Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.mft
File:                     3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.mft (raw, json)
Hash identifier:          TH0mD2Fa5cMrv53nwWVy9nZN5r/Fqsz/59GKvFxISNw=
Subject key identifier:   AB:23:10:F2:6A:F7:20:CB:56:8D:95:AE:74:4D:1F:B2:D7:88:87:53
Authority key identifier: 3F:67:CA:9F:0E:1F:E0:F0:38:3E:BF:EB:01:3E:DC:08:08:61:E9:4A
Certificate issuer:       /CN=3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A
Certificate serial:       1A859302CD77149FCF9E0FA0086F9C23B41E4642
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.mft
Manifest number:          0128
Signing time:             Fri 17 Oct 2025 17:00:28 +0000
Manifest this update:     Fri 17 Oct 2025 16:55:28 +0000
Manifest next update:     Thu 23 Oct 2025 16:04:28 +0000
Files and hashes:         1: 3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.crl (hash: 19c0PgQ8cJuv6/ce3ciPs4LTJxJk9maQYR4AzK7uw7E=)
                          2: 323830333a623731303a3a2f33322d3332203d3e20323732313039.roa (hash: FUZLQmLiKcSjfUSah4b3pLHxc9EuqpV1j4HMvKlaZ04=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 16:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:85:93:02:cd:77:14:9f:cf:9e:0f:a0:08:6f:9c:23:b4:1e:46:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A
        Validity
            Not Before: Oct 17 16:55:28 2025 GMT
            Not After : Oct 23 16:04:28 2025 GMT
        Subject: CN=AB2310F26AF720CB568D95AE744D1FB2D7888753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:db:fe:2e:39:57:4b:9f:82:1e:0b:13:91:
                    02:1f:75:09:cc:5d:0b:d9:eb:da:71:bb:67:77:e1:
                    4b:f9:77:1f:12:e2:f1:99:eb:78:67:8c:74:ff:0a:
                    97:f5:76:96:a0:e8:91:18:e4:84:7e:09:43:0f:d8:
                    9b:48:2e:21:cb:a1:43:bd:4e:08:45:93:8c:a3:5e:
                    6d:4e:a6:76:e0:95:da:e3:dc:d1:f8:d7:d5:05:41:
                    94:b6:74:5c:55:e5:93:25:42:49:ed:b2:60:06:63:
                    d8:23:b0:86:29:a5:2a:99:46:48:57:9e:43:d0:0a:
                    3d:5f:73:b5:7a:06:eb:ba:77:42:ba:b5:8f:4a:39:
                    c9:ca:02:83:28:51:a1:28:8a:b0:91:63:db:40:24:
                    c8:ba:fa:b9:74:c2:d4:3c:86:b4:5d:f7:4a:ba:6d:
                    01:cd:25:22:c2:a9:43:30:cb:23:47:5f:38:5b:ce:
                    5d:82:b9:31:d4:14:36:84:2a:cc:e8:2e:9b:6c:57:
                    37:ff:a3:c6:7d:ab:2e:7f:3c:49:6a:db:35:08:fe:
                    35:7a:b1:9a:79:10:c3:66:5b:4c:6b:13:25:33:64:
                    29:ce:bf:95:87:91:ad:83:0a:fc:54:1a:47:52:21:
                    30:0c:a0:8f:b0:3b:7a:98:04:a8:f6:db:8f:8d:7a:
                    81:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:23:10:F2:6A:F7:20:CB:56:8D:95:AE:74:4D:1F:B2:D7:88:87:53
            X509v3 Authority Key Identifier:
