Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
File:                     8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft (raw, json)
Hash identifier:          gvzf2gA+iq0Gqs3QC7exuhPWVIn6zZE0wjKZMMLcwh0=
Subject key identifier:   7D:0E:FA:B9:AC:F8:8B:9E:DB:44:1E:33:19:57:35:3D:CC:AD:AE:11
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       5229CBEBA158462E2F776523A3B7EAF7D1ECA21D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
Manifest number:          01A4
Signing time:             Sat 13 Jun 2026 15:22:32 +0000
Manifest this update:     Sat 13 Jun 2026 15:17:32 +0000
Manifest next update:     Thu 18 Jun 2026 19:35:32 +0000
Files and hashes:         1: 3139302e3138342e3233342e302f32342d3234203d3e203532333639.roa (hash: XppHSTxXhL7vBNAIQkL6db/V/LJFv8VD50/gin1Knqw=)
                          2: 3139302e3138342e3232352e302f32342d3234203d3e203532333639.roa (hash: PmvlVuStHVnq5GwjZUZArQfpd3l9DaAoVVE/kmtNTM0=)
                          3: 3139302e3138342e3233302e302f32342d3234203d3e203532333639.roa (hash: FgwjjLXCZpLKmnVcmF8q1LDzFKF/7vgWLoOdUJysYic=)
                          4: 3139302e3131302e3131352e302f32342d3234203d3e203532333639.roa (hash: Qdqrd4CpR4QY7fAYfkFQIXmZa+G3cFZ9rBEP4iSA++Q=)
                          5: 3137392e34322e3138302e302f32322d3232203d3e203532333639.roa (hash: p/IJ31wIfNtT7++J+YlCay3On5Px/7chkt/cjlO1wGI=)
                          6: 3137392e34322e3138332e302f32342d3234203d3e203532333639.roa (hash: ToHxzgnq76EIbxG3FgTy2YSFsWYVJHjjDJY8zz88iLs=)
                          7: 3139302e3138342e3232382e302f32322d3232203d3e203532333639.roa (hash: gsq1t1KrDKR7ZgvpfqakYGmP6Mu+QBPqlJY9SZ4iofA=)
                          8: 3139302e3138342e3232362e302f32342d3234203d3e203532333639.roa (hash: wt6TJarWzgRyEEtW/eyr8Vu/ctd/YLEARtZJkfEKB+E=)
                          9: 3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa (hash: MDxsrajL9OCOGNob9hzNmsMIuWgM1yk1F222gUl3gRM=)
                          10: 3139302e3138342e3233332e302f32342d3234203d3e203532333639.roa (hash: Xh7sZ46e/HshN5FpM4zzdFAlA4vLmAB0bUS2XQQ3Nt4=)
                          11: 3137392e34322e3138302e302f32332d3233203d3e203532333639.roa (hash: 8XTf66lk6RY3siro9m8j/m/u2Ew4w1sWgI/Mg7k5MD0=)
                          12: 3137392e34322e3137392e302f32342d3234203d3e203532333639.roa (hash: CFey74pTky8m2PJg0N4G5Syy4mfoFcYCUNBfzl3Se1c=)
                          13: 3137392e34322e3138342e302f32332d3233203d3e203532333639.roa (hash: pm1xsrrJGq5fcGhfKbn1Kz4cuIwDm+Yz+8OPLJkbqSc=)
                          14: 3139302e3138342e3233392e302f32342d3234203d3e203532333639.roa (hash: nW3N0UeU+ctxNmWS0cmfyVC3xvdmEidAJjKEn7xD3iI=)
                          15: 3139302e3131302e3131332e302f32342d3234203d3e203532333639.roa (hash: xx5U6bmL/e//PyCK0jQlwaMoHXkrQtTwIfkSeZcWzOU=)
                          16: 3137392e34322e3137382e302f32342d3234203d3e203532333639.roa (hash: qvqr3xxSez/t6bE0q9ewgjpU6ETmksuteDQAAfjw8Ew=)
                          17: 3137392e34322e3138362e302f32342d3234203d3e203532333639.roa (hash: /eA9H9w2UnBJQqgX+kYTdEno3qnnHIoNnVrdajfttjI=)
                          18: 3139302e3131302e3131392e302f32342d3234203d3e203532333639.roa (hash: 13nJOP7rp1B6S2ubbbUTCvVleoo3wu081Y+2ejQAX8s=)
                          19: 3137392e34322e3137362e302f32342d3234203d3e203532333639.roa (hash: ymccKkHI3G4cFw398ltWLr3fPc1jWYWaWY1ZWIq5B0A=)
