Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft
File:                     3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft (raw, json)
Hash identifier:          iWTq1XTqBzADc4EOjLlm2EZfPn0yJzt+XHiKiOqeIwA=
Subject key identifier:   7C:EA:76:5F:76:9A:C1:D5:2A:E3:9D:77:53:C4:F6:91:93:76:2E:F9
Authority key identifier: 3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC
Certificate issuer:       /CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC
Certificate serial:       19521A88A684E8EAF6B61858F01B73C56B05E082
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft
Manifest number:          017D
Signing time:             Tue 27 Oct 2026 03:12:09 +0000
Manifest this update:     Tue 27 Oct 2026 03:07:09 +0000
Manifest next update:     Sun 01 Nov 2026 20:00:09 +0000
Files and hashes:         1: 3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl (hash: NwdH5F8twN81nVDmI7TFEH3t25Y1lNIg+PRVDQGRlHk=)
                          2: 34352e3233392e36382e302f32322d3234203d3e203238353339.roa (hash: vD5vaxQsXe2Vj9y5gbLUcmxrCwOFDtHw8FdOo0SyPdY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:52:1a:88:a6:84:e8:ea:f6:b6:18:58:f0:1b:73:c5:6b:05:e0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC
        Validity
            Not Before: Oct 27 03:07:09 2026 GMT
            Not After : Nov  1 20:00:09 2026 GMT
        Subject: CN=7CEA765F769AC1D52AE39D7753C4F69193762EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:50:78:01:2b:87:9c:fb:67:d5:3b:37:d3:
                    0d:f9:a9:f5:3f:db:24:6f:e0:2a:9f:b9:3f:56:eb:
                    b9:2b:06:c1:69:8c:84:5a:30:79:fc:27:45:14:1d:
                    61:05:f2:2c:28:51:b3:33:9f:21:b8:e2:e8:c9:53:
                    00:1d:1d:5f:ca:83:93:52:09:0a:f1:f3:e4:42:15:
                    67:64:45:3d:44:3a:7a:98:fb:93:1e:56:3e:23:7a:
                    7f:67:75:94:b8:1c:31:dd:a0:7c:b2:69:8d:8d:5e:
                    6c:37:be:62:eb:43:16:30:0e:d6:f3:c0:fb:a4:a2:
                    37:0b:b7:7d:80:8c:72:76:b8:75:f5:64:72:bd:57:
                    2c:74:d1:ed:75:f6:b7:43:e0:f1:ca:0e:5e:44:39:
                    54:d8:0a:78:b8:fb:be:40:66:24:fc:a9:fd:bc:b7:
                    db:8e:5c:c7:5a:df:0a:62:66:b0:df:7e:9e:ef:b5:
                    e4:77:4b:1c:0f:a5:ed:5c:3f:27:15:1f:c7:eb:97:
                    63:83:d9:f1:f8:24:6e:45:6a:0d:32:7e:9a:7c:7e:
                    2a:01:a3:eb:29:4c:be:36:fe:d6:e6:65:51:35:03:
                    c8:27:b6:e8:50:c2:94:2c:29:07:78:3a:61:86:09:
                    21:97:09:24:6e:cd:8c:e6:fc:de:f7:da:1a:4f:54:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EA:76:5F:76:9A:C1:D5:2A:E3:9D:77:53:C4:F6:91:93:76:2E:F9
            X509v3 Authority Key Identifier:
                keyid:3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:67:ba:39:7c:9c:04:09:52:64:d8:30:53:b3:dd:e7:23:97:
         48:6d:49:2c:75:c2:0c:13:7e:1c:cd:56:e1:a5:c1:ed:ac:00:
         9f:29:30:5c:e7:fe:ad:fa:f9:a0:d1:6e:40:22:21:73:3a:b1:
         92:1a:12:e9:01:6d:c2:5e:5e:50:62:25:fe:9f:d7:c4:73:23:
         8c:91:f4:0a:fb:aa:c0:c9:37:69:76:d1:fa:6a:56:bb:db:f0:
         ab:5a:65:d3:ae:57:8b:b8:ff:3b:e1:e1:f8:91:90:aa:8a:01:
         e4:3c:9f:5f:ae:39:2d:5b:8c:a5:85:97:39:59:66:44:b9:8c:
         a1:05:7e:d9:f4:14:e1:8e:4e:ce:7d:f5:43:f5:68:96:9a:85:
         b8:2a:2a:b4:3d:9a:3a:55:3d:3e:01:b6:3e:43:89:2f:1e:61:
         ef:c9:bb:9e:86:e1:91:3a:93:30:b2:0b:16:02:3c:74:3b:c5:
         69:90:a6:35:ad:ab:ac:81:21:7d:2a:db:c6:47:c6:e7:b5:79:
         e2:d8:01:46:20:dc:99:d3:b2:1e:20:22:39:8c:20:36:06:a7:
         51:d0:4a:61:04:1c:4b:50:30:17:e6:07:e2:02:d1:d4:a5:43:
         cc:6c:1b:de:dc:0a:d1:a4:1f:c6:93:37:86:5f:2e:69:61:2c:
         8f:a7:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:56:09 2026 by rpki-client