Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
File:                     EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft (raw, json)
Hash identifier:          FYqira1o99w22HTOoHLib2wcVyWk7tmfDseTgNL1Tc4=
Subject key identifier:   11:C7:82:50:75:9D:E3:41:47:6E:1B:4A:DC:CA:DA:AB:71:F8:FB:52
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       40D4B26E129786B313E0D76DA85E018A9765E391
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
Manifest number:          01B7
Signing time:             Sat 13 Jun 2026 13:16:17 +0000
Manifest this update:     Sat 13 Jun 2026 13:11:17 +0000
Manifest next update:     Thu 18 Jun 2026 06:36:17 +0000
Files and hashes:         1: 3137372e3235302e31362e302f32312d3231203d3e203237373638.roa (hash: HOfexxZD9sb5wWQzvPuHcrcv2k28+wolA8M1Tr4aidg=)
                          2: 3230312e3231372e32322e302f32332d3234203d3e203237373638.roa (hash: B8j9WMIAYPjn3Yjdzr5FgMA5m+caakK/uVw2qHmviNI=)
                          3: 3230312e3231372e34342e302f32342d3234203d3e203237373638.roa (hash: MUjjKrW+KtU3t565wtCqPkp4iHaX/3TFud/Zln8jTcY=)
                          4: 3230312e3231372e34302e302f32322d3234203d3e203237373638.roa (hash: HPM9RijvkIG7hcFNCWfDVAlcEf/bo4RDwK8Wo4BL2G4=)
                          5: 3137372e3235312e3235342e302f32342d3234203d3e203237373638.roa (hash: LA113ghDzmRMyS4Swe17rZ7zpyrj8UNSZuTbVtkwaOM=)
                          6: 3230312e3231372e31362e302f32322d3234203d3e203237373638.roa (hash: yxCzMtqZzgf8rz9NOKVgFFhlct2eYgvhkxim3BFxI6U=)
                          7: 3230312e3231372e31332e302f32342d3234203d3e203237373638.roa (hash: e1fmT6TsqQrjTLMcGMw8XxbPnRAs8Ny8sp4MA+uFX9E=)
                          8: 3230312e3231372e33362e302f32322d3234203d3e203237383636.roa (hash: Qkt3GUaQvwtyA01W8fs3jWAt7UyArdYLc6mwLwgr11M=)
                          9: 3230312e3231372e35342e302f32332d3234203d3e203237383636.roa (hash: Qhyc9juHxQfYTSjj+TVQ+TQ1OjjxGOw4bSHjfiWZ2mE=)
                          10: 3137372e3235302e3235322e302f32322d3232203d3e203237383636.roa (hash: rVra91ZpnlvSyNcizMeIWh8UTZBnTsUHK39L7t5sDuA=)
                          11: 3137372e3235302e36342e302f31382d3138203d3e203237373638.roa (hash: CLGmOj0G5/r0vUNtEJjO3pcs+wvr7U8/Rzvo66IcmCg=)
                          12: 3230312e3231372e35312e302f32342d3234203d3e203237383636.roa (hash: IYSUnVMuTJ6RhmnS2q0n2kJ3eOse7qGyz9CvXJAz6Mo=)
                          13: 3230312e3231372e33302e302f32332d3234203d3e203237373638.roa (hash: gPq6zrbx7eyEdn+UmZItKn7+TI+iKTvIyH+ijqCODto=)
                          14: 3230312e3231372e32392e302f32342d3234203d3e203237373638.roa (hash: pX1AWehdPr1hypwpXecVePFfbyBxnk/iTZJcftrXBqY=)
                          15: 3230312e3231372e34392e302f32342d3234203d3e203237373638.roa (hash: Mg7wiU+Ts4lM4kciQoOD63W6E0958koyD0paCTN3HjQ=)
                          16: 3137372e3235312e32342e302f32312d3231203d3e203237373638.roa (hash: TmMVBcMQU2hcJIKBe/fT9T/5obYEoTVyYSrOyhOG/hA=)
                          17: 3230312e3231372e31322e302f32342d3234203d3e203237383636.roa (hash: B6i5JCK7oD3QeLiFpp8sN3rxvO8lg5lgD3KvO4pZgBU=)
                          18: 3230312e3231372e32352e302f32342d3234203d3e203237373638.roa (hash: kX3yfHtLIyeNJ8mYM8KjpqCxnATHIiuOWz9PVB9Ixvk=)
                          19: 3137372e3235302e34382e302f32302d3230203d3e203237373638.roa (hash: eHzz1YJAsEkSaQEWX4wxEM8o1uWO2bzXhflB92fJ7gs=)
