Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
File:                     D3A9BB2434EF24613DA3D824164DFABE55243F12.mft (raw, json)
Hash identifier:          l4OqRnwB4NTQj+S3srTMPfw3Qg5zgWNxD3hySlUotH0=
Subject key identifier:   F8:E5:3B:2A:56:39:F2:DC:80:7F:37:CA:60:EE:7C:DE:1A:B5:7A:B0
Authority key identifier: D3:A9:BB:24:34:EF:24:61:3D:A3:D8:24:16:4D:FA:BE:55:24:3F:12
Certificate issuer:       /CN=D3A9BB2434EF24613DA3D824164DFABE55243F12
Certificate serial:       6D17342D56C21CF5E2CBBA260B4389EA1117A667
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
Manifest number:          5D
Signing time:             Mon 11 May 2026 14:20:51 +0000
Manifest this update:     Mon 11 May 2026 14:15:51 +0000
Manifest next update:     Sat 16 May 2026 19:00:51 +0000
Files and hashes:         1: 323830333a653764303a3a2f33322d3332203d3e2037333033.roa (hash: fdb8H8VqkJYA0bY105LFtERGfPeDP7saEd+IzOgBJdM=)
                          2: D3A9BB2434EF24613DA3D824164DFABE55243F12.crl (hash: itYgmsfCMb6+4Cf3Jcm32y3LwMi5QX116i6EAf7BsK0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:17:34:2d:56:c2:1c:f5:e2:cb:ba:26:0b:43:89:ea:11:17:a6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3A9BB2434EF24613DA3D824164DFABE55243F12
        Validity
            Not Before: May 11 14:15:51 2026 GMT
            Not After : May 16 19:00:51 2026 GMT
        Subject: CN=F8E53B2A5639F2DC807F37CA60EE7CDE1AB57AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:49:8a:45:d8:52:6e:a3:04:d4:d1:6a:b2:
                    57:10:61:79:97:ce:ab:2a:47:dd:f8:07:08:37:55:
                    1c:13:db:35:d0:e6:84:7f:e9:aa:bd:5a:af:5e:c6:
                    eb:af:30:47:75:7e:da:06:e0:bc:fd:54:f4:2d:64:
                    98:8f:08:02:77:b4:78:04:56:a2:b9:54:14:27:c7:
                    09:91:8a:94:56:2a:46:a6:60:28:c9:83:6b:2c:dc:
                    8f:a8:b9:52:bd:17:64:09:77:d9:62:6d:10:55:ff:
                    bb:36:ca:af:eb:28:5b:b3:6d:d1:cb:8a:7e:d0:da:
                    d1:b6:cc:c1:89:e1:c2:f1:69:e5:31:f6:ce:33:b0:
                    64:67:2b:54:26:db:d8:6f:df:76:a6:e7:57:0f:ea:
                    d2:cf:94:e4:ae:d1:d0:1f:83:d8:57:d9:96:8f:51:
                    b2:8a:77:23:30:3d:56:51:d0:cc:74:32:63:08:03:
                    2e:3b:ad:c4:c0:fc:3d:ff:9d:f3:4a:03:06:fe:04:
                    87:c4:bb:7e:89:e7:27:ed:39:56:ab:a1:45:d2:7b:
                    14:57:95:11:0a:12:3c:4f:c1:ad:10:10:2d:c9:26:
                    30:70:54:e7:b3:07:18:5f:c0:1f:99:37:2a:79:84:
                    a8:d2:b3:08:57:51:f3:f6:cd:c4:bb:06:6d:97:a2:
                    13:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E5:3B:2A:56:39:F2:DC:80:7F:37:CA:60:EE:7C:DE:1A:B5:7A:B0
            X509v3 Authority Key Identifier:
                keyid:D3:A9:BB:24:34:EF:24:61:3D:A3:D8:24:16:4D:FA:BE:55:24:3F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bc:12:52:f8:b1:91:22:f0:d4:57:1f:f7:cb:62:d1:51:11:
         c7:0b:16:28:96:e1:89:47:55:36:0a:34:3a:6c:ec:28:b9:95:
         bf:f2:42:bf:d9:c3:78:18:fc:6f:e2:ea:db:14:8f:19:38:60:
         9e:85:ef:c8:dc:f5:a0:93:af:53:26:53:1a:e6:41:a1:0e:a9:
         8d:1c:7d:da:48:b2:50:02:e6:b0:a3:cf:a7:62:62:ba:29:88:
         10:60:29:dd:e8:be:d6:31:b7:f1:e1:33:ac:c1:99:f8:20:23:
         c9:9a:e8:99:65:4b:47:56:e7:2a:11:0e:6a:54:f1:8e:5c:cc:
         7a:04:51:3f:a2:69:fd:92:be:71:54:c4:e4:f5:7a:0a:90:f3:
         a6:43:11:19:14:2f:7d:b5:eb:2d:5e:7b:e7:ca:f0:18:9a:be:
         24:c2:27:05:1f:fa:1a:d4:5e:96:04:0b:07:00:6b:0b:49:66:
         2c:e9:9b:07:e6:2d:31:eb:24:50:04:3c:c4:12:59:ea:e1:11:
         6f:1c:9c:f4:e7:bf:d1:04:e5:68:ac:84:30:e8:fc:f9:ea:01:
         66:74:68:39:48:09:93:ab:6f:f9:d3:a9:e0:d4:cb:0e:a1:98:
         37:4f:f1:b3:2c:73:83:ce:d0:a1:7e:5a:d9:fa:fa:2e:b1:e3:
         83:d8:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:23:41 2026 by rpki-client