
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
File: 84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft (raw, json)
Hash identifier: aCbxKxUea/Z+FOg6LTFNAievv3FjQyEOQABcUbXQ68A=
Subject key identifier: D1:3C:6C:7A:3C:62:15:FE:B2:5A:D0:CC:44:2A:19:67:B4:90:A7:B5
Authority key identifier: 84:FD:CF:40:13:0E:9D:68:6F:7A:36:57:DA:80:EA:0B:09:86:8A:48
Certificate issuer: /CN=84FDCF40130E9D686F7A3657DA80EA0B09868A48
Certificate serial: 696743D4D95C7102A5DC305DE8A45AD42DF2A0CE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
Manifest number: 017E
Signing time: Tue 07 Apr 2026 15:48:47 +0000
Manifest this update: Tue 07 Apr 2026 15:43:46 +0000
Manifest next update: Sat 11 Apr 2026 18:58:46 +0000
Files and hashes: 1: 323830333a343639303a3a2f33322d3438203d3e20323732383930.roa (hash: tbIZY02PuOCkKdtHSVf1ttjXeB8krWAgetBlIU6oo/g=)
2: 84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl (hash: vWWLExtCHKGEHwkI1jvqCpznvIzWzlNbLbEnFS77KOQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl
rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 11 Apr 2026 18:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:67:43:d4:d9:5c:71:02:a5:dc:30:5d:e8:a4:5a:d4:2d:f2:a0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84FDCF40130E9D686F7A3657DA80EA0B09868A48
Validity
Not Before: Apr 7 15:43:46 2026 GMT
Not After : Apr 11 18:58:46 2026 GMT
Subject: CN=D13C6C7A3C6215FEB25AD0CC442A1967B490A7B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:0f:32:d5:72:5c:7c:20:9d:6c:93:40:94:
4d:43:e4:86:f1:ef:6b:17:63:b3:ed:0c:1a:17:12:
bf:eb:40:51:8e:62:5d:44:9e:48:2b:b3:b3:a6:6d:
68:0b:1e:77:d8:d9:5e:97:d5:cc:11:4e:31:9b:a9:
a6:36:6f:ef:8a:0c:53:5e:e5:61:d6:20:bc:3a:fe:
91:14:b1:c2:43:25:d2:e8:6e:08:f3:14:5d:6d:b5:
62:29:5a:c4:b9:e6:e0:19:42:24:79:77:f5:f3:7f:
19:23:c0:4c:2b:87:79:1d:74:a8:93:43:32:af:1f:
66:ac:6c:a8:4b:a8:c8:6c:18:24:0a:a7:d9:4a:97:
3f:46:ec:90:83:00:b7:d4:87:44:10:39:7a:7e:43:
8f:66:e3:f8:e6:8c:3c:17:df:20:68:df:56:d1:65:
fe:4b:8d:88:05:ba:42:85:0e:fd:c8:80:03:27:41:
24:bd:00:e2:8f:bc:67:59:46:28:08:8c:c4:bd:67:
d7:65:64:0e:32:3e:eb:23:60:41:03:26:ac:3a:40:
c4:4a:d1:cb:68:e6:96:3c:8f:eb:43:c0:78:65:17:
23:39:96:96:42:aa:ab:f7:2b:26:81:c9:66:a6:81:
4d:10:25:33:58:3f:5d:59:72:aa:e7:69:ff:09:80:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3C:6C:7A:3C:62:15:FE:B2:5A:D0:CC:44:2A:19:67:B4:90:A7:B5
X509v3 Authority Key Identifier:
keyid:84:FD:CF:40:13:0E:9D:68:6F:7A:36:57:DA:80:EA:0B:09:86:8A:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:98:6d:29:36:53:88:b2:ab:83:12:78:e1:93:cd:c8:55:6c:
e6:f5:38:bc:d4:44:4a:2f:61:9a:da:e3:7f:c4:a8:72:9e:f1:
37:46:33:b0:b5:5b:01:9d:c7:76:27:e5:d4:ee:34:3d:3b:52:
0f:ce:68:47:27:d6:91:5e:b2:8c:ac:7b:2b:16:0d:a0:1f:5d:
0a:3b:34:ee:f0:14:91:53:bf:68:9a:0a:06:5c:ce:80:7a:b3:
f5:21:21:ee:8c:31:1d:ed:91:33:92:99:bf:cc:10:20:e3:d8:
be:f2:88:cf:23:63:db:00:d8:93:5a:a8:96:e0:9e:79:ad:34:
26:17:ba:46:a7:84:01:a8:66:db:6c:c9:5c:fa:94:31:40:a4:
73:53:c3:0c:d5:eb:86:3d:81:7b:a5:31:41:44:d8:55:41:cd:
75:24:f2:03:25:83:43:ee:76:ce:a6:65:26:70:86:9e:e8:b6:
c5:24:39:99:fc:b3:33:cd:18:96:aa:49:0b:b4:87:c5:85:3c:
42:33:8e:50:26:b7:93:dd:46:58:d2:98:2d:9c:76:36:3d:23:
ac:63:ec:c2:83:0a:c1:fe:2b:09:ba:88:b6:ec:15:08:96:cd:
36:3b:dc:e7:e1:a5:5a:48:e8:44:76:2a:e6:87:62:a1:04:2f:
d0:56:4f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:41:38 2026 by rpki-client