Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
File:                     D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json)
Hash identifier:          OY9N08oX/aqhxl6Nrm79Kjs1MdVd9W190fHMfWRUymY=
Subject key identifier:   47:95:FA:F7:AA:CE:95:BC:6F:2A:C7:47:F0:9F:86:FA:3B:A7:F7:1E
Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9
Certificate issuer:       /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
Certificate serial:       515DBFABA5A729929806B3040FE925439447C897
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
Manifest number:          0130
Signing time:             Tue 04 Nov 2025 07:26:56 +0000
Manifest this update:     Tue 04 Nov 2025 07:21:56 +0000
Manifest next update:     Mon 10 Nov 2025 03:27:56 +0000
Files and hashes:         1: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: mBKhXxYsc1vM9qDvar5UCFnx02/AKC+zK1K7wPk+Ot0=)
                          2: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: BcArZUrYVfZLXGddjX65VJ8Suqj9fh6DrgZdC5pMGog=)
                          3: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: uKlYknlH6eACUcPldvmZgtLq4BGG754AwHjUVlk6W6w=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5d:bf:ab:a5:a7:29:92:98:06:b3:04:0f:e9:25:43:94:47:c8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
        Validity
            Not Before: Nov  4 07:21:56 2025 GMT
            Not After : Nov 10 03:27:56 2025 GMT
        Subject: CN=4795FAF7AACE95BC6F2AC747F09F86FA3BA7F71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:15:e3:24:7c:1b:77:d4:cf:d8:f8:af:f2:
                    c9:79:c4:0d:a8:4a:46:77:d6:fa:8c:9a:c1:60:ea:
                    f1:1b:d0:16:3f:61:83:14:48:3d:e5:0b:d5:7e:41:
                    61:e1:86:f5:f3:bd:76:ba:d0:bd:66:70:ad:b6:8d:
                    e4:00:58:f4:4f:f2:3c:91:14:62:52:e9:ae:d7:9b:
                    fa:f1:a5:c4:8d:be:b4:0e:d4:00:d5:e9:02:4c:14:
                    4d:96:7c:26:5c:d5:71:a4:a1:12:27:19:a2:fe:a8:
                    7a:ed:26:82:02:d7:6c:1c:9d:24:c6:f9:b3:ab:bb:
                    8c:01:70:35:84:6b:74:1e:07:a7:09:fc:d0:3b:49:
                    d5:22:85:fc:a5:a6:35:35:0c:b2:02:cf:63:fb:e1:
                    82:c5:0f:9c:0b:ba:78:04:ab:cd:ec:0d:fc:89:00:
                    24:e6:b2:ce:ea:de:72:38:a9:41:a0:f3:cc:fc:dd:
                    a3:c5:68:7e:59:a3:5e:33:0b:a7:80:83:5b:e5:4a:
                    af:7a:3d:3c:d5:42:04:1c:86:e2:c0:d2:0e:ee:c2:
                    a0:08:dd:be:07:0d:57:3c:c2:4c:5c:64:c5:1c:f1:
                    55:e8:84:a5:c0:dc:a8:4d:ae:7e:e1:55:2a:62:66:
                    6f:14:8f:98:a1:12:a1:40:a0:99:71:61:c0:71:58:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:95:FA:F7:AA:CE:95:BC:6F:2A:C7:47:F0:9F:86:FA:3B:A7:F7:1E
            X509v3 Authority Key Identifier:
                keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:65:a9:4c:a4:27:da:e4:51:c8:20:13:01:20:1e:42:db:de:
         e0:ed:64:6e:5a:59:b3:84:2c:88:84:a3:3d:21:4b:37:51:1a:
         94:92:4f:9a:31:7d:0c:d5:b4:29:65:8e:8e:c3:b1:e5:36:75:
         8c:1d:1a:d9:54:c3:e7:71:b6:69:43:18:3a:13:a3:55:ef:ab:
         3b:b5:6d:1e:a9:6d:3d:80:bf:45:79:bc:c4:a2:a5:03:9a:b0:
         a9:92:6c:3b:e8:81:00:a3:24:d9:e9:25:d2:5f:e4:8e:5d:2c:
         12:3f:df:89:a8:7b:ae:08:c0:0c:50:bd:33:f8:0c:7a:7f:af:
         c6:34:9c:bc:79:71:08:5c:92:c5:bb:95:d7:fc:74:9b:62:d0:
         20:2c:8c:57:3a:08:70:e3:0e:91:75:e8:c6:8f:14:2f:e7:31:
         55:a8:91:8e:10:b8:60:d9:9b:4d:e2:30:7a:b8:84:2f:6c:c9:
         2e:89:e5:d6:1e:83:3e:bd:83:5a:90:71:50:70:b6:01:f6:fa:
         34:5a:21:eb:33:76:54:51:e9:ab:2a:a6:c5:c7:ba:3f:51:10:
         0a:00:a5:2b:a3:34:1a:1c:3b:fe:b4:cd:9c:6d:24:98:42:63:
         92:fa:cb:6a:5b:ce:20:83:65:7c:73:9f:53:eb:de:bb:81:e8:
         43:1c:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:44:09 2025 by rpki-client