
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
File: 86A5D10A30ED805BDE337515CB0F580086111558.mft (raw, json)
Hash identifier: 5P6oDPPkQq03+VNExBuVX2olmY9hN0cWxdFwNDfFY04=
Subject key identifier: 85:4D:1F:B9:60:D3:A4:0F:5C:CF:F2:ED:1A:E4:B4:34:B3:53:67:60
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Certificate issuer: /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial: 17D64700991613EB1CE6246768DA606EF8CE1436
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
Manifest number: 013A
Signing time: Tue 04 Nov 2025 04:25:08 +0000
Manifest this update: Tue 04 Nov 2025 04:20:08 +0000
Manifest next update: Sat 08 Nov 2025 11:21:08 +0000
Files and hashes: 1: 3138362e302e3135322e302f32322d3234203d3e2033333536.roa (hash: HLs4vs9EuGNu+9Zi6IW0euZVvm6Jg9q5ozELysTd/dM=)
2: 3138362e302e3135322e302f32322d3234203d3e20323033.roa (hash: /2YzcpL+zbZ/HOojoI6SfUsIOaF0b9Gg1wOatVdcruQ=)
3: 3138362e302e3135322e302f32322d3234203d3e2033353439.roa (hash: XYEJuqHBP5I3H3vnyxVhqnKXipLh7lpLPXrkvTMQwkI=)
4: 3138362e302e3135322e302f32322d3234203d3e203131333932.roa (hash: 4BVHQHQ654pki4SqE7CRMY6rfA2Z7iQfJPz/dhZ4vvE=)
5: 3138362e302e3135322e302f32322d3234203d3e203139393035.roa (hash: kvkorhOrX+jZT4TQUlDe1CcZf+5MbA/dWMc5P0WYIYM=)
6: 86A5D10A30ED805BDE337515CB0F580086111558.crl (hash: dDEoi2ypxsSXuvKrggR3irLnmo4GlbxOwZnNRNFcTjE=)
7: 3138362e302e3135322e302f32322d3234203d3e20323032.roa (hash: 1wxGWZ0ctYk/wFZSCMD27MHsKMycX7OUGO18cY3jC+4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 11:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d6:47:00:99:16:13:eb:1c:e6:24:67:68:da:60:6e:f8:ce:14:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
Validity
Not Before: Nov 4 04:20:08 2025 GMT
Not After : Nov 8 11:21:08 2025 GMT
Subject: CN=854D1FB960D3A40F5CCFF2ED1AE4B434B3536760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:e1:58:8d:3d:c4:8e:8c:73:49:57:5b:77:
a1:92:69:3e:1a:f9:bc:08:4e:38:83:17:d4:b4:74:
3f:4f:2f:ec:37:a5:4d:87:6d:42:14:0b:b2:09:64:
6a:ec:6c:8e:c6:9b:45:bc:ca:de:86:8e:ca:26:c4:
5a:0e:5b:29:fc:9c:03:37:92:37:90:01:03:67:68:
80:be:ce:c3:0f:de:08:40:95:a3:ce:9d:5e:40:0e:
9e:fc:05:b6:0f:de:2f:7e:be:5e:55:e1:7b:f4:c5:
04:35:9e:b2:c6:e0:77:47:13:ff:78:cd:f2:ed:e6:
de:fd:0d:fa:bc:8a:a4:14:87:d9:49:14:09:60:7e:
cb:cf:a8:bb:94:6e:71:fb:cb:35:d6:3e:09:fb:b2:
a6:f0:06:b5:fa:5c:18:e9:46:39:91:04:6a:88:5f:
a2:7b:4e:9d:73:31:6e:d2:6e:66:e9:54:80:b3:f4:
58:f2:ed:0b:98:ac:f0:43:62:c9:9f:7d:93:f2:8d:
b7:83:b9:30:ea:fb:2e:73:ae:a0:a0:78:43:c6:e9:
eb:76:81:ba:33:27:7a:e2:d3:b6:80:aa:7e:88:92:
b0:a2:f1:b1:2d:5a:eb:6f:e6:e5:5d:ae:f3:bf:6b:
43:28:ab:90:e2:f4:c9:61:42:c4:9a:98:67:e9:f2:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4D:1F:B9:60:D3:A4:0F:5C:CF:F2:ED:1A:E4:B4:34:B3:53:67:60
