Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
File:                     C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft (raw, json)
Hash identifier:          hh9YWHO/qqeCq6KcIPw6cdpE3hDWsEjfGj65AnLHhhc=
Subject key identifier:   22:0F:D7:D3:4C:FB:CC:07:8C:9F:8F:A9:C2:F2:96:6E:81:9B:3E:88
Authority key identifier: C2:3C:6D:A8:7C:DE:76:54:CE:5B:5A:DD:EC:74:8B:19:EE:F5:EE:1A
Certificate issuer:       /CN=C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A
Certificate serial:       0D4D6A6E10ECBACE81FFAC407B48A7DA4BECE8AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
Manifest number:          4D
Signing time:             Thu 16 Apr 2026 22:12:12 +0000
Manifest this update:     Thu 16 Apr 2026 22:07:12 +0000
Manifest next update:     Tue 21 Apr 2026 16:41:12 +0000
Files and hashes:         1: 323830333a346631303a3a2f33322d3438203d3e20323732313138.roa (hash: cfqpMesVtTCJW/gXILlWyOfzQXanZJn3CLqfjz47nrA=)
                          2: C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl (hash: NJY55KQQEwdU4etStcyyz+r799nMa/3dxc2CD0qWZmU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 16:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4d:6a:6e:10:ec:ba:ce:81:ff:ac:40:7b:48:a7:da:4b:ec:e8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A
        Validity
            Not Before: Apr 16 22:07:12 2026 GMT
            Not After : Apr 21 16:41:12 2026 GMT
        Subject: CN=220FD7D34CFBCC078C9F8FA9C2F2966E819B3E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:cc:ed:7b:ac:2d:5d:01:87:4e:94:d9:c4:
                    e7:8f:7d:47:9a:4d:36:2d:07:84:a6:4c:cd:49:51:
                    7a:92:54:0b:c1:68:40:cc:3d:52:37:ba:bb:d6:b4:
                    00:96:7c:04:c0:54:6d:cb:9b:30:b3:1e:44:e5:61:
                    5f:ff:7b:ad:35:45:dc:16:c4:87:ac:eb:45:4f:72:
                    88:ea:b3:21:ed:c8:87:9d:f4:38:57:b8:57:81:0b:
                    35:df:3f:e9:77:3e:f8:99:2a:0d:4c:01:0d:94:34:
                    54:89:ca:10:b3:0f:d5:1a:e9:2c:21:8a:d8:b3:53:
                    c3:66:85:8b:12:6f:e5:49:81:4d:e0:90:2c:6b:75:
                    02:f1:3d:ae:3e:b6:a0:9e:a4:bc:83:e1:1c:44:30:
                    be:cf:c3:fc:ce:78:fc:91:b3:fb:b5:9d:d3:cf:10:
                    fe:69:c0:ed:90:d1:af:ab:14:b1:63:a8:31:a7:37:
                    5c:ad:f4:9a:8f:dd:6d:5d:b5:a8:46:6e:25:f0:a6:
                    b8:5e:fa:5c:4a:8c:aa:e8:5f:ce:3c:76:70:31:4a:
                    95:7d:ab:22:ad:d9:f3:b7:23:01:69:f7:23:30:07:
                    a0:cc:bd:6a:1e:b6:39:6d:12:df:bf:cf:86:4a:1a:
                    b0:83:84:45:30:3b:09:78:b2:cb:cc:8b:f0:93:f3:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0F:D7:D3:4C:FB:CC:07:8C:9F:8F:A9:C2:F2:96:6E:81:9B:3E:88
            X509v3 Authority Key Identifier:
                keyid:C2:3C:6D:A8:7C:DE:76:54:CE:5B:5A:DD:EC:74:8B:19:EE:F5:EE:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3c:96:b6:1f:88:c7:f7:bb:88:f7:7d:1a:b7:cd:26:b9:a1:
         64:72:e2:c3:df:d0:eb:2c:11:68:93:40:d6:d4:35:9e:9a:37:
         d4:26:bb:c4:ef:61:47:a1:76:96:1a:6a:73:8c:18:77:e6:21:
         28:39:48:51:6a:42:c6:7c:d0:63:ea:19:40:08:57:64:57:30:
         21:cd:e0:9a:67:0a:47:01:90:4c:df:50:91:29:67:1b:5a:7a:
         e6:51:35:1f:be:a6:98:cd:e8:7d:70:47:00:8b:ca:5b:74:1c:
         90:95:0d:fe:f4:95:11:c5:e9:25:15:bf:6a:ce:c1:23:d0:2b:
         6a:da:fb:fc:aa:33:0c:d7:74:b8:32:34:99:9e:49:ee:46:31:
         fa:ad:86:c5:30:fc:33:a3:84:3f:63:e5:20:e0:07:b1:30:19:
         1b:c4:da:c4:43:27:20:a2:54:31:c0:40:11:28:97:8e:ca:c7:
         5d:98:ff:7b:85:2e:8f:ef:1b:b1:3a:87:a1:18:66:c0:96:be:
         cf:bf:0c:b6:91:a6:70:87:58:e5:1c:2c:31:08:cc:5b:32:7f:
         18:12:9b:7a:f6:7f:ab:0d:8f:be:6f:e2:0b:a0:6d:bf:39:7e:
         70:bf:06:70:9c:35:85:81:19:c3:21:b7:cd:e1:6b:e4:24:1b:
         e6:7f:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:19:11 2026 by rpki-client