Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
File:                     9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft (raw, json)
Hash identifier:          MefWyjVKLIxwPD8txx5QS7U/PUHsSC+PWvIgzbZKAiw=
Subject key identifier:   43:4A:18:EC:0C:4E:28:BE:28:9F:D1:6D:AA:61:15:4C:92:2C:4B:F5
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Certificate issuer:       /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial:       AF7525C9777B2F77019174E975BBF4BF007C11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
Manifest number:          0129
Signing time:             Fri 17 Oct 2025 02:05:46 +0000
Manifest this update:     Fri 17 Oct 2025 02:00:46 +0000
Manifest next update:     Thu 23 Oct 2025 01:59:46 +0000
Files and hashes:         1: 3139302e3131302e33342e302f32342d3234203d3e20323639393331.roa (hash: jW3b7DYtffEk5waDjmpM5w0Gk/TrDUVL/Z9Fyfljua0=)
                          2: 3139302e3131302e33362e302f32322d3234203d3e20323731393638.roa (hash: UXbK1HFchJtyb4aseQIYkH0EE8WiqLtRivXrqug3Zis=)
                          3: 3139302e3131302e33352e302f32342d3234203d3e20323639393331.roa (hash: N3NJpeUu+N3QzHRpIf5Ye47rEQXnLM5qsupyo3TVLtU=)
                          4: 323830333a653631303a3a2f33322d3438203d3e20323731393435.roa (hash: a7t+zVzbeaN4f4tbA9er0zMetnGFdNu/lk4RYt0RGOM=)
                          5: 3139302e3131302e33322e302f32342d3234203d3e20323731393435.roa (hash: gm817vxyKtB6Cm8ngMyNU7PSsgZoztbT/yUvrWKQ79I=)
                          6: 9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl (hash: CuFKeJj7h2yhqOos8smHtaI5/EU6+uegAXVlBnoxSC0=)
                          7: 3139302e3131302e33332e302f32342d3234203d3e20323731393435.roa (hash: v0I7Ssh6jKhM9xb7tu2Vv8kmST8W+VnnY+pYA7DcA6M=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 01:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            af:75:25:c9:77:7b:2f:77:01:91:74:e9:75:bb:f4:bf:00:7c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
        Validity
            Not Before: Oct 17 02:00:46 2025 GMT
            Not After : Oct 23 01:59:46 2025 GMT
        Subject: CN=434A18EC0C4E28BE289FD16DAA61154C922C4BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:16:4d:c9:f1:1a:7a:84:ca:6e:c9:d7:f7:fd:
                    47:48:9d:d3:d5:61:aa:ef:71:f1:62:5a:a3:28:e3:
                    3c:a0:31:94:30:23:06:2e:c5:f8:8d:b9:dc:ef:62:
                    1a:45:a1:d3:d0:04:f3:78:c2:c4:5b:98:20:8a:16:
                    50:43:a8:ec:a6:86:8d:48:8c:ad:70:87:99:90:f3:
                    a1:23:43:08:fd:52:b1:c3:f4:8e:4c:55:42:97:dd:
                    74:5b:fa:8a:b8:fa:5e:42:b9:69:5a:04:d0:d2:ff:
                    5c:4c:d6:b8:53:ad:e5:f7:10:ab:0b:a0:5a:13:fa:
                    34:d1:c0:fd:99:14:04:d7:11:52:19:04:1f:fb:74:
                    ee:71:f7:1f:13:93:36:68:94:0e:74:49:cc:63:3e:
                    fe:ab:42:e6:8b:bc:31:bb:b7:a8:48:bc:ce:54:fa:
                    ad:5c:3f:89:bb:50:ad:82:9c:47:51:74:0c:6c:2a:
                    87:53:c9:3f:84:84:f5:9a:ee:52:4c:bd:3b:ce:a8:
                    25:69:02:0a:2e:27:aa:9d:a9:22:36:fb:39:ec:dd:
                    0a:8c:71:3b:01:d4:8a:47:30:7e:b2:98:41:91:95:
                    90:db:ac:fa:b8:c6:b2:da:ce:02:bc:c1:7c:b2:db:
                    d1:11:47:66:75:25:27:60:d2:4e:66:61:02:af:c8:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4A:18:EC:0C:4E:28:BE:28:9F:D1:6D:AA:61:15:4C:92:2C:4B:F5
            X509v3 Authority Key Identifier:
                keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:cf:68:a4:64:15:e2:d1:df:7e:48:ae:0b:2a:44:f1:9c:52:
         02:be:03:4c:7f:c3:f5:ab:a6:86:9d:28:bf:3e:ec:26:0d:93:
         26:1c:59:02:dd:cd:3d:42:49:6a:b9:49:a2:bd:4e:94:31:c5:
         f0:40:4a:90:7a:96:c3:f1:67:83:94:da:6f:7a:95:ab:f0:50:
         3c:99:57:16:9f:c2:00:6a:2e:2b:ef:91:c9:88:4f:ed:a3:a4:
         58:db:eb:c4:12:45:d9:ec:bf:1e:61:69:3a:70:11:0d:55:9e:
         6b:0f:0e:24:9a:a9:37:c2:06:28:4e:4f:85:bf:a8:78:64:33:
         51:8e:98:7b:d5:b5:1b:e0:f1:42:f4:e1:6f:95:59:cd:66:35:
         d2:59:9d:f1:b5:7a:ec:29:af:68:32:68:88:09:95:3b:2b:76:
         30:72:a6:22:f3:40:4a:dc:fe:d5:6b:33:85:40:2b:d4:1f:e4:
         d9:f5:97:b4:bb:5f:ab:db:59:48:13:d9:1b:80:4f:48:7e:99:
         0d:46:76:9f:97:20:a3:15:cc:c5:c0:b4:05:cb:c4:f5:68:be:
         95:42:12:ec:63:21:d5:d5:6b:12:15:18:72:30:6b:08:23:40:
         6a:b5:5d:1c:47:58:b7:40:41:1a:c8:83:09:4e:a7:b3:be:d0:
         d2:77:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:21:25 2025 by rpki-client