Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft
File:                     DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft (raw, json)
Hash identifier:          wcAEY0vtFptkWJtCwq71WAwtZZSxJvcuGkJDbZZG0gw=
Subject key identifier:   C5:DE:17:BC:F5:4D:94:78:9F:11:5C:AD:42:51:29:33:4F:A9:C5:8F
Authority key identifier: DC:9A:CC:F7:76:CB:F0:37:0B:3B:A2:78:3B:A7:A4:A1:14:07:24:D1
Certificate issuer:       /CN=DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1
Certificate serial:       038E1CBC2F3AF6B73555291932FC87918A5911C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft
Manifest number:          0152
Signing time:             Wed 25 Mar 2026 00:12:25 +0000
Manifest this update:     Wed 25 Mar 2026 00:07:25 +0000
Manifest next update:     Mon 30 Mar 2026 06:44:25 +0000
Files and hashes:         1: 3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa (hash: GVyPZ8WrJf/u0Cb7m2wRUf9Sb2+fJT9ZESKUAf2RCTY=)
                          2: DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl (hash: SX9FFwi989vlIWAtuhnZSauVNZpgz5f6PTGyoKh7Z34=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8e:1c:bc:2f:3a:f6:b7:35:55:29:19:32:fc:87:91:8a:59:11:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1
        Validity
            Not Before: Mar 25 00:07:25 2026 GMT
            Not After : Mar 30 06:44:25 2026 GMT
        Subject: CN=C5DE17BCF54D94789F115CAD425129334FA9C58F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:83:03:cc:bd:71:22:f1:74:3b:fd:23:43:
                    14:97:4f:0f:e9:b5:3d:73:3a:51:ba:bb:d8:4a:96:
                    e6:2c:53:36:1d:51:59:90:12:24:9a:a8:bb:ce:86:
                    6b:f4:86:a8:7d:43:f4:f9:42:bd:10:92:1b:31:31:
                    5e:d2:20:0e:f0:b9:ad:82:3c:b3:9e:c0:49:fc:c7:
                    36:bf:b1:df:bf:57:28:f6:d2:16:a3:0f:42:eb:0b:
                    f1:99:b7:11:13:22:00:b7:20:00:dd:37:36:b2:d6:
                    c8:0b:85:4f:d0:8e:30:be:ad:93:dd:4b:02:b2:45:
                    26:9b:8c:c6:d0:a2:a1:5a:34:e7:82:55:96:8c:4f:
                    a8:99:60:07:86:8e:e9:c3:2b:25:3e:6b:fb:ac:a1:
                    4d:41:73:2f:e3:a8:b9:03:6c:43:51:0c:d5:a7:70:
                    4e:94:3a:60:ad:72:24:40:f1:02:e8:d0:17:18:7c:
                    ce:92:b5:aa:77:0c:9e:39:61:37:8e:e8:37:45:e2:
                    53:c7:5b:9f:60:1a:5f:48:f6:fe:70:b8:8f:dc:16:
                    80:b2:c6:bb:12:a2:b4:2c:8d:52:4c:22:9d:61:4a:
                    33:d8:32:52:00:ea:01:5d:63:6d:7b:4e:a2:ef:5e:
                    d9:bb:fb:5c:3b:da:b8:41:dd:f4:e9:04:96:72:10:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DE:17:BC:F5:4D:94:78:9F:11:5C:AD:42:51:29:33:4F:A9:C5:8F
            X509v3 Authority Key Identifier:
                keyid:DC:9A:CC:F7:76:CB:F0:37:0B:3B:A2:78:3B:A7:A4:A1:14:07:24:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d7:39:1a:06:a4:9a:9f:e3:5b:97:24:d2:95:1f:f6:e2:c6:
         2c:76:54:bc:03:c6:f3:86:3a:8d:56:9c:35:9e:13:81:07:5c:
         7b:ff:95:25:28:82:ab:6f:45:04:a1:6f:11:87:a1:8d:ee:fe:
         a2:e2:12:d9:a5:87:0a:ab:07:58:42:f1:2f:49:f7:8a:f3:7b:
         02:01:e9:e1:79:3a:bc:6d:e5:22:1a:e1:2c:76:2c:6a:fd:e9:
         97:3a:f2:d8:03:33:bf:23:86:8b:17:43:c8:2a:68:a0:91:91:
         66:db:4b:2f:40:79:32:b5:11:0d:f8:2f:62:83:ca:df:13:80:
         1b:09:a5:70:72:92:6c:9d:2f:1d:ce:c8:21:e8:8c:e8:aa:a8:
         b2:9c:ad:d8:b9:7c:c0:2e:5a:14:42:08:e1:3f:94:70:e2:ec:
         da:5e:ac:62:60:5e:e3:bc:d6:0e:8e:b9:45:2a:f7:f6:8d:78:
         83:25:71:cc:4f:34:d3:a5:af:2e:85:34:75:06:6f:96:63:ba:
         f2:f8:93:0a:49:13:0d:24:f6:04:f6:d1:5e:08:29:18:99:f9:
         51:e0:37:84:8a:57:75:03:d7:90:50:55:6f:cf:a0:9e:fe:f0:
         1a:45:aa:d0:5c:86:02:ce:1f:ec:54:61:41:c7:18:e4:ea:9b:
         b9:16:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:11:53 2026 by rpki-client