
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json)
Hash identifier: +OTlIReT9wuGOVKXOLTcykrWHB7VzSgrTwTnY5oHkmM=
Subject key identifier: 85:0A:76:EC:DA:0E:A5:0E:3C:52:D1:B5:FB:16:A1:74:F2:F8:10:AE
Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Certificate serial: 4C3F249BF43B81DDF904D9CC93156FE278A43242
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
Manifest number: 01CD
Signing time: Thu 24 Sep 2026 13:07:27 +0000
Manifest this update: Thu 24 Sep 2026 13:02:27 +0000
Manifest next update: Tue 29 Sep 2026 09:15:27 +0000
Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: RJWKCtcb0QGuHY5Gw6N2Gh/MDb+QMK63ndDyMj3r9fI=)
2: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: uLevcllVSYW6APM1VpbflIgpffq5LuX6guawi9ZO6hU=)
3: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: JqSzzKtH7WTqeSjtgfTKgdgz8dn8rZiduEYkUeIrIvo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 29 Sep 2026 07:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3f:24:9b:f4:3b:81:dd:f9:04:d9:cc:93:15:6f:e2:78:a4:32:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Validity
Not Before: Sep 24 13:02:27 2026 GMT
Not After : Sep 29 09:15:27 2026 GMT
Subject: CN=850A76ECDA0EA50E3C52D1B5FB16A174F2F810AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:de:b8:bb:d7:f6:e9:0a:a0:a1:dd:c3:11:
06:66:27:4f:92:f6:46:81:a0:bf:44:44:e9:81:18:
5b:74:02:06:3f:5a:74:21:dd:cb:a0:70:39:47:2f:
7c:09:65:e8:30:a6:b3:50:d9:47:35:65:13:b5:b6:
73:4a:68:48:5a:06:d3:16:3c:02:38:22:b5:31:23:
eb:45:0c:c0:de:a6:c9:90:32:ac:85:24:a1:e0:72:
06:56:99:0e:16:fd:bd:64:e5:6b:64:c7:95:63:54:
9f:23:75:bf:81:80:3e:dc:15:66:cd:a0:90:6f:70:
ed:7a:c7:7c:ed:c1:00:ce:64:f1:3b:9f:25:8c:d1:
dc:34:c3:03:44:33:61:ef:cd:b5:27:c7:9b:88:43:
64:70:cf:b3:02:f1:80:2e:62:0c:c7:ba:a9:02:12:
45:0d:9a:74:e5:e1:28:bb:08:f8:ef:49:2b:96:d4:
24:bb:9a:e6:59:f1:1a:d1:69:c9:40:16:50:03:10:
0c:3e:72:43:57:cd:7f:70:78:16:b2:0c:23:dd:b8:
b8:6b:6d:78:aa:44:b7:8f:f0:34:ba:48:13:ad:94:
6e:52:d3:22:ba:e4:fd:81:af:7a:d0:9c:54:7f:5e:
d5:d5:42:3b:68:45:68:1d:34:49:a0:69:25:3c:59:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:76:EC:DA:0E:A5:0E:3C:52:D1:B5:FB:16:A1:74:F2:F8:10:AE
X509v3 Authority Key Identifier:
keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:89:4f:00:7d:f3:10:8b:bf:72:c9:58:91:1c:4a:99:76:f5:
4b:05:9d:54:b5:4c:58:8e:4b:0a:08:f3:ec:77:b3:6c:12:90:
e8:54:64:59:5c:6e:11:e6:a9:ba:b7:91:bd:4c:c5:9a:bd:95:
0c:d2:8a:c2:2b:01:89:3b:4c:21:e1:29:4b:19:8c:c8:81:0b:
46:0d:95:c1:db:af:d4:89:d7:61:3e:2b:fa:46:df:e6:66:cf:
b5:be:74:27:ff:5b:27:94:ff:a1:c0:aa:b7:f3:37:d0:31:fd:
d8:1c:ac:9a:58:21:34:55:62:ea:35:76:f1:c3:78:98:0c:eb:
3e:3c:5f:29:69:23:fd:f0:7e:8b:81:de:e9:49:b7:62:d7:6b:
a0:05:66:b3:2e:01:91:33:4e:b1:0e:1c:98:72:17:85:b2:cd:
2f:51:ca:94:69:8f:06:dd:96:3e:7b:b4:c3:8c:d6:da:b1:a3:
7f:29:f6:ff:3e:09:a4:fc:d8:b0:6b:b8:2f:27:25:45:84:0f:
07:e5:ae:2f:78:28:14:31:cc:29:9b:60:d4:85:05:fb:63:1e:
81:88:91:a5:f6:fc:c5:b8:de:93:e9:f1:be:58:dd:81:75:a8:
42:f7:d5:4a:fc:48:ea:7c:45:a3:65:9a:35:ac:b5:8f:b0:1b:
9f:8a:93:81
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUTD8km/Q7gd35BNnMkxVv4nikMkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG
OEE3NzdBQTAeFw0yNjA5MjQxMzAyMjdaFw0yNjA5MjkwOTE1MjdaMDMxMTAvBgNV
BAMTKDg1MEE3NkVDREEwRUE1MEUzQzUyRDFCNUZCMTZBMTc0RjJGODEwQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9d64u9f26Qqgod3DEQZmJ0+S
9kaBoL9EROmBGFt0AgY/WnQh3cugcDlHL3wJZegwprNQ2Uc1ZRO1tnNKaEhaBtMW
PAI4IrUxI+tFDMDepsmQMqyFJKHgcgZWmQ4W/b1k5Wtkx5VjVJ8jdb+BgD7cFWbN
oJBvcO16x3ztwQDOZPE7nyWM0dw0wwNEM2HvzbUnx5uIQ2Rwz7MC8YAuYgzHuqkC
EkUNmnTl4Si7CPjvSSuW1CS7muZZ8RrRaclAFlADEAw+ckNXzX9weBayDCPduLhr
bXiqRLeP8DS6SBOtlG5S0yK65P2Br3rQnFR/XtXVQjtoRWgdNEmgaSU8WQdZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUhQp27NoOpQ48UtG1+xahdPL4EK4wHwYDVR0j
BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD
RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC
RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3
NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw
N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wL0REQUY4OUQ0ODA3QzRGQkQyOTc0Q0FD
Mjc2QzM3Qzk1RjhBNzc3QUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkiU8AffMQi79yyViRHEqZdvVL
BZ1UtUxYjksKCPPsd7NsEpDoVGRZXG4R5qm6t5G9TMWavZUM0orCKwGJO0wh4SlL
GYzIgQtGDZXB26/UiddhPiv6Rt/mZs+1vnQn/1snlP+hwKq38zfQMf3YHKyaWCE0
VWLqNXbxw3iYDOs+PF8paSP98H6Lgd7pSbdi12ugBWazLgGRM06xDhyYcheFss0v
UcqUaY8G3ZY+e7TDjNbasaN/Kfb/Pgmk/Niwa7gvJyVFhA8H5a4veCgUMcwpm2DU
hQX7Yx6BiJGl9vzFuN6T6fG+WN2BdahC99VK/EjqfEWjZZo1rLWPsBufipOB
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:56:38 2026 by rpki-client