Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
File:                     85E8329CBFB72C73936DE19616620415214EDD8A.mft (raw, json)
Hash identifier:          V9Xq3nYKnoAGMMuxUdd+i3elbFKTZcjDq13jjdd16X4=
Subject key identifier:   CA:21:1D:AE:D7:AD:06:00:A4:D2:43:BA:5C:3C:5B:46:77:FF:64:77
Authority key identifier: 85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A
Certificate issuer:       /CN=85E8329CBFB72C73936DE19616620415214EDD8A
Certificate serial:       5167EFCAB7EA4FE0919E9BDDF77CF4E9C73AA54D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
Manifest number:          0145
Signing time:             Thu 29 Oct 2026 07:55:22 +0000
Manifest this update:     Thu 29 Oct 2026 07:50:22 +0000
Manifest next update:     Tue 03 Nov 2026 09:55:22 +0000
Files and hashes:         1: 85E8329CBFB72C73936DE19616620415214EDD8A.crl (hash: 418buWbPCiJrl4WBJtlPGQLf+mOb0YLnv3wHH1EF6oE=)
                          2: 323830333a3261303a3a2f33322d3332203d3e203135383330.roa (hash: QfXjR2c5C8SCB602pAa988tt47aRPyXAJnQlthS5Ay0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 09:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:67:ef:ca:b7:ea:4f:e0:91:9e:9b:dd:f7:7c:f4:e9:c7:3a:a5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85E8329CBFB72C73936DE19616620415214EDD8A
        Validity
            Not Before: Oct 29 07:50:22 2026 GMT
            Not After : Nov  3 09:55:22 2026 GMT
        Subject: CN=CA211DAED7AD0600A4D243BA5C3C5B4677FF6477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:d5:3c:32:64:dc:93:da:cb:f6:65:57:13:
                    a4:32:80:5d:78:db:b1:45:d9:cb:36:9f:5d:5e:0c:
                    fc:ed:b5:6d:d5:94:da:d6:6a:c2:08:e5:51:2a:e6:
                    cf:44:fb:68:93:db:83:81:75:7d:c1:c4:e9:27:dd:
                    e3:3c:02:1a:dc:c3:2e:7c:b5:51:19:34:ae:a6:9a:
                    63:ed:b8:16:82:a9:2d:96:76:fb:d6:4a:31:3f:11:
                    d4:08:1c:23:fd:61:e5:ec:4e:f5:a8:b7:df:51:5e:
                    cd:67:a9:9d:af:e5:76:b4:38:15:ff:6c:72:f9:fc:
                    fe:d2:fe:ff:22:fd:92:e4:90:d0:b0:ce:01:9f:85:
                    a9:9f:ea:3c:c6:fe:8b:7b:72:5a:b4:eb:9f:bf:30:
                    99:ce:a5:cf:5d:6b:58:9b:74:47:72:3f:a8:19:fb:
                    5a:10:d0:68:2e:0d:3d:fb:20:05:f8:f7:83:10:29:
                    a2:e3:ec:8c:11:dc:d9:6f:89:1c:22:7e:97:a0:3f:
                    c0:b5:11:69:bc:b8:8f:b9:35:6d:71:47:8e:f9:5f:
                    b5:78:69:06:56:e0:b5:6c:47:8a:bb:1b:9f:ae:89:
                    7d:0f:f6:9d:43:66:c4:cf:63:cf:57:39:0a:f4:35:
                    8c:79:cc:44:32:d5:e8:8b:ef:24:59:2e:2c:c9:e9:
                    21:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:21:1D:AE:D7:AD:06:00:A4:D2:43:BA:5C:3C:5B:46:77:FF:64:77
            X509v3 Authority Key Identifier:
                keyid:85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:db:cc:9f:59:71:08:51:fd:05:ad:5d:22:4e:11:6b:be:
         12:64:e9:50:b6:f2:68:eb:ec:43:dc:d5:cc:f0:60:ad:d6:91:
         dd:c8:06:80:65:9a:b8:6f:50:1d:a2:12:ee:83:36:8f:1f:a1:
         75:ed:57:71:5a:af:a7:c6:1c:04:b1:6c:29:c5:0e:6f:a1:96:
         29:4a:28:44:e5:15:2b:c2:c7:63:b5:53:8b:e7:74:97:4b:34:
         7c:2e:b1:42:2d:23:cf:75:fb:58:d1:4d:5b:71:dd:50:8f:10:
         d2:a6:9f:8a:2f:15:79:ad:82:b9:92:11:9f:a6:d5:78:57:ff:
         2e:4f:56:75:cf:3c:32:27:e8:89:7d:d5:1a:85:5f:8f:0d:03:
         30:be:a9:a7:27:9a:26:5b:5b:a6:4f:d7:b5:09:20:26:6b:b6:
         02:2b:fc:89:9a:04:f0:db:57:26:7d:01:f8:81:78:32:30:0e:
         b8:f5:53:5e:25:b7:91:83:52:bb:9d:75:1e:a5:7d:16:dc:3a:
         3b:b6:96:db:0f:b4:e0:82:6e:b1:61:e8:18:22:61:e4:99:3f:
         28:f8:20:f3:cf:17:c7:80:dd:b5:1f:30:51:77:29:36:cf:43:
         b4:dc:b0:05:0f:b8:6e:f3:98:81:01:2c:56:01:19:29:98:a6:
         f0:69:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:18:25 2026 by rpki-client