Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
File:                     2D8A5D8A34E265B308F626454D8A6E920C65D608.mft (raw, json)
Hash identifier:          fTen9LK+ZEhWr6+ucR932GoDzEBywEcVNHvsiTeO/Ug=
Subject key identifier:   E8:D0:83:6E:6E:B9:2C:7E:7B:B3:5F:43:D9:74:CC:BF:CC:6A:30:0A
Authority key identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08
Certificate issuer:       /CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
Certificate serial:       08E3D6BC2771818AC686155E55B4F00A85309580
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
Manifest number:          A9
Signing time:             Fri 17 Apr 2026 16:03:32 +0000
Manifest this update:     Fri 17 Apr 2026 15:58:32 +0000
Manifest next update:     Wed 22 Apr 2026 10:13:32 +0000
Files and hashes:         1: 2D8A5D8A34E265B308F626454D8A6E920C65D608.crl (hash: 5szmlIMptSUW1ziQbMAnocTHc78GgXtAx787rwNIX9M=)
                          2: 323830333a3539303a3a2f33322d3332203d3e20323732393634.roa (hash: MiRAETUfH9BlCGg8tfP4JXli3fS+cIDzZ05tQ8zDulw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e3:d6:bc:27:71:81:8a:c6:86:15:5e:55:b4:f0:0a:85:30:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
        Validity
            Not Before: Apr 17 15:58:32 2026 GMT
            Not After : Apr 22 10:13:32 2026 GMT
        Subject: CN=E8D0836E6EB92C7E7BB35F43D974CCBFCC6A300A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:44:1a:18:60:3e:af:aa:f3:b7:be:1a:9a:
                    83:46:40:29:98:5a:85:96:66:5d:00:10:ad:67:ef:
                    c4:95:d0:d2:fc:3b:22:32:76:53:69:c8:7d:9c:5b:
                    8a:40:e0:84:c2:ee:0b:af:61:90:75:79:d0:2a:eb:
                    1e:98:f9:df:c5:cc:02:4e:bb:06:d4:06:83:44:95:
                    17:ab:36:62:0f:c9:c3:99:8a:7a:79:e1:f2:a1:87:
                    d0:14:41:b4:e8:9f:99:ab:38:34:32:12:3c:bf:f5:
                    b8:9c:62:af:b9:45:40:f5:33:87:72:a9:44:30:4b:
                    ab:1d:f0:13:bf:b2:b6:34:05:09:3b:62:3f:52:84:
                    2f:7c:54:5d:bd:8a:86:46:2a:1e:fa:be:0b:87:56:
                    33:b7:2a:a0:2b:12:ea:87:c9:51:ae:e8:c9:5c:f5:
                    16:28:7d:28:1e:a0:95:ed:8b:9b:4d:c6:ba:f0:ac:
                    44:0c:af:01:49:dc:1b:3d:c6:a4:38:85:04:d3:59:
                    90:4d:f3:50:39:81:94:e1:3e:fe:ef:02:ee:04:f3:
                    77:6b:bb:b2:2b:6d:84:15:c8:68:07:bd:c9:76:c4:
                    eb:bd:06:d9:9c:97:ad:76:86:42:15:c9:48:78:0e:
                    80:f3:58:b8:1c:f7:7e:96:fc:2e:14:4e:2d:9b:26:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D0:83:6E:6E:B9:2C:7E:7B:B3:5F:43:D9:74:CC:BF:CC:6A:30:0A
            X509v3 Authority Key Identifier:
                keyid:2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a5:d2:38:a6:db:26:8b:bd:2d:02:b7:3c:99:5a:6a:cc:2a:
         42:61:f6:2e:a4:b4:fb:dc:e2:ae:73:25:c9:d9:79:19:1b:68:
         4e:1b:dd:81:51:ba:1f:78:21:1d:78:a8:33:74:f7:9d:b0:d0:
         21:6d:29:97:f6:79:2a:54:31:f5:da:b3:20:5c:b6:a4:02:dc:
         f6:18:5b:ce:df:5f:8b:14:e8:95:a0:88:78:0b:be:bc:a0:03:
         3e:d8:48:f0:63:13:7f:61:b9:ce:47:1d:b4:19:ac:89:cc:60:
         bb:92:a3:6f:53:68:0d:c6:be:32:04:68:92:45:1e:e4:91:3a:
         2c:e8:6c:87:27:66:39:10:05:76:cf:f3:f6:14:15:99:10:1b:
         e5:63:8e:c4:0b:3d:4f:6f:5e:2d:8d:64:97:1f:54:f0:46:e9:
         62:37:3c:52:05:4f:e7:1e:bb:c3:18:a3:4f:31:42:46:d3:2a:
         ac:71:8f:9d:e2:55:d3:9f:c4:ae:b6:42:17:0d:37:29:f1:a3:
         fa:12:9f:0d:96:f0:a1:df:90:9e:d7:33:45:63:17:16:a0:04:
         f1:7e:9c:76:66:ad:5d:4f:99:ed:d2:73:5a:dc:cd:26:c9:82:
         8c:48:f4:b9:9e:7e:c5:ff:96:03:a6:1b:54:94:b3:12:8b:67:
         27:dd:b6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:09:12 2026 by rpki-client