Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
File:                     958AE74C7555B3A115DBFFC8840395CE219F59B5.mft (raw, json)
Hash identifier:          OO6B7t1R/VeGvyWAhTBxjrm3HYFmdf8SNQ4SagJnYlg=
Subject key identifier:   67:4C:FB:B0:C5:D6:83:83:33:D7:69:FF:82:F8:1B:38:AD:9F:11:C2
Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
Certificate issuer:       /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Certificate serial:       2459642312FAE48BF3E91B744376D26C3E24D298
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
Manifest number:          0178
Signing time:             Tue 24 Mar 2026 14:57:06 +0000
Manifest this update:     Tue 24 Mar 2026 14:52:06 +0000
Manifest next update:     Mon 30 Mar 2026 02:18:06 +0000
Files and hashes:         1: 3139322e3134312e34302e302f32322d3232203d3e20323635373934.roa (hash: FCoAIocO5oKtXcehWvYy4pR7yZw67+zx1nh8UPM4Vs4=)
                          2: 3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa (hash: +xO6/Zn+vZMoLKnTfbyVZCSQQbfrdZMp0nWinEhlGJ0=)
                          3: 3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa (hash: KafqkAv1fr4Tczntzi5UwRCu2+uE5zhowlef9adb0Ow=)
                          4: 323830333a653032303a3a2f33322d3332203d3e20323635373934.roa (hash: qApVDJT+qIQROxDXDK2ciPAG+Rmy7hPtC+M8SoV0UUE=)
                          5: 3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa (hash: Uc3ACxRmCIq3Xv/77Abdjq3E9UO4asZ9RdbTtrQesCg=)
                          6: 3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa (hash: d6K69gQTOuI40bnxgIBoJ8LedRgYZhbRVBU2I5Mes0c=)
                          7: 958AE74C7555B3A115DBFFC8840395CE219F59B5.crl (hash: eqpV+LDpSyTB9f63MQyvn6+hSDQ5qF127HhWUU943iw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 02:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:59:64:23:12:fa:e4:8b:f3:e9:1b:74:43:76:d2:6c:3e:24:d2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
        Validity
            Not Before: Mar 24 14:52:06 2026 GMT
            Not After : Mar 30 02:18:06 2026 GMT
        Subject: CN=674CFBB0C5D6838333D769FF82F81B38AD9F11C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:11:c8:8a:3d:10:32:77:e4:51:87:a7:4d:
                    1e:b2:17:6c:83:63:20:38:d0:76:55:64:99:65:2d:
                    89:c2:99:a5:a2:49:ea:c0:2b:f5:4d:65:01:ef:50:
                    fe:93:52:e5:aa:24:20:00:10:99:43:aa:16:e3:3c:
                    b5:c2:24:05:5b:b8:7f:f8:f2:bf:da:bf:14:dc:e2:
                    2a:8b:42:aa:ff:e1:27:1e:1e:65:74:2e:be:d4:86:
                    1e:83:e9:79:59:31:c3:25:1e:74:46:5d:ec:8e:3d:
                    37:79:f4:b5:9d:27:2f:de:e3:d7:2f:b7:20:7e:93:
                    ed:f8:c3:00:1c:5e:f8:9a:39:1b:de:6d:2a:59:68:
                    72:75:3a:08:41:64:b8:d7:fe:c2:d9:27:aa:e5:b1:
                    de:9a:40:11:a9:37:7a:a8:d8:b9:7e:23:5c:81:da:
                    1b:78:18:e0:f3:12:0a:46:3f:56:a5:d8:a3:8d:0c:
                    62:19:81:17:26:1c:61:6f:b0:78:fe:e1:6d:a9:9e:
                    e0:85:3a:7c:85:aa:b5:4a:f5:84:f6:fe:bf:7b:de:
                    e3:7b:89:43:96:b2:b1:fa:b7:f9:44:8a:f9:a2:be:
                    7e:a6:e6:8e:fe:6a:b0:ea:ac:39:25:27:79:d6:fa:
                    0c:ac:e3:4f:23:ca:c9:00:d5:e3:79:09:39:5e:d7:
                    83:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4C:FB:B0:C5:D6:83:83:33:D7:69:FF:82:F8:1B:38:AD:9F:11:C2
            X509v3 Authority Key Identifier:
                keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:21:c0:c9:93:be:72:67:39:01:a0:6d:23:bf:99:d9:54:
         2d:c3:8a:94:23:b4:28:54:bf:6c:19:d6:55:92:eb:da:e6:4b:
         d8:43:27:f0:27:a9:81:76:36:44:7c:fc:59:63:4f:b6:41:bc:
         4b:93:29:eb:9b:23:48:62:b3:f6:2d:6e:91:a5:09:f5:70:c2:
         4c:e9:5b:dd:02:6f:28:09:e9:bf:39:a0:b4:0b:25:b9:05:6f:
         0d:20:35:ae:b6:a2:9d:7b:46:39:16:81:11:6c:72:85:28:2b:
         53:e6:dd:70:e7:fa:9c:8b:30:1e:58:53:9c:20:41:45:2a:fd:
         84:8a:51:41:3d:20:63:ab:f0:1e:a1:6f:c7:d7:19:bc:e9:58:
         5f:4f:b6:8c:bf:f2:0c:f4:c9:82:5f:5e:b2:e1:47:9c:a7:a1:
         c0:e6:f2:21:0b:9c:ed:69:a9:b2:22:ea:d5:68:71:05:86:5c:
         36:41:05:28:5e:56:a1:3c:81:a9:fa:80:3f:40:ee:0e:0c:7f:
         3e:21:2a:d4:bb:4c:06:8c:2f:d7:c2:2a:51:fd:f9:1f:cd:8e:
         82:00:a1:5d:25:9b:3c:8d:b5:9d:de:09:bf:78:63:c0:c0:cd:
         6a:c4:ff:f8:b7:6c:f4:0e:fe:0d:15:50:2a:1a:4d:ff:32:bf:
         9c:16:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:39:11 2026 by rpki-client