:FB:40:A1:EB
Authority key identifier: DE:3F:D4:EE:1D:38:2F:55:95:A8:D2:3D:D0:09:C7:EA:0B:D2:07:9D
Certificate issuer:       /CN=DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D
Certificate serial:       7547C9796C520322B6B04E4573F4A0504031D3D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.mft
Manifest number:          28
Signing time:             Sun 01 Nov 2026 11:09:36 +0000
Manifest this update:     Sun 01 Nov 2026 11:04:36 +0000
Manifest next update:     Thu 05 Nov 2026 12:12:36 +0000
Files and hashes:         1: 323830333a636164303a3a2f33322d3438203d3e20323734303638.roa (hash: zoaJGVfiF0bvsSMixBtvTuMN+IkIvtT08vCcNy1lQPY=)
                          2: DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.crl (hash: dEx62QnuPLFpM8JzNIuE/w7cjhZADXojrne0xqY9H3k=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:47:c9:79:6c:52:03:22:b6:b0:4e:45:73:f4:a0:50:40:31:d3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D
        Validity
            Not Before: Nov  1 11:04:36 2026 GMT
            Not After : Nov  5 12:12:36 2026 GMT
        Subject: CN=A15C9557DA49295CE69D29CE0AC503C4FB40A1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:81:44:bb:4f:1c:64:c5:73:29:a2:ac:2c:
                    e7:81:2c:33:64:b5:d1:9b:bb:ea:1c:2e:d5:bf:43:
                    1c:08:d0:08:64:de:47:f4:13:9a:78:b1:27:b3:5e:
                    80:16:9b:f8:00:f0:cf:17:5a:a3:fe:f6:b6:be:e1:
                    5a:ee:2d:6a:97:6f:24:5d:66:64:f8:f1:bf:ce:46:
                    02:44:97:de:70:77:19:01:3f:02:fe:44:f7:f0:02:
                    a0:38:95:5f:f1:39:18:26:9c:6e:b9:09:e1:b5:89:
                    0e:67:64:34:03:1b:74:b0:b9:de:16:83:51:b4:e1:
                    13:9a:8f:39:00:df:2d:95:5b:90:ec:c3:7c:03:45:
                    ff:a5:9b:a6:4f:0e:49:19:bb:26:07:ea:bb:1e:e7:
                    17:75:41:75:89:6e:ef:60:8a:1a:7d:90:d1:9e:5a:
                    b5:3d:fa:2c:eb:8c:5e:82:c9:04:f3:fa:21:0a:8a:
                    b1:03:d8:22:d3:23:d5:a4:73:35:4c:95:ad:94:76:
                    5d:c5:27:a0:1c:aa:1f:53:ee:91:4b:21:f7:14:ed:
                    e9:84:64:5c:f4:63:0f:29:7f:fa:87:31:55:28:7c:
                    36:a7:ac:72:40:82:ae:db:53:dc:3e:08:82:3e:ea:
                    45:8e:2a:59:ef:5d:0b:55:4e:e9:63:9c:ab:c2:20:
                    ba:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5C:95:57:DA:49:29:5C:E6:9D:29:CE:0A:C5:03:C4:FB:40:A1:EB
            X509v3 Authority Key Identifier:
                keyid:DE:3F:D4:EE:1D:38:2F:55:95:A8:D2:3D:D0:09:C7:EA:0B:D2:07:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4b:13:8f:93:b9:c7:94:90:94:60:2b:8a:f8:1a:76:b9:67:
         92:85:8e:ec:32:a1:d7:07:82:4c:b4:33:37:59:33:0a:bb:c1:
         27:3d:1e:71:eb:6d:4f:cf:a7:ec:32:fd:7d:d5:8f:d4:a2:bf:
         ac:78:dd:89:7e:cf:ad:83:c6:f9:7e:06:aa:5c:1c:e6:1b:03:
         bc:78:71:05:13:97:96:05:ec:30:52:7a:3a:dd:f2:0c:d7:33:
         08:b1:97:9f:9a:88:a2:0d:2d:b4:dc:56:5d:e7:59:b6:d3:7a:
         69:a2:6e:a1:57:1d:53:9c:37:9d:0d:2e:93:f9:55:c6:82:be:
         b5:c8:57:a1:f5:8d:05:a6:1a:33:30:65:b6:02:6e:02:d7:74:
         cd:fd:01:d0:82:02:c1:88:00:2c:a2:31:4c:92:fa:aa:c0:eb:
         5a:19:7c:06:12:58:27:e1:f0:06:90:82:af:78:df:43:91:8d:
         0a:1b:5a:25:bf:b8:36:20:4f:47:b5:91:21:23:b1:34:d8:c7:
         f5:53:4e:66:5d:66:6f:cb:3c:38:35:df:34:31:1c:57:4d:b3:
         a4:7f:3a:07:3e:db:36:34:3f:31:1c:d2:dd:50:25:c5:40:b3:
         5f:1a:ad:46:6c:41:20:7e:ba:6b:e3:11:5b:78:7c:21:d2:35:
         17:d8:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:18:20 2026 by rpki-client