Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
File:                     9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft (raw, json)
Hash identifier:          fNcVRl1F9Jky8lXdC9F+c37sMl8+9r1Ws2jFn6kyDhc=
Subject key identifier:   44:59:D6:C5:F4:F3:4F:A4:42:65:1E:61:1D:4D:D2:2C:5A:7C:D2:E8
Authority key identifier: 9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF
Certificate issuer:       /CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
Certificate serial:       28E0D3DBBFF37D096673B5F7C041EDF680F47E5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
Manifest number:          01AA
Signing time:             Thu 23 Jul 2026 12:41:44 +0000
Manifest this update:     Thu 23 Jul 2026 12:36:44 +0000
Manifest next update:     Tue 28 Jul 2026 16:19:44 +0000
Files and hashes:         1: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl (hash: rvytRIwtIzL6dlUoj6Tl9KHDy5NbW37R00fgw8lb2X0=)
                          2: 34352e3233322e3132302e302f32322d3234203d3e203237373335.roa (hash: ZdahpsYhKxImC1xoOj9copAjk7XNZ3lvcTlbe0B1BwA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e0:d3:db:bf:f3:7d:09:66:73:b5:f7:c0:41:ed:f6:80:f4:7e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
        Validity
            Not Before: Jul 23 12:36:44 2026 GMT
            Not After : Jul 28 16:19:44 2026 GMT
        Subject: CN=4459D6C5F4F34FA442651E611D4DD22C5A7CD2E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:59:89:c3:a3:df:8e:35:4b:60:d4:4f:ca:8b:
                    8b:06:9c:75:6b:71:68:19:2a:6a:b1:21:99:a8:9c:
                    1a:6d:1f:39:7f:f7:f6:75:2f:54:42:94:05:f3:40:
                    18:f4:d1:52:8a:df:78:cb:cc:3b:e7:80:74:de:30:
                    07:ba:75:28:c9:ce:87:5e:ab:96:36:d4:ff:4a:04:
                    a7:d7:ec:03:53:c8:ff:12:87:fa:60:8e:5a:df:ff:
                    b3:40:ac:3d:db:3f:06:68:20:8c:05:ed:16:1b:6a:
                    54:09:d3:c0:f4:87:b4:ac:3d:bc:3d:82:fc:ea:de:
                    f4:2f:55:dd:4a:f2:21:f8:31:20:9c:b8:69:e6:cb:
                    51:31:45:9c:50:5f:8d:57:7e:24:10:f1:84:9c:86:
                    72:ff:23:62:8e:11:ce:39:ba:5c:53:f4:76:76:0a:
                    cc:bd:87:f3:37:18:57:cb:ac:d9:46:fe:73:0c:c6:
                    2f:9e:83:4b:3b:a3:a7:66:13:fd:76:73:8b:1d:8a:
                    fc:d3:a5:c0:60:22:5c:8f:ec:32:e4:57:6d:93:af:
                    55:5c:2d:0b:80:de:e1:30:bb:47:23:f6:f1:05:0d:
                    bf:2c:b7:8a:ef:d9:76:6f:00:d6:09:1d:a0:38:4b:
                    10:b1:05:bb:3b:d0:f1:1e:60:b1:30:78:d1:55:0a:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:59:D6:C5:F4:F3:4F:A4:42:65:1E:61:1D:4D:D2:2C:5A:7C:D2:E8
            X509v3 Authority Key Identifier:
                keyid:9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:20:00:3f:01:cd:f1:98:7d:92:97:20:ca:e8:20:df:e3:9a:
         9f:36:22:da:7d:38:e2:be:80:b3:e4:21:55:76:73:5b:cc:fe:
         9c:db:be:b6:b7:8f:d9:12:a9:d0:b2:b5:9f:98:66:41:fc:04:
         c7:a0:99:c9:49:40:0b:e7:eb:16:a4:54:11:39:6f:d8:ce:ce:
         e5:2e:1d:73:be:02:7c:b3:75:46:d9:ea:c5:b5:2f:23:6c:77:
         0c:0b:a1:a1:04:72:41:ce:0e:2f:1c:84:1f:9c:ab:3f:79:2e:
         9b:7f:35:9d:c7:df:03:1f:f7:02:36:d7:5c:33:36:87:4a:38:
         2e:1f:24:98:ed:a4:a4:29:aa:75:bb:a7:98:dc:90:eb:e1:27:
         b6:02:4d:6e:1a:66:67:e3:7b:b1:e9:c3:08:fb:85:30:69:c0:
         81:b7:53:d1:a6:76:e4:07:18:df:5a:43:d3:44:29:1c:34:0e:
         c0:d0:e4:8a:26:6f:a0:f5:4d:02:5f:65:35:7a:92:4b:1d:ec:
         59:ba:49:c9:d0:e8:97:64:8e:fe:4e:cb:99:e9:02:a4:4d:23:
         ba:50:dd:8f:ec:a5:cc:34:88:1b:d2:8a:9b:0a:fc:1a:d8:7e:
         5a:1a:f4:be:2c:ca:ca:d3:ae:74:97:44:e2:5c:00:04:3d:db:
         78:87:cb:3f
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUKODT27/zfQlmc7X3wEHt9oD0flowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURDM0M5QjIwQkU2NzE0MTBBNDZFRTdCMTQ5MUQxRURG
Q0Y4RDNGRjAeFw0yNjA3MjMxMjM2NDRaFw0yNjA3MjgxNjE5NDRaMDMxMTAvBgNV
BAMTKDQ0NTlENkM1RjRGMzRGQTQ0MjY1MUU2MTFENEREMjJDNUE3Q0QyRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjWYnDo9+ONUtg1E/Ki4sGnHVr
cWgZKmqxIZmonBptHzl/9/Z1L1RClAXzQBj00VKK33jLzDvngHTeMAe6dSjJzode
q5Y21P9KBKfX7ANTyP8Sh/pgjlrf/7NArD3bPwZoIIwF7RYbalQJ08D0h7SsPbw9
gvzq3vQvVd1K8iH4MSCcuGnmy1ExRZxQX41XfiQQ8YSchnL/I2KOEc45ulxT9HZ2
Csy9h/M3GFfLrNlG/nMMxi+eg0s7o6dmE/12c4sdivzTpcBgIlyP7DLkV22Tr1Vc
LQuA3uEwu0cj9vEFDb8st4rv2XZvANYJHaA4SxCxBbs70PEeYLEweNFVCoEJAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQURFnWxfTzT6RCZR5hHU3SLFp80ugwHwYDVR0j
BBgwFoAUncPJsgvmcUEKRu57FJHR7fz40/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTI1NjY2RkIzQkQ2NzY4QTJEODg1MDhCOUJFMTdENjQz
NTAzRjBGQkRCRjc2NTMwNjY1QjIyMkIxNEMxNUY1LzAvOURDM0M5QjIwQkU2NzE0
MTBBNDZFRTdCMTQ5MUQxRURGQ0Y4RDNGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85REMzQzlCMjBCRTY3MTQxMEE0
NkVFN0IxNDkxRDFFREZDRjhEM0ZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0UyNTY2NkZCM0JENjc2OEEyRDg4NTA4QjlCRTE3RDY0MzUwM0YwRkJE
QkY3NjUzMDY2NUIyMjJCMTRDMTVGNS8wLzlEQzNDOUIyMEJFNjcxNDEwQTQ2RUU3
QjE0OTFEMUVERkNGOEQzRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdIAA/Ac3xmH2SlyDK6CDf45qf
NiLafTjivoCz5CFVdnNbzP6c2762t4/ZEqnQsrWfmGZB/ATHoJnJSUAL5+sWpFQR
OW/Yzs7lLh1zvgJ8s3VG2erFtS8jbHcMC6GhBHJBzg4vHIQfnKs/eS6bfzWdx98D
H/cCNtdcMzaHSjguHySY7aSkKap1u6eY3JDr4Se2Ak1uGmZn43ux6cMI+4UwacCB
t1PRpnbkBxjfWkPTRCkcNA7A0OSKJm+g9U0CX2U1epJLHexZuknJ0OiXZI7+TsuZ
6QKkTSO6UN2P7KXMNIgb0oqbCvwa2H5aGvS+LMrK0650l0TiXAAEPdt4h8s/
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:21:50 2026 by rpki-client