                          20: 3137372e3235302e33322e302f32302d3230203d3e203237373638.roa (hash: +e4WHWb5AtQr2OgwMb8Snazgc4/zryCOGYfvLOAxtrg=)
                          21: 3137372e3235312e3235322e302f32332d3233203d3e203237373638.roa (hash: tGit+OgQIQucha7Jx02nqa1JxZEv1odtW4LbERvdnvE=)
                          22: 3230312e3231372e34372e302f32342d3234203d3e203237373638.roa (hash: D7crIfdZhKY0CsPeXAgjSeDJcfbqS1QTL+rzlpARs0U=)
                          23: EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl (hash: aH+U2iwrbRC5r8Fw+m6TZq0z3ULaJpbCJEeXvdF4Z30=)
                          24: 3137372e3235302e36342e302f32302d3230203d3e203237373638.roa (hash: +ykz6QJC74P/Vr+zWzjHbaO6JSrqdw6/lo24EI50oVk=)
                          25: 3230312e3231372e32372e302f32342d3234203d3e203237373638.roa (hash: RGZIv+8z4Ga1Z5Jlx74pIMVvbUVnFUV/oR4IzI7RB5s=)
                          26: 3137372e3235312e33322e302f31392d3139203d3e203237373638.roa (hash: jUBBNf+43ROyNDGuZJ7KYYW3wZ4S4QzQhBEs28axFE8=)
                          27: 3139302e32332e302e302f31362d3234203d3e203237373638.roa (hash: gKpuOiNJXA3hBI9uAobwZ+8Ao1fGBp9xAR7xBl9hpFU=)
                          28: 3230312e3231372e34382e302f32342d3234203d3e203237383636.roa (hash: onteWRIKXeEqppS0WVt3zpyKCjyld9VrqkWdeQfuDGs=)
                          29: 3230312e3231372e32342e302f32342d3234203d3e203237373638.roa (hash: 3haBZhKziUswTPnUB0FVK0Co6xHF0GxCc/x2wUu/vGo=)
                          30: 3137372e3235302e3132382e302f31382d3138203d3e203237373638.roa (hash: MA4tQ/B/EKEFj2raMg/DnrDOQU74Rb8mp/J7F393IgM=)
                          31: 3139302e35322e3132382e302f31382d3138203d3e203237383636.roa (hash: okG0RkblZDeMw50x+pdWef0hmE23eOsOsglOEzTVaA4=)
                          32: 3137372e3235312e36342e302f31382d3138203d3e203237373638.roa (hash: lUeSv1xn2xO58YsDV35WAKh86GAt2ehTrh9TpZr3jFk=)
                          33: 3230312e3231372e36302e302f32332d3234203d3e203237383636.roa (hash: cS7EYJw0H/r9m0ohT/P6ZkjkVRViEF1qDS+4rrTiu5k=)
                          34: 3137372e3235302e302e302f32302d3230203d3e203237373638.roa (hash: 5RZE/P/7ngmApeqS6Xprsqc8sBVsPR+bJtkV+8qKzAo=)
                          35: 3230312e3231372e32312e302f32342d3234203d3e203237373638.roa (hash: wz3d0v0ZOiZQtGLpiMuvPhlqyCVC6MCFy1WxcdPmGMY=)
                          36: 3230312e3231372e32382e302f32342d3234203d3e203237383636.roa (hash: yGfi8DndHJkb6lekwIfvbI6WjhH27W9uIi4ta5Y1/e8=)
                          37: 3137372e3235302e32342e302f32312d3231203d3e203237373638.roa (hash: J1+bNxzR9XqU+PX5YKc2rLXlnWsZs0JekhsauYhOhxg=)
                          38: 3230312e3231372e35392e302f32342d3234203d3e203237373638.roa (hash: /fwYNIy6mI4jvYGWQR7IFZh7XfeqWVS9KduDTRjL3Ng=)
                          39: 3230312e3231372e302e302f32312d3234203d3e203237373638.roa (hash: f4/XjHWbJWh4ldcqWVYmybPkgYNQ1mHpmBd2e8guIMI=)
                          40: 3230312e3231372e35362e302f32332d3234203d3e203237383636.roa (hash: HMUy3dgdEG2DDkwMdF3+EZhZDcK8pNMVHeZVUkgXG8g=)
                          41: 3230312e3231372e35322e302f32332d3234203d3e203237373638.roa (hash: nHjXO/SzdUBgifKP4PiZn/XzbHgBTjYkgf6sHuc4Mbs=)
                          42: 3230312e3231372e34362e302f32342d3234203d3e203237373638.roa (hash: brCJIJzpZcfO/xm0rtr93lCMPKC3DETudWgUPfnP4KY=)
                          43: 3230312e3231372e35302e302f32342d3234203d3e203237373638.roa (hash: otZaM4DXjI3tzmWw63uVPfKm50AOok+PqD8YC1x7kbE=)
