Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20147AC3D64E5B51F3D0EC4ECDE1F5A45F359376CE40E1B7C669F4EC58754B8B/0/0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516.mft
File:                     0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516.mft (raw, json)
Hash identifier:          pgfWuIiaeQcykmST98jM1RVKb9+eMk7YpuOyjaSm2no=
Subject key identifier:   77:2C:E0:1A:03:05:0B:31:BB:04:0B:66:55:A5:ED:15:67:C5:A5:10
Authority key identifier: 0D:CD:9F:3D:B3:CB:C3:6E:5C:F2:EB:5C:45:BB:D9:85:4D:3A:45:16
Certificate issuer:       /CN=0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516
Certificate serial:       2F457A13CBF7B3E575D006C5052C46A378314A72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20147AC3D64E5B51F3D0EC4ECDE1F5A45F359376CE40E1B7C669F4EC58754B8B/0/0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516.mft
Manifest number:          03
Signing time:             Tue 24 Mar 2026 23:25:00 +0000
Manifest this update:     Tue 24 Mar 2026 23:20:00 +0000
Manifest next update:     Mon 30 Mar 2026 05:40:00 +0000
Files and hashes:         1: 3230302e32332e3133302e302f32342d3234203d3e20323635353836.roa (hash: 8NLBVzSvjUPqaikxVNcuF0Io4aX9sI/7UF59BLVQmF8=)
                          2: 0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516.crl (hash: Fw88KI5ru/j3TrbBpEzaUAItd7SzfZlCFFfakCbLj7I=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20147AC3D64E5B51F3D0EC4ECDE1F5A45F359376CE40E1B7C669F4EC58754B8B/0/0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20147AC3D64E5B51F3D0EC4ECDE1F5A45F359376CE40E1B7C669F4EC58754B8B/0/0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 13:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:45:7a:13:cb:f7:b3:e5:75:d0:06:c5:05:2c:46:a3:78:31:4a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516
        Validity
            Not Before: Mar 24 23:20:00 2026 GMT
            Not After : Mar 30 05:40:00 2026 GMT
        Subject: CN=772CE01A03050B31BB040B6655A5ED1567C5A510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:16:d5:71:68:0e:7b:3f:b9:bd:e7:e3:d0:
                    20:d7:95:4d:71:b1:fc:78:34:65:b9:c0:58:6a:aa:
                    67:91:3d:d7:b7:b4:1c:0c:58:8f:e4:6b:6d:bf:3d:
                    7f:e1:f1:72:ff:0d:8f:5c:a6:01:1c:57:17:ca:58:
                    16:59:d9:b0:be:2a:fa:e2:00:10:01:8f:3a:02:68:
                    1e:b2:62:9b:75:43:39:c7:c7:8d:f5:77:f0:75:31:
                    38:a3:92:dc:0e:4f:33:c1:cd:b7:46:69:73:0d:43:
                    55:44:65:4f:7a:77:08:d1:34:81:b6:00:05:f4:cb:
                    c2:d0:32:1d:e0:c0:6f:41:1a:97:59:06:3b:5b:76:
                    59:6f:55:57:01:c9:f0:73:4d:6c:79:14:45:51:6e:
                    e4:cb:9e:80:67:07:fb:d5:e1:36:05:91:b9:ac:83:
                    96:26:24:a1:2c:96:ff:dc:2b:90:45:2e:eb:e3:fe:
                    d5:81:cd:8e:aa:68:7c:0f:2e:62:86:b0:67:ea:c6:
                    b0:37:28:67:3b:88:a2:7e:96:77:95:96:3a:e1:41:
                    95:11:0d:3d:35:a0:16:90:ed:41:07:ef:01:00:0e:
                    7e:1c:8c:fb:b2:d1:55:96:80:29:d4:9f:74:ce:bf:
                    b0:c9:36:95:26:1f:db:a4:6e:fc:80:eb:bb:85:8f:
                    f0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2C:E0:1A:03:05:0B:31:BB:04:0B:66:55:A5:ED:15:67:C5:A5:10
