Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
File:                     4521828D1C18DA1589E0C8194C700625665277B2.mft (raw, json)
Hash identifier:          DI5UpsE0vg6tdFM2LfnhtexBmwbOOWieoQgmFdvSufk=
Subject key identifier:   0D:78:9F:DE:49:7C:8D:45:37:D7:28:BE:E5:51:B6:67:12:AE:EB:A2
Authority key identifier: 45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2
Certificate issuer:       /CN=4521828D1C18DA1589E0C8194C700625665277B2
Certificate serial:       218F0BF713C6D47A4FA4AA71D421FFA290592A60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
Manifest number:          011A
Signing time:             Thu 18 Sep 2025 21:36:33 +0000
Manifest this update:     Thu 18 Sep 2025 21:31:33 +0000
Manifest next update:     Wed 24 Sep 2025 13:14:33 +0000
Files and hashes:         1: 3137372e37312e39362e302f32342d3234203d3e20323732393031.roa (hash: PrPuQoetGE6WWA+mN4atK5j6vg3wfkOO2HgaQ2EmIAE=)
                          2: 3137372e37312e39362e302f32322d3232203d3e20323732393031.roa (hash: PMyej01XWJkl1ionKq6fqXVmZa/7CbfCq/EHpqQV0KM=)
                          3: 4521828D1C18DA1589E0C8194C700625665277B2.crl (hash: znPvigsCPneAR3g7V5AF7PS7eC6PCCag/2MKqhm7eoM=)
                          4: 3137372e37312e39362e302f32332d3233203d3e20323732393031.roa (hash: GJCe6PmFxsRhvt0Br+6aKim+b4NYe7pfrzGRt2j83WU=)
                          5: 323830333a353639303a3a2f33322d3334203d3e20323732393031.roa (hash: qotZg9Xbj3Dq1KqhLk7FHy3iFQqlCKyiKVhrFHGd1MY=)
                          6: 3137372e37312e39372e302f32342d3234203d3e20323732393031.roa (hash: uvEY40mZkmBnhzJzRjxa5wUZUthccdp4eTYDejhswQM=)
                          7: 3137372e37312e39392e302f32342d3234203d3e20323732393031.roa (hash: CH5TZy0Ect//OTHkQdoBgLx6/XzlxBg/Rb+33jmsQyM=)
                          8: 3137372e37312e39382e302f32342d3234203d3e20323732393031.roa (hash: 6GKfqt6Hbmm4/LJFQ5fPRg2pgJ3DenDWGBWmVHRQFlQ=)
                          9: 3137372e37312e39382e302f32332d3233203d3e20323732393031.roa (hash: 9pfEnpCSj/dJfmTwQjo9uUSTF1MqFv7VBedO0rJ3i9g=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8f:0b:f7:13:c6:d4:7a:4f:a4:aa:71:d4:21:ff:a2:90:59:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4521828D1C18DA1589E0C8194C700625665277B2
        Validity
            Not Before: Sep 18 21:31:33 2025 GMT
            Not After : Sep 24 13:14:33 2025 GMT
        Subject: CN=0D789FDE497C8D4537D728BEE551B66712AEEBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:0b:88:1e:9c:d3:57:12:0b:5d:1d:e9:fa:
                    c1:28:28:cb:9d:c6:9d:da:4e:52:94:52:a7:3b:d7:
                    7c:52:67:40:c3:69:ec:90:62:57:4f:6f:c4:cc:f8:
                    4f:c6:ce:a6:6e:23:94:3a:45:12:14:c0:83:d1:85:
                    7a:c9:d5:4e:ca:14:92:ae:9f:76:58:6d:1a:3a:af:
                    0a:2b:70:3b:26:b4:1d:93:bb:e7:ad:c4:69:bd:7d:
                    05:b6:d2:53:08:b0:58:cd:00:57:f1:ff:1b:be:01:
                    b7:2b:e2:79:fa:28:eb:bd:30:74:fb:83:97:32:76:
                    38:b5:41:a9:5d:4e:a5:86:f1:e1:3d:4d:46:16:58:
                    12:9a:f1:f9:30:42:ce:e5:9c:cd:7a:09:46:d3:59:
                    29:18:cb:d2:ce:86:de:00:18:63:70:69:88:c2:03:
                    43:53:75:e1:97:1c:c7:0b:63:78:4b:5a:73:07:3c:
                    f2:3a:8d:68:44:e9:3f:28:df:e5:3b:bf:1c:50:3b:
                    37:2f:3e:f9:58:a6:29:6a:6d:33:9f:d0:f8:4a:d5:
                    86:6a:eb:3a:0d:27:08:b7:5e:5c:30:f4:c2:af:89:
                    39:d8:fc:af:dc:72:eb:23:c7:37:e6:21:59:a8:fb:
                    c6:72:11:3b:6f:3a:f3:15:70:a0:aa:8e:ab:af:ec:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:78:9F:DE:49:7C:8D:45:37:D7:28:BE:E5:51:B6:67:12:AE:EB:A2
            X509v3 Authority Key Identifier:
                keyid:45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4e:22:70:5e:b7:69:f5:a8:e7:ac:99:6b:90:29:21:56:9f:
         fc:f0:c8:40:bd:01:d8:e6:15:45:6c:dd:5e:d6:ea:03:6c:72:
         5a:9f:92:47:07:48:91:f4:7a:41:82:13:fb:e3:32:03:d0:a3:
         9f:f5:08:36:26:44:ca:ba:9b:f1:4f:f1:31:a9:83:bc:88:cb:
         7a:98:0f:ec:d6:78:c8:2e:65:6d:cd:1b:4e:79:67:7d:3b:a2:
         bd:11:38:6f:23:a9:07:87:b5:ba:d7:a2:c3:b8:6c:7b:57:f1:
         3d:e4:8b:1e:07:bb:9c:1e:22:d4:51:2a:63:f4:f1:0e:3b:42:
         3a:cc:21:c6:2d:60:90:18:6d:39:37:b1:4e:8a:b9:80:58:af:
         33:27:5f:c5:09:58:88:4e:f3:9d:ed:bc:19:fb:64:d5:c5:82:
         05:3b:39:82:05:66:de:a2:a8:8f:9a:99:b4:32:98:b5:1d:84:
         2e:e3:fa:2b:7d:a2:56:ed:6c:da:fa:68:68:d0:8f:a6:10:58:
         89:63:5e:49:a4:c1:48:3d:a5:68:e0:90:92:99:a9:5b:e7:a8:
         a5:82:e1:b3:e4:9d:c1:a1:6a:20:90:1d:7d:bb:a5:86:5c:40:
         8c:a2:67:ac:51:40:0e:d8:1a:b2:62:2a:e7:7c:c0:c3:19:19:
         c6:67:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:21:48 2025 by rpki-client