Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
File:                     D2709F777988D8BB9C29DBBB53968812568C616E.mft (raw, json)
Hash identifier:          LCdeb0lraOHrKlL4koBaqgtxMGAxOlsQTy4HPTPkoVM=
Subject key identifier:   9A:F6:56:32:8C:7B:40:FF:A0:24:2E:1F:31:1F:72:6A:75:1F:26:47
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Certificate issuer:       /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial:       79D98B22B390C608B88E9129F743D2D1541B2C63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
Manifest number:          0128
Signing time:             Sun 19 Oct 2025 00:50:54 +0000
Manifest this update:     Sun 19 Oct 2025 00:45:54 +0000
Manifest next update:     Fri 24 Oct 2025 09:05:54 +0000
Files and hashes:         1: 3230302e3132352e3133332e302f32342d3234203d3e203237393437.roa (hash: ei+aI3yRpqWAQlVC80Ih9G66OfmMtRym4fO22DedFGU=)
                          2: 3230302e3132352e3133302e302f32332d3234203d3e203233343837.roa (hash: H/Gd7QVbFmePVOzWScCYKqEBFvGM/FMXuSLLmIXLTfs=)
                          3: D2709F777988D8BB9C29DBBB53968812568C616E.crl (hash: i3ThX9RdxXVlN0+tB4spC35U4aAWQHx0IkoJZ1VaDww=)
                          4: 3139302e392e3138322e302f32342d3234203d3e20323633323338.roa (hash: nIaifMUfgajduQNbjHCzUVF15bqzySqcRvrTtzbdG1I=)
                          5: 3230302e3132352e3133302e302f32332d3234203d3e203237393437.roa (hash: +gqJG+SV6QTzfUNDdsKm7axNr4wqSSd/atbt6h0MG2E=)
                          6: 3139302e392e3138312e302f32342d3234203d3e20323634383235.roa (hash: iY2yT2OCjRRXGLWyNCkQ6T/pXWY60Rbxo+KDsVCD19I=)
                          7: 3139302e392e3138332e302f32342d3234203d3e20323633323338.roa (hash: TcVAwhhflmz9WRuPDp8oetoN0N/H29ODFuO9Bd4tdiA=)
                          8: 3230302e3132352e3134322e302f32342d3234203d3e203238303431.roa (hash: 5mHHuPE0PfJoE86dhU3gRnQEIAbkUqHokbumHQFgp2Q=)
                          9: 3230302e3132352e3133332e302f32342d3234203d3e203238303431.roa (hash: JPKBnvDwW4DWdlK86iknKW0mNm0InkD5/dhpBLdJDxk=)
                          10: 3230302e3132352e3132382e302f32342d3234203d3e203237393437.roa (hash: 8IbgMY648rP79p6FmczC5Fp/FD1V4C23yxvUGlMnfcw=)
                          11: 3230302e3132352e3135372e302f32342d3234203d3e203238303431.roa (hash: hzDmycq7b+pfeP2DK0tNYRMt/puTmBQ2d0C7FNOLvMQ=)
                          12: 3230302e3132352e3134322e302f32342d3234203d3e203237393437.roa (hash: UnxCvRhUIPsks9ajUwDAetme0Vp5jC6Oee1dvrB73v4=)
                          13: 3230302e3132352e3135372e302f32342d3234203d3e203237393437.roa (hash: T1tfFyi4dN9qLUDzWME1WLZduhtGHtJ4T6XsjDhqbJU=)
