
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/58C68CBFBFB049EFF9D2B7F1F61D9E72DCDFE1FE5F2F7E40884864CC87E8AF0C/0/DD07BA350E5FC291196F469CADEAB634216C304C.mft
File: DD07BA350E5FC291196F469CADEAB634216C304C.mft (raw, json)
Hash identifier: NY7Yv5h/BDZdekaTJJ3/hCTGHEAIaFe0a5bgdeJwbpw=
Subject key identifier: 61:F8:9B:B2:1C:87:97:55:52:C2:7E:39:2D:3A:EF:AA:D0:4A:04:BB
Authority key identifier: DD:07:BA:35:0E:5F:C2:91:19:6F:46:9C:AD:EA:B6:34:21:6C:30:4C
Certificate issuer: /CN=DD07BA350E5FC291196F469CADEAB634216C304C
Certificate serial: 1D76CC9BA14E45540E5AA9D09071CF7B6D016E4F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD07BA350E5FC291196F469CADEAB634216C304C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58C68CBFBFB049EFF9D2B7F1F61D9E72DCDFE1FE5F2F7E40884864CC87E8AF0C/0/DD07BA350E5FC291196F469CADEAB634216C304C.mft
Manifest number: 12
Signing time: Sat 31 Oct 2026 20:11:47 +0000
Manifest this update: Sat 31 Oct 2026 20:06:47 +0000
Manifest next update: Fri 06 Nov 2026 17:49:47 +0000
Files and hashes: 1: DD07BA350E5FC291196F469CADEAB634216C304C.crl (hash: GXqUCAAF7uYjx1xZojTYEicLJ7x/Y8Ef4EY/Jt889OM=)
2: 323830333a396633303a3a2f33322d3438203d3e20323735303631.roa (hash: OIU5rBsXmX2CCwysV9JL1Fn6zxinJnM1NZ0CPbhqzKE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/58C68CBFBFB049EFF9D2B7F1F61D9E72DCDFE1FE5F2F7E40884864CC87E8AF0C/0/DD07BA350E5FC291196F469CADEAB634216C304C.crl
rsync://repository.lacnic.net/rpki/lacnic/58C68CBFBFB049EFF9D2B7F1F61D9E72DCDFE1FE5F2F7E40884864CC87E8AF0C/0/DD07BA350E5FC291196F469CADEAB634216C304C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD07BA350E5FC291196F469CADEAB634216C304C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Nov 2026 02:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:76:cc:9b:a1:4e:45:54:0e:5a:a9:d0:90:71:cf:7b:6d:01:6e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD07BA350E5FC291196F469CADEAB634216C304C
Validity
Not Before: Oct 31 20:06:47 2026 GMT
Not After : Nov 6 17:49:47 2026 GMT
Subject: CN=61F89BB21C87975552C27E392D3AEFAAD04A04BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:e6:86:17:b2:7f:6d:15:2c:5d:22:32:32:
a4:2c:74:3c:58:c0:4b:7f:3d:46:34:1d:53:46:12:
3b:f4:cc:0d:99:0e:cf:8b:f4:81:49:40:3f:a8:5d:
fe:30:cb:c4:9a:49:48:91:09:05:f6:5d:b1:36:4b:
91:03:c7:9e:4e:b8:5b:1f:a2:0c:ab:c9:e1:ef:ea:
f2:1b:c5:24:49:14:96:70:80:48:f4:14:d6:34:f9:
5c:6c:70:78:3d:7c:38:ea:de:12:4e:56:ab:8d:a7:
8b:1f:33:99:5e:f3:c0:35:3c:ca:3a:30:47:e8:0d:
3d:a1:36:ce:7e:33:87:f5:ba:4e:cd:26:c4:49:8a:
4a:61:d1:07:70:ca:fb:24:00:b1:3a:a9:4b:4f:df:
d5:08:b4:1d:01:aa:bb:8d:1b:3d:2f:7f:09:c4:f0:
cb:8a:eb:df:18:09:ff:3b:02:b3:11:a2:c3:a8:07:
7d:72:f0:bd:54:1b:d8:42:65:c6:b3:26:a0:14:31:
29:79:7e:4b:da:14:64:28:71:4a:5e:c9:6c:c7:89:
df:4e:29:fc:95:dd:57:e4:68:28:d4:1a:7b:f8:72:
a3:f5:4c:ce:30:b4:e6:49:8e:0a:7d:c8:1b:40:45:
69:dd:33:81:1d:42:00:1c:30:0c:5e:c9:40:00:4d:
37:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F8:9B:B2:1C:87:97:55:52:C2:7E:39:2D:3A:EF:AA:D0:4A:04:BB
X509v3 Authority Key Identifier:
keyid:DD:07:BA:35:0E:5F:C2:91:19:6F:46:9C:AD:EA:B6:34:21:6C:30:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58C68CBFBFB049EFF9D2B7F1F61D9E72DCDFE1FE5F2F7E40884864CC87E8AF0C/0/DD07BA350E5FC291196F469CADEAB634216C304C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD07BA350E5FC291196F469CADEAB634216C304C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58C68CBFBFB049EFF9D2B7F1F61D9E72DCDFE1FE5F2F7E40884864CC87E8AF0C/0/DD07BA350E5FC291196F469CADEAB634216C304C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cf:06:b9:8a:d9:87:af:b3:4c:ed:70:73:d6:37:ce:45:7a:
a2:1a:f7:67:91:68:66:e0:33:a5:9b:9e:a9:58:c6:1e:94:ab:
ac:fa:11:d1:32:33:c8:55:89:94:6a:6c:35:a2:3e:54:f6:2a:
e5:47:4b:2f:fb:e5:6d:20:cb:55:ec:3e:57:4c:82:a2:b7:54:
b9:43:3a:64:6a:a2:dc:36:f5:37:2d:28:d1:05:8f:62:cd:14:
22:ac:2e:b8:f4:b7:2d:b5:ad:cc:5c:84:ed:84:c2:91:47:ee:
2a:29:38:60:f1:a5:8b:ba:e7:f4:17:63:fb:f4:8b:fd:7b:76:
c1:69:87:cc:dd:22:0b:9a:08:b5:e8:da:b0:6a:3e:25:af:73:
af:da:ab:08:db:68:24:30:36:69:f7:c0:91:ee:11:83:50:27:
ca:f3:f8:02:fc:1f:a6:8c:89:e6:b6:d6:00:2b:4a:8f:5f:8c:
b4:d2:ec:c7:45:f9:d0:62:66:2f:54:85:96:76:0f:cb:28:a9:
28:95:38:1f:92:c4:d9:ba:57:02:2c:8f:2c:36:1f:f4:54:28:
ea:bb:36:e5:04:8a:80:af:e8:fd:9f:41:e4:43:4a:cf:77:57:
60:fb:2a:20:f3:9a:d2:f5:f1:c2:76:a9:5c:0d:59:d8:13:f1:
e0:eb:f4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:31:32 2026 by rpki-client