
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.mft
File: DD2D25C642478D5D4DCAB0135DBBD87109D394CC.mft (raw, json)
Hash identifier: Mc21VPTQ3/0IOEmx82ADltn7U4S/D1aKv05C+dJ8xiU=
Subject key identifier: 0C:98:53:0A:6C:41:6B:20:23:E7:D3:20:BE:50:12:5F:92:B4:18:D7
Authority key identifier: DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
Certificate issuer: /CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Certificate serial: 11402071B9DE86F7741626C42320D23C96FB9D42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.mft
Manifest number: 01A2
Signing time: Fri 29 May 2026 22:13:39 +0000
Manifest this update: Fri 29 May 2026 22:08:39 +0000
Manifest next update: Wed 03 Jun 2026 11:41:39 +0000
Files and hashes: 1: 34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa (hash: Doh3B25+EIPMUzeU4WMKzTcGiYs325jzsr58Nqj3n2U=)
2: DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl (hash: 8KJEKB9INoVyKR3ffCYEoRv1mMcRotEN9tXOZHAHUZg=)
3: 323830333a646461303a3a2f33322d3438203d3e20323731373935.roa (hash: jep8Lxld7Bf9+ixNRAs1t3vvUk20P+zDM8s2zD37hls=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl
rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 02 Jun 2026 13:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:40:20:71:b9:de:86:f7:74:16:26:c4:23:20:d2:3c:96:fb:9d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Validity
Not Before: May 29 22:08:39 2026 GMT
Not After : Jun 3 11:41:39 2026 GMT
Subject: CN=0C98530A6C416B2023E7D320BE50125F92B418D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:90:f4:b0:81:bb:c8:f8:0d:b2:38:65:57:
53:75:8e:11:48:22:7e:5b:22:1f:b6:11:01:90:3d:
b8:83:7c:b2:40:9b:22:ea:09:9e:a7:8a:2c:73:58:
1f:33:f5:1f:bd:d6:93:50:66:3d:eb:aa:6d:5b:89:
40:d2:27:5c:2f:66:62:52:8c:17:a5:24:b2:ca:9a:
4c:4c:ce:15:e0:12:6c:05:53:49:82:bb:b0:f1:af:
ea:ad:93:86:58:9b:04:73:3f:cb:da:a8:69:be:8e:
7d:8f:fa:6d:41:8c:3e:4a:cb:90:7c:8b:80:cc:b4:
d4:d4:0b:7d:45:0c:fc:70:60:e4:74:89:89:04:0f:
83:92:94:59:48:fc:04:87:bc:16:c8:af:1f:8e:43:
24:57:28:e2:8d:ef:c9:2b:b3:ec:29:a6:9d:35:7a:
d3:3e:65:e3:0f:3a:ec:b3:e4:d6:ed:c4:23:9d:ce:
9b:7f:a4:2d:e1:60:25:90:9a:be:6e:9a:a4:70:51:
dd:fc:39:42:b3:29:50:10:5d:12:86:8c:87:29:4d:
e8:cd:f5:e7:88:88:39:e1:a3:4a:d8:3f:d1:e5:d9:
fb:68:52:77:9d:e5:1a:06:fe:15:22:d8:5f:5e:ff:
8f:1e:17:e7:1d:d0:d8:71:68:6f:98:cb:9f:53:df:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:98:53:0A:6C:41:6B:20:23:E7:D3:20:BE:50:12:5F:92:B4:18:D7
X509v3 Authority Key Identifier:
keyid:DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2e:32:71:34:81:ef:b7:68:27:5a:9c:91:54:25:12:8b:13:
35:6c:c2:95:58:90:0c:9d:3d:f4:b6:64:da:51:4e:ed:1c:73:
e2:72:cc:50:65:26:c0:73:1f:d3:15:5a:a9:9e:c8:9a:98:7c:
e0:a9:af:a7:78:24:fb:4f:18:cf:a4:38:98:ff:02:da:d3:c7:
67:59:dd:c7:0e:19:96:ad:29:aa:94:36:e3:34:17:89:60:7c:
3c:3b:d5:7b:67:0d:b1:fd:87:75:d1:c5:b5:64:52:2e:b4:66:
74:d2:86:1d:09:a3:28:d3:96:45:60:dc:4f:e3:f1:de:ac:bc:
1f:6f:e8:4d:16:1a:64:c2:fd:97:5a:8c:ac:0f:d6:0e:be:ae:
ce:e3:4e:ec:25:38:6b:00:51:94:af:bd:97:c0:87:6d:24:b6:
a5:5d:5d:07:6c:f6:a4:60:b7:65:54:fb:f5:63:ac:05:d0:4d:
3b:43:23:f4:31:1b:10:2b:28:ad:2d:2f:60:e4:d2:33:6e:56:
83:23:ed:47:19:e2:9c:44:47:e6:f6:b3:58:0d:d1:6c:72:9a:
75:dd:14:fe:96:6d:d4:b0:19:98:64:e0:f9:85:6d:33:15:a1:
f5:29:5a:7e:eb:4f:f0:6f:62:04:bb:64:63:04:22:50:7d:e0:
7f:16:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:04:01 2026 by rpki-client