
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.mft
File: DDF12A57816F6E182AFB03FDFA87723268AC1CAF.mft (raw, json)
Hash identifier: klrac+pkNxFwhOm2e9YdRVNZsUcu35KqAi/O7G6Ee7s=
Subject key identifier: 04:89:2A:CB:A7:FA:15:49:F0:69:8D:2D:A5:64:FE:77:ED:E4:C4:3E
Authority key identifier: DD:F1:2A:57:81:6F:6E:18:2A:FB:03:FD:FA:87:72:32:68:AC:1C:AF
Certificate issuer: /CN=DDF12A57816F6E182AFB03FDFA87723268AC1CAF
Certificate serial: 1ACFE976FBA0D82E826BA217094E56E0371FEDA6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.mft
Manifest number: 01AC
Signing time: Mon 20 Jul 2026 11:29:27 +0000
Manifest this update: Mon 20 Jul 2026 11:24:27 +0000
Manifest next update: Sun 26 Jul 2026 11:02:27 +0000
Files and hashes: 1: DDF12A57816F6E182AFB03FDFA87723268AC1CAF.crl (hash: ZdeIs0/o5ptFiFiX/F8C21u4AUr9BjaPm4HciqEwh1k=)
2: 3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa (hash: wtf4LcH104jnWBnMvJmICHpbImDUsVo8/i5+G640xPo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.crl
rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 05:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:cf:e9:76:fb:a0:d8:2e:82:6b:a2:17:09:4e:56:e0:37:1f:ed:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDF12A57816F6E182AFB03FDFA87723268AC1CAF
Validity
Not Before: Jul 20 11:24:27 2026 GMT
Not After : Jul 26 11:02:27 2026 GMT
Subject: CN=04892ACBA7FA1549F0698D2DA564FE77EDE4C43E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:c3:f9:93:ff:57:de:48:86:61:ec:65:fd:
20:97:8b:33:ae:c8:c1:9a:4d:1f:e5:fc:33:7a:ac:
9c:e7:72:33:62:32:13:ec:55:9e:43:ea:22:35:92:
a3:39:1d:a3:53:b8:73:6f:16:25:ca:2b:70:66:cf:
26:aa:3a:90:84:15:71:07:2d:e4:72:0b:d7:dc:ad:
8c:15:ca:90:f1:04:7e:ae:2b:b6:0a:61:b5:18:e5:
64:96:e4:8f:c8:59:b9:3a:ab:63:63:2c:66:7f:30:
fe:9a:97:74:b2:9d:f6:5a:ca:b9:c5:a6:6e:1e:60:
bc:eb:9f:c0:35:7a:21:65:94:c9:46:f9:8b:0a:a0:
ed:e2:5f:7c:d1:72:0d:42:31:5d:58:80:5b:f0:0c:
56:b6:b8:85:a7:5e:c1:a3:b8:47:46:66:ab:14:23:
51:3f:ad:8a:69:54:cb:6c:78:a5:8f:ae:35:1e:39:
51:91:54:53:02:4d:a9:22:68:1e:1e:51:43:ec:ed:
1c:d6:6a:ff:9e:39:df:b8:80:52:e8:ea:8d:db:44:
05:19:e6:25:8d:dc:4c:5b:37:6d:2e:5e:94:7a:c2:
8a:da:c2:53:51:62:72:f6:3c:4a:49:08:10:c7:4e:
41:95:f6:74:99:b0:87:dc:cb:41:c5:c0:e2:63:e7:
be:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:89:2A:CB:A7:FA:15:49:F0:69:8D:2D:A5:64:FE:77:ED:E4:C4:3E
X509v3 Authority Key Identifier:
keyid:DD:F1:2A:57:81:6F:6E:18:2A:FB:03:FD:FA:87:72:32:68:AC:1C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b5:9c:8f:1c:87:00:3c:f7:12:d4:ab:1b:7e:57:cf:93:41:
57:a7:31:fe:d2:8d:27:4a:a1:9d:0c:7f:70:5c:47:e1:24:f2:
a9:56:08:5c:2d:63:06:2a:32:b0:c7:2b:e8:91:f6:11:29:f2:
eb:5d:f4:71:d1:e4:59:71:bb:20:bc:6e:14:03:50:fd:18:45:
e1:69:ec:01:9b:07:44:e6:30:4a:9e:49:34:71:18:02:75:da:
4f:f7:30:31:37:bf:cd:06:7a:57:8b:f5:b4:90:85:a2:fc:19:
b1:5b:d8:f0:bd:b6:dd:f2:e2:7d:5d:58:63:de:bb:00:48:d0:
cf:08:f7:11:a7:c5:dd:95:93:37:c1:d7:de:e1:2c:87:1b:57:
ef:8f:0a:06:84:4c:a5:a0:fd:6b:1f:cc:51:e4:b5:52:fd:e1:
30:56:e6:7e:97:71:b8:05:0d:13:39:e8:cc:57:ba:de:27:e6:
b9:3f:ba:71:55:af:59:84:95:55:9d:35:80:c5:bc:6f:1f:fd:
4d:f1:de:c0:b3:b0:f0:11:9c:97:dc:45:39:4b:ca:ec:17:63:
cf:df:63:cb:5f:bd:cf:ad:cd:33:d3:b0:66:9c:68:93:08:c6:
7b:88:ec:cd:93:c6:71:74:97:2b:11:58:d4:f7:ec:fe:f5:e6:
28:3b:f0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:17:20 2026 by rpki-client