Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
File:                     DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft (raw, json)
Hash identifier:          35k/g3Le+rVMR9XyganGp+UkNK08zDdk8rAVZjql1jQ=
Subject key identifier:   3F:04:4E:66:88:D2:13:2B:DD:08:AA:FF:4F:8F:52:3A:BC:25:25:93
Authority key identifier: DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA
Certificate issuer:       /CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
Certificate serial:       1220AD5F74ABCF58C37388AB67E8FF5FE6E4D6E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
Manifest number:          017F
Signing time:             Sun 01 Nov 2026 23:07:56 +0000
Manifest this update:     Sun 01 Nov 2026 23:02:56 +0000
Manifest next update:     Thu 05 Nov 2026 23:25:56 +0000
Files and hashes:         1: 323830313a3132363a3a2f34342d3434203d3e20323632353839.roa (hash: 2gWF59Wvy07OOXzScQYgkND9sXbj4I+T9igAkpCJGPk=)
                          2: DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl (hash: 72fdVsifQMooyN9GaJaOOLwxge2+YuxLawqqslrgIio=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 23:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:20:ad:5f:74:ab:cf:58:c3:73:88:ab:67:e8:ff:5f:e6:e4:d6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
        Validity
            Not Before: Nov  1 23:02:56 2026 GMT
            Not After : Nov  5 23:25:56 2026 GMT
        Subject: CN=3F044E6688D2132BDD08AAFF4F8F523ABC252593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:2a:bb:da:23:b1:9f:e0:64:35:5e:68:46:
                    75:bf:a7:b3:41:a9:9f:a1:8d:7e:6d:7a:08:30:97:
                    a0:91:41:f5:ec:d3:f8:02:87:19:86:99:6c:f9:81:
                    1f:0d:e5:b9:fc:8f:cb:12:ae:19:39:35:8a:ec:30:
                    84:db:27:3c:a0:4d:c3:40:5e:be:fa:51:3e:0b:06:
                    c8:be:3a:c1:bc:a8:1f:b8:6a:b3:a7:c2:90:78:de:
                    5f:03:76:b1:e0:1a:e6:e1:9c:a8:be:71:66:62:e9:
                    3f:e4:1d:6d:b6:bc:4a:a4:7e:b3:33:17:c6:f6:29:
                    9a:4f:ef:6d:e8:d8:6c:1c:96:87:06:2e:8e:c5:7a:
                    c3:87:ca:a3:0a:c8:30:47:02:95:a5:a7:65:49:3e:
                    28:15:2e:24:32:3c:43:2e:90:36:3f:8d:1e:c5:1d:
                    cb:71:db:70:c0:55:2c:c3:f3:58:af:72:05:d7:6e:
                    39:b1:15:b7:b9:fc:28:d2:18:17:5e:97:89:d3:a1:
                    52:ac:ab:36:62:56:f5:e0:ac:4e:e5:77:92:11:4a:
                    67:94:0c:bf:8f:2a:55:ee:28:d1:dc:17:ed:32:64:
                    e2:ba:12:9c:f3:60:8e:35:91:ef:bc:db:31:ac:e5:
                    e8:9b:3d:d0:32:fa:d2:a1:10:da:5b:7c:34:91:ea:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:04:4E:66:88:D2:13:2B:DD:08:AA:FF:4F:8F:52:3A:BC:25:25:93
            X509v3 Authority Key Identifier:
                keyid:DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:1d:a0:b5:0d:41:66:6b:b5:8e:de:c1:3c:f3:aa:fd:d2:
         f6:92:f0:d1:65:f4:75:97:6e:64:c0:aa:3d:8f:be:e6:82:29:
         0a:7b:3f:c3:f2:4c:66:e2:3f:f7:04:00:e2:d4:10:3d:96:c9:
         19:33:83:4a:24:d6:12:1d:75:a9:e1:33:60:74:0b:45:64:d3:
         4c:72:f0:17:0d:43:51:42:0a:1c:43:22:c1:c4:55:87:49:47:
         be:e3:b8:60:18:a6:1b:60:4a:14:22:62:40:49:fc:65:f7:bc:
         b9:95:a8:e4:de:f8:9c:c2:99:7b:41:42:bc:9b:f3:53:78:9a:
         d2:95:c1:f1:94:ee:d4:1c:b2:56:f6:31:ba:d1:1d:ab:e1:35:
         5e:d4:c2:1f:ca:6f:0e:a6:5a:98:ac:cc:ec:54:39:1e:3a:e0:
         a3:1d:9c:87:be:be:93:dc:9d:ef:3f:36:90:68:44:ca:94:d2:
         76:4e:44:b6:3e:c7:02:e8:95:c7:1b:f7:7e:6d:d2:ed:92:56:
         be:bf:04:13:d7:c4:24:19:27:e5:d5:aa:01:8a:e9:bb:04:5c:
         2f:14:3b:40:b1:06:fe:e0:d1:62:e1:61:c5:5f:03:4b:c4:e0:
         21:79:42:57:c8:d7:1c:1c:84:f4:b6:01:b7:13:51:96:b5:69:
         12:95:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:22:08 2026 by rpki-client