Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD3348D2FE8410D58966387875D9AA10D5C7C9786A4C18D9C495156F8AA4DF0F/0/203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.mft
File:                     203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.mft (raw, json)
Hash identifier:          pNiXSoa7hyffu6QkMeuZLgymcYHxNXM60jnF47CN19k=
Subject key identifier:   E8:8D:A6:D9:40:9F:47:D2:F9:CD:35:E9:91:FF:EE:66:F9:A5:D0:4A
Authority key identifier: 20:35:38:EC:3B:B5:B3:73:8F:8F:B7:C7:1C:9F:A4:B0:FD:F9:C0:1C
Certificate issuer:       /CN=203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C
Certificate serial:       4F3CE5D783D4965E6ADB47A763A8C25E82D8E9E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD3348D2FE8410D58966387875D9AA10D5C7C9786A4C18D9C495156F8AA4DF0F/0/203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.mft
Manifest number:          15
Signing time:             Tue 28 Apr 2026 13:36:33 +0000
Manifest this update:     Tue 28 Apr 2026 13:31:33 +0000
Manifest next update:     Mon 04 May 2026 00:49:33 +0000
Files and hashes:         1: 323830333a6333303a3a2f33322d3438203d3e20323734333234.roa (hash: ECgh6ZIt5kifMMHuWFRlzUT+2Vm1m21NbE9u0hx3GLM=)
                          2: 203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.crl (hash: lRlyTUK0QkDcX3KLYL0iKQlleszNjn6/5uRHE5dIPME=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD3348D2FE8410D58966387875D9AA10D5C7C9786A4C18D9C495156F8AA4DF0F/0/203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD3348D2FE8410D58966387875D9AA10D5C7C9786A4C18D9C495156F8AA4DF0F/0/203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 May 2026 11:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3c:e5:d7:83:d4:96:5e:6a:db:47:a7:63:a8:c2:5e:82:d8:e9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C
        Validity
            Not Before: Apr 28 13:31:33 2026 GMT
            Not After : May  4 00:49:33 2026 GMT
        Subject: CN=E88DA6D9409F47D2F9CD35E991FFEE66F9A5D04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:fc:ac:18:14:96:bd:e8:15:1d:54:89:50:
                    c3:68:f8:a5:1c:63:05:67:99:55:c3:c7:8b:09:d8:
                    1a:7d:0e:60:5f:8d:9e:52:31:4b:af:13:7b:47:6e:
                    dd:69:df:c6:d4:7c:3f:93:bb:8b:c2:8b:e0:d1:9d:
                    91:f8:ba:2e:07:84:ee:31:30:74:a7:56:9c:f1:52:
                    f5:c3:00:ad:2a:15:92:a1:6d:82:0e:90:cd:9a:58:
                    f1:db:98:32:2c:4c:de:78:c9:47:4b:85:db:0d:e0:
                    c6:d5:43:4e:e0:0e:c7:fd:51:87:95:ad:e3:ad:bf:
                    c0:5c:7c:80:e1:f0:d3:f4:30:95:48:37:67:a6:83:
                    a6:40:e2:d6:97:54:c9:40:94:68:66:6a:25:aa:3a:
                    f3:ac:e3:af:1b:7b:7d:de:3f:2e:11:95:81:a2:73:
                    53:dd:b3:6f:68:86:8f:7f:21:a6:65:86:74:af:f3:
                    48:64:4d:60:7b:27:29:11:e3:04:c6:79:ac:f9:18:
                    bf:26:58:76:f9:a6:3e:fc:38:b0:b8:7a:60:2a:7c:
                    b7:c9:8e:03:c7:45:38:46:3b:d8:d3:91:9b:e7:ee:
                    5a:e0:a9:26:86:6e:07:64:a1:e0:e9:7d:9f:b7:e4:
                    08:b8:42:c6:ca:4a:bd:92:a2:05:78:e8:11:a5:bd:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8D:A6:D9:40:9F:47:D2:F9:CD:35:E9:91:FF:EE:66:F9:A5:D0:4A
            X509v3 Authority Key Identifier:
                keyid:20:35:38:EC:3B:B5:B3:73:8F:8F:B7:C7:1C:9F:A4:B0:FD:F9:C0:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD3348D2FE8410D58966387875D9AA10D5C7C9786A4C18D9C495156F8AA4DF0F/0/203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3348D2FE8410D58966387875D9AA10D5C7C9786A4C18D9C495156F8AA4DF0F/0/203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:37:7e:f7:ae:65:c4:3c:81:f0:fa:74:86:87:e3:e9:c3:c2:
         83:55:be:d5:52:79:09:bc:7e:23:7e:77:28:07:80:02:ad:4c:
         fd:cf:0f:5a:04:fe:8c:7b:35:8d:43:a0:c5:62:7a:90:0b:6b:
         9a:38:8e:96:69:4c:27:4a:4d:11:ab:92:55:27:99:16:55:d6:
         db:8b:d0:02:15:1d:d2:59:56:b1:26:3f:be:ea:47:97:a6:72:
         91:66:78:8a:ae:c6:ec:5a:7c:b0:a6:f5:ad:53:7c:7d:3c:96:
         f8:bf:2e:e8:ee:c2:02:37:54:cd:e9:1b:b6:71:93:bc:d3:19:
         8d:9b:d7:f0:e9:96:a5:7c:88:0e:da:9a:9d:12:51:a2:8f:98:
         95:2e:9c:7f:66:96:97:09:9c:83:5f:f1:5a:ba:5c:2a:96:12:
         6a:c1:6a:07:9e:c1:14:2a:13:db:19:ae:f5:21:39:be:ae:31:
         6d:ae:f2:08:f7:10:ed:e0:71:59:df:96:a9:7b:be:7f:5f:e3:
         0f:45:4a:39:b8:2b:3b:f0:4d:d9:c3:10:7b:35:ae:22:84:ef:
         64:5b:60:ad:4b:3e:ab:e9:4b:fc:78:12:97:8d:37:3f:85:a7:
         a3:d9:6d:d0:6c:8c:28:89:5c:ed:99:0d:aa:b1:15:0d:84:29:
         51:0f:8d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 23:57:43 2026 by rpki-client