Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
File:                     9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft (raw, json)
Hash identifier:          ptghfvB5GLHWpqbUl5yGcAubKgToAj3WrR8eRR7wBCU=
Subject key identifier:   24:11:91:CA:55:16:F1:DA:56:18:5F:39:90:0D:FE:F7:0C:0D:62:65
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Certificate issuer:       /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial:       3FD04F5E5651FC813CA9A2AA36E91E37D00F0708
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
Manifest number:          0133
Signing time:             Tue 04 Nov 2025 08:07:18 +0000
Manifest this update:     Tue 04 Nov 2025 08:02:18 +0000
Manifest next update:     Mon 10 Nov 2025 00:40:18 +0000
Files and hashes:         1: 3139302e3131302e33332e302f32342d3234203d3e20323731393435.roa (hash: v0I7Ssh6jKhM9xb7tu2Vv8kmST8W+VnnY+pYA7DcA6M=)
                          2: 3139302e3131302e33322e302f32342d3234203d3e20323731393435.roa (hash: gm817vxyKtB6Cm8ngMyNU7PSsgZoztbT/yUvrWKQ79I=)
                          3: 323830333a653631303a3a2f33322d3438203d3e20323731393435.roa (hash: a7t+zVzbeaN4f4tbA9er0zMetnGFdNu/lk4RYt0RGOM=)
                          4: 9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl (hash: oq8nUNxJzqLeUTCRUJtcY3OniJzm07swncIY99CZjcY=)
                          5: 3139302e3131302e33362e302f32322d3234203d3e20323731393638.roa (hash: UXbK1HFchJtyb4aseQIYkH0EE8WiqLtRivXrqug3Zis=)
                          6: 3139302e3131302e33352e302f32342d3234203d3e20323639393331.roa (hash: N3NJpeUu+N3QzHRpIf5Ye47rEQXnLM5qsupyo3TVLtU=)
                          7: 3139302e3131302e33342e302f32342d3234203d3e20323639393331.roa (hash: jW3b7DYtffEk5waDjmpM5w0Gk/TrDUVL/Z9Fyfljua0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d0:4f:5e:56:51:fc:81:3c:a9:a2:aa:36:e9:1e:37:d0:0f:07:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
        Validity
            Not Before: Nov  4 08:02:18 2025 GMT
            Not After : Nov 10 00:40:18 2025 GMT
        Subject: CN=241191CA5516F1DA56185F39900DFEF70C0D6265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:b2:16:21:dc:0b:f3:13:37:79:33:57:05:
                    9e:f0:c2:7f:cc:41:0c:ee:d8:4d:87:82:58:50:5e:
                    e3:88:d9:7b:44:57:ea:d8:3e:32:9e:e3:be:8f:36:
                    94:40:9a:cc:c4:b2:98:84:eb:0e:07:ec:0a:73:c9:
                    cf:c3:23:17:cf:d1:cc:75:14:af:9a:a5:d4:18:ba:
                    1c:ba:b0:16:90:bd:b7:71:f2:52:c4:12:6e:9b:b3:
                    7b:45:19:e6:25:bb:a1:22:1a:21:76:d5:13:5a:9b:
                    fb:34:3a:ab:5c:ae:67:51:ae:05:f6:80:24:37:41:
                    0c:40:7f:68:60:be:1b:f6:03:2c:80:be:b4:f3:5d:
                    b5:3e:2f:90:12:64:d4:a0:0c:10:9b:4d:0b:0c:f2:
                    47:ac:ae:ca:83:fc:28:3b:e1:1d:63:03:33:17:70:
                    b3:8d:3f:83:cd:17:4a:76:fe:a3:72:f4:a4:22:a9:
                    8b:fb:f2:b4:04:0b:8e:d2:d3:d0:f2:b3:66:7c:84:
                    7e:c4:c0:3f:62:54:58:b4:5e:92:09:9c:36:5d:cc:
                    48:10:cc:87:0a:13:27:85:a3:d0:88:e5:1c:22:74:
                    e1:0e:fc:78:87:10:f2:73:71:62:9a:49:2f:c5:4e:
                    44:47:fc:26:bc:0e:de:e9:60:a4:d0:52:c3:d6:06:
                    4d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:11:91:CA:55:16:F1:DA:56:18:5F:39:90:0D:FE:F7:0C:0D:62:65
            X509v3 Authority Key Identifier:
                keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:95:79:1d:14:84:a5:0d:ea:24:66:c5:c1:29:ef:0e:52:38:
         7f:20:99:d5:f7:4a:32:78:d3:06:17:b0:f1:a8:da:93:18:42:
         ad:c3:5e:ad:55:f2:01:a6:ff:37:24:82:ac:8b:32:4a:0d:7a:
         58:5c:36:75:27:3e:05:0d:35:37:7f:f2:89:72:2e:55:fa:bd:
         2f:a9:d7:31:0b:cc:b4:39:b0:6a:9a:5a:16:3d:6d:dc:ec:26:
         82:cb:4a:c6:20:f9:fd:ef:59:de:95:a6:71:4a:86:67:f5:eb:
         5a:88:6e:47:ed:f4:47:ff:8a:f0:f7:b9:9c:7b:02:e6:b1:68:
         6f:6d:db:42:a1:15:7c:02:5a:56:aa:ec:f4:4c:a4:48:53:56:
         90:0f:b5:33:4c:a4:de:9f:b3:e8:b9:2a:78:cf:fb:9f:38:5f:
         28:c8:d4:87:01:d7:48:92:e4:9b:09:9f:64:4c:b9:b1:93:e6:
         8f:1d:0e:87:6f:16:dc:17:30:80:a0:71:6d:57:d1:11:67:34:
         05:fa:41:19:dc:f0:78:a1:fe:14:5a:27:a5:aa:a3:2a:d1:28:
         79:76:46:40:91:1a:18:dc:f4:63:bd:ab:6a:d5:d7:ea:05:28:
         6b:a2:61:00:0e:de:e4:72:67:1f:62:e0:64:63:4f:34:22:4f:
         64:97:8e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:04 2025 by rpki-client