
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
File: 84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft (raw, json)
Hash identifier: PHgOCn7klZdBzepEtERV2pEW0pzsGyzxRT3Ev7JuB7g=
Subject key identifier: 1C:2A:80:6A:FA:E3:3E:A2:92:CC:65:A5:E4:30:87:1D:90:47:39:EB
Authority key identifier: 84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E
Certificate issuer: /CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
Certificate serial: 2CD5A72F6F3414861D3DA19D5118CD10023E49AB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
Manifest number: 017A
Signing time: Wed 25 Mar 2026 01:02:55 +0000
Manifest this update: Wed 25 Mar 2026 00:57:55 +0000
Manifest next update: Mon 30 Mar 2026 02:52:55 +0000
Files and hashes: 1: 323830363a3333633a3a2f33322d3438203d3e20323635353837.roa (hash: 7xiCWr2aOsqXzAqRAqwNIT4EL+ITgtVmg+wIDJZUubc=)
2: 84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl (hash: u5jMMsbU3bQy74hws2LNYODrF+/jmaDUNH/VAhXibAM=)
3: 34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa (hash: R3Pw+v5eQHSTNGknkwDm76hC/h4P1wWhllAoQssxbVU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl
rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 13:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d5:a7:2f:6f:34:14:86:1d:3d:a1:9d:51:18:cd:10:02:3e:49:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
Validity
Not Before: Mar 25 00:57:55 2026 GMT
Not After : Mar 30 02:52:55 2026 GMT
Subject: CN=1C2A806AFAE33EA292CC65A5E430871D904739EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:70:f4:de:02:6f:c7:33:a7:c1:35:e5:e7:
8b:4b:b0:3b:7f:4a:79:84:cb:9b:4f:0d:42:7d:55:
83:83:f5:ec:bc:0a:dd:7a:8d:f6:a8:22:34:76:55:
a9:5b:73:59:5e:ed:7b:bf:bc:c1:b1:de:2d:76:80:
64:63:1c:c9:88:9b:0e:8b:87:39:56:1f:fd:ea:d9:
6a:79:79:f9:fe:78:91:6f:cd:83:12:4f:e6:79:21:
f9:4a:b7:b2:51:c7:52:b5:c0:91:9f:10:3e:37:9f:
38:d1:91:79:a9:01:94:a5:f8:30:44:52:5d:a0:cc:
ed:26:99:f4:2a:a7:ba:11:23:bf:b1:8a:cb:d7:d0:
b4:42:d0:f1:47:be:d7:bd:16:d4:13:6d:4d:e5:15:
1f:93:5b:e9:44:24:dc:84:78:13:ea:15:39:a6:be:
ed:30:22:d3:c8:b7:89:a8:f5:2b:12:1f:ee:b4:0e:
2e:c1:d8:7f:16:ef:c0:f4:dd:59:7a:73:89:fc:46:
3d:0f:ab:d1:4a:c0:3b:9e:24:bd:01:a4:74:00:ed:
02:f0:ba:1c:cc:25:08:83:1a:d1:1d:33:79:05:50:
ad:3d:7a:95:82:88:44:46:10:c3:75:d8:8d:22:1f:
63:12:8a:f3:a7:1a:5f:ad:4e:e4:03:df:93:9f:d9:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2A:80:6A:FA:E3:3E:A2:92:CC:65:A5:E4:30:87:1D:90:47:39:EB
X509v3 Authority Key Identifier:
keyid:84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:64:ef:2f:02:2a:e3:3f:60:c1:66:f0:99:63:83:dc:29:0f:
d9:b5:e6:3f:35:dd:c9:0e:0b:45:61:4a:75:7d:49:53:74:0c:
56:b5:1f:cd:fb:e9:54:d2:87:9e:dd:7d:e0:23:e2:1b:ff:b9:
06:a3:6d:af:4e:58:60:fa:0d:5b:09:82:a2:05:a1:e1:66:ee:
a4:aa:b3:1c:81:51:a8:4d:65:24:a8:20:bd:5c:83:0b:3a:80:
b1:43:04:2d:5b:3b:5a:b4:3f:d9:96:3b:1a:42:ed:a4:4f:2c:
9a:7a:02:e7:b2:9b:63:76:30:90:d8:96:43:f1:5c:dd:bf:5e:
20:14:88:21:34:34:0d:1b:b0:3c:df:74:43:69:fd:7d:0d:a9:
0f:09:a4:86:7d:15:54:15:ec:d6:94:f2:1e:7d:ca:b6:f1:e2:
d5:b1:1a:bf:82:57:60:5c:82:d6:e2:d7:3a:c4:0e:4a:da:1f:
a2:6c:84:ef:05:41:dd:70:ea:ab:87:d2:4e:b4:bf:11:5f:13:
97:47:2c:2e:6a:96:f0:e1:be:80:7e:d1:7c:2b:0b:4b:6c:4c:
14:f4:f8:2c:76:63:ac:18:b6:83:26:a3:8d:84:93:24:ea:98:
b0:8f:66:06:a0:7e:55:b1:f2:e9:d7:4b:28:6d:df:48:af:fa:
dc:46:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 13:27:26 2026 by rpki-client