
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
File: 85E8329CBFB72C73936DE19616620415214EDD8A.mft (raw, json)
Hash identifier: v1jWuoK+aLaRtHRcSHlcrJrpPiV4pIih7w3zFksJ+Yg=
Subject key identifier: AF:EE:99:0F:63:10:D5:47:E0:24:D5:AB:3F:3F:1A:7F:BA:EC:D9:3C
Authority key identifier: 85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A
Certificate issuer: /CN=85E8329CBFB72C73936DE19616620415214EDD8A
Certificate serial: 7E3286BF7FA40E0879B85EAFF9E902625181F963
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
Manifest number: E2
Signing time: Fri 17 Apr 2026 23:07:26 +0000
Manifest this update: Fri 17 Apr 2026 23:02:26 +0000
Manifest next update: Wed 22 Apr 2026 12:51:26 +0000
Files and hashes: 1: 323830333a3261303a3a2f33322d3332203d3e203135383330.roa (hash: QfXjR2c5C8SCB602pAa988tt47aRPyXAJnQlthS5Ay0=)
2: 85E8329CBFB72C73936DE19616620415214EDD8A.crl (hash: tGKGrAr2eCmbU21oSjfGR/5dPPcr8CaTG9VZAXq4oGk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.crl
rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 22 Apr 2026 04:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:32:86:bf:7f:a4:0e:08:79:b8:5e:af:f9:e9:02:62:51:81:f9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85E8329CBFB72C73936DE19616620415214EDD8A
Validity
Not Before: Apr 17 23:02:26 2026 GMT
Not After : Apr 22 12:51:26 2026 GMT
Subject: CN=AFEE990F6310D547E024D5AB3F3F1A7FBAECD93C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:85:bb:50:63:b6:64:58:01:a0:01:2f:ec:
0e:9b:19:b2:66:2d:bf:27:19:64:cd:e2:db:0b:72:
da:37:05:9c:9d:3d:c5:14:dd:69:16:66:49:56:fd:
fc:2e:17:9d:8a:32:2e:65:63:eb:74:9c:57:db:44:
2c:83:e4:59:94:ca:73:1b:bb:ad:4a:9d:ee:a6:e4:
fd:d4:86:db:20:2d:02:aa:62:0d:e1:75:88:59:1b:
6b:2d:4b:fb:47:52:3b:34:ab:73:a3:01:e6:14:7d:
cb:c8:30:81:e7:9a:55:2b:0c:38:b6:76:e7:0d:f3:
a6:3a:40:d9:8b:51:b0:b2:e3:a5:5f:28:0c:47:e1:
39:2b:4f:25:13:d4:5d:25:58:83:e4:1e:67:a0:c9:
58:24:a0:3e:eb:03:0d:91:c6:80:9d:52:1b:58:2e:
bc:42:de:ae:27:a0:ca:39:78:92:6b:86:b6:99:ae:
10:cf:09:ae:ec:b5:0a:c4:26:5a:91:9e:4d:51:7c:
30:a5:bb:44:de:fc:b7:f0:46:df:4a:2a:97:7a:51:
f9:91:35:87:d3:fd:34:d6:63:17:f7:b2:73:bd:8a:
7e:47:c7:81:66:37:bb:76:09:59:99:6d:58:2f:18:
8f:31:08:95:52:2d:6a:d6:32:c0:bd:f5:b1:a6:2c:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EE:99:0F:63:10:D5:47:E0:24:D5:AB:3F:3F:1A:7F:BA:EC:D9:3C
X509v3 Authority Key Identifier:
keyid:85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:83:27:13:a8:a3:0a:63:19:20:38:a4:d0:69:6d:12:28:72:
15:52:61:cf:09:b7:55:64:d5:97:53:c5:f7:92:4a:1d:91:15:
6b:97:5b:e6:7c:26:6b:77:f8:f1:14:ae:0b:46:13:1c:b9:0e:
86:00:34:d5:e0:71:6b:ac:a5:f9:4a:17:1f:7b:6c:86:95:0e:
d9:32:d0:c8:ca:58:47:c8:0a:b5:dd:ed:97:4b:53:23:48:f2:
26:60:2f:c0:33:fe:22:3f:84:33:f0:f2:51:57:6d:13:b2:a5:
2f:bd:ed:1e:ec:67:8e:ad:f4:0b:80:ed:3e:8f:24:d6:1c:1d:
ef:c1:fa:fb:d7:d9:6d:8a:5e:f8:31:a5:8f:b7:de:e7:e2:6e:
a4:7a:68:8e:83:b7:14:de:f0:a6:13:c8:a2:20:34:e1:46:bb:
82:a6:27:2e:da:17:4e:31:d0:1c:f1:35:c5:7f:58:20:37:96:
13:2c:53:63:da:82:d3:44:49:fe:6b:48:8b:2c:b9:39:6f:2b:
c8:f4:2c:f2:e7:4b:35:10:ba:44:10:be:bf:35:04:b5:39:3f:
78:f1:41:d0:fe:10:42:6e:50:8c:f5:a8:57:31:ac:18:d4:4f:
00:f2:a9:a6:69:0c:45:95:14:36:c3:20:f4:ca:02:b7:96:8d:
cb:4c:fd:00
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUfjKGv3+kDgh5uF6v+ekCYlGB+WMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVFODMyOUNCRkI3MkM3MzkzNkRFMTk2MTY2MjA0MTUy
MTRFREQ4QTAeFw0yNjA0MTcyMzAyMjZaFw0yNjA0MjIxMjUxMjZaMDMxMTAvBgNV
BAMTKEFGRUU5OTBGNjMxMEQ1NDdFMDI0RDVBQjNGM0YxQTdGQkFFQ0Q5M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WYW7UGO2ZFgBoAEv7A6bGbJm
Lb8nGWTN4tsLcto3BZydPcUU3WkWZklW/fwuF52KMi5lY+t0nFfbRCyD5FmUynMb
u61Kne6m5P3UhtsgLQKqYg3hdYhZG2stS/tHUjs0q3OjAeYUfcvIMIHnmlUrDDi2
ducN86Y6QNmLUbCy46VfKAxH4TkrTyUT1F0lWIPkHmegyVgkoD7rAw2RxoCdUhtY
LrxC3q4noMo5eJJrhraZrhDPCa7stQrEJlqRnk1RfDClu0Te/LfwRt9KKpd6UfmR
NYfT/TTWYxf3snO9in5Hx4FmN7t2CVmZbVgvGI8xCJVSLWrWMsC99bGmLO31AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUr+6ZD2MQ1UfgJNWrPz8af7rs2TwwHwYDVR0j
BBgwFoAUhegynL+3LHOTbeGWFmIEFSFO3YowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OEZGRTQwRjMxNjdGRkY2QTMxQ0U2RTlFNEZDREU4RjJE
NTFCOEJGRjg5NUNFMkQ2MjE1QzI5QjczRkMxREM4LzAvODVFODMyOUNCRkI3MkM3
MzkzNkRFMTk2MTY2MjA0MTUyMTRFREQ4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUU4MzI5Q0JGQjcyQzczOTM2
REUxOTYxNjYyMDQxNTIxNEVERDhBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNThGRkU0MEYzMTY3RkZGNkEzMUNFNkU5RTRGQ0RFOEYyRDUxQjhCRkY4
OTVDRTJENjIxNUMyOUI3M0ZDMURDOC8wLzg1RTgzMjlDQkZCNzJDNzM5MzZERTE5
NjE2NjIwNDE1MjE0RUREOEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCagycTqKMKYxkgOKTQaW0SKHIV
UmHPCbdVZNWXU8X3kkodkRVrl1vmfCZrd/jxFK4LRhMcuQ6GADTV4HFrrKX5Shcf
e2yGlQ7ZMtDIylhHyAq13e2XS1MjSPImYC/AM/4iP4Qz8PJRV20TsqUvve0e7GeO
rfQLgO0+jyTWHB3vwfr719ltil74MaWPt97n4m6kemiOg7cU3vCmE8iiIDThRruC
picu2hdOMdAc8TXFf1ggN5YTLFNj2oLTREn+a0iLLLk5byvI9Czy50s1ELpEEL6/
NQS1OT948UHQ/hBCblCM9ahXMawY1E8A8qmmaQxFlRQ2wyD0ygK3lo3LTP0A
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:49:49 2026 by rpki-client