                          20: 3139302e3131302e3131382e302f32342d3234203d3e203532333639.roa (hash: XhiqrF9znu2+8GmQj2VlBX5r+cUgGgWA2ZMqTeL5dy4=)
                          21: 3137392e34322e3139302e302f32332d3233203d3e203532333639.roa (hash: 2ID0rP77oGBkgTy2Mm9ICJeUI7mRXjfpszqvWvZEeK4=)
                          22: 3139302e3138342e3233312e302f32342d3234203d3e203532333639.roa (hash: mvGXYKcJYoOE65ddupAM1O5ktBPf1FmF+Xn2j38tEQM=)
                          23: 3137392e34322e3138342e302f32342d3234203d3e203532333639.roa (hash: /NSTwCNRA3j4+q9RXcDomnJliL+SqU7KgQwRx2rDx9o=)
                          24: 3139302e3138342e3233362e302f32342d3234203d3e203532333639.roa (hash: pJQQjQhYlCTry2nI+SnURJoKhKdnujBjhX8fQS43sP8=)
                          25: 3139302e3131302e3131362e302f32342d3234203d3e203532333639.roa (hash: tyqy6K1U8CSedGQxIso+rbX08WjJJC6oQPEi0RGbMC0=)
                          26: 3139302e3138342e3233352e302f32342d3234203d3e203532333639.roa (hash: Q463+phJ9oN0d1Y48wnjXkMP1SFBZK3RN8R6XX5wMBU=)
                          27: 3137392e34322e3137362e302f32332d3233203d3e203532333639.roa (hash: AV24cZPJRmvg1DKuVozHNjAy0NdbExoi270JEeQZrjc=)
                          28: 3139302e3138342e3233372e302f32342d3234203d3e203532333639.roa (hash: UVdLLeauUcZSYJFdcnrnip4UCi1jTtD3kX+SmRyg+RI=)
                          29: 3137392e34322e3138392e302f32342d3234203d3e203532333639.roa (hash: P8CqzZravQnWiBtefc32Mef5G8UPvZ57LW39kJAzadc=)
                          30: 8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl (hash: Pk8pEnd8D1McOgH2JJ33AK8SzGI1dTytR2iZnMhFRVM=)
                          31: 3137392e34322e3138382e302f32342d3234203d3e203532333639.roa (hash: iEOGkncWoezGTaO7g/weZYSeTCm0r14eh68pm+uV/Lg=)
                          32: 3137392e34322e3137372e302f32342d3234203d3e203532333639.roa (hash: dGBhtmS4xd5Ck210BY7YGE7wPDQetAWHLVuyYleR3DQ=)
                          33: 3137392e34322e3138322e302f32342d3234203d3e203532333639.roa (hash: krkFjQnI476MmTsuJRqApWBYEgnR4JT1X9U1ekfztVo=)
                          34: 3139302e3138342e3232342e302f32302d3230203d3e203532333639.roa (hash: hV4NdrH7oNsp+HQMlgCHy/X2tpEkjseNPWz6mm7u8ow=)
                          35: 3137392e34322e3138372e302f32342d3234203d3e203532333639.roa (hash: 7aOYtTzaKJ5kKjb/+MF0Al5IQw1ZeghsaH39CWCIs58=)
                          36: 3139302e3131302e3131372e302f32342d3234203d3e203532333639.roa (hash: h0y8Aw/ABLaZJiaJuGkeDKnZc5DkJymWJiMWaLhz4B4=)
                          37: 3137392e34322e3138342e302f32322d3232203d3e203532333639.roa (hash: 784gnmZFBNw2botc9Z57/k4iyXpqexOethdrK1X46cM=)
                          38: 3139302e3138342e3232382e302f32342d3234203d3e203532333639.roa (hash: Yz3+zyQ3ns/Z32HB6ruUBK1LHbuZ95KsXBJ9MhYPYoE=)
                          39: 3139302e3138342e3233382e302f32342d3234203d3e203532333639.roa (hash: 3QsVAnNoG2Vs/P5fz+jclvaz1r7RlxmQS821UL4BmhY=)
                          40: 3139302e3131302e3131322e302f32312d3231203d3e203532333639.roa (hash: Ouse9B1I6N8WblIOnA3f3f8TbVsYpztqRtqtrwAPsAY=)
                          41: 3139302e3138342e3232392e302f32342d3234203d3e203532333639.roa (hash: bo3bXVvnspbkodArwYrXelL5zPmXqz1mgFxU5MuPCMU=)
                          42: 3137392e34322e3138352e302f32342d3234203d3e203532333639.roa (hash: 4gEu7beSf9TcgxEMzHDWeYxziZy7iADgOwjoPa5KOHk=)