            X509v3 Authority Key Identifier:
                keyid:0D:CD:9F:3D:B3:CB:C3:6E:5C:F2:EB:5C:45:BB:D9:85:4D:3A:45:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20147AC3D64E5B51F3D0EC4ECDE1F5A45F359376CE40E1B7C669F4EC58754B8B/0/0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20147AC3D64E5B51F3D0EC4ECDE1F5A45F359376CE40E1B7C669F4EC58754B8B/0/0DCD9F3DB3CBC36E5CF2EB5C45BBD9854D3A4516.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b2:6e:5d:ca:75:72:b9:97:fc:31:96:7a:66:6c:18:ef:93:
         47:4a:4f:9c:33:60:fa:a2:1c:45:7d:11:98:eb:6c:21:91:47:
         1e:29:11:74:bb:95:ce:e8:de:1e:cc:16:12:51:69:14:0a:01:
         8e:be:4c:ee:ef:90:68:fb:59:11:49:b2:db:d4:92:41:d1:ea:
         13:c4:43:a5:84:c3:34:94:73:2c:b0:3d:25:d9:90:a0:65:22:
         3f:42:42:59:62:f7:0c:b1:2f:af:51:49:b1:e0:5d:ee:c0:19:
         4a:b3:7b:6c:74:d3:a3:a2:f9:10:0d:1e:30:11:72:3b:10:a9:
         fe:29:40:b8:2b:8c:d4:56:3b:0c:ff:a1:12:ac:15:35:65:6c:
         f4:d9:b3:49:78:93:4c:01:ad:21:44:6e:12:77:b2:5f:b3:81:
         a9:0a:43:da:3c:7c:c4:b6:a8:09:33:7b:9b:a0:98:54:6c:9f:
         00:c0:83:a4:50:ae:72:1c:78:23:2b:4c:ff:d4:48:c2:40:9c:
         9b:32:ee:e6:62:d9:35:8a:a8:ec:11:63:ce:c8:6e:86:4d:f3:
         52:0a:0a:09:b0:1d:1d:06:ec:3e:66:85:7d:f1:8e:9e:03:a4:
         cf:74:0b:6d:0d:d1:ba:31:af:30:61:8a:f6:cf:2a:20:fe:0d:
         3c:51:40:11
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUL0V6E8v3s+V10AbFBSxGo3gxSnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERDRDlGM0RCM0NCQzM2RTVDRjJFQjVDNDVCQkQ5ODU0
RDNBNDUxNjAeFw0yNjAzMjQyMzIwMDBaFw0yNjAzMzAwNTQwMDBaMDMxMTAvBgNV
BAMTKDc3MkNFMDFBMDMwNTBCMzFCQjA0MEI2NjU1QTVFRDE1NjdDNUE1MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOBhbVcWgOez+5vefj0CDXlU1x
sfx4NGW5wFhqqmeRPde3tBwMWI/ka22/PX/h8XL/DY9cpgEcVxfKWBZZ2bC+Kvri
ABABjzoCaB6yYpt1QznHx431d/B1MTijktwOTzPBzbdGaXMNQ1VEZU96dwjRNIG2
AAX0y8LQMh3gwG9BGpdZBjtbdllvVVcByfBzTWx5FEVRbuTLnoBnB/vV4TYFkbms
g5YmJKEslv/cK5BFLuvj/tWBzY6qaHwPLmKGsGfqxrA3KGc7iKJ+lneVljrhQZUR
DT01oBaQ7UEH7wEADn4cjPuy0VWWgCnUn3TOv7DJNpUmH9ukbvyA67uFj/ClAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUdyzgGgMFCzG7BAtmVaXtFWfFpRAwHwYDVR0j
BBgwFoAUDc2fPbPLw25c8utcRbvZhU06RRYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMDE0N0FDM0Q2NEU1QjUxRjNEMEVDNEVDREUxRjVBNDVG
MzU5Mzc2Q0U0MEUxQjdDNjY5RjRFQzU4NzU0QjhCLzAvMERDRDlGM0RCM0NCQzM2
RTVDRjJFQjVDNDVCQkQ5ODU0RDNBNDUxNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRENEOUYzREIzQ0JDMzZFNUNG
MkVCNUM0NUJCRDk4NTREM0E0NTE2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjAxNDdBQzNENjRFNUI1MUYzRDBFQzRFQ0RFMUY1QTQ1RjM1OTM3NkNF
NDBFMUI3QzY2OUY0RUM1ODc1NEI4Qi8wLzBEQ0Q5RjNEQjNDQkMzNkU1Q0YyRUI1
QzQ1QkJEOTg1NEQzQTQ1MTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApsm5dynVyuZf8MZZ6ZmwY75NH
Sk+cM2D6ohxFfRGY62whkUceKRF0u5XO6N4ezBYSUWkUCgGOvkzu75Bo+1kRSbLb
1JJB0eoTxEOlhMM0lHMssD0l2ZCgZSI/QkJZYvcMsS+vUUmx4F3uwBlKs3tsdNOj
ovkQDR4wEXI7EKn+KUC4K4zUVjsM/6ESrBU1ZWz02bNJeJNMAa0hRG4Sd7Jfs4Gp
CkPaPHzEtqgJM3uboJhUbJ8AwIOkUK5yHHgjK0z/1EjCQJybMu7mYtk1iqjsEWPO
yG6GTfNSCgoJsB0dBuw+ZoV98Y6eA6TPdAttDdG6Ma8wYYr2zyog/g08UUAR
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:31 2026 by rpki-client