Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
File:                     2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft (raw, json)
Hash identifier:          vfCDwidRFN80pyaEPt24c2dhKQ/JtNHw5CASrqE+48s=
Subject key identifier:   1B:B3:49:66:A6:64:99:1E:35:5B:48:6C:C0:AA:60:54:A1:F1:03:E1
Authority key identifier: 2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
Certificate issuer:       /CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Certificate serial:       5F137597AEEAD79743E387EAE80DD56053166359
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
Manifest number:          0134
Signing time:             Wed 05 Nov 2025 00:46:12 +0000
Manifest this update:     Wed 05 Nov 2025 00:41:12 +0000
Manifest next update:     Sun 09 Nov 2025 20:30:12 +0000
Files and hashes:         1: 323830333a363561303a3a2f33322d3438203d3e20323637373330.roa (hash: s28vZlX11dUi+udBwGAOQwL+SoXyFDmX6ATIBg96pXM=)
                          2: 34352e3136362e3137362e302f32322d3234203d3e20323637373330.roa (hash: AHvurBmKbsGk+iz2BihXgXJPBi02Chka7n5NfHDxZ5U=)
                          3: 2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl (hash: RPaE29wIMUG0iUTzFuz5H3vZ+sxBNox5NvGQwgJ/w5I=)
                          4: 34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa (hash: AnXPIL2R6ZPQq/8ZZd4soNM9BKqUvlrS4OrFG66FXgQ=)
                          5: 34352e3136362e3137362e302f32342d3234203d3e20323637373330.roa (hash: x2fLoH5lYH0GGz2fgAo5yloGS8diO2Drx0TDPnBBluw=)
                          6: 34352e3136362e3137372e302f32342d3234203d3e20323637373330.roa (hash: xQ9isc0nK1JfL1PnF7pKEI/Q1zjOmKSWyA/0ujQT1Y0=)
                          7: 34352e3136362e3137392e302f32342d3234203d3e20323637373330.roa (hash: 85OATkV1touSDVh6ddcIqa0GsiVvloC0qfiJp35ogu8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:13:75:97:ae:ea:d7:97:43:e3:87:ea:e8:0d:d5:60:53:16:63:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
        Validity
            Not Before: Nov  5 00:41:12 2025 GMT
            Not After : Nov  9 20:30:12 2025 GMT
        Subject: CN=1BB34966A664991E355B486CC0AA6054A1F103E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:11:63:97:2a:54:2a:dd:30:7f:a0:8f:54:
                    bd:f3:cc:89:8b:db:af:f1:0f:78:09:23:9e:ce:a7:
                    99:6a:09:d2:8d:b2:75:b3:07:5c:5e:db:f8:5f:ca:
                    7e:0d:0e:c9:3f:50:c9:b4:50:42:a2:b3:cd:c9:1f:
                    f6:77:e7:95:6d:0b:7d:04:0e:eb:98:09:a0:03:6f:
                    f5:d5:8d:91:25:79:a6:f9:42:a1:47:d6:82:f1:8c:
                    38:aa:96:28:37:68:45:b5:5b:fb:d1:0e:6c:e3:8d:
                    d9:0e:37:ae:54:97:67:e0:9c:49:10:fe:ad:23:a7:
                    66:8d:6b:1e:88:2d:15:03:05:7e:d3:18:fe:d0:2f:
                    e3:f7:96:a1:01:a2:be:9a:df:a6:f2:b3:26:2f:b0:
                    47:1c:33:ef:d3:1f:0e:9a:51:a1:fc:71:75:7c:b4:
                    57:94:ac:9b:27:bf:2d:fb:13:98:48:c3:4c:6d:c9:
                    0c:a0:bc:4e:4e:d1:cd:4d:1f:b3:5f:8d:c0:d9:dc:
                    bd:72:60:f5:a9:7f:77:fc:03:c0:4a:49:bf:cc:75:
                    f3:53:a9:17:da:48:ac:f6:09:84:f9:ce:ef:5b:8e:
                    cc:94:2b:04:06:29:2c:1d:d0:c3:3b:a4:c6:77:28:
                    d9:34:aa:56:da:55:bf:b5:95:bc:c0:5c:43:16:f7:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B3:49:66:A6:64:99:1E:35:5B:48:6C:C0:AA:60:54:A1:F1:03:E1
            X509v3 Authority Key Identifier:
                keyid:2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:eb:a3:e9:c7:7c:86:21:00:e0:76:32:80:d9:be:92:dd:4d:
         6c:a5:0d:1e:d0:8b:43:b7:8b:d2:fb:c8:9d:91:f8:2e:69:5b:
         90:e5:b4:9d:7a:de:f5:71:a4:d2:5f:dc:10:08:dc:9e:3f:0b:
         bc:22:af:d2:88:f2:87:42:7f:ce:03:8c:76:3d:38:d7:16:ba:
         04:27:d0:23:fb:ab:fa:8f:a1:7f:12:d9:21:83:a4:81:c5:1c:
         4e:30:7f:90:15:ce:25:ab:d8:0d:06:93:56:a2:bf:d2:ed:37:
         41:70:9c:2c:ba:cf:0d:b2:4b:93:e5:f1:bc:14:e3:89:aa:7c:
         4f:ee:86:e3:8a:86:11:3a:a7:83:a3:ca:59:6b:f9:fa:68:d8:
         d4:0e:42:dc:cf:65:86:08:07:ee:fc:34:b9:6a:0a:40:0d:9a:
         c8:da:11:8a:c8:91:20:67:7b:e8:5d:9d:23:90:be:34:79:fa:
         18:ee:e1:cd:d1:27:f6:bf:58:84:20:f1:fa:94:cb:6e:2f:1b:
         f3:bc:52:e4:b2:1f:d3:22:f5:e9:1a:68:52:ee:b2:ae:bd:85:
         35:3c:8f:0b:8b:db:c0:de:20:90:e5:5b:40:36:70:0e:77:43:
         f5:ea:56:f4:ab:65:ca:16:c1:79:de:03:ce:25:b9:44:2b:b3:
         06:8f:fc:71
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUXxN1l67q15dD44fq6A3VYFMWY1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ3NzE4NDM4RkIyMzI2MzkwNzVGM0JCMEU3REU1NENE
MjBBQTkxRDAeFw0yNTExMDUwMDQxMTJaFw0yNTExMDkyMDMwMTJaMDMxMTAvBgNV
BAMTKDFCQjM0OTY2QTY2NDk5MUUzNTVCNDg2Q0MwQUE2MDU0QTFGMTAzRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZLRFjlypUKt0wf6CPVL3zzImL
26/xD3gJI57Op5lqCdKNsnWzB1xe2/hfyn4NDsk/UMm0UEKis83JH/Z355VtC30E
DuuYCaADb/XVjZEleab5QqFH1oLxjDiqlig3aEW1W/vRDmzjjdkON65Ul2fgnEkQ
/q0jp2aNax6ILRUDBX7TGP7QL+P3lqEBor6a36bysyYvsEccM+/THw6aUaH8cXV8
tFeUrJsnvy37E5hIw0xtyQygvE5O0c1NH7NfjcDZ3L1yYPWpf3f8A8BKSb/MdfNT
qRfaSKz2CYT5zu9bjsyUKwQGKSwd0MM7pMZ3KNk0qlbaVb+1lbzAXEMW9ybBAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUG7NJZqZkmR41W0hswKpgVKHxA+EwHwYDVR0j
BBgwFoAULXcYQ4+yMmOQdfO7Dn3lTNIKqR0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzM5ODM4MEFFQ0U4QUU4MDZBQjdFRTk3MjUyRTE5RkI4
MkYzMzQ3OEFGMzNDODA0RjQ4MThDOThBRjYyREFCLzAvMkQ3NzE4NDM4RkIyMzI2
MzkwNzVGM0JCMEU3REU1NENEMjBBQTkxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDc3MTg0MzhGQjIzMjYzOTA3
NUYzQkIwRTdERTU0Q0QyMEFBOTFELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjczOTgzODBBRUNFOEFFODA2QUI3RUU5NzI1MkUxOUZCODJGMzM0NzhB
RjMzQzgwNEY0ODE4Qzk4QUY2MkRBQi8wLzJENzcxODQzOEZCMjMyNjM5MDc1RjNC
QjBFN0RFNTRDRDIwQUE5MUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAi66Ppx3yGIQDgdjKA2b6S3U1s
pQ0e0ItDt4vS+8idkfguaVuQ5bSdet71caTSX9wQCNyePwu8Iq/SiPKHQn/OA4x2
PTjXFroEJ9Aj+6v6j6F/Etkhg6SBxRxOMH+QFc4lq9gNBpNWor/S7TdBcJwsus8N
skuT5fG8FOOJqnxP7objioYROqeDo8pZa/n6aNjUDkLcz2WGCAfu/DS5agpADZrI
2hGKyJEgZ3voXZ0jkL40efoY7uHN0Sf2v1iEIPH6lMtuLxvzvFLksh/TIvXpGmhS
7rKuvYU1PI8Li9vA3iCQ5VtANnAOd0P16lb0q2XKFsF53gPOJblEK7MGj/xx
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:40:19 2025 by rpki-client