Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
File:                     D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft (raw, json)
Hash identifier:          2A6eAwKPwXUBjHHcFw4esmim+u1wwsYBrQcT5pVktpA=
Subject key identifier:   B1:70:1A:29:15:73:AA:A0:1E:4C:48:0A:C6:69:81:6B:59:10:98:1A
Authority key identifier: D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F
Certificate issuer:       /CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F
Certificate serial:       69AE73A3CBDB7654DF2547A91635C6414DACF7C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
Manifest number:          0131
Signing time:             Tue 04 Nov 2025 08:32:30 +0000
Manifest this update:     Tue 04 Nov 2025 08:27:30 +0000
Manifest next update:     Mon 10 Nov 2025 02:52:30 +0000
Files and hashes:         1: D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl (hash: oeESaJeqpU0YUb2RfwfleYZ8RyDlj+QPPlbSROWetP8=)
                          2: 323830333a633731303a3a2f33322d3438203d3e20323732303937.roa (hash: G0BebRbCMQwz5JmQI45KQq7usDiHpo7rctjcsb/5YS0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ae:73:a3:cb:db:76:54:df:25:47:a9:16:35:c6:41:4d:ac:f7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F
        Validity
            Not Before: Nov  4 08:27:30 2025 GMT
            Not After : Nov 10 02:52:30 2025 GMT
        Subject: CN=B1701A291573AAA01E4C480AC669816B5910981A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:1e:24:15:b4:82:33:b8:0a:0d:50:65:1e:
                    a8:71:c5:42:9f:40:8a:4e:83:c9:fe:d7:f0:46:7b:
                    e3:b9:94:48:c0:3d:fd:ad:77:07:95:7a:b0:9a:55:
                    cf:27:2c:34:86:7c:37:50:66:c9:21:25:a1:88:56:
                    47:85:17:cf:f4:fc:88:7d:36:a4:62:3e:11:a3:04:
                    81:f5:4b:d4:19:1e:73:1a:9a:2f:4c:66:e2:78:c3:
                    26:72:9b:2e:e6:8f:68:ee:8e:93:aa:87:b3:2e:57:
                    0e:de:26:a5:80:47:6a:23:7b:01:30:e0:cb:b1:41:
                    bc:7d:7a:f0:45:07:b3:0d:35:97:e4:a6:85:ff:e1:
                    1e:d0:3d:9f:33:0b:cf:4f:24:e9:bc:eb:eb:8e:6a:
                    37:8a:fa:86:07:e5:2d:94:ce:47:cc:2a:69:32:11:
                    4f:fc:bd:39:32:68:cb:f6:82:79:b4:91:28:bb:55:
                    8e:f6:35:d9:21:14:62:78:56:34:26:c8:e1:7b:c0:
                    69:22:1d:65:3c:01:b1:4f:a0:f8:7e:50:57:8a:4d:
                    11:61:3d:9c:d8:dd:ff:c1:7d:f8:11:83:2a:0b:8e:
                    61:14:c0:99:87:d8:19:ea:55:04:69:af:2d:62:fb:
                    32:1f:6d:a4:fb:93:58:a0:4b:bb:95:c1:ab:19:a6:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:70:1A:29:15:73:AA:A0:1E:4C:48:0A:C6:69:81:6B:59:10:98:1A
            X509v3 Authority Key Identifier:
