
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
File: 85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft (raw, json)
Hash identifier: vFWygaQhIcpQ2l8gbEe+CLT+SLii5YoWa9GABApu9m8=
Subject key identifier: 8E:40:8E:3A:3D:C0:C8:4C:5C:8F:CC:49:B0:92:AE:5B:16:EE:58:BF
Authority key identifier: 85:F5:51:38:91:F0:2B:DA:EB:3A:B3:30:E2:4A:BE:7E:84:07:0D:A7
Certificate issuer: /CN=85F5513891F02BDAEB3AB330E24ABE7E84070DA7
Certificate serial: 0543EA8F40C878CD166101B23383B26CDD77A5A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
Manifest number: CD
Signing time: Wed 05 Nov 2025 02:32:13 +0000
Manifest this update: Wed 05 Nov 2025 02:27:13 +0000
Manifest next update: Mon 10 Nov 2025 20:30:13 +0000
Files and hashes: 1: 85F5513891F02BDAEB3AB330E24ABE7E84070DA7.crl (hash: 9u4yTYtLxU7Ty9lfqOKDYJv1jzn4/TxBrYPJls9IZig=)
2: 323830333a373735303a3a2f33322d3438203d3e20323733393337.roa (hash: +rZ4ZSLTeYiCsH1EEN0XfWkFSC8d4JKf9WkHZaQJC7Q=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.crl
rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:43:ea:8f:40:c8:78:cd:16:61:01:b2:33:83:b2:6c:dd:77:a5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F5513891F02BDAEB3AB330E24ABE7E84070DA7
Validity
Not Before: Nov 5 02:27:13 2025 GMT
Not After : Nov 10 20:30:13 2025 GMT
Subject: CN=8E408E3A3DC0C84C5C8FCC49B092AE5B16EE58BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:a7:4b:3e:09:09:2c:a5:c6:99:b3:60:a0:
ed:09:13:11:eb:6b:c2:ce:6b:7e:85:3e:db:f2:f2:
0a:86:fa:c8:9d:9e:93:3e:d5:31:fb:8f:3d:61:30:
ae:9f:89:ea:6a:0b:bf:97:89:d4:52:19:ec:de:b1:
6d:cb:0c:52:04:60:b6:30:11:a5:78:e9:f7:1d:21:
26:a7:64:ca:52:37:76:7a:2a:a7:7a:d3:94:d4:ab:
96:2c:bb:b0:e2:90:e9:39:68:85:ca:b7:bd:11:f7:
37:d4:ff:2a:4a:96:6b:4c:45:bb:e1:03:f1:f4:86:
50:39:fc:c9:35:43:b0:ad:9e:5b:26:4f:8f:ed:00:
90:cb:c6:aa:4c:38:17:8a:27:19:90:a4:7e:32:63:
8a:6e:79:19:89:ba:57:ae:da:4c:a8:67:bd:72:94:
2b:7a:40:0f:b2:94:7c:e8:2b:02:ee:4f:86:48:b7:
5d:80:28:13:da:32:49:17:b5:82:1d:7f:30:2d:1c:
92:11:ac:0e:91:2d:fa:ac:c3:5f:9d:22:7f:c2:e6:
69:61:66:76:f6:06:6c:84:42:44:a9:7e:b6:86:07:
1c:e4:bf:8b:d8:9d:02:9e:19:7c:f1:c9:0f:14:e0:
14:d1:0c:08:90:49:16:83:72:e8:02:15:a9:85:7c:
33:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:40:8E:3A:3D:C0:C8:4C:5C:8F:CC:49:B0:92:AE:5B:16:EE:58:BF
X509v3 Authority Key Identifier:
keyid:85:F5:51:38:91:F0:2B:DA:EB:3A:B3:30:E2:4A:BE:7E:84:07:0D:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:77:aa:e6:90:0a:96:8c:bd:62:63:18:d1:d7:1d:71:f3:11:
8d:cd:80:3b:c6:b6:bc:83:0f:19:1b:e5:aa:82:64:3a:7d:45:
0b:1b:99:25:2c:d6:9e:ee:69:89:18:6a:46:2a:e5:3f:2e:ca:
26:ad:b6:d7:26:4e:08:22:c4:c2:43:d4:89:ee:72:cb:77:47:
f0:e2:51:19:bc:18:0c:d9:27:a3:83:ac:0e:b4:84:ce:aa:30:
a7:42:cc:7c:ff:ed:d3:b3:e1:82:49:38:6e:0b:06:c1:9b:8e:
05:60:b1:f1:8f:67:2a:cb:30:31:cc:f7:11:a6:b5:5d:7d:f0:
2b:d2:03:f9:ff:37:7f:91:be:db:4a:4a:c3:62:24:7d:c0:46:
ba:d3:da:f8:d9:2b:f5:be:b3:69:de:61:c3:53:89:18:87:de:
1c:d2:18:e9:b2:dd:16:4c:c0:21:e6:2d:9f:bc:ac:a4:af:e1:
68:69:75:12:13:72:d5:f0:4b:b7:d0:b4:cd:d9:ff:55:a5:a5:
d8:57:39:55:26:27:cd:ec:f4:9e:c3:9e:c8:85:ea:35:47:14:
4d:44:21:17:64:e5:bb:d2:90:b1:aa:d8:43:9b:15:f7:a6:d6:
3e:91:5c:7a:eb:78:ec:62:a7:9b:da:91:51:92:f7:de:56:26:
b5:a7:a8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:47:47 2025 by rpki-client