Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.mft
File:                     DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.mft (raw, json)
Hash identifier:          kCbtOXpC2dCG/u/WR6/zN7tS3VtX6pMe7vhTwZuPbwY=
Subject key identifier:   8B:6E:BA:3E:FE:38:1D:B2:FF:D5:D2:05:92:30:99:CA:A3:80:1B:0E
Authority key identifier: DF:50:3A:52:EC:23:91:A3:76:A3:C3:C3:7D:AA:11:EE:2C:A9:24:A7
Certificate issuer:       /CN=DF503A52EC2391A376A3C3C37DAA11EE2CA924A7
Certificate serial:       234E7DEB4ED63401B2EB264F2AD4382CFEA0F7B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.mft
Manifest number:          19
Signing time:             Fri 17 Apr 2026 17:09:07 +0000
Manifest this update:     Fri 17 Apr 2026 17:04:07 +0000
Manifest next update:     Wed 22 Apr 2026 15:56:07 +0000
Files and hashes:         1: DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.crl (hash: HZ2KAhUodIHrxX4wgahrJU44rbqr3tSt6TTtJLdjxZA=)
                          2: 34352e3138372e39302e302f32332d3233203d3e20323639383635.roa (hash: KXIh4c+tnF5yCoH/NymXFb1fdOXA4ScnFmmacUxd33A=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 19:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4e:7d:eb:4e:d6:34:01:b2:eb:26:4f:2a:d4:38:2c:fe:a0:f7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF503A52EC2391A376A3C3C37DAA11EE2CA924A7
        Validity
            Not Before: Apr 17 17:04:07 2026 GMT
            Not After : Apr 22 15:56:07 2026 GMT
        Subject: CN=8B6EBA3EFE381DB2FFD5D205923099CAA3801B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:ac:ec:62:f8:b9:b1:c1:12:b8:c8:d1:3e:
                    6e:36:30:ac:b2:c5:2d:10:92:64:0a:94:d2:f5:44:
                    3c:a2:ae:30:2f:cb:3b:9f:26:6a:c9:f2:46:e6:de:
                    ed:23:71:13:25:cb:07:d4:32:55:54:7e:ca:ea:b0:
                    fa:10:e4:a2:db:94:2f:ff:56:8c:a7:9d:19:2d:9e:
                    f4:b6:ce:2e:d2:d6:e3:e9:bb:61:12:a8:98:97:95:
                    38:3c:80:3c:2a:d8:75:e3:13:fa:5d:c1:ab:d2:fe:
                    79:4c:18:a9:07:e9:37:84:d9:b2:aa:bc:72:d9:03:
                    57:65:8f:85:ca:7a:a8:a2:67:4f:7f:7d:82:2b:1a:
                    72:bf:77:4d:0f:6b:f6:42:01:9a:a4:06:29:f2:11:
                    53:9f:e7:a6:3a:e0:05:37:5f:3a:22:73:05:b9:7a:
                    60:bc:e2:75:d0:3e:b6:06:80:6e:6f:be:32:f6:c4:
                    86:f9:58:77:4b:21:2c:be:24:52:76:e4:33:ee:80:
                    f5:54:24:f8:90:71:b4:1d:28:48:f8:37:fa:c2:2c:
                    19:70:92:1b:e5:87:e1:6e:9f:3a:18:c2:0e:6f:c8:
                    e3:7f:2c:7b:69:44:cf:3d:99:7a:2c:0f:69:4a:23:
                    1a:41:2d:08:67:c3:7f:4d:8e:f6:af:35:ff:02:ad:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6E:BA:3E:FE:38:1D:B2:FF:D5:D2:05:92:30:99:CA:A3:80:1B:0E
            X509v3 Authority Key Identifier:
                keyid:DF:50:3A:52:EC:23:91:A3:76:A3:C3:C3:7D:AA:11:EE:2C:A9:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9e:5f:0c:87:f4:c1:0a:99:f6:56:73:69:54:07:3a:9b:7c:
         6b:83:ab:f5:cf:21:29:5d:14:87:35:e4:c2:6a:94:70:8a:3b:
         4d:8c:b2:2e:4c:0d:40:43:e6:68:01:46:d0:9a:e5:a4:9d:ef:
         86:aa:12:41:51:4a:2b:31:ee:c6:ba:32:1b:dc:74:24:7a:58:
         58:a8:88:54:66:f4:07:34:fb:2f:aa:e0:7c:b2:d3:4e:42:d0:
         48:9e:7f:21:69:71:ae:a3:0f:5b:a2:03:8a:0b:ca:81:a7:70:
         16:75:23:ba:3b:d9:33:ad:41:a9:a6:d3:67:5d:0e:82:d6:72:
         e3:f3:c7:f5:b4:ba:05:ef:33:41:0f:1f:33:d4:e1:6b:e2:33:
         42:31:52:60:37:ae:0d:87:68:52:ff:70:8f:e0:36:38:27:15:
         dd:45:67:a8:8a:aa:2a:04:b9:85:dc:fe:ed:b0:11:e4:de:51:
         9e:d0:a6:b5:d5:8c:fb:cf:ae:0c:ca:67:cc:b4:42:f9:1b:5d:
         ab:3a:a2:f7:75:e9:9e:03:22:3b:4e:b6:17:9f:6b:e1:d7:d9:
         4b:c5:ab:44:6a:f5:81:40:72:b6:b4:8f:88:97:ff:4d:78:24:
         dd:47:8f:4a:e6:c3:fa:ed:1b:71:f0:92:ad:81:bd:4d:7d:35:
         1d:b2:db:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:40 2026 by rpki-client