                          43: 3139302e3138342e3232342e302f32342d3234203d3e203532333639.roa (hash: I5V1+bG+oRjbhHtQeHbLffQn7lNjiSIJ3ZpF1HPt+2U=)
                          44: 3137392e34322e3137362e302f32302d3230203d3e203532333639.roa (hash: V/wNBdyLVcmfSw6iAPR2SWpgV0Xb9g/0i6MnxU7L384=)
                          45: 323830303a6335303a3a2f33322d3634203d3e203532333639.roa (hash: RzhYXHQ34QF+6owSqGpHWvc/wRlYnpumh9JQXG1cYg4=)
                          46: 3139302e3138342e3232372e302f32342d3234203d3e203532333639.roa (hash: mNnmZOhYJg3Z/G23fpbay0Uh7NM9r2qPgB/vhdFVliI=)
                          47: 3139302e3131302e3131342e302f32342d3234203d3e203532333639.roa (hash: 45D7bBQMhOZzwHOUZw42GbBagWS6jdtwufaTdMCsi4Q=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:29:cb:eb:a1:58:46:2e:2f:77:65:23:a3:b7:ea:f7:d1:ec:a2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Jun 13 15:17:32 2026 GMT
            Not After : Jun 18 19:35:32 2026 GMT
        Subject: CN=7D0EFAB9ACF88B9EDB441E331957353DCCADAE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:61:75:a6:95:86:4f:02:1d:b4:3b:b7:47:
                    8b:28:b3:c0:98:74:e9:ca:ec:dc:b6:4f:6d:b3:94:
                    6a:97:03:1b:b3:c6:f3:f1:97:9b:7f:86:1b:ce:2e:
                    2b:aa:40:ff:aa:be:2d:f4:d9:4e:fb:f7:c5:94:21:
                    6d:ba:a1:8c:70:bb:8b:dd:82:20:3a:fd:40:8a:05:
                    e1:f6:40:c9:ab:7b:5b:41:64:d1:f1:a8:8c:d2:44:
                    41:91:99:8b:83:a9:02:8d:33:c9:b7:fb:2e:06:b5:
                    01:10:29:7b:b2:fa:26:8c:04:4b:48:4c:e9:38:54:
                    8c:cf:39:db:f1:3a:99:d1:51:2b:bb:32:cc:cb:96:
                    7e:bd:ca:12:37:12:4a:34:93:33:d8:fb:61:08:64:
                    ab:70:74:38:b6:35:37:f2:85:b0:5b:b1:e6:5b:70:
                    ec:1d:c8:e2:b8:c5:0e:90:0b:88:ce:4a:29:2f:ff:
                    15:94:ce:ca:9c:d7:96:3a:8c:b5:19:dc:da:34:ba:
                    6b:90:bb:6b:c9:40:8d:63:83:85:82:19:88:ee:da:
                    fa:28:f5:6e:fc:b1:de:79:6a:ea:1b:20:86:44:ad:
                    ce:c3:78:fb:9a:1f:7b:5b:03:e1:49:f0:fd:d5:72:
                    af:89:3f:ef:33:0e:e0:2c:c2:7e:84:00:39:86:4a:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0E:FA:B9:AC:F8:8B:9E:DB:44:1E:33:19:57:35:3D:CC:AD:AE:11
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:44:e4:55:b3:e4:45:ec:7b:91:4b:5d:2d:6c:a4:e2:91:6f:
         5f:d8:5a:a9:69:bc:fc:0b:0b:ed:fd:47:42:f6:0d:16:7f:5d:
         12:4d:1b:07:f8:78:0e:f8:5d:12:2e:3e:7f:be:c2:7c:d4:60:
         39:1d:f2:c2:ba:3e:26:d2:c3:0b:51:f5:5e:20:ee:13:98:b0:
         f4:dc:71:9d:c9:85:fb:8f:88:15:6e:11:fd:6a:bb:af:4a:64:
         fb:c6:5b:ae:a1:3a:07:26:7e:f2:69:00:9a:88:78:27:14:24:
         ee:94:de:0a:d8:c5:f5:86:66:f9:c3:37:e4:d2:ce:20:1b:e8:
         61:6c:74:1b:97:8f:e8:71:cd:6c:d2:a7:1c:a1:66:a4:c2:ad:
         bd:77:01:0c:32:47:70:79:d7:4b:94:0b:4e:2d:a2:34:25:50:
         01:e3:a5:5e:16:18:03:da:79:63:7f:ee:ae:7b:70:c8:ac:e8:
         01:ad:e8:9a:a0:96:07:09:59:37:0d:fe:fd:22:b4:cb:eb:c6:
         ed:03:a8:c4:93:f0:b1:71:1a:cd:78:29:f9:4e:48:58:2c:99:
         de:5f:43:88:7c:5b:5e:9d:1f:b0:9b:43:10:a8:8c:ea:8f:3c:
         c3:05:5b:b2:a6:f5:8d:08:3c:10:7d:cc:f9:4e:9c:7b:00:16:
         1a:02:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:20:18 2026 by rpki-client