                          44: 3230312e3231372e31342e302f32342d3234203d3e20323634373232.roa (hash: Bd6b9kbvcTcT8h4TCFvaFo+m4W/dBfxkQa+pFzNYBX0=)
                          45: 3230312e3231372e32362e302f32342d3234203d3e203237373638.roa (hash: Y89gnG6RbkyZaBpgy06k0doL2IeImORQVXR1cKkw+Zo=)
                          46: 3230312e3231372e382e302f32322d3234203d3e203237373638.roa (hash: jhty6t5C+k2ROHThdtiZVxT8a6qM+iYh06t+rLitDf8=)
                          47: 323830303a3936303a3a2f33322d3332203d3e203237373638.roa (hash: A/cfHw2xHILzFA33VZIvlDcEiusFUx9j3sCAycxf38A=)
                          48: 3230312e3231372e33322e302f32322d3234203d3e203237373638.roa (hash: +8RZLzHv9CY83x1jGtuVdRg230T5iNzO3DXN9gu++eM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d4:b2:6e:12:97:86:b3:13:e0:d7:6d:a8:5e:01:8a:97:65:e3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Jun 13 13:11:17 2026 GMT
            Not After : Jun 18 06:36:17 2026 GMT
        Subject: CN=11C78250759DE341476E1B4ADCCADAAB71F8FB52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bf:78:d9:a6:2d:dd:89:12:8e:2d:03:df:4e:
                    83:73:13:49:be:cc:7d:1a:ee:93:6f:6f:c1:a3:a5:
                    2d:f6:49:1b:03:46:ed:bc:ec:ea:a0:64:1a:15:18:
                    4c:ed:1e:10:1a:c1:64:a8:a5:f9:c4:98:ea:e1:47:
                    81:96:50:9c:05:d3:a1:6e:69:cb:1b:50:df:09:9e:
                    4b:fa:67:7e:d0:d2:7a:13:e3:99:21:24:bd:f5:26:
                    0a:86:26:16:be:3b:c5:44:fa:a3:7e:2f:7c:69:8c:
                    4d:b0:f8:1e:75:a5:0e:eb:cf:d1:de:94:62:fe:a0:
                    b9:4e:a1:83:ef:84:e8:55:ff:36:0d:22:8b:b9:de:
                    14:8b:75:af:08:41:88:0a:d3:16:68:d6:52:de:b9:
                    81:51:fd:bb:42:da:c8:7f:52:e7:b2:d9:4f:26:42:
                    73:03:0a:43:1d:a4:ad:aa:01:49:b1:b0:e4:4e:c9:
                    5e:ee:7d:72:93:a0:97:29:31:4a:72:53:95:4e:18:
                    6f:46:4c:83:2d:3c:df:a1:16:9f:98:13:31:95:f7:
                    e5:8a:86:ce:9a:f6:76:6c:6c:42:66:de:57:c9:6b:
                    79:4f:f8:8e:db:80:81:ab:75:54:14:57:36:a3:54:
                    c9:66:27:6c:a4:b9:c0:13:9c:ff:7c:07:92:fa:a6:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C7:82:50:75:9D:E3:41:47:6E:1B:4A:DC:CA:DA:AB:71:F8:FB:52
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:04:36:22:4a:e8:88:d2:c9:77:79:67:0a:ce:df:48:3f:b3:
         fd:b3:24:5d:bf:45:e7:7f:a0:36:84:df:a2:70:bf:b8:3c:87:
         84:a5:f6:45:6c:33:f7:4c:f1:46:86:3b:8d:9d:30:e0:4f:a6:
         23:8a:5b:5d:5f:50:ac:ba:fc:2e:b9:97:bb:ef:71:a3:26:83:
         30:d8:41:f7:20:f1:0d:33:0b:d7:d9:fb:28:01:ad:b1:3d:52:
         a3:e5:f1:d1:bd:fb:2f:e9:c6:c1:8e:83:93:fb:41:d5:a7:ca:
         e7:f0:d0:00:ab:15:9c:3f:2a:f8:df:a7:d1:8a:3f:2c:92:fd:
         dc:52:2e:1b:48:a3:e5:25:43:6b:b7:a9:30:08:c8:6a:f3:eb:
         9a:69:4a:07:3c:c9:9a:85:28:36:6b:9b:b1:a7:e7:64:4b:54:
         ed:11:59:a4:38:6e:d5:08:2e:97:b7:29:40:73:29:3e:69:13:
         3d:57:c0:b2:6a:40:60:f9:7c:0d:0d:e1:de:59:cb:8c:8d:8a:
         5c:4e:10:ce:e9:95:5b:3d:fe:f7:2c:f9:f9:89:91:79:ce:ef:
         d9:b6:67:05:a5:0f:80:dc:71:d4:eb:49:73:72:6b:d5:eb:66:
         24:2c:ab:24:60:5b:e7:47:74:19:31:9f:64:3b:54:d1:f2:09:
         ee:78:2f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:31:50 2026 by rpki-client