
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
File: 85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft (raw, json)
Hash identifier: rklnhZdbrs8GMdCwh8wby5gMAPUkjZf2QOTy81G2pgg=
Subject key identifier: C3:B3:FD:62:F7:B1:94:BB:C4:61:C5:E3:25:7D:FB:54:A0:90:38:00
Authority key identifier: 85:F5:51:38:91:F0:2B:DA:EB:3A:B3:30:E2:4A:BE:7E:84:07:0D:A7
Certificate issuer: /CN=85F5513891F02BDAEB3AB330E24ABE7E84070DA7
Certificate serial: 06D2A5F1FC719DCC3C063C1B3C4540CD98FC0C32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
Manifest number: 0122
Signing time: Sun 26 Apr 2026 11:20:48 +0000
Manifest this update: Sun 26 Apr 2026 11:15:48 +0000
Manifest next update: Sat 02 May 2026 03:15:48 +0000
Files and hashes: 1: 85F5513891F02BDAEB3AB330E24ABE7E84070DA7.crl (hash: tO0b1BD4y9DopRXtsaRgh3fv3pjL1yH5IFTWIOssJUY=)
2: 323830333a373735303a3a2f33322d3438203d3e20323733393337.roa (hash: +rZ4ZSLTeYiCsH1EEN0XfWkFSC8d4JKf9WkHZaQJC7Q=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.crl
rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 02 May 2026 03:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d2:a5:f1:fc:71:9d:cc:3c:06:3c:1b:3c:45:40:cd:98:fc:0c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F5513891F02BDAEB3AB330E24ABE7E84070DA7
Validity
Not Before: Apr 26 11:15:48 2026 GMT
Not After : May 2 03:15:48 2026 GMT
Subject: CN=C3B3FD62F7B194BBC461C5E3257DFB54A0903800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:50:37:10:26:3f:ff:53:8c:cd:83:d7:ac:
f6:d6:d0:75:45:7e:b6:0a:b5:7c:9b:af:20:47:1c:
8a:4f:63:8c:df:c0:af:ea:d8:06:a8:ae:cd:48:e0:
2e:a7:11:c3:a8:02:de:b4:f3:9b:8f:25:ba:50:4d:
5b:18:09:25:b4:64:dc:b7:53:f5:67:7d:ef:cb:52:
46:7b:22:20:95:56:28:48:33:9c:30:35:a5:86:b2:
76:53:4a:d2:89:46:00:5d:c2:3b:b2:78:d0:ec:2a:
84:04:df:a9:9c:4f:bb:cb:57:ac:a4:3b:f8:b1:7d:
66:f0:4e:74:d1:2e:ec:72:2e:8e:66:32:d0:fa:c6:
e5:0f:4d:01:3d:aa:d3:1b:43:58:26:2b:19:26:3f:
90:cf:29:bc:b7:6d:44:7f:11:dc:fd:31:16:3c:9d:
67:8c:61:19:19:b0:6d:e6:80:7f:19:fb:28:59:0b:
7d:3b:e9:04:cc:37:33:32:02:71:ba:66:28:df:91:
6c:99:e4:02:24:25:3e:0a:0f:68:01:9a:0b:8a:b2:
42:17:7c:6c:d2:63:31:55:fc:cb:47:c4:3f:e7:aa:
ec:be:67:57:cc:0f:e5:42:cd:ec:bd:d4:9c:46:fa:
17:e4:38:8e:d2:e7:60:4d:4a:cc:76:9b:bb:67:fa:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B3:FD:62:F7:B1:94:BB:C4:61:C5:E3:25:7D:FB:54:A0:90:38:00
X509v3 Authority Key Identifier:
keyid:85:F5:51:38:91:F0:2B:DA:EB:3A:B3:30:E2:4A:BE:7E:84:07:0D:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E2A3BA7093A28F1AB91BE5562C4B5405829CE4B8F5659B5672BCF4F965FCFE8/0/85F5513891F02BDAEB3AB330E24ABE7E84070DA7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b6:2d:b0:29:48:a2:7b:aa:6a:a8:9c:03:5d:ea:2e:9c:94:
36:3e:e5:a1:42:69:65:00:02:f6:2f:88:90:69:b4:9d:86:16:
14:92:bd:96:29:f9:42:cf:4a:6c:64:b7:e0:22:46:a8:bf:f0:
c5:57:49:e6:a6:a6:8e:d8:13:4b:8d:f1:8c:dc:14:27:0f:41:
77:6f:da:a0:4c:cd:9e:ee:ea:2c:74:84:53:27:53:1c:88:81:
9e:af:d7:69:cd:72:41:7b:50:d9:13:55:a1:f3:59:93:e3:cf:
e8:6e:da:2b:ff:57:7f:7e:17:49:a1:0b:24:c9:52:0c:04:ac:
ac:43:47:91:fd:35:d4:85:09:b3:15:23:2c:7a:6e:ac:83:ee:
b8:37:b0:04:1a:d9:4f:90:7c:4f:c9:0b:4f:75:d9:b4:d6:7f:
99:99:bc:89:ae:50:ac:90:1c:3d:b5:1e:59:c6:1a:ca:ea:eb:
56:f9:b7:2f:59:23:65:43:ee:d9:6f:49:e7:11:55:08:e4:16:
25:00:99:f8:93:b1:00:22:4e:7c:fa:b1:0e:f9:15:5a:48:a5:
e2:e8:27:e8:44:05:32:a0:59:4e:7f:6a:5c:88:8b:18:78:a5:
6e:73:43:90:bc:8b:9f:2b:c5:ab:07:12:e0:26:4a:c6:00:f7:
69:6f:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:04:11 2026 by rpki-client