$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json) Hash identifier: i60zr0dqLc2/u+BKWvIF1Df+B3wldRdpsTOVQX+sRoU= Subject key identifier: B2:11:F3:A6:92:D4:38:12:D8:51:72:19:BC:DD:C8:A3:A5:54:68:AF Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Certificate serial: 2138F94951C36D68448A3D3A2E2CCA2678BBF5C4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft Manifest number: 01DF Signing time: Fri 30 Oct 2026 23:56:39 +0000 Manifest this update: Fri 30 Oct 2026 23:51:39 +0000 Manifest next update: Wed 04 Nov 2026 13:44:39 +0000 Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: JqSzzKtH7WTqeSjtgfTKgdgz8dn8rZiduEYkUeIrIvo=) 2: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: RJWKCtcb0QGuHY5Gw6N2Gh/MDb+QMK63ndDyMj3r9fI=) 3: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: RxWYS0NluscpN+oWovpr2L0ApRUcs9alZXwkacuBXX4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 02:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:38:f9:49:51:c3:6d:68:44:8a:3d:3a:2e:2c:ca:26:78:bb:f5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Validity Not Before: Oct 30 23:51:39 2026 GMT Not After : Nov 4 13:44:39 2026 GMT Subject: CN=B211F3A692D43812D8517219BCDDC8A3A55468AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:32:75:78:ac:41:da:94:19:53:04:17:ff:0f: c0:d8:2e:71:e0:be:c2:79:08:a9:e5:52:cf:69:23: 5a:de:28:d6:86:f9:79:26:46:e8:44:10:2b:31:ce: 34:33:36:af:3a:e6:7c:c3:7c:d6:97:41:c4:9c:e9: 26:b2:66:03:d4:db:df:d8:03:63:5e:d0:57:28:79: 57:03:1e:e2:25:4e:8b:f3:9b:35:3a:d7:4c:9e:a4: 86:3b:72:e6:e8:f8:c4:0a:d3:a2:01:34:3b:b3:7c: 19:c8:ab:ae:ef:15:d3:d5:8f:28:58:2a:e0:6e:cb: e5:08:e6:81:6a:a4:b2:3f:90:16:29:17:02:aa:d4: 19:df:e1:04:53:df:60:01:f7:9c:63:71:f5:6f:0b: 83:c5:f7:76:2a:9e:b3:a1:34:3a:ee:f5:82:64:a5: 4b:7e:6a:8c:21:11:b1:71:c4:ee:49:05:9b:3a:46: 89:ca:6b:63:e6:f0:1a:52:ed:da:1f:23:3c:bc:8e: a2:82:e3:11:14:2e:ba:de:e6:a1:3b:3c:33:12:54: 8d:99:f6:b5:a8:89:8c:b6:d9:41:4f:38:17:43:e8: 48:95:c5:cf:ee:26:69:65:27:57:6b:fc:29:cd:70: fe:5a:fd:0f:95:a3:22:fc:1d:cf:cf:7f:a5:f4:a8: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:11:F3:A6:92:D4:38:12:D8:51:72:19:BC:DD:C8:A3:A5:54:68:AF X509v3 Authority Key Identifier: keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:7c:ca:ec:c6:8b:4f:ef:c0:c2:5e:ca:ce:00:65:b6:85:d5: 87:d8:1b:b1:0c:41:f7:4e:5b:dd:de:85:9e:57:91:fa:f0:46: 33:d4:ac:c4:5d:9e:58:f7:bc:9f:4f:f2:2b:3d:e1:72:d3:0f: 0f:a1:f9:02:54:4c:ce:7d:e6:19:34:48:a3:76:47:5f:80:27: e7:4e:5f:f3:62:7b:86:56:cd:e2:7a:57:15:cf:24:10:93:a4: 16:d5:8f:14:0f:2e:4f:55:7b:75:61:ae:83:7d:81:74:5a:0f: 63:20:33:b2:d0:f9:19:15:9f:75:46:ed:ac:bd:0a:49:f1:85: 16:1f:25:65:50:95:91:84:66:8b:55:26:16:6a:f4:61:b6:eb: 12:58:2f:ba:f5:ab:02:4e:0a:e7:7f:d1:c6:e4:08:92:c2:ba: 48:8b:68:f2:ba:22:9a:c7:76:e3:81:d5:1a:6c:c8:77:47:88: e8:ec:65:1e:c4:88:84:7a:6b:90:8e:5e:13:33:d8:ea:2f:58: 1d:9f:a4:e1:ba:69:94:02:ae:89:04:46:fc:89:c0:64:2a:4f: 82:ba:f4:f7:7f:58:8a:f8:e8:90:8d:26:08:29:cc:9a:a7:08: da:48:00:51:63:7d:e2:4b:f2:95:71:5b:2c:38:3c:af:b9:56: fe:1f:3a:a9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUITj5SVHDbWhEij06LizKJni79cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG OEE3NzdBQTAeFw0yNjEwMzAyMzUxMzlaFw0yNjExMDQxMzQ0MzlaMDMxMTAvBgNV BAMTKEIyMTFGM0E2OTJENDM4MTJEODUxNzIxOUJDRERDOEEzQTU1NDY4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMnV4rEHalBlTBBf/D8DYLnHg vsJ5CKnlUs9pI1reKNaG+XkmRuhEECsxzjQzNq865nzDfNaXQcSc6SayZgPU29/Y A2Ne0FcoeVcDHuIlTovzmzU610yepIY7cubo+MQK06IBNDuzfBnIq67vFdPVjyhY KuBuy+UI5oFqpLI/kBYpFwKq1Bnf4QRT32AB95xjcfVvC4PF93YqnrOhNDru9YJk pUt+aowhEbFxxO5JBZs6RonKa2Pm8BpS7dofIzy8jqKC4xEULrre5qE7PDMSVI2Z 9rWoiYy22UFPOBdD6EiVxc/uJmllJ1dr/CnNcP5a/Q+VoyL8Hc/Pf6X0qEpfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUshHzppLUOBLYUXIZvN3Io6VUaK8wHwYDVR0j BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3 NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wL0REQUY4OUQ0ODA3QzRGQkQyOTc0Q0FD Mjc2QzM3Qzk1RjhBNzc3QUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHfMrsxotP78DCXsrOAGW2hdWH 2BuxDEH3Tlvd3oWeV5H68EYz1KzEXZ5Y97yfT/IrPeFy0w8PofkCVEzOfeYZNEij dkdfgCfnTl/zYnuGVs3ielcVzyQQk6QW1Y8UDy5PVXt1Ya6DfYF0Wg9jIDOy0PkZ FZ91Ru2svQpJ8YUWHyVlUJWRhGaLVSYWavRhtusSWC+69asCTgrnf9HG5AiSwrpI i2jyuiKax3bjgdUabMh3R4jo7GUexIiEemuQjl4TM9jqL1gdn6ThummUAq6JBEb8 icBkKk+CuvT3f1iK+OiQjSYIKcyapwjaSABRY33iS/KVcVssODyvuVb+Hzqp -----END CERTIFICATE-----Generated at Sun Nov 1 00:16:22 2026 by rpki-client