Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
File:                     85E8329CBFB72C73936DE19616620415214EDD8A.mft (raw, json)
Hash identifier:          O/h7HaFiDNweklPNeihFpre/AcNgZTQt6xANd8UQXb4=
Subject key identifier:   5B:F0:E1:1A:E8:22:00:36:43:65:5C:71:3A:27:AD:F6:9F:9C:DF:A5
Authority key identifier: 85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A
Certificate issuer:       /CN=85E8329CBFB72C73936DE19616620415214EDD8A
Certificate serial:       6969C082AC6EBD64A68958D041390C34C38C8268
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
Manifest number:          D8
Signing time:             Thu 26 Mar 2026 19:32:42 +0000
Manifest this update:     Thu 26 Mar 2026 19:27:42 +0000
Manifest next update:     Wed 01 Apr 2026 17:54:42 +0000
Files and hashes:         1: 323830333a3261303a3a2f33322d3332203d3e203135383330.roa (hash: QfXjR2c5C8SCB602pAa988tt47aRPyXAJnQlthS5Ay0=)
                          2: 85E8329CBFB72C73936DE19616620415214EDD8A.crl (hash: 5dlrIdHBqIM7s4LWonPytfncYf2Qq7pdPS/GhjNpncA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:69:c0:82:ac:6e:bd:64:a6:89:58:d0:41:39:0c:34:c3:8c:82:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85E8329CBFB72C73936DE19616620415214EDD8A
        Validity
            Not Before: Mar 26 19:27:42 2026 GMT
            Not After : Apr  1 17:54:42 2026 GMT
        Subject: CN=5BF0E11AE822003643655C713A27ADF69F9CDFA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:3a:43:c7:cb:ec:6e:d5:9f:61:9e:c8:18:
                    fe:a3:f1:26:35:ba:41:dc:42:09:b5:86:38:70:e8:
                    3d:fc:d0:e7:7d:53:41:c0:4d:03:d7:2f:0a:d5:98:
                    35:80:ce:14:52:97:6d:92:11:f6:50:ab:7d:9f:cc:
                    53:3e:27:39:eb:65:92:1f:4f:e5:78:24:69:a9:81:
                    a1:7f:37:0c:37:6e:ed:b8:ee:87:b7:6a:fa:f6:8b:
                    d6:54:63:0a:b7:ee:c7:35:52:22:1a:95:d8:51:cf:
                    31:f8:8c:79:cb:c4:28:d8:4e:aa:dc:0b:35:00:59:
                    b6:5f:ed:21:54:5f:c0:10:a6:9b:9b:4e:e8:fc:dd:
                    ad:9a:2c:72:72:84:61:6d:63:af:da:e7:16:78:79:
                    a9:64:2f:60:a9:4d:24:83:ad:bf:6a:67:4f:d5:1c:
                    d5:bb:eb:84:29:86:dc:b2:59:3f:b4:f7:d0:4f:e0:
                    43:ee:d3:a2:0c:ba:0f:20:85:6b:71:e6:cf:b5:c6:
                    5c:37:d9:be:67:1a:1c:97:13:8c:88:d0:7a:30:f0:
                    f6:78:6a:42:36:35:65:11:30:67:0b:13:47:58:52:
                    d2:1c:6e:cc:ff:81:9f:c8:3a:bf:6b:51:f0:24:3d:
                    0e:7c:48:7a:b1:8f:30:bc:20:4c:d5:a6:6d:74:34:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F0:E1:1A:E8:22:00:36:43:65:5C:71:3A:27:AD:F6:9F:9C:DF:A5
            X509v3 Authority Key Identifier:
                keyid:85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ec:bd:c1:6b:48:c3:ee:e8:8e:9d:8b:1f:22:ad:6c:9d:3c:
         f9:b8:65:63:da:9f:8e:1b:bc:55:3c:ff:f1:2b:76:8e:25:8d:
         8d:02:57:00:57:13:aa:a8:69:19:b4:e7:63:b4:f8:68:56:a6:
         04:f7:66:db:9e:b4:59:5f:55:93:f4:bd:c9:0e:1f:e2:2b:7f:
         d6:d5:3a:5c:f5:95:b9:7e:ff:50:f0:5b:92:9d:fb:d4:ec:65:
         02:b6:68:fe:e7:ae:65:8b:6b:59:9a:d0:ea:23:27:fa:87:2f:
         c0:3f:6b:72:45:1f:13:af:2a:ec:1d:7b:32:78:90:18:07:35:
         a7:8b:45:e3:27:6a:1c:89:94:c2:67:a9:01:8c:7f:06:48:a5:
         8f:ca:ba:ad:4a:ed:56:86:d4:fc:09:8e:71:d0:67:ba:0b:6f:
         32:19:70:1a:5a:fe:eb:4e:a2:09:be:63:1e:9c:6a:8b:0f:66:
         d2:da:d5:cc:3f:a1:43:34:ea:20:03:c5:18:e3:18:1b:c7:9a:
         3c:bf:be:46:7c:48:bf:9e:e7:e0:c5:60:97:9a:a8:7e:9d:45:
         f2:06:68:a6:35:2a:bb:fe:2c:a9:d2:3d:0c:bb:2d:bd:70:79:
         e1:36:b8:b6:be:fc:16:52:82:cd:06:a8:2e:8a:b0:96:53:c3:
         af:78:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:17:34 2026 by rpki-client