Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
File:                     86A5D10A30ED805BDE337515CB0F580086111558.mft (raw, json)
Hash identifier:          Zg/qf8Z0Aj9NNA8HMydH8ABpAe8NdgvkYiv/+ILttmc=
Subject key identifier:   65:B6:F0:C8:C3:77:17:19:96:43:0D:60:7F:FF:F3:FE:D0:81:49:F2
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       4C97AFE524B9E59F43FEB01A79D46B21C6684F88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
Manifest number:          0140
Signing time:             Sun 16 Nov 2025 00:46:57 +0000
Manifest this update:     Sun 16 Nov 2025 00:41:57 +0000
Manifest next update:     Thu 20 Nov 2025 15:08:57 +0000
Files and hashes:         1: 3138362e302e3135322e302f32322d3234203d3e2033333536.roa (hash: HLs4vs9EuGNu+9Zi6IW0euZVvm6Jg9q5ozELysTd/dM=)
                          2: 3138362e302e3135322e302f32322d3234203d3e2033353439.roa (hash: XYEJuqHBP5I3H3vnyxVhqnKXipLh7lpLPXrkvTMQwkI=)
                          3: 3138362e302e3135322e302f32322d3234203d3e20323033.roa (hash: /2YzcpL+zbZ/HOojoI6SfUsIOaF0b9Gg1wOatVdcruQ=)
                          4: 3138362e302e3135322e302f32322d3234203d3e203131333932.roa (hash: 4BVHQHQ654pki4SqE7CRMY6rfA2Z7iQfJPz/dhZ4vvE=)
                          5: 86A5D10A30ED805BDE337515CB0F580086111558.crl (hash: jDbMN6UBcQX5udDzaJ0TXTSCjThWP+ZOabq9aV6CCls=)
                          6: 3138362e302e3135322e302f32322d3234203d3e203139393035.roa (hash: kvkorhOrX+jZT4TQUlDe1CcZf+5MbA/dWMc5P0WYIYM=)
                          7: 3138362e302e3135322e302f32322d3234203d3e20323032.roa (hash: 1wxGWZ0ctYk/wFZSCMD27MHsKMycX7OUGO18cY3jC+4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Nov 2025 15:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:97:af:e5:24:b9:e5:9f:43:fe:b0:1a:79:d4:6b:21:c6:68:4f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Nov 16 00:41:57 2025 GMT
            Not After : Nov 20 15:08:57 2025 GMT
        Subject: CN=65B6F0C8C377171996430D607FFFF3FED08149F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:70:40:f4:90:80:4f:5d:e6:34:c3:77:35:
                    f7:2b:60:85:65:95:1b:81:5e:50:14:01:21:cd:55:
                    da:f6:0a:5b:e5:45:cd:0b:be:4f:9c:27:ce:59:75:
                    10:e1:15:05:72:78:cb:a5:ba:2c:67:db:dd:40:3c:
                    74:69:b6:2f:2c:8e:66:61:1f:88:86:c7:21:ac:12:
                    1f:a4:d2:22:39:ca:8b:b2:1f:7d:6a:0c:cb:f1:c7:
                    02:fe:f9:8f:90:19:98:ce:c2:9f:ec:1b:7d:df:ab:
                    2b:1b:45:cf:f4:8d:0b:30:d0:79:49:c2:72:cf:bf:
                    ad:67:2f:fe:93:57:9a:fe:83:21:5d:92:65:e4:ed:
                    bd:d5:e2:ac:a6:d5:53:e5:c1:7b:d7:2b:af:80:ec:
                    77:c1:71:c9:76:98:bf:3b:7b:d5:67:1f:02:9c:26:
                    62:d4:34:0c:f5:89:94:3b:55:d2:2b:c6:88:30:bf:
                    43:c6:0f:ad:7b:93:be:cb:65:0c:41:70:01:40:37:
                    3d:7f:10:9c:1d:67:3c:75:3a:23:4b:db:f9:9d:ed:
                    e5:cf:8b:00:e9:64:8f:b1:36:f9:b4:14:20:e2:37:
                    e9:80:7d:8b:8d:52:b6:21:31:ba:8a:8e:71:e1:f9:
                    14:d6:b9:20:56:44:a3:c9:98:27:b6:ff:b2:8a:b3:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B6:F0:C8:C3:77:17:19:96:43:0D:60:7F:FF:F3:FE:D0:81:49:F2
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:82:43:68:b8:1d:bd:16:8b:49:b5:e3:0c:4d:17:80:6b:29:
         4b:74:85:b7:99:92:1a:42:81:6a:b0:b6:d1:00:be:19:5c:69:
         d4:ff:6d:93:44:ab:5c:4a:b5:59:39:c4:fc:8e:72:05:c8:8c:
         8e:08:1a:75:00:1c:46:81:49:89:6b:61:10:a7:ed:5c:1c:10:
         e4:5d:54:52:d3:99:88:bd:d1:eb:aa:1b:46:36:f4:1f:e9:4a:
         89:80:48:55:0a:6c:a7:20:e6:25:65:99:36:0b:49:75:d8:4b:
         4a:d7:5d:88:5a:cc:c4:48:fd:ca:20:31:c7:a0:45:ed:79:db:
         72:fb:27:2e:04:35:80:b1:8c:1c:45:b5:13:cc:d4:78:3f:2c:
         30:55:fe:32:f3:2e:30:55:96:14:c4:cd:e6:13:b8:c3:d6:78:
         ec:7c:71:e5:a4:06:49:7a:8f:36:10:90:10:f7:7c:ea:77:5f:
         21:45:59:a7:9f:cb:c9:5a:27:a4:e5:39:06:4d:97:3c:0f:d9:
         ce:77:03:3f:c6:06:43:5a:0d:fa:9a:b8:b3:be:fb:94:43:d1:
         5b:a4:fd:48:95:52:dd:7e:0c:83:e8:4e:92:5d:8b:b7:50:d8:
         07:35:4f:51:04:ef:3f:29:bc:e4:bb:76:08:6a:de:f1:d0:97:
         c1:4e:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 03:31:08 2025 by rpki-client