$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json) Hash identifier: O8T7WjcQh+6tr7FqTSFHkvYEbiMpGyBR7ZnPho6xBk0= Subject key identifier: 7F:D7:89:D7:98:96:FE:B2:76:04:B2:80:85:32:78:5B:FE:D7:B7:1C Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Certificate serial: 7A7C74F41B3B9A60BCE5A06E2AABDBACCA215239 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft Manifest number: 017D Signing time: Wed 15 Apr 2026 09:05:14 +0000 Manifest this update: Wed 15 Apr 2026 09:00:14 +0000 Manifest next update: Tue 21 Apr 2026 03:58:14 +0000 Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: RJWKCtcb0QGuHY5Gw6N2Gh/MDb+QMK63ndDyMj3r9fI=) 2: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: GhHCICQKa8Mfy4000ORsEc9n0DyoJjZpqOicr/GMKcs=) 3: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: JqSzzKtH7WTqeSjtgfTKgdgz8dn8rZiduEYkUeIrIvo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 03:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:7c:74:f4:1b:3b:9a:60:bc:e5:a0:6e:2a:ab:db:ac:ca:21:52:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Validity Not Before: Apr 15 09:00:14 2026 GMT Not After : Apr 21 03:58:14 2026 GMT Subject: CN=7FD789D79896FEB27604B2808532785BFED7B71C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:ca:ad:b6:b2:f6:b1:9b:3e:19:26:90:f8: 77:ef:a4:be:0d:a4:fe:3d:45:95:90:ac:f0:1d:ad: 11:8e:71:6a:2a:ae:73:99:92:cd:8d:f2:e9:42:22: f5:12:b0:b2:0e:82:42:7b:51:47:53:f3:08:9d:40: 3c:ba:37:d7:f1:60:0f:72:db:bb:94:c8:93:5c:7b: d0:09:53:91:26:cc:ff:39:06:ed:69:2c:fc:14:6d: 18:7b:99:5d:37:84:43:db:07:7c:b8:a5:8b:0b:a6: 43:2f:d1:37:d8:7d:e4:42:81:db:41:cd:a4:0d:36: b6:9d:86:63:df:14:0e:7c:47:84:e3:54:44:4f:44: 9e:ac:1f:03:cf:9a:f4:df:19:8b:61:61:d0:68:bc: 7b:bf:32:f3:4d:c4:55:9b:41:7f:ee:e8:bd:d7:61: 44:61:6c:5a:27:1e:74:fb:2a:2f:fd:88:40:eb:d5: 02:93:b2:ff:00:f5:b0:7f:12:60:68:6a:28:d3:03: b8:2e:02:23:ad:30:d3:31:e4:ca:d0:86:35:33:2b: 9b:b6:6c:6b:15:7a:4a:ec:d0:30:fc:ef:56:a8:63: 27:91:41:4e:f3:0d:93:7c:13:89:f9:e3:31:f5:f4: 4e:ea:66:e0:49:6d:0d:a6:ef:c3:33:d7:58:96:ba: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D7:89:D7:98:96:FE:B2:76:04:B2:80:85:32:78:5B:FE:D7:B7:1C X509v3 Authority Key Identifier: keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:72:d6:91:d2:e9:a6:31:19:0b:c2:37:e6:37:2e:81:e9:bd: 00:47:01:f6:db:7a:e2:d9:6f:1c:fa:55:cf:ea:b8:cb:1d:c0: 52:58:c2:03:79:f5:7a:32:a8:cc:ad:9b:b2:a9:68:4f:7b:71: 26:bd:88:21:da:96:c0:d0:29:f5:83:41:14:0b:af:ec:0a:e3: 89:a3:24:85:86:2e:29:aa:be:35:ea:27:7f:ab:3e:d4:ac:d8: 58:46:f1:3e:a6:bc:b8:7a:a0:28:dc:b6:e6:78:b0:3c:47:3e: f3:48:0e:44:23:06:05:d7:ac:29:b2:79:c5:86:ad:b0:bf:f2: 97:14:19:d1:a5:5c:f6:bb:fa:f4:b9:e9:50:e7:b9:e3:93:42: e9:2f:10:89:bf:4f:9b:78:b3:34:6f:68:54:98:e9:f9:08:16: 49:b6:a9:67:46:9c:4f:84:78:17:2c:6e:44:8e:2a:6f:e4:12: 20:9d:df:16:43:2d:b0:98:a0:35:2c:b2:3c:60:33:45:dc:74: b9:50:72:dc:3a:fb:1f:c7:f3:7a:e6:58:c2:df:86:04:be:a1: e0:ec:59:be:73:66:ac:db:a0:f0:fd:d5:dc:ff:4e:10:fd:78: 8f:17:6e:bb:ba:08:f2:f3:5d:e4:ef:3d:30:69:16:3b:9b:c2: 41:d1:f0:2d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUenx09Bs7mmC85aBuKqvbrMohUjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG OEE3NzdBQTAeFw0yNjA0MTUwOTAwMTRaFw0yNjA0MjEwMzU4MTRaMDMxMTAvBgNV BAMTKDdGRDc4OUQ3OTg5NkZFQjI3NjA0QjI4MDg1MzI3ODVCRkVEN0I3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+z8qttrL2sZs+GSaQ+HfvpL4N pP49RZWQrPAdrRGOcWoqrnOZks2N8ulCIvUSsLIOgkJ7UUdT8widQDy6N9fxYA9y 27uUyJNce9AJU5EmzP85Bu1pLPwUbRh7mV03hEPbB3y4pYsLpkMv0TfYfeRCgdtB zaQNNradhmPfFA58R4TjVERPRJ6sHwPPmvTfGYthYdBovHu/MvNNxFWbQX/u6L3X YURhbFonHnT7Ki/9iEDr1QKTsv8A9bB/EmBoaijTA7guAiOtMNMx5MrQhjUzK5u2 bGsVekrs0DD871aoYyeRQU7zDZN8E4n54zH19E7qZuBJbQ2m78Mz11iWui35AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUf9eJ15iW/rJ2BLKAhTJ4W/7XtxwwHwYDVR0j BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3 NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wL0REQUY4OUQ0ODA3QzRGQkQyOTc0Q0FD Mjc2QzM3Qzk1RjhBNzc3QUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkctaR0ummMRkLwjfmNy6B6b0A RwH223ri2W8c+lXP6rjLHcBSWMIDefV6MqjMrZuyqWhPe3EmvYgh2pbA0Cn1g0EU C6/sCuOJoySFhi4pqr416id/qz7UrNhYRvE+pry4eqAo3LbmeLA8Rz7zSA5EIwYF 16wpsnnFhq2wv/KXFBnRpVz2u/r0uelQ57njk0LpLxCJv0+beLM0b2hUmOn5CBZJ tqlnRpxPhHgXLG5Ejipv5BIgnd8WQy2wmKA1LLI8YDNF3HS5UHLcOvsfx/N65ljC 34YEvqHg7Fm+c2as26Dw/dXc/04Q/XiPF267ugjy813k7z0waRY7m8JB0fAt -----END CERTIFICATE-----Generated at Fri Apr 17 17:07:04 2026 by rpki-client