Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.mft
File:                     9B15149013FBA3D5703129A72BE8B0E44426BC8F.mft (raw, json)
Hash identifier:          6XGLhKOaL6kvBBnt5HcCi2oFdB/acLyRZTHXQZk+Vts=
Subject key identifier:   D0:EC:D6:00:23:00:FD:A2:26:20:B6:0F:33:72:BA:64:19:90:F6:2C
Authority key identifier: 9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F
Certificate issuer:       /CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
Certificate serial:       0425E77E60998F89F1E4CDC3E8CE6DEC80C8A83F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.mft
Manifest number:          012F
Signing time:             Mon 20 Oct 2025 04:49:47 +0000
Manifest this update:     Mon 20 Oct 2025 04:44:47 +0000
Manifest next update:     Sat 25 Oct 2025 03:07:47 +0000
Files and hashes:         1: 3137302e302e38342e302f32342d3234203d3e20323634373032.roa (hash: 5PbavwRMqL+gGbGULsZlDJJlOgeEUJLF4Ub7gA2mrHU=)
                          2: 323830333a6234303a3a2f33322d3438203d3e20323634373032.roa (hash: /g5OJ1neY/Tu6t2+QHWk22lrI/Ti61leRWmKBsZ4Pn4=)
                          3: 3137302e302e38362e302f32342d3234203d3e20323634373032.roa (hash: rhRvlvWM79ssEbX4tOw/QgqDDNOkJLuJ9os6YGCXMpM=)
                          4: 3137302e302e38372e302f32342d3234203d3e20323634373032.roa (hash: CEdqt2x7pDUVB6Qe5668TRmBKhCY9nQvQhc+R0+OQ5k=)
                          5: 3137302e302e38352e302f32342d3234203d3e20323634373032.roa (hash: lr3IwDDSeLIiWB9mPUZITEsFKuviRZ4D0vV5EPg3048=)
                          6: 9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl (hash: brgb/hGWrjtWseP/Twdtfws/w5zYsrXXsKq7wE9m/Ms=)
                          7: 3137302e302e38342e302f32322d3234203d3e20323634373032.roa (hash: v6IfzHMrSvPbOREtSXnSbC/cRX4pQqSnptxd7/f/tSw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:25:e7:7e:60:99:8f:89:f1:e4:cd:c3:e8:ce:6d:ec:80:c8:a8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
        Validity
            Not Before: Oct 20 04:44:47 2025 GMT
            Not After : Oct 25 03:07:47 2025 GMT
        Subject: CN=D0ECD6002300FDA22620B60F3372BA641990F62C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:b2:21:a5:ad:4d:2b:b9:84:77:5c:01:29:
                    0c:57:6e:a4:e9:07:1c:a9:60:1b:47:b3:6c:72:6f:
                    1f:3b:4d:c2:ce:42:d3:46:f2:ae:b2:b7:a5:24:22:
                    ca:0e:9e:f1:d7:c6:57:0e:7c:81:32:e8:01:5c:e7:
                    0f:cb:fb:c3:9e:aa:27:7b:b8:a7:b0:5d:c2:f4:08:
                    ca:63:70:52:e3:f0:31:d1:7d:1c:43:6d:fe:88:b0:
                    25:a0:8a:35:e8:10:77:34:9b:94:97:47:f7:b8:62:
                    14:75:ae:ee:ab:39:92:ec:0a:be:75:d6:f4:8e:49:
                    dd:88:0b:9e:45:08:cb:20:7c:c8:39:4d:83:e1:5a:
                    9b:b4:5f:7d:91:d2:4f:a4:59:1b:35:3f:61:31:8d:
                    0e:e8:80:28:0c:73:15:8b:f2:29:aa:98:c8:d2:a4:
                    12:e8:af:1b:2c:86:a3:ca:63:2e:ea:2f:25:04:9e:
                    b1:29:65:38:93:bc:cf:38:ea:43:10:72:b0:13:aa:
                    10:08:75:aa:5f:17:7f:0f:bb:93:a0:52:b6:eb:7d:
                    9d:78:b4:e4:a6:9b:85:82:aa:d0:c0:12:e8:29:d5:
                    d2:a7:67:89:de:bf:92:d9:8f:76:f2:d9:db:ed:5a:
                    14:da:de:57:c1:59:ff:08:45:7a:a4:16:d8:c1:00:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EC:D6:00:23:00:FD:A2:26:20:B6:0F:33:72:BA:64:19:90:F6:2C
            X509v3 Authority Key Identifier:
                keyid:9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:37:6c:5d:ad:f3:ce:db:cc:07:70:0b:a3:69:ac:a8:e2:ff:
         b2:78:c2:ef:c4:cf:2b:2c:4c:7b:93:ef:9c:ee:01:c3:7e:76:
         11:64:9c:ee:df:ed:66:29:f8:07:d8:e8:cd:24:10:62:de:b6:
         5e:e6:31:ba:1f:34:c3:12:aa:d6:d6:b1:01:09:ef:f3:c0:ec:
         c1:ed:db:85:f1:62:7c:20:da:d1:f5:62:c6:65:b1:f9:be:5b:
         b8:2c:af:e1:51:e5:e7:6d:3e:89:e1:9e:a1:da:39:16:a7:e9:
         37:a2:5e:00:45:fd:23:7d:df:45:22:d4:bc:2f:d0:48:85:86:
         cd:29:3a:9c:b5:80:55:01:51:10:9f:13:a2:26:eb:3e:31:01:
         2b:1f:15:39:8a:0f:59:03:27:f1:c4:85:65:06:c9:5f:f1:f9:
         9b:d0:18:34:bb:c5:5f:ed:4e:b5:5d:2a:15:2b:1d:0d:bc:05:
         73:3f:4c:46:6a:8e:32:d7:14:08:d7:e7:40:f0:66:55:7c:67:
         61:1c:07:cf:10:6a:46:ee:44:4f:7d:14:f6:76:7a:e5:da:07:
         8a:12:f7:21:eb:f6:a8:04:49:41:38:4a:5c:10:cb:27:e7:5b:
         4d:0d:6e:ed:f8:61:bf:ab:db:ef:39:96:28:32:4f:d1:eb:bd:
         6f:d8:70:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:15:42 2025 by rpki-client