Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
File:                     99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft (raw, json)
Hash identifier:          XblQi7RTOMHG9DylOkjLfa+UHtplkEehGYGLp3/fZ7U=
Subject key identifier:   20:D7:DA:E5:12:09:90:02:3B:B3:FF:20:DB:E1:1F:0F:20:53:26:FA
Authority key identifier: 99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C
Certificate issuer:       /CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
Certificate serial:       3CA9C32C41DE3C69E19C5BD1FF508C4A8CD66AC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
Manifest number:          01EA
Signing time:             Wed 28 Oct 2026 02:02:05 +0000
Manifest this update:     Wed 28 Oct 2026 01:57:05 +0000
Manifest next update:     Mon 02 Nov 2026 15:58:05 +0000
Files and hashes:         1: 3136382e3232372e32342e302f32322d3234203d3e20323634363833.roa (hash: pexBPv/qUstG7UyIUG4iuwpBQqe83rmFbZMquG1aRhw=)
                          2: 99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl (hash: hoydCjSxnIVgmcNMAr3uwedOtW2ClMHLbBqYHFWJMLo=)
                          3: 3230302e3132342e3137362e302f32312d3234203d3e203532333134.roa (hash: 2ItWd9rvbtCrp8hH/Zd1g8Uomb2z0JDeEBkspIMF8ns=)
                          4: 323830313a303a3134313a3a2f34382d3634203d3e20323634363833.roa (hash: 6i217i7/Ppv0Akx9YxdcPntd0RCCVY0wB9afvzgoLrA=)
                          5: 323830313a303a3134303a3a2f34382d3634203d3e203532333134.roa (hash: X8xJ6jDF4r7il6cmK3r2vt8jcj7jRzyeJTQRRFCivBQ=)
                          6: 3230302e31342e3131362e302f32342d3234203d3e203532333134.roa (hash: C6/YNk7oHEai0KKZNj1iGpqlO7tuEmzIaNJf2ahzzcM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a9:c3:2c:41:de:3c:69:e1:9c:5b:d1:ff:50:8c:4a:8c:d6:6a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
        Validity
            Not Before: Oct 28 01:57:05 2026 GMT
            Not After : Nov  2 15:58:05 2026 GMT
        Subject: CN=20D7DAE5120990023BB3FF20DBE11F0F205326FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:96:b1:73:65:b8:37:08:88:4e:f1:36:55:
                    d3:6a:51:ec:bf:f2:af:c3:f6:3f:6c:44:f5:49:44:
                    89:84:41:94:17:1f:14:f4:87:10:fb:a8:d7:6e:ab:
                    13:23:89:1c:ff:7d:a7:b6:90:ee:cd:f2:9a:6a:83:
                    73:03:da:c7:3f:29:8b:38:46:19:68:62:5b:85:85:
                    3e:f8:cd:80:b2:96:dc:71:bb:6d:6a:37:dd:3e:9c:
                    da:8e:06:6a:fb:da:77:b6:74:91:66:a8:9e:2c:5e:
                    e3:cf:25:05:19:9d:52:06:dd:fa:fb:9b:7e:c3:eb:
                    db:ed:a2:7f:3d:8a:3e:01:32:6e:02:84:93:aa:ad:
                    0e:1c:fe:bf:f2:9a:a0:68:c3:d9:4e:fc:b1:76:17:
                    83:8f:3a:b5:ce:c6:15:bf:d3:b5:8e:ec:23:25:d9:
                    1c:ad:39:0e:77:c7:97:0c:a7:78:30:ae:c6:ba:3e:
                    e5:50:0e:80:03:ee:2f:a7:55:32:3e:94:62:68:10:
                    a2:89:8e:70:ac:9e:05:48:a0:08:8e:9b:4e:2a:c3:
                    da:bb:9a:c3:d0:27:4e:c7:60:58:d9:84:6b:c4:e0:
                    8a:91:d9:7a:02:d8:28:4f:90:a7:54:92:3f:d1:18:
                    84:2c:e8:1b:d4:5b:91:80:87:7b:d2:69:d0:f0:35:
                    f2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D7:DA:E5:12:09:90:02:3B:B3:FF:20:DB:E1:1F:0F:20:53:26:FA
            X509v3 Authority Key Identifier:
                keyid:99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:57:c2:75:41:48:69:87:cc:08:95:61:3d:b1:87:e4:2c:
         d8:96:29:db:cc:bd:3d:23:0f:14:0f:a5:fa:ed:93:8f:59:25:
         0e:45:56:0a:db:2d:6b:fb:b6:e8:5a:c5:fe:b6:8e:36:a8:d2:
         ee:35:04:7a:b8:17:53:6a:cf:62:d2:6b:a1:14:37:04:93:76:
         35:d1:23:88:4f:8c:3a:7a:11:e0:b7:9f:cf:a7:6b:aa:82:0c:
         c2:d4:36:a3:09:a8:3e:9f:96:99:e8:c4:7a:aa:78:e9:98:87:
         a0:36:b7:94:e8:71:84:a0:7f:22:7b:3b:4f:9c:f4:e7:86:a9:
         0e:04:57:8d:47:7a:43:9d:e4:5a:8f:d3:90:52:e8:3c:38:52:
         ca:73:d5:f5:57:68:74:27:79:df:50:dd:ae:3a:70:7d:6e:4e:
         d6:bc:ae:f0:a7:6d:3e:2f:c3:b2:21:4a:c3:57:dc:9d:1b:0e:
         22:77:cf:cf:37:18:aa:e2:59:07:f9:24:c5:98:e5:d9:1c:64:
         05:01:05:fe:f5:da:b0:dc:47:97:43:1e:8f:af:d5:d5:d4:41:
         54:81:f6:ca:a7:c9:36:e7:17:5e:05:0a:ca:33:26:33:4d:a9:
         70:48:6c:9f:15:ad:68:8c:fb:19:cc:97:d1:8f:1a:92:1e:77:
         6f:62:90:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:26:49 2026 by rpki-client