Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CFCC3F19661CC325C61E91B09D3EF848428EAD8D48DBF32C2C4E11B272F8B54/0/A85121A914974F76B1B5E744B4D7E0944630BA68.mft
File:                     A85121A914974F76B1B5E744B4D7E0944630BA68.mft (raw, json)
Hash identifier:          S0JS+6IHzYrjVZKKMgZgcyGwehNtAAsd855dxn04dmE=
Subject key identifier:   06:B8:F4:FF:EE:77:E9:06:44:9A:E6:A2:61:04:15:1E:AB:2A:9B:23
Authority key identifier: A8:51:21:A9:14:97:4F:76:B1:B5:E7:44:B4:D7:E0:94:46:30:BA:68
Certificate issuer:       /CN=A85121A914974F76B1B5E744B4D7E0944630BA68
Certificate serial:       21F16BC3B4067911E6793E9F70638250579541BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85121A914974F76B1B5E744B4D7E0944630BA68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CFCC3F19661CC325C61E91B09D3EF848428EAD8D48DBF32C2C4E11B272F8B54/0/A85121A914974F76B1B5E744B4D7E0944630BA68.mft
Manifest number:          3D
Signing time:             Thu 26 Mar 2026 10:07:18 +0000
Manifest this update:     Thu 26 Mar 2026 10:02:18 +0000
Manifest next update:     Wed 01 Apr 2026 05:23:18 +0000
Files and hashes:         1: A85121A914974F76B1B5E744B4D7E0944630BA68.crl (hash: /eGdTottIdXpY1fgYLDrRxypeIiiN8FeSPV58tu5dzg=)
                          2: 323830333a623764303a3a2f33322d3438203d3e20323734323437.roa (hash: jjolSWHFSjbBtgBdrUGis/Ef0Kt54HH8q72I7bZ6j3Y=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CFCC3F19661CC325C61E91B09D3EF848428EAD8D48DBF32C2C4E11B272F8B54/0/A85121A914974F76B1B5E744B4D7E0944630BA68.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CFCC3F19661CC325C61E91B09D3EF848428EAD8D48DBF32C2C4E11B272F8B54/0/A85121A914974F76B1B5E744B4D7E0944630BA68.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85121A914974F76B1B5E744B4D7E0944630BA68.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f1:6b:c3:b4:06:79:11:e6:79:3e:9f:70:63:82:50:57:95:41:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85121A914974F76B1B5E744B4D7E0944630BA68
        Validity
            Not Before: Mar 26 10:02:18 2026 GMT
            Not After : Apr  1 05:23:18 2026 GMT
        Subject: CN=06B8F4FFEE77E906449AE6A26104151EAB2A9B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:82:c0:a3:e0:b7:4d:58:dd:49:24:75:f4:
                    6f:29:22:cc:d1:74:ee:a5:dc:12:b9:f7:bb:05:60:
                    76:c4:ba:76:0b:6a:13:9a:30:52:4b:75:03:bc:fc:
                    67:76:f6:00:40:08:e9:94:44:eb:73:af:3a:db:9b:
                    9f:de:0a:7b:59:64:2e:29:bc:34:6a:36:1a:a6:3f:
                    ab:08:81:2b:43:95:19:d7:80:56:a9:8d:b9:fa:bb:
                    6c:86:50:51:a9:a8:71:8a:f5:6d:5f:56:5d:97:b0:
                    a9:51:f7:05:eb:4f:ee:38:81:4b:e4:41:67:e2:33:
                    73:d4:15:69:5a:8d:f1:78:91:6d:43:57:53:35:df:
                    cc:38:6d:77:71:56:6a:5b:4b:18:9c:ad:77:2d:96:
                    bf:6d:63:66:20:b5:c1:20:03:b6:79:9d:15:21:5c:
                    36:06:f0:99:d8:87:cd:ce:e5:94:6e:c0:18:6c:4d:
                    27:ef:f3:23:0e:41:72:ed:73:02:02:24:f1:0d:dc:
                    2b:26:fa:b8:de:b0:5b:69:4d:21:1f:00:e5:a6:4b:
                    85:8a:d5:ec:9d:b3:ff:d9:12:ae:25:9b:a1:6d:d6:
                    42:33:b3:5a:a0:d5:ae:60:c7:ed:2c:bf:ee:38:c2:
                    52:f2:fe:5a:22:6b:2b:70:82:70:2e:e9:63:a4:e9:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B8:F4:FF:EE:77:E9:06:44:9A:E6:A2:61:04:15:1E:AB:2A:9B:23
            X509v3 Authority Key Identifier:
                keyid:A8:51:21:A9:14:97:4F:76:B1:B5:E7:44:B4:D7:E0:94:46:30:BA:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CFCC3F19661CC325C61E91B09D3EF848428EAD8D48DBF32C2C4E11B272F8B54/0/A85121A914974F76B1B5E744B4D7E0944630BA68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85121A914974F76B1B5E744B4D7E0944630BA68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CFCC3F19661CC325C61E91B09D3EF848428EAD8D48DBF32C2C4E11B272F8B54/0/A85121A914974F76B1B5E744B4D7E0944630BA68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:be:8f:cb:f5:cb:c5:9f:9f:7e:41:5b:1b:fc:d7:0a:6f:02:
         86:75:93:0f:eb:cf:42:7c:18:1a:48:77:54:37:e4:88:69:42:
         d2:85:d3:5e:b1:2f:77:f5:d2:7b:3a:2a:6b:ef:41:6a:1a:f6:
         db:3a:ff:5f:df:f9:f1:c3:e0:00:67:2c:58:65:9b:26:82:88:
         0a:24:b3:d2:8f:2f:89:4e:48:b6:25:63:b7:45:a0:ba:e1:2d:
         7a:db:f2:ea:49:4b:59:7c:3c:4e:87:94:ed:10:43:3b:f7:b1:
         94:e9:2d:a1:ed:aa:6d:dc:e9:4e:30:1d:98:36:a6:2a:54:ee:
         31:d4:b9:70:96:5c:9a:2e:a6:d0:f5:2d:ac:d4:e8:db:09:fb:
         87:a0:ac:34:9c:81:c4:92:fb:9c:71:6b:8b:b8:67:f9:67:87:
         9e:8e:7c:ee:94:30:bf:aa:75:f4:c7:56:5d:08:49:22:68:fd:
         79:38:5f:2a:0d:3d:6a:40:9c:a4:bc:ff:65:b0:59:f8:42:ad:
         c5:c1:d9:85:f0:25:50:39:f5:cf:1f:77:ce:7f:6f:ff:4b:53:
         b8:a9:22:e5:91:1e:36:06:99:0d:5e:bc:4e:e7:69:a9:53:a4:
         25:cc:ef:34:cf:4e:56:96:05:e2:de:11:fd:b7:90:4a:ec:cf:
         61:3c:d1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:24:55 2026 by rpki-client