                keyid:3F:67:CA:9F:0E:1F:E0:F0:38:3E:BF:EB:01:3E:DC:08:08:61:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a5:d1:6b:8e:cb:f8:f3:f3:5f:72:95:e9:43:65:0e:22:12:
         d0:9e:75:dd:62:09:c0:cd:97:75:2b:46:79:58:6b:6e:df:7a:
         c1:fc:d8:c1:3f:ab:ee:37:d0:99:e5:f8:ef:2f:a6:c2:26:ce:
         17:bc:54:05:ab:ea:30:a4:be:40:63:78:f6:95:47:0d:4c:67:
         8c:c1:43:85:21:e5:74:32:86:45:7c:20:22:87:20:a5:6d:37:
         aa:59:ab:c7:63:f7:f0:e9:9e:47:4e:d6:e4:01:d8:7a:12:3f:
         78:21:d8:fc:e3:6d:c4:df:25:24:ee:5a:ce:aa:60:c3:79:6f:
         0f:55:f5:4c:60:05:9b:51:23:70:d7:4a:6e:a2:53:44:32:7e:
         97:ba:8e:f6:f7:d7:bf:9a:db:4e:c2:4e:f8:a4:85:c9:bc:cf:
         bb:ee:86:f9:0a:42:95:a2:69:e6:9d:42:8e:f4:eb:46:23:45:
         24:07:fc:85:e4:3b:d7:69:11:61:f9:13:52:83:cc:7e:49:bb:
         c7:f3:3f:c7:33:c9:a3:90:e3:22:9a:cb:66:02:55:fe:50:db:
         1f:e1:bd:56:5f:4f:06:cb:11:7b:8e:d2:5b:02:c5:68:bc:c2:
         5a:60:ff:95:23:23:72:3d:2a:84:34:f5:c5:7e:d6:ec:e9:0d:
         02:f0:2e:b1
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGoWTAs13FJ/Png+gCG+cI7QeRkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2N0NBOUYwRTFGRTBGMDM4M0VCRkVCMDEzRURDMDgw
ODYxRTk0QTAeFw0yNTEwMTcxNjU1MjhaFw0yNTEwMjMxNjA0MjhaMDMxMTAvBgNV
BAMTKEFCMjMxMEYyNkFGNzIwQ0I1NjhEOTVBRTc0NEQxRkIyRDc4ODg3NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Stv+LjlXS5+CHgsTkQIfdQnM
XQvZ69pxu2d34Uv5dx8S4vGZ63hnjHT/Cpf1dpag6JEY5IR+CUMP2JtILiHLoUO9
TghFk4yjXm1Opnbgldrj3NH419UFQZS2dFxV5ZMlQkntsmAGY9gjsIYppSqZRkhX
nkPQCj1fc7V6Buu6d0K6tY9KOcnKAoMoUaEoirCRY9tAJMi6+rl0wtQ8hrRd90q6
bQHNJSLCqUMwyyNHXzhbzl2CuTHUFDaEKszoLptsVzf/o8Z9qy5/PElq2zUI/jV6
sZp5EMNmW0xrEyUzZCnOv5WHka2DCvxUGkdSITAMoI+wO3qYBKj224+NeoHXAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUqyMQ8mr3IMtWjZWudE0fsteIh1MwHwYDVR0j
BBgwFoAUP2fKnw4f4PA4Pr/rAT7cCAhh6UowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQzY3Q0FFQzlDREVDRjQ5RDY4NEQyQTEwQjY5OUNGODQ1
NThBRTJBQjQxMzczOTFFNUNDQjEwQTY3RTc3NDk2LzAvM0Y2N0NBOUYwRTFGRTBG
MDM4M0VCRkVCMDEzRURDMDgwODYxRTk0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjY3Q0E5RjBFMUZFMEYwMzgz
RUJGRUIwMTNFREMwODA4NjFFOTRBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0M2N0NBRUM5Q0RFQ0Y0OUQ2ODREMkExMEI2OTlDRjg0NTU4QUUyQUI0
MTM3MzkxRTVDQ0IxMEE2N0U3NzQ5Ni8wLzNGNjdDQTlGMEUxRkUwRjAzODNFQkZF
QjAxM0VEQzA4MDg2MUU5NEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqpdFrjsv48/NfcpXpQ2UOIhLQ
nnXdYgnAzZd1K0Z5WGtu33rB/NjBP6vuN9CZ5fjvL6bCJs4XvFQFq+owpL5AY3j2
lUcNTGeMwUOFIeV0MoZFfCAihyClbTeqWavHY/fw6Z5HTtbkAdh6Ej94Idj8423E
3yUk7lrOqmDDeW8PVfVMYAWbUSNw10puolNEMn6Xuo7299e/mttOwk74pIXJvM+7
7ob5CkKVomnmnUKO9OtGI0UkB/yF5DvXaRFh+RNSg8x+SbvH8z/HM8mjkOMimstm
AlX+UNsf4b1WX08GyxF7jtJbAsVovMJaYP+VIyNyPSqENPXFftbs6Q0C8C6x
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:45 2025 by rpki-client