
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
File: 85939B22368B791C18889C114876582A293716F4.mft (raw, json)
Hash identifier: wE+WpeOUtuwWcFV7Y/HkprKEcVwg4PiOnwQBZA4JM50=
Subject key identifier: 3C:C7:58:C0:71:5D:45:75:F6:B6:EE:E8:BE:98:46:88:9B:98:3A:0E
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Certificate issuer: /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial: 63821B97F933D0B2B234D493F157159E69D8857C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
Manifest number: 0132
Signing time: Mon 03 Nov 2025 14:37:24 +0000
Manifest this update: Mon 03 Nov 2025 14:32:24 +0000
Manifest next update: Sat 08 Nov 2025 13:09:24 +0000
Files and hashes: 1: 3136372e3235302e3230382e302f32322d3232203d3e203532323731.roa (hash: BMzf8pZG7o4c5T9+keP7FEhMi2tMb1vF2pMNoN/nges=)
2: 3137302e3233392e35312e302f32342d3234203d3e203532323731.roa (hash: RM4h/pktghbA3kGgJaireVEE3CceSYNDKhhblSPfM5A=)
3: 85939B22368B791C18889C114876582A293716F4.crl (hash: 5gJEzrBJfHI+rrmABAQixUdoZ2qL8MDI811nVzTeL8k=)
4: 3139302e3131322e36332e302f32342d3234203d3e203532323731.roa (hash: dR8nEidxTvy4DwoGhBC0+Y3kqJrAmFww1wwSDdDrs9M=)
5: 3137302e3233392e34382e302f32342d3234203d3e203532323731.roa (hash: AMNilptHeDxVwLLusegjFrGirZIhlMwryvJBNnpZKWo=)
6: 3139302e3131322e35362e302f32342d3234203d3e203532323731.roa (hash: EH1U8sR/MsGNKrr2i7a7fVSm+bS9vytoxL5rozY6K0w=)
7: 3139302e3131322e35392e302f32342d3234203d3e203532323731.roa (hash: ncYpQjXgkYNXWXW2FqsVmLDCegV03duzVoDFfSB/r+Q=)
8: 3139302e3131322e35382e302f32342d3234203d3e203532323731.roa (hash: 1T+q18kIMpxN8QIa4cc/9srPuuyhTH0g1TdkksJF3kk=)
9: 3139302e3131322e36322e302f32342d3234203d3e203532323731.roa (hash: f9FxH7F8/lWyh81jN6bGq0hoaNcODO/+1bAqZlF4exs=)
10: 3137302e3233392e34392e302f32342d3234203d3e203532323731.roa (hash: 4Kv6rHmD2RSR0fZ2C4iBZPBKF53UnVkrXwOsFooOtmA=)
11: 3136372e3235302e3231302e302f32342d3234203d3e203532323731.roa (hash: 3BJXrX3o6yYxznvJjv2l9gycJ/cWbjf9dtX5JpDATc0=)
12: 3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa (hash: IeifnMfKWdOafCZaD5UzDSSKPZtdREpRdrw6obeJZg0=)
13: 3136372e3235302e3230392e302f32342d3234203d3e203532323731.roa (hash: LyFkmpe1p9r9Xnj9RltPWgkoDpueDJnf/UjCAU/bodo=)
14: 3139302e3131322e35372e302f32342d3234203d3e203532323731.roa (hash: 4dB9IMYdApIC8fD7EpzIxSpOCr+JBPXgrGNLpq5gZo0=)
15: 3139302e3131322e35362e302f32312d3231203d3e203532323731.roa (hash: x4Ds2NeShW9XgVQGWE/B5Ui8oR1RTYlOp+LqJqsm79s=)
16: 3139302e3131322e36302e302f32342d3234203d3e203532323731.roa (hash: Kqtp9VL4k7ZLHSw/1EWsT9bNL1Um/eW047qKHZyOfu0=)
17: 3136372e3235302e3231312e302f32342d3234203d3e203532323731.roa (hash: OJF+asrmDhkU5aLiDMX93XQrKKawL7DSef2KjCZZHoo=)
