Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
File:                     D3A9BB2434EF24613DA3D824164DFABE55243F12.mft (raw, json)
Hash identifier:          eGuTdKEVNxQ3ua47xQ5KPngnyT+ge5bkrY9jWir59nc=
Subject key identifier:   65:61:FC:00:AC:DB:D0:7D:03:B1:93:29:BB:1F:89:7A:3D:45:A4:84
Authority key identifier: D3:A9:BB:24:34:EF:24:61:3D:A3:D8:24:16:4D:FA:BE:55:24:3F:12
Certificate issuer:       /CN=D3A9BB2434EF24613DA3D824164DFABE55243F12
Certificate serial:       651588D0E8E3815CD7752DB7AEA02D17E2D1A880
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
Manifest number:          38
Signing time:             Mon 02 Mar 2026 00:19:30 +0000
Manifest this update:     Mon 02 Mar 2026 00:14:30 +0000
Manifest next update:     Fri 06 Mar 2026 03:08:30 +0000
Files and hashes:         1: D3A9BB2434EF24613DA3D824164DFABE55243F12.crl (hash: 7n4X4NBBqwOFs11FhM7RNXF5fLmPB5uBpg0EmTsxoFs=)
                          2: 323830333a653764303a3a2f33322d3332203d3e2037333033.roa (hash: fdb8H8VqkJYA0bY105LFtERGfPeDP7saEd+IzOgBJdM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 03:08:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:15:88:d0:e8:e3:81:5c:d7:75:2d:b7:ae:a0:2d:17:e2:d1:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3A9BB2434EF24613DA3D824164DFABE55243F12
        Validity
            Not Before: Mar  2 00:14:30 2026 GMT
            Not After : Mar  6 03:08:30 2026 GMT
        Subject: CN=6561FC00ACDBD07D03B19329BB1F897A3D45A484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9c:84:77:26:c9:5b:c6:fc:05:ad:40:73:b6:
                    12:54:cf:e6:43:d4:fb:da:a2:23:f8:a5:af:a6:0d:
                    5d:67:10:21:3e:f1:b6:62:2b:1c:13:1d:6d:0a:27:
                    74:bf:54:27:c0:dc:19:96:c2:97:e5:3c:3a:5c:42:
                    a5:11:d6:26:2a:d1:63:57:01:c2:0d:17:db:5f:c4:
                    9f:1f:da:3c:64:7a:bb:90:23:4e:d1:a9:88:20:e0:
                    5d:8a:d8:75:77:62:fb:23:df:e0:e5:03:ab:e4:9e:
                    07:db:86:42:a5:0d:bf:d4:18:82:92:31:71:a6:3b:
                    7a:92:15:8f:d1:d4:e7:b1:e4:e6:e6:0d:d2:a1:65:
                    ba:17:89:c4:7c:84:8f:34:b3:e3:b7:92:03:de:ad:
                    fe:df:90:73:66:ab:ba:7d:8d:20:96:fb:b0:5e:a8:
                    aa:d2:24:58:c4:16:a2:bb:4a:e2:8b:47:39:79:22:
                    aa:73:1f:da:73:df:9d:e6:bf:65:39:0b:d2:27:1f:
                    58:44:79:42:2f:f4:25:39:93:f4:bc:39:04:d4:48:
                    ac:37:86:fc:a6:6d:5c:0c:f8:d4:25:b4:9d:bf:9f:
                    f2:fe:5d:b5:fe:c5:87:d0:10:f6:c7:19:da:25:31:
                    48:49:56:dd:de:cb:84:2b:06:d2:09:5f:4c:e9:16:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:61:FC:00:AC:DB:D0:7D:03:B1:93:29:BB:1F:89:7A:3D:45:A4:84
            X509v3 Authority Key Identifier:
                keyid:D3:A9:BB:24:34:EF:24:61:3D:A3:D8:24:16:4D:FA:BE:55:24:3F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e6:a3:c4:65:ea:99:83:79:24:0a:36:d3:6d:5b:31:b5:45:
         26:43:2a:42:de:84:1c:08:83:1f:f5:0d:ca:82:c1:3e:2e:42:
         3c:8a:af:0a:91:aa:c8:73:9e:cc:7d:c8:c5:58:74:47:30:20:
         65:88:95:33:a6:d4:7b:91:e6:47:81:5d:7c:a5:bf:8f:54:22:
         4a:06:7f:76:81:f1:04:75:1c:33:88:96:3c:b4:95:97:a2:a5:
         1b:af:e6:7b:87:e2:f4:31:33:d6:e9:e0:1f:df:d3:af:b9:fa:
         0a:17:65:20:3a:41:c7:72:e2:b3:9c:52:c8:a5:81:fc:63:e6:
         b3:cd:4b:28:4c:fc:62:55:24:01:c9:1d:45:44:27:bb:d6:06:
         c2:bb:fa:a1:ed:62:ad:73:0c:45:44:21:c5:6a:d3:ae:34:ab:
         14:59:b2:19:7e:17:df:b8:35:9b:1e:04:8e:79:fe:9e:87:0a:
         e8:23:26:8b:6b:65:03:dd:8c:53:ac:31:db:1f:d3:ec:02:09:
         2f:60:6e:4c:8d:2f:68:8f:f7:74:f4:18:e3:39:c7:7b:36:a9:
         22:fc:0d:2b:9b:33:bc:03:e5:fb:88:ff:bd:4b:bb:d8:19:96:
         aa:a5:6f:bb:da:36:ba:7c:9d:2a:e0:b0:b3:3b:3e:1f:92:be:
         74:ee:b2:51
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUZRWI0OjjgVzXdS23rqAtF+LRqIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNBOUJCMjQzNEVGMjQ2MTNEQTNEODI0MTY0REZBQkU1
NTI0M0YxMjAeFw0yNjAzMDIwMDE0MzBaFw0yNjAzMDYwMzA4MzBaMDMxMTAvBgNV
BAMTKDY1NjFGQzAwQUNEQkQwN0QwM0IxOTMyOUJCMUY4OTdBM0Q0NUE0ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSnIR3JslbxvwFrUBzthJUz+ZD
1PvaoiP4pa+mDV1nECE+8bZiKxwTHW0KJ3S/VCfA3BmWwpflPDpcQqUR1iYq0WNX
AcINF9tfxJ8f2jxkeruQI07RqYgg4F2K2HV3Yvsj3+DlA6vkngfbhkKlDb/UGIKS
MXGmO3qSFY/R1Oex5ObmDdKhZboXicR8hI80s+O3kgPerf7fkHNmq7p9jSCW+7Be
qKrSJFjEFqK7SuKLRzl5IqpzH9pz353mv2U5C9InH1hEeUIv9CU5k/S8OQTUSKw3
hvymbVwM+NQltJ2/n/L+XbX+xYfQEPbHGdolMUhJVt3ey4QrBtIJX0zpFlNXAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUZWH8AKzb0H0DsZMpux+Jej1FpIQwHwYDVR0j
BBgwFoAU06m7JDTvJGE9o9gkFk36vlUkPxIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjdBOTM3NEZFNjgyNjJFQ0MzNzc5RDVENjNDMUExRThB
RDBGRjlGNDJGOUU2NUQ2QjA2MEYxNkI5REQyODE3LzAvRDNBOUJCMjQzNEVGMjQ2
MTNEQTNEODI0MTY0REZBQkU1NTI0M0YxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0E5QkIyNDM0RUYyNDYxM0RB
M0Q4MjQxNjRERkFCRTU1MjQzRjEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTY3QTkzNzRGRTY4MjYyRUNDMzc3OUQ1RDYzQzFBMUU4QUQwRkY5RjQy
RjlFNjVENkIwNjBGMTZCOUREMjgxNy8wL0QzQTlCQjI0MzRFRjI0NjEzREEzRDgy
NDE2NERGQUJFNTUyNDNGMTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBV5qPEZeqZg3kkCjbTbVsxtUUm
QypC3oQcCIMf9Q3KgsE+LkI8iq8KkarIc57MfcjFWHRHMCBliJUzptR7keZHgV18
pb+PVCJKBn92gfEEdRwziJY8tJWXoqUbr+Z7h+L0MTPW6eAf39OvufoKF2UgOkHH
cuKznFLIpYH8Y+azzUsoTPxiVSQByR1FRCe71gbCu/qh7WKtcwxFRCHFatOuNKsU
WbIZfhffuDWbHgSOef6ehwroIyaLa2UD3YxTrDHbH9PsAgkvYG5MjS9oj/d09Bjj
Ocd7Nqki/A0rmzO8A+X7iP+9S7vYGZaqpW+72ja6fJ0q4LCzOz4fkr507rJR
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:21:52 2026 by rpki-client