                keyid:D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:82:89:e3:94:a1:12:7e:19:2c:6d:4b:39:2b:ed:ac:25:
         c6:e6:df:5b:9c:72:ae:e7:a0:a1:ff:96:3c:9b:ca:3b:f9:ab:
         1d:c4:d5:d6:c7:92:b6:53:8c:1f:67:ee:5b:0c:cc:56:42:7d:
         26:f7:d0:e1:cd:78:fb:94:87:d2:7e:d8:38:ea:c4:0e:71:06:
         76:2e:05:dc:88:b7:fb:1a:03:a0:3c:f9:3b:17:df:ed:3e:46:
         27:b8:de:44:db:77:ce:9c:78:0e:ee:de:80:61:1e:78:b0:19:
         f5:17:3d:f9:35:73:4a:9e:a3:3f:81:30:dd:63:0b:46:85:09:
         ab:70:70:f8:d7:d6:c1:38:b3:86:77:8e:91:8d:1f:6d:ac:0a:
         e3:58:90:a6:16:9c:b2:65:7b:ce:df:14:ba:86:09:c9:67:26:
         3f:2d:18:1f:74:8e:9e:99:fa:72:65:01:15:cd:31:5a:5c:8d:
         c3:19:76:01:a1:19:7f:20:fa:37:78:83:6d:d0:39:08:4f:51:
         ac:2a:c7:68:df:ba:82:7e:72:63:ab:a6:3d:9d:42:a0:ed:a7:
         6c:f1:0b:d1:dc:b8:4f:2d:85:42:69:48:bf:4b:44:4d:c1:0a:
         2d:88:97:bc:c5:52:45:0e:73:46:b0:11:0e:9f:45:0b:2b:9b:
         1a:48:3b:31
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUaa5zo8vbdlTfJUepFjXGQU2s98MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4OTcwRDZGMkEyODk4RThBREU1ODg2NkMxRThEMUI0
ODAxNUE5RjAeFw0yNTExMDQwODI3MzBaFw0yNTExMTAwMjUyMzBaMDMxMTAvBgNV
BAMTKEIxNzAxQTI5MTU3M0FBQTAxRTRDNDgwQUM2Njk4MTZCNTkxMDk4MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/B4kFbSCM7gKDVBlHqhxxUKf
QIpOg8n+1/BGe+O5lEjAPf2tdweVerCaVc8nLDSGfDdQZskhJaGIVkeFF8/0/Ih9
NqRiPhGjBIH1S9QZHnMami9MZuJ4wyZymy7mj2jujpOqh7MuVw7eJqWAR2ojewEw
4MuxQbx9evBFB7MNNZfkpoX/4R7QPZ8zC89PJOm86+uOajeK+oYH5S2UzkfMKmky
EU/8vTkyaMv2gnm0kSi7VY72NdkhFGJ4VjQmyOF7wGkiHWU8AbFPoPh+UFeKTRFh
PZzY3f/BffgRgyoLjmEUwJmH2BnqVQRpry1i+zIfbaT7k1igS7uVwasZpkT7AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUsXAaKRVzqqAeTEgKxmmBa1kQmBowHwYDVR0j
BBgwFoAU1olw1vKiiY6K3liGbB6NG0gBWp8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RTZENUVEQzc0MzlFNzkyQTkwNDBEREZDODJFNEEzOTlE
ODkyQkQxNjFDMDY4NkRGRURDN0MzMEEwMEZDMjI1LzAvRDY4OTcwRDZGMkEyODk4
RThBREU1ODg2NkMxRThEMUI0ODAxNUE5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjg5NzBENkYyQTI4OThFOEFE
RTU4ODY2QzFFOEQxQjQ4MDE1QTlGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUU2RDVFREM3NDM5RTc5MkE5MDQwRERGQzgyRTRBMzk5RDg5MkJEMTYx
QzA2ODZERkVEQzdDMzBBMDBGQzIyNS8wL0Q2ODk3MEQ2RjJBMjg5OEU4QURFNTg4
NjZDMUU4RDFCNDgwMTVBOUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8XoKJ45ShEn4ZLG1LOSvtrCXG
5t9bnHKu56Ch/5Y8m8o7+asdxNXWx5K2U4wfZ+5bDMxWQn0m99DhzXj7lIfSftg4
6sQOcQZ2LgXciLf7GgOgPPk7F9/tPkYnuN5E23fOnHgO7t6AYR54sBn1Fz35NXNK
nqM/gTDdYwtGhQmrcHD419bBOLOGd46RjR9trArjWJCmFpyyZXvO3xS6hgnJZyY/
LRgfdI6emfpyZQEVzTFaXI3DGXYBoRl/IPo3eINt0DkIT1GsKsdo37qCfnJjq6Y9
nUKg7ads8QvR3LhPLYVCaUi/S0RNwQotiJe8xVJFDnNGsBEOn0ULK5saSDsx
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:44:09 2025 by rpki-client