
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json)
Hash identifier: XOAqD/WY7pvgWTpJ/R3iytEKibStxEEa2vKo0xXUu2c=
Subject key identifier: 00:A4:CA:30:98:3E:CC:64:44:94:82:E3:A0:FD:7C:B7:D5:72:68:98
Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Certificate serial: 3EF49CD695F807115AEFFE528C6EF181505B1F1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
Manifest number: 01AD
Signing time: Thu 23 Jul 2026 15:10:22 +0000
Manifest this update: Thu 23 Jul 2026 15:05:22 +0000
Manifest next update: Wed 29 Jul 2026 12:54:22 +0000
Files and hashes: 1: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: dsiqn5QNI54CQy/f0obkUonQfFXrsXIbDHNNXn0U/Uk=)
2: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: JqSzzKtH7WTqeSjtgfTKgdgz8dn8rZiduEYkUeIrIvo=)
3: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: RJWKCtcb0QGuHY5Gw6N2Gh/MDb+QMK63ndDyMj3r9fI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f4:9c:d6:95:f8:07:11:5a:ef:fe:52:8c:6e:f1:81:50:5b:1f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Validity
Not Before: Jul 23 15:05:22 2026 GMT
Not After : Jul 29 12:54:22 2026 GMT
Subject: CN=00A4CA30983ECC64449482E3A0FD7CB7D5726898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:cf:10:38:f5:f5:d2:79:aa:9c:30:0d:a2:
fc:f8:ae:6e:8b:60:35:1f:56:b5:4a:ad:a7:81:d1:
50:88:af:01:43:60:a8:21:de:18:e1:80:3b:81:70:
d7:1d:fa:71:16:ad:a6:68:cb:30:51:79:0f:d2:d5:
cc:56:a5:7e:c8:49:e0:7e:f5:14:d0:ec:54:18:49:
af:a2:2a:40:74:33:46:5b:f6:24:cc:16:c1:81:10:
8d:ac:42:0a:b2:cd:63:84:a0:30:19:cd:4b:a0:50:
bb:c0:4f:9a:3b:0a:36:42:0f:ac:ac:00:db:45:b8:
c2:91:61:75:cf:5b:3d:66:0d:57:e8:d2:fd:49:69:
f9:d8:55:d6:98:66:9e:89:bc:d9:4a:de:ee:40:3d:
a2:3b:c3:90:b8:ab:47:38:96:2d:38:ec:df:2f:5c:
88:d1:a3:ba:69:d2:3d:f7:f8:59:54:ea:79:b3:72:
05:c3:ee:ab:11:59:55:81:3b:fc:c5:93:15:d1:99:
38:7d:c6:68:0f:9b:61:21:23:ad:f6:8e:44:0a:6d:
c9:47:35:a1:d0:02:aa:92:e1:db:cb:27:a5:d8:c6:
b8:53:94:d7:51:d3:08:a8:26:34:6e:7f:d7:31:7a:
d7:ae:a1:09:7c:ec:f4:d4:5b:27:1e:43:c9:2a:cd:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A4:CA:30:98:3E:CC:64:44:94:82:E3:A0:FD:7C:B7:D5:72:68:98
X509v3 Authority Key Identifier:
keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:56:8c:8d:72:db:17:c4:31:cb:86:03:4a:2a:32:f6:0a:98:
d4:b8:99:cd:fa:f8:34:ba:f8:da:57:89:12:d5:a9:8c:1e:c5:
64:f4:d1:46:ab:c5:f6:6b:d2:5f:f2:14:37:78:2a:59:1c:1d:
8c:e9:e4:61:06:55:ee:85:57:a0:d6:65:49:6b:6e:dd:81:d5:
5e:93:a3:d8:fe:6f:f8:4b:8b:c1:0d:3c:6f:a9:97:f3:a3:23:
7e:c0:a4:ed:35:2a:d9:bc:cb:f5:a9:c5:3d:38:6f:83:b0:40:
50:8d:58:58:34:c0:cd:73:1b:5e:2f:40:45:63:16:58:91:8d:
e4:51:a3:ff:3d:3d:05:1a:70:51:57:e5:11:df:01:f3:73:2b:
1d:97:46:8f:e2:2d:b9:f0:14:64:14:e5:25:a0:e8:c7:6d:e4:
6e:c2:2e:a8:94:aa:92:2f:8e:25:07:ad:d0:f2:96:c5:4f:48:
97:05:e1:f4:bf:72:b6:67:92:8f:c4:17:1a:15:d2:f0:cc:ce:
9d:ec:fd:35:b1:b4:65:ff:50:26:a4:84:65:29:59:7c:de:ba:
a6:c4:0a:b2:6e:e5:d4:35:80:32:c6:a7:34:86:81:3b:65:f3:
cb:b2:19:74:63:d1:bb:b9:ad:1b:83:85:95:7b:f7:f5:d0:cb:
52:fb:1c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:30:29 2026 by rpki-client