Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
File:                     20FD70DC301FF93D288ED851C3A69B22D7B04220.mft (raw, json)
Hash identifier:          ekVfDjDqZIk+mTfHJDwcbKaDmf4x3Xn18iaVULJWY1o=
Subject key identifier:   AF:F9:B5:00:FD:97:CC:A1:CB:4E:81:C1:59:5E:51:5C:76:D8:D7:E1
Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20
Certificate issuer:       /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220
Certificate serial:       054FD14F253F20D1845A556569A0782447DE51D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
Manifest number:          01B1
Signing time:             Fri 24 Jul 2026 18:01:34 +0000
Manifest this update:     Fri 24 Jul 2026 17:56:34 +0000
Manifest next update:     Wed 29 Jul 2026 01:33:34 +0000
Files and hashes:         1: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (hash: g8hHWzP4kDSiOiSHBMQM7MYWGMPCqeG59pSNv4PvdWU=)
                          2: 20FD70DC301FF93D288ED851C3A69B22D7B04220.crl (hash: BVV2GY2LAe1XNrtxXav3aw8gjONkVUAVtkwqp5Q8zr0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4f:d1:4f:25:3f:20:d1:84:5a:55:65:69:a0:78:24:47:de:51:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220
        Validity
            Not Before: Jul 24 17:56:34 2026 GMT
            Not After : Jul 29 01:33:34 2026 GMT
        Subject: CN=AFF9B500FD97CCA1CB4E81C1595E515C76D8D7E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:3a:83:9d:c9:8b:69:11:4f:ac:58:97:e9:
                    71:e4:b8:89:11:30:b9:08:12:e1:66:d8:f8:16:13:
                    f4:cb:8c:aa:6c:be:2d:c0:94:fd:53:2a:7c:ec:95:
                    22:35:23:b7:fd:19:58:cf:39:64:15:5b:15:e8:cd:
                    e1:20:35:cf:b0:65:19:cb:96:55:94:76:21:1e:a2:
                    e7:1e:95:7b:91:11:c4:ed:fa:85:a5:a6:cf:fb:5e:
                    99:05:15:2b:c7:26:f3:05:3b:9c:d4:4c:ca:01:e2:
                    5b:f3:0e:9e:ad:b7:bb:88:7b:36:6d:51:04:50:bc:
                    0d:5a:17:2f:45:12:4f:5d:20:ab:b6:d4:e0:64:1f:
                    40:65:f2:94:1e:df:41:f3:2a:50:ea:85:ec:30:27:
                    22:7f:ff:ec:66:d4:34:2a:69:ac:2a:44:84:cc:02:
                    8a:af:6a:62:29:5d:c5:48:44:09:98:3f:eb:80:d6:
                    84:a5:1e:df:ca:3c:e6:42:2e:92:ec:b5:7a:fb:7d:
                    33:d1:f2:70:87:8a:cc:4e:24:74:56:6f:a4:36:c9:
                    ed:16:7e:ae:bc:85:66:80:cc:13:1a:18:d7:7c:bc:
                    b4:8c:1e:31:48:9b:5c:e7:4a:5b:f8:97:de:d6:23:
                    c2:c1:15:2b:1a:a6:53:8b:6c:d6:24:4c:c9:1a:e6:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F9:B5:00:FD:97:CC:A1:CB:4E:81:C1:59:5E:51:5C:76:D8:D7:E1
            X509v3 Authority Key Identifier:
                keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:18:60:26:dd:6e:20:35:15:51:22:2b:5a:b6:21:29:f2:1e:
         78:f8:60:eb:74:77:19:0f:90:c3:e6:6c:12:cc:19:72:4b:38:
         ca:01:d8:ba:96:62:47:79:d9:25:ed:71:c3:6c:23:86:db:b4:
         ce:01:6e:cd:a6:8b:aa:34:24:e9:f1:75:ea:60:85:c2:5f:78:
         c2:68:ca:75:f6:88:54:38:35:58:a7:14:50:f8:f7:cb:60:a1:
         96:b2:c3:84:87:e7:97:92:6b:bd:5b:d7:f0:95:e8:e0:43:cd:
         26:ce:ed:1d:37:ff:8d:6f:e4:ec:ca:0e:42:49:3f:bf:f7:05:
         48:43:81:4e:16:5e:fc:a1:d0:f0:84:f9:07:b8:5a:d4:3f:ab:
         5d:1b:2c:d8:f8:89:d3:7f:01:6d:5d:9c:88:ce:02:f4:23:b0:
         b5:c3:14:91:65:40:52:33:f1:9f:1b:40:54:f1:50:fa:79:68:
         35:a4:b8:ec:e2:0d:5a:d9:08:b0:a5:0d:53:bf:02:c4:ea:07:
         39:5d:fa:9e:4e:51:b3:4e:a7:e6:1a:72:80:6d:1e:22:0f:99:
         90:1e:44:a2:39:4e:d7:26:ef:d6:a9:db:5c:e5:c7:f4:94:f2:
         9d:77:ae:1d:b5:12:fd:bd:a4:56:72:23:27:0d:c8:3d:42:1f:
         85:be:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:28:44 2026 by rpki-client