X509v3 Authority Key Identifier:
keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:68:7a:fa:5b:d8:68:0a:b6:51:e2:75:36:41:bf:ca:37:5b:
9e:5a:e1:4c:1a:2a:4e:d1:05:af:f3:9e:76:95:f8:4c:27:4b:
bd:a6:a1:16:d3:df:04:99:d2:9d:3b:86:a9:8b:93:89:08:56:
29:e8:1e:e8:c7:fb:f7:2f:93:56:0f:61:23:a4:6e:47:b9:e0:
1a:bd:ba:2e:9e:70:7e:c2:ef:88:b3:28:5a:fc:1c:d2:9a:81:
46:0b:b8:07:6e:c5:10:42:65:66:c3:ae:14:2b:f8:82:4c:ce:
46:c7:f0:ad:34:bb:53:2e:0e:67:e6:52:11:93:30:37:27:bd:
b6:e2:b6:4e:f2:6c:77:32:6e:9b:e7:dd:bb:1f:fc:40:e4:4f:
67:16:2e:e9:67:ef:fb:b9:f5:cf:6c:0f:e6:9a:50:fd:bf:8e:
80:00:81:7d:d0:96:ad:46:65:85:99:96:8e:7d:5c:6d:ee:01:
e0:9f:a3:52:a2:48:d7:e8:fe:86:0c:c4:ee:62:9e:f8:26:40:
8f:d5:27:87:d3:62:f8:77:ef:c3:58:19:bd:08:79:4b:22:a4:
b4:7f:96:99:30:cd:43:8f:3f:a5:54:ff:10:34:0f:79:b9:3e:
7a:24:65:f8:6d:68:e6:0b:f7:9d:ff:d7:2c:9f:67:fd:98:b4:
0f:9a:7e:f8
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUF9ZHAJkWE+sc5iRnaNpgbvjOFDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZBNUQxMEEzMEVEODA1QkRFMzM3NTE1Q0IwRjU4MDA4
NjExMTU1ODAeFw0yNTExMDQwNDIwMDhaFw0yNTExMDgxMTIxMDhaMDMxMTAvBgNV
BAMTKDg1NEQxRkI5NjBEM0E0MEY1Q0NGRjJFRDFBRTRCNDM0QjM1MzY3NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2NeFYjT3EjoxzSVdbd6GSaT4a
+bwITjiDF9S0dD9PL+w3pU2HbUIUC7IJZGrsbI7Gm0W8yt6GjsomxFoOWyn8nAM3
kjeQAQNnaIC+zsMP3ghAlaPOnV5ADp78BbYP3i9+vl5V4Xv0xQQ1nrLG4HdHE/94
zfLt5t79Dfq8iqQUh9lJFAlgfsvPqLuUbnH7yzXWPgn7sqbwBrX6XBjpRjmRBGqI
X6J7Tp1zMW7SbmbpVICz9Fjy7QuYrPBDYsmffZPyjbeDuTDq+y5zrqCgeEPG6et2
gbozJ3ri07aAqn6IkrCi8bEtWutv5uVdrvO/a0Moq5Di9MlhQsSamGfp8gCJAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUhU0fuWDTpA9cz/LtGuS0NLNTZ2AwHwYDVR0j
BBgwFoAUhqXRCjDtgFveM3UVyw9YAIYRFVgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDRBNDZENkE4NURGQTYxNDlDNUY5QTdDREExOENGOTMw
RDM4MkYzMzgyRTE5MjNENTAzRjgyOUFDNDUwRDAyLzAvODZBNUQxMEEzMEVEODA1
QkRFMzM3NTE1Q0IwRjU4MDA4NjExMTU1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NkE1RDEwQTMwRUQ4MDVCREUz
Mzc1MTVDQjBGNTgwMDg2MTExNTU4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjA0QTQ2RDZBODVERkE2MTQ5QzVGOUE3Q0RBMThDRjkzMEQzODJGMzM4
MkUxOTIzRDUwM0Y4MjlBQzQ1MEQwMi8wLzg2QTVEMTBBMzBFRDgwNUJERTMzNzUx
NUNCMEY1ODAwODYxMTE1NTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6aHr6W9hoCrZR4nU2Qb/KN1ue
WuFMGipO0QWv8552lfhMJ0u9pqEW098EmdKdO4api5OJCFYp6B7ox/v3L5NWD2Ej
pG5HueAavbounnB+wu+Isyha/BzSmoFGC7gHbsUQQmVmw64UK/iCTM5Gx/CtNLtT
Lg5n5lIRkzA3J7224rZO8mx3Mm6b5927H/xA5E9nFi7pZ+/7ufXPbA/mmlD9v46A
AIF90JatRmWFmZaOfVxt7gHgn6NSokjX6P6GDMTuYp74JkCP1SeH02L4d+/DWBm9
CHlLIqS0f5aZMM1Djz+lVP8QNA95uT56JGX4bWjmC/ed/9csn2f9mLQPmn74
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:23:28 2025 by rpki-client