Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
File:                     9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft (raw, json)
Hash identifier:          Yh40wCVdHRT2N7/JR/cnFFxCeeDk/75jOBhqCy90Csw=
Subject key identifier:   AB:FC:A8:47:FA:11:B8:79:24:B7:0C:AE:8F:4D:F7:8B:AE:FE:89:27
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Certificate issuer:       /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial:       1ABF2CD574E20F8C3E261CB987E0633C97A39CBA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
Manifest number:          016F
Signing time:             Mon 02 Mar 2026 08:39:59 +0000
Manifest this update:     Mon 02 Mar 2026 08:34:59 +0000
Manifest next update:     Sat 07 Mar 2026 19:12:59 +0000
Files and hashes:         1: 3139302e3131302e33332e302f32342d3234203d3e20323731393435.roa (hash: NmD9BFP0gnqQvHVdP8PiJ3HcbiSqouIBVwmZSjONP0c=)
                          2: 3139302e3131302e33322e302f32342d3234203d3e20323731393435.roa (hash: sj8v/tkCBqUfw59ctaMm5fssoMA3g20qVroMgoUPTEA=)
                          3: 3139302e3131302e33362e302f32322d3234203d3e20323731393638.roa (hash: NO1IL44bDoKDGzMrqdIYYnYJSd/0zbR+oR84jZml57w=)
                          4: 9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl (hash: XIccOlJXOhw+zE2lIw85Q86oLnhrwS9bTg+cOaq8xB8=)
                          5: 323830333a653631303a3a2f33322d3438203d3e20323731393435.roa (hash: 2P7RFCK7VpDXczeRi+bM3BlIhZ8kbofBM3yid2U3gqg=)
                          6: 3139302e3131302e33352e302f32342d3234203d3e20323639393331.roa (hash: kY3R61h4+yKkBnbBC2SuCKe6SkHzpxQP16A8fz4qmvg=)
                          7: 3139302e3131302e33342e302f32342d3234203d3e20323639393331.roa (hash: LXx8SAGeyywcy8UcclEBl6RF9dolFoevkQb5p232Ahs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bf:2c:d5:74:e2:0f:8c:3e:26:1c:b9:87:e0:63:3c:97:a3:9c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
        Validity
            Not Before: Mar  2 08:34:59 2026 GMT
            Not After : Mar  7 19:12:59 2026 GMT
        Subject: CN=ABFCA847FA11B87924B70CAE8F4DF78BAEFE8927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:45:19:a6:b5:6d:bf:3a:23:b2:c6:e9:b1:9a:
                    1b:09:26:0f:0b:ea:ed:9f:ec:87:c1:e0:b1:e7:8b:
                    66:9a:96:87:40:46:29:64:3a:70:2e:a0:6c:31:fa:
                    c4:f8:2f:4e:66:8b:97:cb:bf:98:04:fd:1e:33:a1:
                    30:49:76:b8:f8:11:15:c2:cb:1c:10:6b:de:90:55:
                    53:54:ed:ca:7c:07:2f:23:43:e1:26:54:c4:73:31:
                    64:14:c3:71:81:55:16:51:1f:0c:a3:be:2b:50:18:
                    63:22:94:b3:ef:08:70:33:f7:2b:fb:89:46:75:4d:
                    13:67:8c:6a:ef:77:85:73:68:5a:1d:57:25:d8:a5:
                    95:44:a9:d3:88:a3:7b:1e:34:b7:bc:90:5d:49:54:
                    0f:12:1c:6a:f8:39:ed:3f:3f:ee:ec:b4:6f:9a:65:
                    96:85:aa:2f:60:40:f1:3f:06:a7:c4:e9:00:62:bc:
                    a4:23:86:a2:f0:8b:be:8d:a4:cc:80:b7:ee:9e:00:
                    f9:b4:5a:a3:df:6b:7f:56:c9:2b:d8:80:a9:07:dd:
                    3a:00:a9:72:97:6c:03:ea:c9:56:10:5e:1f:54:a9:
                    51:c3:b0:31:ad:68:fe:21:63:2c:8e:14:80:c0:4f:
                    4a:1e:eb:10:13:05:43:8a:9c:cb:fd:39:ca:bd:67:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FC:A8:47:FA:11:B8:79:24:B7:0C:AE:8F:4D:F7:8B:AE:FE:89:27
            X509v3 Authority Key Identifier:
                keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ce:80:6d:80:fb:24:47:94:4d:61:96:82:0a:3f:42:6d:20:
         15:51:0b:6d:7f:c5:8d:9c:62:30:a2:7a:20:25:97:f2:1b:37:
         49:5c:29:35:cf:52:68:d9:d1:f8:d3:a8:63:c4:1f:36:e2:ca:
         84:f5:0c:e2:3d:5b:6c:00:e7:16:d9:f9:57:6e:8b:c9:10:fa:
         d3:8d:74:7a:3b:d1:84:92:e8:d1:eb:dd:65:fd:11:53:ab:15:
         44:6b:f1:3d:4e:f6:93:bf:71:e5:3c:f7:8d:ac:33:5f:fc:a8:
         80:5a:1e:d8:71:41:9b:08:a0:ea:91:e0:bc:af:b6:72:ce:26:
         2d:43:90:ca:e3:e0:05:97:d9:7f:ed:d2:48:57:b7:7d:a5:42:
         1d:1d:29:77:ad:6b:82:32:0d:04:67:f4:b7:09:81:db:37:06:
         2d:d1:4f:3a:bc:53:00:c7:45:ea:0d:91:6a:b9:9a:fb:91:39:
         c5:b2:68:55:d7:05:66:f2:26:62:e1:4d:c7:c3:48:60:dc:c2:
         36:8c:a5:ca:75:5c:e3:78:5c:ad:bb:5d:6e:b4:b2:f9:3d:51:
         3c:38:52:41:95:f2:19:2e:67:bf:ec:40:0e:bb:d7:1d:11:2a:
         cc:a2:0d:ae:8b:2a:71:8e:37:f3:3a:e8:84:79:90:07:d2:bb:
         4e:d7:24:de
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGr8s1XTiD4w+Jhy5h+BjPJejnLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY2NUM0QTBDQjAxQTJENjQ3QjIyNzdDNTgwOTdGRUZF
M0Q4MEFDMzAeFw0yNjAzMDIwODM0NTlaFw0yNjAzMDcxOTEyNTlaMDMxMTAvBgNV
BAMTKEFCRkNBODQ3RkExMUI4NzkyNEI3MENBRThGNERGNzhCQUVGRTg5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHRRmmtW2/OiOyxumxmhsJJg8L
6u2f7IfB4LHni2aalodARilkOnAuoGwx+sT4L05mi5fLv5gE/R4zoTBJdrj4ERXC
yxwQa96QVVNU7cp8By8jQ+EmVMRzMWQUw3GBVRZRHwyjvitQGGMilLPvCHAz9yv7
iUZ1TRNnjGrvd4VzaFodVyXYpZVEqdOIo3seNLe8kF1JVA8SHGr4Oe0/P+7stG+a
ZZaFqi9gQPE/BqfE6QBivKQjhqLwi76NpMyAt+6eAPm0WqPfa39WySvYgKkH3ToA
qXKXbAPqyVYQXh9UqVHDsDGtaP4hYyyOFIDAT0oe6xATBUOKnMv9Ocq9Z+jjAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUq/yoR/oRuHkktwyuj033i67+iScwHwYDVR0j
BBgwFoAUn2XEoMsBotZHsid8WAl/7+PYCsMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQTIwQ0M3MDlDQTFENjlGNzRCQkE3RTZFODdGRjVERDRC
Mzc4M0Y5Q0ExODI0RDJBNzgyMDA0RTU5MTg2N0FCLzAvOUY2NUM0QTBDQjAxQTJE
NjQ3QjIyNzdDNTgwOTdGRUZFM0Q4MEFDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjY1QzRBMENCMDFBMkQ2NDdC
MjI3N0M1ODA5N0ZFRkUzRDgwQUMzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkEyMENDNzA5Q0ExRDY5Rjc0QkJBN0U2RTg3RkY1REQ0QjM3ODNGOUNB
MTgyNEQyQTc4MjAwNEU1OTE4NjdBQi8wLzlGNjVDNEEwQ0IwMUEyRDY0N0IyMjc3
QzU4MDk3RkVGRTNEODBBQzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3zoBtgPskR5RNYZaCCj9CbSAV
UQttf8WNnGIwonogJZfyGzdJXCk1z1Jo2dH406hjxB824sqE9QziPVtsAOcW2flX
bovJEPrTjXR6O9GEkujR691l/RFTqxVEa/E9TvaTv3HlPPeNrDNf/KiAWh7YcUGb
CKDqkeC8r7ZyziYtQ5DK4+AFl9l/7dJIV7d9pUIdHSl3rWuCMg0EZ/S3CYHbNwYt
0U86vFMAx0XqDZFquZr7kTnFsmhV1wVm8iZi4U3Hw0hg3MI2jKXKdVzjeFytu11u
tLL5PVE8OFJBlfIZLme/7EAOu9cdESrMog2uiypxjjfzOuiEeZAH0rtO1yTe
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:34 2026 by rpki-client