Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.mft
File:                     43D2A661B6F1B4D00B2916B52B729414016F4C6B.mft (raw, json)
Hash identifier:          NBtalUqUflmxiFgIuoyQZ6ei8PnzUyTWVCQBGxGWqKI=
Subject key identifier:   16:55:51:BD:21:2A:CE:2C:0A:04:88:31:10:EC:18:24:74:35:BE:01
Authority key identifier: 43:D2:A6:61:B6:F1:B4:D0:0B:29:16:B5:2B:72:94:14:01:6F:4C:6B
Certificate issuer:       /CN=43D2A661B6F1B4D00B2916B52B729414016F4C6B
Certificate serial:       436D7662661E14E9013108F613D531E7055B8D4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.mft
Manifest number:          CB
Signing time:             Wed 28 Oct 2026 19:05:56 +0000
Manifest this update:     Wed 28 Oct 2026 19:00:56 +0000
Manifest next update:     Mon 02 Nov 2026 20:10:56 +0000
Files and hashes:         1: 43D2A661B6F1B4D00B2916B52B729414016F4C6B.crl (hash: 1Ow8ly7miZg/Sd92ZFdUWDlBrk0j/PvPCqsTYRLANEg=)
                          2: 3134342e32322e3136302e302f32302d3234203d3e203331383938.roa (hash: Bjq/256pPET87OX+qQQhokCm+hcFbxDi6PUAwfH7zGs=)
                          3: 3134342e32322e33322e302f32302d3234203d3e203331383938.roa (hash: S///K6sQSwLhHjp7+kUtiP/cb8QNXp6fplt5XrsJ97U=)
                          4: 3134342e32322e34382e302f32312d3234203d3e203331383938.roa (hash: 5YA/5XG9KPGKUjbo5w9BYRKbBbcV8b+Xq9DLo+2kBNE=)
                          5: 3134342e32322e3139322e302f31392d3234203d3e203331383938.roa (hash: y++I1WCfl2cBbS184Yq5EgYoXKGwasqGM6S2HjqOWLE=)
                          6: 3134342e32322e3137362e302f32302d3234203d3e203331383938.roa (hash: s4lhGTGNbeg35sWQYLw95Aw8iPwHy/awq4fQCEKZ/3w=)
                          7: 3134342e32322e3232342e302f31392d3234203d3e203331383938.roa (hash: elHCXE2AnBVZwEgngWOiHCExCT5a/FzpxH7snM8ZgVU=)
                          8: 3134342e32322e35362e302f32312d3234203d3e203331383938.roa (hash: ck/HgNg5iE3bKtRAUqmjgqI7BQX7+sF8Z6k60H1FJtM=)
                          9: 3134342e32322e3132382e302f31392d3234203d3e203331383938.roa (hash: XH4QaWcvlnWCz6WlwbviYGSIk5/XVV2dzXZ0xhZGfrM=)
                          10: 3134342e32322e36342e302f31382d3234203d3e203331383938.roa (hash: /EcqaPZSudHdNhvbv7I09m8vkB983exBHrj6aKbbq+M=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6d:76:62:66:1e:14:e9:01:31:08:f6:13:d5:31:e7:05:5b:8d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43D2A661B6F1B4D00B2916B52B729414016F4C6B
        Validity
            Not Before: Oct 28 19:00:56 2026 GMT
            Not After : Nov  2 20:10:56 2026 GMT
        Subject: CN=165551BD212ACE2C0A04883110EC18247435BE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:d8:92:36:14:be:16:62:c3:03:08:d7:9f:
                    01:a3:c9:b4:8c:1f:c8:58:71:36:2d:08:16:39:26:
                    e5:ba:05:d8:09:2f:02:41:bb:81:9b:6c:2d:89:c3:
                    89:2d:f5:7a:87:b4:65:fb:f3:58:d0:0a:3c:e0:31:
                    bf:6e:2a:39:33:df:f7:df:10:b1:5a:d0:98:d2:7d:
                    c3:1b:7e:25:c3:c8:fb:6f:68:2d:d7:e1:23:1a:db:
                    9c:18:37:70:fc:d9:b9:95:08:fc:93:f7:15:40:9f:
                    aa:1a:ae:69:be:d4:2b:24:44:22:aa:38:ed:2f:b7:
                    c6:f0:7b:6f:d4:e0:da:7b:a1:6f:69:9e:41:ea:39:
                    93:4d:28:41:a8:22:85:8c:e3:95:6c:c7:fd:94:79:
                    75:e7:36:3b:aa:87:55:5e:d4:28:53:13:b5:01:e0:
                    ff:94:95:04:f5:d2:61:8e:48:f2:28:5b:48:68:b3:
                    93:c7:47:a7:b5:24:69:71:49:e3:19:ac:61:a4:d2:
                    1d:75:f3:bb:fd:1f:8d:92:d4:26:08:d5:a8:ae:59:
                    ab:41:5a:43:6b:47:09:b9:16:d6:e1:da:db:11:c4:
                    8b:d0:27:83:d2:d4:f3:39:ec:6e:63:d4:cd:9a:30:
                    e1:75:fc:56:f3:64:e2:e1:f5:27:c9:3f:f3:b1:e4:
                    ad:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:55:51:BD:21:2A:CE:2C:0A:04:88:31:10:EC:18:24:74:35:BE:01
            X509v3 Authority Key Identifier:
                keyid:43:D2:A6:61:B6:F1:B4:D0:0B:29:16:B5:2B:72:94:14:01:6F:4C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:cf:20:9a:b5:f0:3c:fd:6a:b0:68:0c:0d:b6:bd:8b:b7:
         89:67:20:ab:ae:78:bc:09:49:b8:99:d6:24:73:d2:62:3d:af:
         d9:04:8f:a8:bb:08:da:19:de:d3:d6:34:d1:2c:37:54:bd:86:
         8d:43:46:c2:f6:99:ca:4c:41:24:34:b3:d0:c0:a8:be:d0:dc:
         b1:96:ae:b9:fd:ec:34:22:13:33:6c:ca:0a:b0:8b:1e:1c:53:
         3a:41:3b:7c:01:d9:6f:e8:c8:e9:d2:4e:0b:ad:59:ad:ca:03:
         c9:0b:05:e2:34:1d:0b:79:47:e1:34:b9:1f:a5:9b:55:5b:15:
         5c:87:01:27:96:98:5b:16:f7:e1:93:d8:f3:5a:7b:e4:93:94:
         7b:26:71:7f:23:d8:7a:a7:12:3f:7e:23:c2:2c:29:9b:13:ed:
         ed:77:a1:be:6c:e9:48:24:fe:21:5e:50:68:e5:11:11:59:40:
         6b:eb:03:d1:b5:a1:a5:32:24:cc:15:da:a3:b5:49:98:26:86:
         2b:62:73:e2:b6:62:39:8c:b8:5e:b2:13:d9:10:5f:56:7d:4b:
         9a:cc:77:1b:f6:41:f6:37:81:5a:ee:c4:ce:ed:b6:6e:e3:d8:
         4b:ec:c6:f5:b4:67:ed:44:bb:b3:08:b6:1e:34:b5:54:32:c9:
         88:db:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:44:13 2026 by rpki-client