
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
File: 84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft (raw, json)
Hash identifier: xhsAduCTNkyEmtvrXInphi+kERTdiTMjRkDSxMyY+PU=
Subject key identifier: EB:2F:69:19:FB:F3:EF:84:3C:7A:17:03:CE:B6:68:51:3F:5D:D7:64
Authority key identifier: 84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E
Certificate issuer: /CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
Certificate serial: 63B1A78D95B2E53189860A6B408E5D521080758F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
Manifest number: 0136
Signing time: Sun 09 Nov 2025 04:52:35 +0000
Manifest this update: Sun 09 Nov 2025 04:47:35 +0000
Manifest next update: Fri 14 Nov 2025 03:13:35 +0000
Files and hashes: 1: 323830363a3333633a3a2f33322d3438203d3e20323635353837.roa (hash: 7xiCWr2aOsqXzAqRAqwNIT4EL+ITgtVmg+wIDJZUubc=)
2: 34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa (hash: 0yX7u6biszxE6RR/9ymdpIsRGp4J89CZIfVvJYcKuVo=)
3: 84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl (hash: f+FpuPSVtAIrPzQDe9ISBpIbSCzCofS8nvdNE5/ks0A=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl
rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 14 Nov 2025 03:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b1:a7:8d:95:b2:e5:31:89:86:0a:6b:40:8e:5d:52:10:80:75:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
Validity
Not Before: Nov 9 04:47:35 2025 GMT
Not After : Nov 14 03:13:35 2025 GMT
Subject: CN=EB2F6919FBF3EF843C7A1703CEB668513F5DD764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:fd:d6:be:2f:5f:5f:a6:ec:d8:32:20:a0:
c7:86:af:55:7c:d5:9c:a1:99:4e:fa:80:bf:41:0d:
e5:14:6a:8c:df:b2:18:27:1c:44:7f:6e:7c:44:4f:
59:eb:8c:ed:20:11:ff:f0:ad:e8:80:e4:b6:f1:7f:
51:89:43:78:11:a8:81:ca:3c:04:a8:30:11:84:50:
da:5a:dd:d2:ac:9a:f5:af:55:d8:28:d4:e7:a0:44:
a4:2d:57:17:c7:23:20:73:d3:d0:ee:70:cc:0f:76:
63:5b:c9:87:01:64:a7:b1:ca:26:d9:f9:41:20:f8:
6f:07:e9:b3:5e:83:5b:43:a1:39:a6:33:84:14:0d:
1d:29:52:31:18:a4:d0:53:96:5d:58:05:88:65:0f:
97:d2:de:26:97:78:2a:0d:e2:56:b5:15:fb:fc:1f:
8f:8f:bf:f0:a5:b0:e1:62:8f:a6:22:ba:90:1d:dc:
1c:93:d1:b5:41:b4:68:7c:42:dd:0f:a5:0f:55:c5:
02:ca:ce:43:7a:77:7c:75:82:30:5b:91:af:6e:25:
2c:9c:6d:1a:33:97:1f:b3:54:04:86:dc:03:5b:b8:
d6:97:29:44:8c:c2:1b:69:ed:5f:c5:d3:ef:2d:80:
a7:fd:31:e2:33:3b:da:00:f9:a4:ec:0c:df:26:9e:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2F:69:19:FB:F3:EF:84:3C:7A:17:03:CE:B6:68:51:3F:5D:D7:64
X509v3 Authority Key Identifier:
keyid:84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9a:47:0b:b8:1f:b1:53:de:5f:89:6e:f8:6a:f3:f0:ad:83:
f1:b5:75:95:bb:8c:72:cc:e7:05:63:ad:4d:3f:cf:fc:ed:ca:
e7:2e:3d:cf:5f:67:a5:3f:35:7b:e1:a9:dd:07:ad:8f:cf:f5:
66:64:27:63:d4:96:f2:8a:38:56:73:c7:d3:0e:2c:06:0b:2c:
ce:7b:57:18:3a:6d:4c:dc:14:a0:85:79:b2:71:11:d9:a9:d1:
d0:a7:71:1e:ea:12:6a:f7:56:0e:68:29:06:b5:e5:aa:40:a6:
0b:b9:87:63:6a:59:91:cc:fb:db:53:99:77:4a:23:cf:73:7e:
30:52:ea:9c:7c:ea:1f:47:16:ff:ea:f1:e8:f3:bf:29:8a:76:
65:3a:2d:2b:90:06:04:db:fa:76:ab:94:2f:b6:2d:3f:4b:5a:
44:79:6a:99:e9:48:e8:f2:0a:e4:bb:00:0f:95:fc:b8:b2:bf:
9f:e5:44:9c:bd:a8:d3:2e:ce:72:5f:57:93:52:ed:8f:c8:18:
02:c8:69:ce:2a:f7:27:37:94:1c:3a:2f:70:67:93:b7:ec:18:
73:8a:ad:1b:8d:04:4d:e3:cc:eb:50:0f:c8:7d:d5:f9:35:33:
b5:12:28:1d:37:88:fd:5d:22:2e:78:3d:d4:91:2b:3c:ad:85:
ff:8e:42:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 16:11:03 2025 by rpki-client