Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft
File:                     B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft (raw, json)
Hash identifier:          MyVaHPEm2EiIuqeOEicdYrA7dW9otyNesY8/7V+zE74=
Subject key identifier:   D0:F7:D5:05:15:09:30:78:EC:42:3F:10:FC:8A:4A:39:79:FC:3F:FF
Authority key identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
Certificate issuer:       /CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Certificate serial:       69E74D7AEB476B31BF27FC4E8B8F20441B3DF122
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft
Manifest number:          0131
Signing time:             Mon 03 Nov 2025 02:09:36 +0000
Manifest this update:     Mon 03 Nov 2025 02:04:36 +0000
Manifest next update:     Sat 08 Nov 2025 23:43:36 +0000
Files and hashes:         1: 34352e3232352e34342e302f32332d3234203d3e20323636383830.roa (hash: ZEasK3s2ySvvmeNyDCIZ9twYzztyptk9cV4Gl8nA3gI=)
                          2: 323830333a643232303a3a2f33322d3438203d3e20323633323338.roa (hash: z8suASAtscWqW0GdXkGenggMQuFU3YkHs4KWvqOY36M=)
                          3: 323830333a643232303a3a2f33322d3438203d3e20323636383830.roa (hash: l0WMMqPT63dtfqO0gPul38a2OsI9SKgH8O1l+DOdNPk=)
                          4: B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl (hash: eIKIpOe+pT6PmK40RJTyzy64vItUmhO7svA4MEju058=)
                          5: 34352e3232352e34342e302f32332d3234203d3e20323633323338.roa (hash: YRHbuBajn+P+woG77MROgE5Yz0jy2B3c1Bjc+e4E+Qs=)
                          6: 34352e3232352e34342e302f32322d3234203d3e20323634363638.roa (hash: C02rM+QLfBn4XzXUBUtHONuo3uLk7iEQh8RbAIH6JcA=)
                          7: 34352e3232352e34342e302f32322d3234203d3e203532343638.roa (hash: L8NLrAmXxMax0wiNv6tQ3agNkrGbX6LC+NBNVU7K+y0=)
                          8: 323830333a643232303a3a2f33322d3438203d3e203532343638.roa (hash: skZTgXX4/pvkpFU1ERigLoQuhfJfnqqFkoVgBSAxNsM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 23:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e7:4d:7a:eb:47:6b:31:bf:27:fc:4e:8b:8f:20:44:1b:3d:f1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
        Validity
            Not Before: Nov  3 02:04:36 2025 GMT
            Not After : Nov  8 23:43:36 2025 GMT
        Subject: CN=D0F7D50515093078EC423F10FC8A4A3979FC3FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:61:3c:61:f1:8f:5a:61:8f:09:90:c1:da:
                    1b:db:68:d7:01:22:65:6a:6a:54:6c:8f:40:a7:c0:
                    ce:83:0f:6d:d0:89:85:36:6a:31:d1:69:dd:98:5c:
                    1e:1d:b7:7a:63:96:87:c7:a5:a9:6b:a8:f6:fc:07:
                    f9:ee:9d:42:19:e0:67:09:ca:72:03:61:9e:2b:ed:
                    9c:df:14:98:4b:bc:2e:0c:33:5c:b1:ca:b5:1a:e1:
                    7f:31:f2:c5:c5:9b:3e:27:37:f1:98:28:bf:81:da:
                    12:02:23:d1:57:c7:b4:cd:f1:5f:38:f8:96:5e:a2:
                    b8:bd:2e:7a:0b:1a:31:7a:9d:f5:7a:24:c8:f2:58:
                    b9:9e:b3:65:91:33:88:5c:75:f1:e5:72:0e:33:d7:
                    34:6e:aa:ce:6d:bb:94:d9:d3:44:c8:1b:37:89:7e:
                    5a:2a:6b:b3:da:42:36:ec:90:cc:d0:03:7a:9a:31:
                    89:97:94:74:15:4d:0e:ef:1c:1b:5d:96:fb:c4:c6:
                    39:6b:a1:f5:36:e2:68:d7:c5:7a:a4:6a:bd:4f:24:
                    1c:9e:ef:36:07:1c:bc:db:49:8d:4f:e4:c1:4c:31:
                    b5:49:1b:a5:10:80:49:51:ba:84:d4:5e:91:13:bf:
                    a1:e4:83:ff:d3:be:6c:3c:cd:9a:3f:66:65:28:8d:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F7:D5:05:15:09:30:78:EC:42:3F:10:FC:8A:4A:39:79:FC:3F:FF
            X509v3 Authority Key Identifier:
                keyid:B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:41:98:7b:a9:84:da:9e:38:ad:e1:1e:a0:80:c4:68:c3:78:
         37:51:48:68:d0:1b:ab:71:79:39:16:83:c7:b6:a3:9f:36:48:
         43:58:e2:68:40:c9:5c:68:21:e6:24:8f:71:b7:b1:b2:83:03:
         b5:89:92:2a:43:18:b6:d5:09:f2:53:f2:1b:9f:9c:01:0b:dc:
         0d:05:a9:fd:b9:4c:eb:fc:db:b4:3c:d5:bb:05:17:98:6b:de:
         26:0b:44:4d:a9:1f:e3:20:c9:f4:20:f7:c7:6a:c0:b5:9a:91:
         dd:19:be:e9:fd:c1:30:69:69:69:c8:dc:4c:06:d8:47:ba:75:
         ea:ec:2a:9b:ac:7f:72:b2:12:8d:a7:3d:18:70:79:14:a5:e6:
         56:9f:bd:54:5e:15:17:3f:66:2a:93:bd:87:9b:85:b9:5b:6e:
         5e:95:75:db:9a:2a:1e:fc:fc:37:04:df:46:37:79:70:d1:9e:
         25:3a:3f:0c:05:d5:6f:75:e1:30:b5:5c:25:df:2e:1e:76:d1:
         d8:42:3d:3f:b0:44:d3:05:da:3e:03:b8:eb:a3:b5:6a:44:6a:
         8d:18:d8:ff:94:81:28:41:b1:77:e6:e1:18:3a:62:7a:99:8c:
         6d:a1:3d:ce:ea:ca:74:bd:92:83:ac:c6:01:0a:f3:45:48:f6:
         e1:90:93:68
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUaedNeutHazG/J/xOi48gRBs98SIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBRjhBRDBFQkQzMDc3NzI5NzhBRTVFRkZFMENCRDcw
N0ZDQUU2NjAeFw0yNTExMDMwMjA0MzZaFw0yNTExMDgyMzQzMzZaMDMxMTAvBgNV
BAMTKEQwRjdENTA1MTUwOTMwNzhFQzQyM0YxMEZDOEE0QTM5NzlGQzNGRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRmE8YfGPWmGPCZDB2hvbaNcB
ImVqalRsj0CnwM6DD23QiYU2ajHRad2YXB4dt3pjlofHpalrqPb8B/nunUIZ4GcJ
ynIDYZ4r7ZzfFJhLvC4MM1yxyrUa4X8x8sXFmz4nN/GYKL+B2hICI9FXx7TN8V84
+JZeori9LnoLGjF6nfV6JMjyWLmes2WRM4hcdfHlcg4z1zRuqs5tu5TZ00TIGzeJ
floqa7PaQjbskMzQA3qaMYmXlHQVTQ7vHBtdlvvExjlrofU24mjXxXqkar1PJBye
7zYHHLzbSY1P5MFMMbVJG6UQgElRuoTUXpETv6Hkg//Tvmw8zZo/ZmUojf2VAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU0PfVBRUJMHjsQj8Q/IpKOXn8P/8wHwYDVR0j
BBgwFoAUsa+K0OvTB3cpeK5e/+DL1wf8rmYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDg1M0E4NEZFQjU0MDJFQzU5QjU1MjAxNTU1MDhENDVB
RjE2NDJGQzQxNzIwQUQ3NzJEODE2OTQyNDg1RTA3LzAvQjFBRjhBRDBFQkQzMDc3
NzI5NzhBRTVFRkZFMENCRDcwN0ZDQUU2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMUFGOEFEMEVCRDMwNzc3Mjk3
OEFFNUVGRkUwQ0JENzA3RkNBRTY2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0Q4NTNBODRGRUI1NDAyRUM1OUI1NTIwMTU1NTA4RDQ1QUYxNjQyRkM0
MTcyMEFENzcyRDgxNjk0MjQ4NUUwNy8wL0IxQUY4QUQwRUJEMzA3NzcyOTc4QUU1
RUZGRTBDQkQ3MDdGQ0FFNjYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxQZh7qYTanjit4R6ggMRow3g3
UUho0BurcXk5FoPHtqOfNkhDWOJoQMlcaCHmJI9xt7GygwO1iZIqQxi21QnyU/Ib
n5wBC9wNBan9uUzr/Nu0PNW7BReYa94mC0RNqR/jIMn0IPfHasC1mpHdGb7p/cEw
aWlpyNxMBthHunXq7CqbrH9yshKNpz0YcHkUpeZWn71UXhUXP2Yqk72Hm4W5W25e
lXXbmioe/Pw3BN9GN3lw0Z4lOj8MBdVvdeEwtVwl3y4edtHYQj0/sETTBdo+A7jr
o7VqRGqNGNj/lIEoQbF35uEYOmJ6mYxtoT3O6sp0vZKDrMYBCvNFSPbhkJNo
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:31:36 2025 by rpki-client