
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.mft
File: 86B23684C23826B0D30069E095D5822718033CB5.mft (raw, json)
Hash identifier: CvJxa9/X9DF54bIJr6FwtDMIQdGGhnTMl9XlkraF0+s=
Subject key identifier: 86:BC:44:42:D7:58:8C:59:50:83:CD:53:F3:FD:73:5E:F5:CB:AE:B0
Authority key identifier: 86:B2:36:84:C2:38:26:B0:D3:00:69:E0:95:D5:82:27:18:03:3C:B5
Certificate issuer: /CN=86B23684C23826B0D30069E095D5822718033CB5
Certificate serial: 1168DCAB6DCA29D58963180F9D30E4B3D71632EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86B23684C23826B0D30069E095D5822718033CB5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.mft
Manifest number: 012B
Signing time: Tue 04 Nov 2025 17:17:22 +0000
Manifest this update: Tue 04 Nov 2025 17:12:22 +0000
Manifest next update: Sat 08 Nov 2025 20:54:22 +0000
Files and hashes: 1: 3139322e3134302e31362e302f32322d3232203d3e20323635373139.roa (hash: enoy92b+aKywaylyxiA+Lk2YQl7QDcfKFXEGXorYVy0=)
2: 86B23684C23826B0D30069E095D5822718033CB5.crl (hash: P3MD7Gvq5fOFZOnQsybEZ1PatSubmJMEIOuWXA4Sy7M=)
3: 323830333a6463303a3a2f33322d3332203d3e20323635373139.roa (hash: xOt5VixUgUQuFro0aZ1/sZqUfQk7dLgS7zQVHAYEvOk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.crl
rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86B23684C23826B0D30069E095D5822718033CB5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 20:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:68:dc:ab:6d:ca:29:d5:89:63:18:0f:9d:30:e4:b3:d7:16:32:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86B23684C23826B0D30069E095D5822718033CB5
Validity
Not Before: Nov 4 17:12:22 2025 GMT
Not After : Nov 8 20:54:22 2025 GMT
Subject: CN=86BC4442D7588C595083CD53F3FD735EF5CBAEB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:11:42:09:dc:98:9c:32:35:99:c7:fa:1a:
73:46:58:4f:56:d2:c3:a4:3e:6d:7a:5a:e7:2e:00:
f0:4a:de:a9:e2:b3:e9:5a:85:8e:2f:e8:e0:2d:d6:
3d:82:d4:61:d7:c2:35:fd:d3:54:8c:9f:7a:a6:4c:
d8:29:4e:ca:46:a5:c6:50:45:14:41:c6:d3:5c:fe:
86:a4:cb:88:00:c2:03:aa:36:47:c8:d0:97:a0:f1:
dd:f6:a6:43:74:e0:03:94:cd:7f:57:93:9d:bf:e2:
88:1a:17:14:87:d9:c0:69:47:95:4f:06:d4:94:b3:
ea:08:cc:ff:14:c0:cd:5c:77:f4:97:1b:c4:0e:61:
19:aa:c5:9d:bc:06:46:07:97:63:aa:40:08:6f:ab:
6f:ad:06:2d:32:0b:ad:b9:08:dd:a6:52:67:76:65:
28:0d:72:90:4e:11:52:2f:8d:1c:ff:1c:21:d7:23:
f9:b1:a9:6a:77:6a:3d:73:4f:10:03:05:db:ad:c3:
cb:cb:7d:20:c5:85:af:07:f8:fd:99:25:73:fd:a6:
51:7d:dd:10:48:3c:2a:2a:89:23:73:02:ae:e3:d2:
09:22:83:75:b6:7b:03:08:b7:01:b3:a6:25:52:57:
4b:85:31:36:a0:2e:4d:62:a9:db:43:24:8b:fe:31:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BC:44:42:D7:58:8C:59:50:83:CD:53:F3:FD:73:5E:F5:CB:AE:B0
X509v3 Authority Key Identifier:
keyid:86:B2:36:84:C2:38:26:B0:D3:00:69:E0:95:D5:82:27:18:03:3C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86B23684C23826B0D30069E095D5822718033CB5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bc:86:aa:d3:d5:40:fb:1e:2f:92:f9:50:da:48:9f:9b:59:
3f:d2:2f:3b:a2:14:47:42:09:71:bf:c4:4b:10:36:73:bb:32:
d8:3a:96:83:e1:62:5e:f8:6e:99:3a:d9:b9:10:fe:8c:9a:73:
1a:a0:0a:65:31:de:d5:65:cd:11:e1:fd:c3:ad:04:09:a4:91:
48:f9:4d:4a:3e:5e:f7:11:c5:48:d3:85:5c:c4:15:70:a4:81:
13:ed:76:33:0b:09:76:e2:da:80:38:3a:8f:27:d5:84:47:39:
11:f7:91:49:b6:95:49:89:7f:be:fa:24:26:b6:10:29:9f:40:
6d:60:35:ec:7b:63:34:59:c7:22:c1:23:e2:45:5b:c9:cd:c4:
a4:3e:9b:0e:d0:24:53:38:85:87:77:03:19:1b:41:6e:5f:09:
7a:dd:5f:e6:4d:92:ab:2b:f8:af:49:fb:91:26:2d:cb:b4:c3:
ad:b1:4b:5e:7f:72:db:da:06:34:33:a1:b1:07:6b:70:59:fa:
2c:a8:c0:1c:b7:87:02:e7:01:d9:b2:eb:38:89:28:cf:e1:71:
38:01:e4:cd:39:9f:53:f8:7d:d7:19:60:e8:d1:7a:29:20:fe:
67:9c:45:a4:ca:b2:0d:46:cf:16:0c:94:47:50:4a:18:0e:62:
f0:2e:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:04:11 2025 by rpki-client