Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
File:                     2D8A5D8A34E265B308F626454D8A6E920C65D608.mft (raw, json)
Hash identifier:          EbyQRpGQGRPFkzwx6yq3jteHFhTs+op2q9DhQMa7+Js=
Subject key identifier:   95:56:58:47:6F:8D:48:49:A2:EE:9B:67:27:FA:5D:92:BF:38:32:12
Authority key identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08
Certificate issuer:       /CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
Certificate serial:       69D2601FF937E5E411EA4EDFA4075A8B7F36AD6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
Manifest number:          59
Signing time:             Tue 04 Nov 2025 23:15:28 +0000
Manifest this update:     Tue 04 Nov 2025 23:10:28 +0000
Manifest next update:     Sun 09 Nov 2025 18:29:28 +0000
Files and hashes:         1: 2D8A5D8A34E265B308F626454D8A6E920C65D608.crl (hash: QXRVsE2JsXOk9pcfedlx2jYj6WETrAveTteZmWfAwfM=)
                          2: 323830333a3539303a3a2f33322d3332203d3e20323732393634.roa (hash: ZtjREPCj/eeu/E9mBRi9OvFD2ENA47U6yaCq0Q6c32c=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d2:60:1f:f9:37:e5:e4:11:ea:4e:df:a4:07:5a:8b:7f:36:ad:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
        Validity
            Not Before: Nov  4 23:10:28 2025 GMT
            Not After : Nov  9 18:29:28 2025 GMT
        Subject: CN=955658476F8D4849A2EE9B6727FA5D92BF383212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:52:cd:98:fb:7e:13:9c:76:d8:81:05:af:
                    86:7a:9a:9d:1e:7b:10:9b:0e:d7:46:ab:32:c6:4f:
                    cd:37:66:14:c2:63:51:64:74:07:46:6c:7d:d5:8e:
                    fb:4e:fa:7d:b6:19:2b:2c:2c:45:63:50:6c:e9:74:
                    fc:34:00:7d:c0:a5:af:dd:04:b3:64:b4:e5:7f:90:
                    ad:be:81:17:54:62:70:d8:ba:ed:f3:93:10:14:17:
                    4f:b3:c5:78:e1:51:3d:b4:e2:94:91:4b:81:0e:ce:
                    8c:b0:c7:e4:8c:12:14:4f:2a:25:d0:24:f4:ba:fa:
                    0e:63:0e:26:99:f1:46:35:35:19:51:88:89:ca:53:
                    e9:ca:59:b7:10:2f:51:93:4a:95:47:32:33:d1:78:
                    c6:88:7e:46:7a:e8:62:62:a7:28:5a:dd:86:22:60:
                    5f:85:7c:97:f5:4e:e7:25:0f:1c:22:81:e6:55:d7:
                    a9:f3:51:43:72:a0:a6:42:90:65:55:e3:f7:4b:1d:
                    e8:c5:f2:6c:20:2d:d5:ac:85:a5:15:84:ec:c9:e0:
                    f9:22:de:aa:16:3c:77:39:31:cc:75:6a:04:eb:b8:
                    03:96:f8:98:4c:8e:d6:b9:22:79:12:96:32:84:8c:
                    17:ce:47:fc:67:8c:e9:c6:4d:12:94:0f:16:80:47:
                    ed:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:56:58:47:6F:8D:48:49:A2:EE:9B:67:27:FA:5D:92:BF:38:32:12
            X509v3 Authority Key Identifier:
                keyid:2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a8:17:3f:a9:08:24:b7:2f:98:7d:ea:0d:8d:aa:ac:41:fe:
         d8:78:0b:9d:3c:e9:f6:94:89:9f:b0:5b:8b:a0:6b:cb:c3:96:
         d2:8f:d9:83:25:f8:c2:e8:37:fc:c0:69:28:28:30:12:75:dd:
         95:50:af:29:27:04:2c:d2:90:1a:34:31:8d:9b:b7:36:df:17:
         6b:bc:57:82:a3:50:f9:32:a5:10:8c:c2:e6:e5:2d:58:da:05:
         9c:73:0c:bc:e7:2e:d4:80:49:ff:ac:cf:c5:94:1d:51:42:0b:
         f2:01:5f:97:5e:ef:e4:14:22:e8:9b:5a:48:bd:2d:63:7f:a7:
         32:24:a5:ea:c9:88:5c:91:2e:08:da:68:ac:27:fd:f4:bb:30:
         38:c0:76:ce:c4:9a:4e:05:d1:31:ba:40:28:e9:54:99:a9:d2:
         90:48:43:77:69:af:97:3f:5d:2e:ea:8d:09:df:13:0e:b9:89:
         ba:36:14:c1:0e:50:b3:7e:b1:58:4c:ee:37:5f:66:f5:d7:88:
         96:c2:ef:dc:d9:88:93:25:4a:5e:72:07:8a:25:49:12:1d:a1:
         40:8d:59:55:a5:05:08:ba:60:e2:63:13:cc:b8:23:c6:08:bb:
         9b:8a:1e:89:f3:bd:bd:c3:dc:05:c5:ed:bb:99:21:18:99:58:
         24:6f:c7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:27:15 2025 by rpki-client