Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
File:                     CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft (raw, json)
Hash identifier:          UR3Acb6jcDKiO8jDygwzmmOIOPfWP5MK9C9IcetbmFM=
Subject key identifier:   2A:C2:28:F4:D4:01:9F:E0:51:06:5D:89:6F:69:F6:D0:B9:6A:89:4D
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       1D0AD56D63D07B17179A15D1CAE8686CBA2397D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
Manifest number:          01AF
Signing time:             Wed 16 Sep 2026 16:25:32 +0000
Manifest this update:     Wed 16 Sep 2026 16:20:32 +0000
Manifest next update:     Tue 22 Sep 2026 09:02:32 +0000
Files and hashes:         1: 34352e3233342e3138302e302f32342d3234203d3e20323636373634.roa (hash: Kvbfb7qA2VWMyw3DGqEyrbKqDVFhuXdswLUkWUpk4wg=)
                          2: 34352e3233342e3138322e302f32332d3233203d3e20323636373634.roa (hash: B4UTwetXPJG77d3KVEiLTNtgQVeGp8EMJg08O54W8lI=)
                          3: 34352e3233342e3138322e302f32342d3234203d3e20323636373634.roa (hash: /RDop6HZQpdik2ZiM6w/dS9+oXgmIxeyMd8cwiiR9uc=)
                          4: 34352e3233342e3138302e302f32332d3233203d3e20323636373634.roa (hash: DP41qQH9buqCWjQsNuZTTZ7sYISQonz3f/mvHVd1XRU=)
                          5: 34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa (hash: xN/k7fCf839KFRHla4K1lgiNrP3FD/LMbQNCQbZIkKA=)
                          6: 34352e3233342e3138332e302f32342d3234203d3e20323636373634.roa (hash: iYb4L8LEeFWSIlw6WVQ0No35j9p752C2GZggdxxzNEs=)
                          7: CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl (hash: UVE2PgSnb7oTqbtdFzmjsck7MtN0K4Nl9DAF6B9XLaA=)
                          8: 323830333a663732303a3a2f33322d3332203d3e20323636373634.roa (hash: uW+iW1DW4P77YKZlZRS1RPqR5kCtD4GCb/Jdcr0lR+w=)
                          9: 34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa (hash: XjycvwwSuvG5osPjAM+mzE3t3CjnPwvb3ecZj9wadvY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0a:d5:6d:63:d0:7b:17:17:9a:15:d1:ca:e8:68:6c:ba:23:97:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: Sep 16 16:20:32 2026 GMT
            Not After : Sep 22 09:02:32 2026 GMT
        Subject: CN=2AC228F4D4019FE051065D896F69F6D0B96A894D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e7:d1:4b:4c:db:5c:e2:fe:92:af:46:64:d6:
                    a0:93:9c:7a:0f:42:05:8d:9a:bf:f0:57:4c:34:19:
                    bc:8e:09:9f:e3:d0:20:b4:1a:2f:6e:65:21:d8:07:
                    62:52:70:1a:43:b9:79:28:66:4a:fc:06:37:15:5d:
                    2d:62:0f:28:18:2e:d4:3f:38:a5:42:eb:a4:bb:f5:
                    aa:36:52:5d:bc:d2:bf:7d:d5:28:86:52:6e:57:ef:
                    08:60:b3:90:ce:02:ef:a7:cc:45:0e:9d:f7:6c:60:
                    6b:c4:0e:fb:78:58:e4:d5:74:5e:44:0b:f4:c6:f1:
                    da:4f:38:f4:e1:34:6b:41:1b:be:e4:2a:93:0e:1c:
                    94:a9:ae:7d:8b:c2:26:c8:9b:e7:04:7e:63:5d:04:
                    c2:1f:20:a6:4b:ea:33:3c:72:7a:ad:a8:5d:ec:40:
                    72:3a:83:2b:bd:f3:31:76:24:41:85:04:e6:dd:44:
                    be:1e:44:34:71:82:4b:bc:c1:d0:28:3f:bf:51:bf:
                    32:a0:c6:74:3f:9b:ef:9e:8a:3f:d0:d1:94:b7:76:
                    25:76:b8:a0:f3:0f:03:55:9d:e7:40:cd:93:33:9a:
                    4a:9b:ca:4a:37:4e:60:54:35:e7:df:f2:95:0c:29:
                    2c:c0:ee:da:6c:43:35:94:1e:91:bf:15:b5:fc:95:
                    2a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C2:28:F4:D4:01:9F:E0:51:06:5D:89:6F:69:F6:D0:B9:6A:89:4D
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ba:46:9e:7a:a7:1e:f2:3d:70:ea:c4:fb:2e:53:94:67:24:
         4d:45:64:7d:38:c3:2e:79:bb:3e:e4:34:b6:bc:53:16:ac:88:
         f2:52:17:9f:0a:15:0e:53:c9:01:2d:5d:72:24:05:bd:84:66:
         fa:b7:74:c7:49:3d:63:49:c9:58:27:32:36:8b:ca:4b:b6:a7:
         d8:c5:86:fa:4a:08:89:1d:19:90:9c:08:bb:7f:04:a9:08:52:
         44:01:2b:c2:15:cb:63:85:17:0c:a8:e7:f2:94:b4:d6:fa:bf:
         09:fe:7e:25:c1:04:d3:40:38:f8:bd:63:53:54:8f:b2:27:46:
         bb:69:07:0d:f5:f8:ad:b0:6c:ee:c4:3c:bd:79:6f:04:df:2c:
         e3:65:24:36:a9:c5:38:eb:88:ed:11:07:91:4d:c3:cb:a0:9f:
         6b:a7:2f:54:53:40:b9:72:9c:0f:48:f8:52:f8:6b:ab:92:92:
         f2:6a:ab:23:58:4a:6d:c9:e9:ed:56:7c:03:1d:74:18:3d:4a:
         a2:03:b3:a3:13:8e:a8:32:2d:c4:00:c8:df:1e:1a:e3:e3:ae:
         52:4e:6f:3d:91:bc:aa:b5:78:5c:b8:57:de:5d:d8:8f:40:43:
         65:af:4a:f8:2f:f4:33:03:86:a8:1e:c5:b3:21:10:27:6c:6f:
         29:9a:45:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:28:51 2026 by rpki-client