                          14: 3139302e392e3137392e302f32342d3234203d3e20323633323338.roa (hash: cgKrh1sTNptLzhW2c/uzftT3fPJM4TFwKDNJKs6EwK8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d9:8b:22:b3:90:c6:08:b8:8e:91:29:f7:43:d2:d1:54:1b:2c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
        Validity
            Not Before: Oct 19 00:45:54 2025 GMT
            Not After : Oct 24 09:05:54 2025 GMT
        Subject: CN=9AF656328C7B40FFA0242E1F311F726A751F2647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:28:3e:f7:a9:f1:62:9f:35:ec:01:68:a9:
                    5b:ae:10:c6:f5:8a:23:5b:d2:f4:fd:81:68:f6:52:
                    f8:b5:2c:d0:df:58:58:4b:21:c5:f5:aa:98:d8:df:
                    df:c0:c9:41:dd:1d:fe:fe:12:f5:b0:a5:29:71:d5:
                    9b:05:8b:32:1e:74:55:04:82:46:8f:b7:e8:be:20:
                    ac:ca:b1:d7:3a:5e:70:e3:c0:69:16:d1:e9:8d:6b:
                    35:a5:2c:2c:1c:81:ce:a5:f1:0d:4d:3b:2b:ee:02:
                    b7:b0:4b:48:ee:9b:df:d7:15:1a:e5:ca:d3:11:7d:
                    a9:c2:a9:33:0f:0e:85:7f:9e:b9:b4:22:7a:37:fd:
                    f4:4d:b1:a1:c9:1c:fe:a1:9f:f3:8c:7d:b1:f3:5b:
                    80:fa:5e:26:00:72:9d:39:d4:36:24:47:31:f4:b5:
                    33:f9:90:6d:bd:f8:7e:62:52:69:01:4c:79:28:1f:
                    8c:3d:c2:f2:03:ee:6e:23:0f:e4:a4:fa:72:36:ab:
                    6c:ea:a0:4d:87:f2:00:1c:6a:f7:a4:b2:1a:37:88:
                    2d:62:25:98:67:74:91:21:19:20:39:93:fb:d2:e5:
                    6c:9b:fa:20:7b:a0:a0:53:6d:05:c9:8b:68:f4:c0:
                    66:ad:b3:0c:a3:b4:f2:b9:57:8f:91:a6:34:49:59:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F6:56:32:8C:7B:40:FF:A0:24:2E:1F:31:1F:72:6A:75:1F:26:47
            X509v3 Authority Key Identifier:
                keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:fd:06:0d:51:cc:71:9d:cc:bc:15:ff:91:20:5c:e2:60:bb:
         97:b9:61:b5:f9:de:de:e6:8e:e6:c9:59:c6:38:1b:40:77:41:
         fa:c3:79:26:3e:e0:99:bc:c1:5c:f9:c9:9f:6c:52:27:3c:25:
         6a:c0:c3:bc:ef:6a:72:9f:c0:e3:26:23:05:48:52:60:79:e1:
         ba:0b:40:cb:bc:21:1c:f5:82:3f:40:2b:34:1e:e7:32:74:48:
         23:1d:f7:d5:81:1c:a5:3c:10:c2:2c:5c:81:85:5a:76:eb:59:
         b0:5b:6a:7b:a2:b5:46:69:7d:fd:3f:ba:ce:0d:8e:4f:47:47:
         e1:39:af:c2:e6:9c:77:c6:5d:38:7c:82:77:1b:0d:37:40:3e:
         cf:b8:0c:05:fe:59:04:bb:cd:ae:7e:52:86:48:49:f2:7b:f0:
         5a:fb:ab:a5:a1:c7:cb:4a:4d:e0:e3:bd:4c:27:54:df:d4:08:
         5c:0a:e0:c9:25:ee:6a:5e:7b:8d:5d:8f:d5:bb:34:ab:b1:6f:
         d6:34:bf:c0:2f:cd:59:4f:46:c7:7e:34:bc:b7:9e:c8:e3:8a:
         66:9e:54:12:42:31:00:a9:58:d8:61:79:6c:50:57:6f:e5:26:
         6f:3c:94:bb:20:13:f2:e8:85:d2:0f:69:46:e5:56:e1:ae:3c:
         b2:af:26:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:55:36 2025 by rpki-client