$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json) Hash identifier: tTJGg9CXyF1W5nnNKK/4bc9vEbdhTmILN7izvpfUHY0= Subject key identifier: 19:F6:BB:42:05:03:C2:B4:E3:3C:B7:02:61:3E:F4:78:3C:E1:14:AC Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Certificate serial: 232136D128EAD488144BA422AECCCB021BB2D695 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft Manifest number: 01DD Signing time: Mon 26 Oct 2026 14:42:54 +0000 Manifest this update: Mon 26 Oct 2026 14:37:54 +0000 Manifest next update: Sat 31 Oct 2026 16:08:54 +0000 Files and hashes: 1: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: F6e5kmMfcqTCIICPnBI5kDCXRXXuPXvcmM1/UbVzLAA=) 2: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: JqSzzKtH7WTqeSjtgfTKgdgz8dn8rZiduEYkUeIrIvo=) 3: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: RJWKCtcb0QGuHY5Gw6N2Gh/MDb+QMK63ndDyMj3r9fI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 16:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:21:36:d1:28:ea:d4:88:14:4b:a4:22:ae:cc:cb:02:1b:b2:d6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Validity Not Before: Oct 26 14:37:54 2026 GMT Not After : Oct 31 16:08:54 2026 GMT Subject: CN=19F6BB420503C2B4E33CB702613EF4783CE114AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:91:25:39:79:60:06:be:5b:18:7c:85:ae: 4e:dd:81:b6:ea:b2:f9:e8:a9:01:da:94:f1:63:7a: 3f:a9:43:0c:a6:aa:23:b6:4a:3b:b9:13:87:c2:5d: 20:b4:4c:67:93:2a:81:96:9b:20:dc:ac:63:c4:23: 0c:a8:41:1f:b0:4d:1a:f2:95:c9:e9:1b:23:d0:46: 8d:f6:00:3a:b6:dc:18:2e:c1:26:ef:94:a5:31:9c: f0:6c:a6:f8:85:d8:6c:b6:4c:1d:c7:e4:fd:d8:79: 76:8a:c3:45:30:0f:79:1d:74:f9:5a:8f:fd:74:b6: a8:58:85:26:3b:15:49:af:05:8b:65:09:71:1a:0f: d9:8b:af:1c:bf:ad:fe:a2:56:12:b5:5d:25:9e:ea: 4b:30:0a:df:f2:c6:97:e4:d7:fb:1d:bf:19:c9:87: a3:6e:17:eb:c4:a7:ce:21:a5:e6:31:cf:a4:5d:8e: dd:cd:36:60:bf:81:b9:16:fb:21:cd:fb:4c:15:24: c2:bd:84:b2:89:a8:36:12:38:e5:a5:8c:e0:f8:52: 49:be:8c:0e:1f:30:4d:27:2d:bf:3a:47:83:aa:ea: 5f:80:5e:31:d2:e3:83:f9:a6:c5:b3:e4:5c:3a:8e: 5f:76:ee:c8:57:a5:e9:6d:95:77:64:0c:96:45:96: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F6:BB:42:05:03:C2:B4:E3:3C:B7:02:61:3E:F4:78:3C:E1:14:AC X509v3 Authority Key Identifier: keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:b5:fc:89:11:b7:16:99:73:83:f0:09:51:80:db:5f:1d:fa: 2f:ae:20:c2:5d:8d:b9:15:35:92:a2:cf:fa:7b:ae:b4:1c:c4: 35:fb:51:bf:38:15:7f:cb:85:5f:b4:3a:d2:5a:00:14:9d:1a: 44:9f:cd:1b:23:78:11:5d:f9:f3:2b:9d:a3:3c:cf:3f:e8:11: 9f:73:c0:5a:d7:47:80:a4:7d:d7:9d:d3:d5:91:c7:97:c5:f6: 93:68:a2:15:70:ac:11:a0:c3:d0:64:c6:1a:4b:51:c5:9f:fd: db:31:0f:5d:8f:10:d6:d6:96:b1:84:a5:a8:40:d3:91:0a:2d: 78:00:61:b6:2a:33:53:eb:f2:9a:4d:76:5a:9a:6c:6a:f9:ca: 86:60:97:6b:6f:63:bd:9e:81:d8:43:39:0f:bd:3e:fb:63:23: a6:db:4e:d3:55:b2:28:14:aa:39:c6:04:cc:94:27:5b:04:cb: 0a:e8:ef:5e:e6:a4:38:d9:de:6b:5d:45:15:0a:ff:e9:01:31: cb:e4:49:42:41:01:b0:4c:bf:fc:79:59:52:d5:9f:b5:cc:5a: 8c:98:55:fd:a6:57:44:76:38:b1:6c:e1:3b:6e:98:1d:34:e6: 3a:c3:8f:84:45:ba:3f:29:ac:f8:c9:4b:fd:fc:d8:26:ec:ff: a4:a7:54:f6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIyE20Sjq1IgUS6QirszLAhuy1pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG OEE3NzdBQTAeFw0yNjEwMjYxNDM3NTRaFw0yNjEwMzExNjA4NTRaMDMxMTAvBgNV BAMTKDE5RjZCQjQyMDUwM0MyQjRFMzNDQjcwMjYxM0VGNDc4M0NFMTE0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqpElOXlgBr5bGHyFrk7dgbbq svnoqQHalPFjej+pQwymqiO2Sju5E4fCXSC0TGeTKoGWmyDcrGPEIwyoQR+wTRry lcnpGyPQRo32ADq23BguwSbvlKUxnPBspviF2Gy2TB3H5P3YeXaKw0UwD3kddPla j/10tqhYhSY7FUmvBYtlCXEaD9mLrxy/rf6iVhK1XSWe6kswCt/yxpfk1/sdvxnJ h6NuF+vEp84hpeYxz6Rdjt3NNmC/gbkW+yHN+0wVJMK9hLKJqDYSOOWljOD4Ukm+ jA4fME0nLb86R4Oq6l+AXjHS44P5psWz5Fw6jl927shXpeltlXdkDJZFlvnfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUGfa7QgUDwrTjPLcCYT70eDzhFKwwHwYDVR0j BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3 NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wL0REQUY4OUQ0ODA3QzRGQkQyOTc0Q0FD Mjc2QzM3Qzk1RjhBNzc3QUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwtfyJEbcWmXOD8AlRgNtfHfov riDCXY25FTWSos/6e660HMQ1+1G/OBV/y4VftDrSWgAUnRpEn80bI3gRXfnzK52j PM8/6BGfc8Ba10eApH3XndPVkceXxfaTaKIVcKwRoMPQZMYaS1HFn/3bMQ9djxDW 1paxhKWoQNORCi14AGG2KjNT6/KaTXZammxq+cqGYJdrb2O9noHYQzkPvT77YyOm 207TVbIoFKo5xgTMlCdbBMsK6O9e5qQ42d5rXUUVCv/pATHL5ElCQQGwTL/8eVlS 1Z+1zFqMmFX9pldEdjixbOE7bpgdNOY6w4+ERbo/Kaz4yUv9/Ngm7P+kp1T2 -----END CERTIFICATE-----Generated at Tue Oct 27 19:23:45 2026 by rpki-client