$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json) Hash identifier: skJdWaeAYAIQ/CDJvOMnzuDo2MZYPj1+BdOftVryZr0= Subject key identifier: 11:16:6D:D9:EC:5E:5E:24:BF:AB:0E:E4:B2:4E:D1:9D:84:80:54:E0 Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Certificate serial: 5F242D5E99CD1606BD2C3C2FE492532EDEF516C4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft Manifest number: 01DB Signing time: Fri 23 Oct 2026 12:14:37 +0000 Manifest this update: Fri 23 Oct 2026 12:09:37 +0000 Manifest next update: Wed 28 Oct 2026 08:40:37 +0000 Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: RJWKCtcb0QGuHY5Gw6N2Gh/MDb+QMK63ndDyMj3r9fI=) 2: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: 5w6LbRJ+nxr87tR5qNIO3NJ3nh9b6tB6mm1m6idRarw=) 3: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: JqSzzKtH7WTqeSjtgfTKgdgz8dn8rZiduEYkUeIrIvo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 08:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:24:2d:5e:99:cd:16:06:bd:2c:3c:2f:e4:92:53:2e:de:f5:16:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Validity Not Before: Oct 23 12:09:37 2026 GMT Not After : Oct 28 08:40:37 2026 GMT Subject: CN=11166DD9EC5E5E24BFAB0EE4B24ED19D848054E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:66:a9:53:2f:bc:fa:9a:3d:35:86:b3:22:d3: 97:6a:a2:3a:5c:f8:3b:b6:20:48:a0:ab:fd:33:9a: 1d:24:a8:f5:64:d9:de:53:31:58:c2:9b:e1:43:5a: 98:9b:e6:ea:0b:c6:d4:dc:06:d4:69:a6:94:33:b0: 9f:0f:68:b0:15:c6:8d:32:d6:97:6a:f2:96:bc:34: c7:3e:4f:7b:60:0d:31:ac:79:c4:db:f8:99:fc:85: bb:eb:78:51:a9:f8:c6:6e:93:d4:a2:24:f2:e3:d8: bd:9b:d8:94:ca:4c:19:ea:41:40:9d:49:ee:f3:d8: bb:de:23:7d:2e:1a:1e:42:b2:1c:4d:90:e7:d0:58: ca:e5:14:a2:c1:43:ef:97:91:b2:1e:6f:24:e3:72: 0f:80:99:1b:f6:3e:8d:79:0b:85:14:77:2c:20:b9: 64:8a:8c:6a:a0:4e:79:4e:81:2e:24:a0:9f:45:4e: 5c:a6:87:a5:16:dd:b9:af:57:3a:11:3a:c4:8b:da: 23:1a:e3:72:22:aa:5d:80:16:92:95:5b:27:98:31: cb:64:8b:b0:a0:23:d2:3a:da:19:68:7b:92:e6:58: ca:7b:d2:f0:4f:30:ed:22:16:bc:5f:3d:1c:7c:02: 35:93:54:38:86:f6:25:96:10:58:02:9e:ca:0c:4f: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:16:6D:D9:EC:5E:5E:24:BF:AB:0E:E4:B2:4E:D1:9D:84:80:54:E0 X509v3 Authority Key Identifier: keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7d:d2:2d:c5:7f:17:ad:f9:d1:5c:8a:2b:fe:f8:8c:7e:31: d0:2d:15:cb:7d:43:bb:16:db:ea:f4:74:ec:b0:64:8d:e7:69: f2:2c:70:18:8d:e0:5d:f3:f6:05:69:99:9d:28:2e:d3:27:7f: 63:ff:b1:2e:6f:43:8d:47:e5:f3:ee:e3:6e:52:77:06:95:1d: 3d:26:81:ee:cd:ed:21:c6:f6:e5:b2:aa:4f:09:6a:a0:e1:9c: 45:36:16:87:38:6a:5f:6a:d7:82:d7:30:b2:e9:bd:21:d5:a2: 11:7f:10:8f:4b:02:d1:44:fa:43:74:49:49:fa:89:fa:d5:37: 76:1e:1f:36:07:48:d5:1c:bd:2a:f7:1d:ea:9a:4e:29:16:f6: fa:1c:63:00:a7:75:df:c7:49:f0:d7:be:31:82:48:9e:04:73: 39:9e:be:ba:18:88:e7:c3:0c:e9:77:65:24:96:a1:a3:cd:f7: 7f:d1:5a:c0:fd:9e:b3:6b:7e:79:62:08:3f:c0:c0:a2:3c:5d: e2:42:4f:21:45:a4:a4:ee:f6:db:22:db:19:a1:ea:26:29:a7: 31:a4:0b:52:fc:36:52:82:6c:6d:5d:92:49:ff:4e:e3:4a:a2: 17:2b:be:11:d6:f4:e7:70:10:eb:f2:87:e0:e1:df:6b:53:c5: 55:81:df:fd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXyQtXpnNFga9LDwv5JJTLt71FsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG OEE3NzdBQTAeFw0yNjEwMjMxMjA5MzdaFw0yNjEwMjgwODQwMzdaMDMxMTAvBgNV BAMTKDExMTY2REQ5RUM1RTVFMjRCRkFCMEVFNEIyNEVEMTlEODQ4MDU0RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZqlTL7z6mj01hrMi05dqojpc +Du2IEigq/0zmh0kqPVk2d5TMVjCm+FDWpib5uoLxtTcBtRpppQzsJ8PaLAVxo0y 1pdq8pa8NMc+T3tgDTGsecTb+Jn8hbvreFGp+MZuk9SiJPLj2L2b2JTKTBnqQUCd Se7z2LveI30uGh5CshxNkOfQWMrlFKLBQ++XkbIebyTjcg+AmRv2Po15C4UUdywg uWSKjGqgTnlOgS4koJ9FTlymh6UW3bmvVzoROsSL2iMa43Iiql2AFpKVWyeYMctk i7CgI9I62hloe5LmWMp70vBPMO0iFrxfPRx8AjWTVDiG9iWWEFgCnsoMT+srAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUERZt2exeXiS/qw7ksk7RnYSAVOAwHwYDVR0j BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3 NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wL0REQUY4OUQ0ODA3QzRGQkQyOTc0Q0FD Mjc2QzM3Qzk1RjhBNzc3QUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChfdItxX8XrfnRXIor/viMfjHQ LRXLfUO7Ftvq9HTssGSN52nyLHAYjeBd8/YFaZmdKC7TJ39j/7Eub0ONR+Xz7uNu UncGlR09JoHuze0hxvblsqpPCWqg4ZxFNhaHOGpfateC1zCy6b0h1aIRfxCPSwLR RPpDdElJ+on61Td2Hh82B0jVHL0q9x3qmk4pFvb6HGMAp3Xfx0nw174xgkieBHM5 nr66GIjnwwzpd2UklqGjzfd/0VrA/Z6za355Ygg/wMCiPF3iQk8hRaSk7vbbItsZ oeomKacxpAtS/DZSgmxtXZJJ/07jSqIXK74R1vTncBDr8ofg4d9rU8VVgd/9 -----END CERTIFICATE-----Generated at Sat Oct 24 10:56:00 2026 by rpki-client