18: 3137302e3233392e34382e302f32322d3232203d3e203532323731.roa (hash: DCw7XFLRxHy02pLdzrFooFLckvBrkR/bkXvlJM9/NrQ=)
19: 3139302e3131322e36312e302f32342d3234203d3e203532323731.roa (hash: vBjyIjMKt5YMNYW1GSDlezMof/HQUqgbIpFr/Ow0VOU=)
20: 3137302e3233392e35302e302f32342d3234203d3e203532323731.roa (hash: q0HfJ3nuUBeZrLNcBnLkTaqSiT8wF9td5qMD90G9lgA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 13:09:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:82:1b:97:f9:33:d0:b2:b2:34:d4:93:f1:57:15:9e:69:d8:85:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85939B22368B791C18889C114876582A293716F4
Validity
Not Before: Nov 3 14:32:24 2025 GMT
Not After : Nov 8 13:09:24 2025 GMT
Subject: CN=3CC758C0715D4575F6B6EEE8BE9846889B983A0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:fb:74:6e:fb:4b:be:c8:da:b5:8a:7d:9e:
2e:e8:eb:bd:93:3f:7f:16:2b:2f:62:e6:9d:88:ad:
5f:0e:36:bb:c5:fe:97:8a:98:a7:b3:34:2e:ec:ee:
25:38:f5:96:e2:a8:eb:8a:b6:48:c5:aa:03:8d:ec:
f7:72:a0:64:5c:d2:c8:df:f7:c1:7f:ff:e7:08:ea:
a0:d2:d5:35:d0:ca:31:8d:e1:28:16:94:85:ca:eb:
ee:3d:bd:3b:47:db:2f:0e:b4:e6:81:1a:87:84:11:
3a:81:24:17:16:b3:05:1c:71:aa:b6:fe:77:ee:34:
37:83:d1:6e:02:4f:cf:2f:1b:a9:b3:0e:01:85:04:
5a:a2:19:5f:ca:3b:67:d3:3f:cb:d6:9e:46:67:c2:
30:5b:dc:e6:4d:0d:1e:5d:16:6f:48:c4:3a:a0:80:
7d:68:dd:64:26:66:83:c1:c9:3e:8e:e3:96:27:aa:
3e:dc:3f:d3:cd:23:2a:c0:0a:a7:db:34:af:90:2c:
05:3e:d8:b3:cd:0d:84:cd:c5:da:28:e2:bb:91:70:
f4:88:df:18:f6:de:c5:4e:75:a4:b5:06:ad:39:2b:
a6:b3:5c:c2:52:92:f5:47:84:b1:0c:32:f3:a0:a0:
f4:86:d9:54:4d:56:33:ca:b2:1d:fd:69:71:7c:16:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C7:58:C0:71:5D:45:75:F6:B6:EE:E8:BE:98:46:88:9B:98:3A:0E
X509v3 Authority Key Identifier:
keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5b:ff:9b:b0:4f:ba:99:86:d8:37:07:b3:15:b3:fe:7c:ff:
02:45:45:32:22:b8:58:74:49:05:e7:06:b9:a9:e6:39:34:30:
e6:c9:d9:56:26:cc:87:e6:24:93:80:dd:99:4e:1a:c5:ea:f6:
02:2b:1f:fe:8f:c3:cf:9e:71:03:99:0d:21:d4:26:72:31:ac:
c6:ee:08:41:3b:24:96:40:14:aa:78:c8:b0:2d:7d:5b:40:50:
11:2c:e4:ef:df:a2:22:e8:0b:ce:6c:cc:68:bc:90:d7:b7:8f:
6d:02:d4:09:61:26:12:83:f0:5c:c1:3c:86:50:c0:74:0a:e7:
74:5f:6e:5c:59:d8:f8:38:3d:3a:64:d0:1b:33:23:24:c9:ac:
7c:ab:1c:c0:b1:11:fb:20:c1:b9:cb:3d:32:23:7c:6a:06:c3:
0c:6d:fd:cb:a1:fa:c2:49:5b:0d:4c:00:c4:c0:d8:e8:ce:bf:
be:d1:28:0b:77:87:17:9c:12:17:44:ea:27:6d:51:e5:26:f5:
d2:3f:cc:75:c9:d4:10:a5:66:8a:cf:d5:b2:55:f9:78:ae:18:
26:a0:c7:40:c9:f8:2e:9e:61:f6:65:7f:b3:43:7b:0c:43:9c:
cc:76:c1:8d:22:47:86:99:49:67:c0:6d:77:d9:db:e5:8a:09:
be:32:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:29:33 2025 by rpki-client