
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json)
Hash identifier: M0tzVneJDWhK3NlCxb/UtW4i/KZIUxgSLAJUSC+TRIk=
Subject key identifier: 89:C5:BC:A6:DA:47:D0:62:85:1C:C1:29:F9:F2:CE:14:39:65:F8:03
Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Certificate serial: 3C5DAAAEB01BA4298B85E5407ED427DE5483F2D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
Manifest number: 0189
Signing time: Tue 12 May 2026 20:24:07 +0000
Manifest this update: Tue 12 May 2026 20:19:07 +0000
Manifest next update: Sun 17 May 2026 10:06:07 +0000
Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: JqSzzKtH7WTqeSjtgfTKgdgz8dn8rZiduEYkUeIrIvo=)
2: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: KMpcSSvAjkStpwoPZ7DqS/UMOwRE6oInZsrGFDI4iGI=)
3: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: RJWKCtcb0QGuHY5Gw6N2Gh/MDb+QMK63ndDyMj3r9fI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 16 May 2026 11:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:5d:aa:ae:b0:1b:a4:29:8b:85:e5:40:7e:d4:27:de:54:83:f2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Validity
Not Before: May 12 20:19:07 2026 GMT
Not After : May 17 10:06:07 2026 GMT
Subject: CN=89C5BCA6DA47D062851CC129F9F2CE143965F803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:3c:20:85:0a:ea:ee:4b:dc:1c:e1:e3:31:
02:51:ce:e7:d8:ca:8a:d1:c1:28:e1:1e:c2:bc:0b:
93:d9:00:c3:d0:c3:e8:7d:52:15:4e:d5:5d:39:af:
0c:c3:a3:e1:71:ec:b9:84:b8:ce:7f:59:b6:8b:44:
8b:41:6e:b0:c5:f7:e3:b9:d2:b6:d9:7c:15:e9:9c:
33:16:7a:a7:75:b4:67:1e:eb:35:21:3c:6b:2b:45:
5f:89:0c:24:5f:77:af:eb:e9:43:5c:33:97:d0:38:
20:2d:f2:05:9c:a6:b8:83:18:3c:2a:51:65:fd:a0:
9f:cf:9c:d2:8a:08:5d:6f:b1:25:22:2f:99:15:3f:
a7:ab:bc:3f:6e:d7:e8:19:82:4d:5e:87:d5:34:64:
2f:39:f5:58:b9:cd:35:b1:38:7d:6f:26:7d:4c:de:
08:a9:22:67:16:eb:3f:c2:3e:8f:1c:8e:a6:ea:be:
8c:31:f3:45:1b:83:17:a5:77:49:2a:03:b5:37:fc:
fe:64:63:8a:65:5b:e6:01:50:8b:8d:19:86:99:56:
10:b6:43:69:d1:99:02:e5:47:22:5a:df:49:ef:7c:
ff:83:e6:4a:c0:02:9a:fe:5b:c5:65:67:fa:ae:88:
63:40:7e:01:b3:1a:0c:15:0c:5e:2b:c6:ea:4c:ca:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C5:BC:A6:DA:47:D0:62:85:1C:C1:29:F9:F2:CE:14:39:65:F8:03
X509v3 Authority Key Identifier:
keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f3:08:9c:93:d3:b0:fc:d6:48:17:5e:3e:eb:55:b6:ea:67:
42:f2:43:5b:8d:b6:3e:34:84:01:1f:0c:58:8a:16:84:cd:99:
99:ee:aa:af:c2:cd:90:d2:e9:19:b4:64:81:e7:5b:9f:ad:a3:
c8:d1:a8:14:c5:36:6a:b3:1d:a4:92:b0:2c:dd:75:7f:40:7b:
bf:90:c7:80:15:55:b9:29:97:d1:35:6e:98:12:28:46:29:b6:
6e:bc:5f:a3:a3:e7:5f:a4:4a:31:77:d8:e3:42:b5:69:9f:3e:
84:7c:c3:40:36:fc:e7:4b:fe:b5:57:7f:88:4b:25:1e:43:44:
46:ac:10:36:a9:b9:13:8a:6a:ff:fc:0f:43:37:6a:80:ba:55:
28:57:5a:f1:d4:a1:1a:66:b0:5f:8d:5b:3d:5e:30:25:be:bd:
d7:69:e0:e3:62:bd:a8:89:e1:99:5e:0f:db:a0:e6:93:23:30:
3e:ba:55:eb:20:18:d9:d1:a6:08:15:f0:3d:0f:c7:4c:41:e1:
d9:85:f3:12:cd:30:a0:28:47:58:22:08:f0:84:25:53:db:75:
c8:cb:24:65:07:00:de:a8:28:40:85:ac:42:1c:57:ab:d5:cb:
4a:64:c5:7a:e6:82:53:aa:92:19:31:19:2e:27:da:98:91:58:
91:e9:da:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:49:56 2026 by rpki-client