
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json)
Hash identifier: PaF/9Rdlsk/OJxdNTxQirhc8gY5twb0PnqWx/hz/Yyg=
Subject key identifier: 00:42:1F:43:2D:46:2C:5F:C8:CB:F0:29:51:35:FC:2A:6A:40:1F:A1
Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Certificate serial: 6C61210CD36C076C2AF57B33D3E26832B9C82EFB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
Manifest number: 018B
Signing time: Sat 16 May 2026 16:55:33 +0000
Manifest this update: Sat 16 May 2026 16:50:33 +0000
Manifest next update: Fri 22 May 2026 09:30:33 +0000
Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: JqSzzKtH7WTqeSjtgfTKgdgz8dn8rZiduEYkUeIrIvo=)
2: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: RJWKCtcb0QGuHY5Gw6N2Gh/MDb+QMK63ndDyMj3r9fI=)
3: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: H5FGMF03LGC2mJwlcDaARpSZ2EPQnDR7OIDvvRSdMv4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 21 May 2026 05:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:61:21:0c:d3:6c:07:6c:2a:f5:7b:33:d3:e2:68:32:b9:c8:2e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Validity
Not Before: May 16 16:50:33 2026 GMT
Not After : May 22 09:30:33 2026 GMT
Subject: CN=00421F432D462C5FC8CBF0295135FC2A6A401FA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:63:75:a6:b7:d5:1a:4f:fc:03:23:7a:2e:
0b:0f:b6:38:54:21:d6:67:12:fe:e2:07:03:d9:fd:
56:ad:e9:45:9c:a7:dd:57:e0:29:b7:f8:50:d1:20:
bf:d3:39:00:f7:3a:87:93:55:3d:b2:e6:1c:e4:6a:
6d:a2:4b:aa:b3:19:73:f9:be:6a:4d:be:70:e6:61:
27:d9:2e:01:0c:b0:85:7a:70:30:16:ed:3e:f0:17:
c9:24:56:12:c7:6c:83:09:66:e4:04:f0:37:3a:0b:
f4:6b:0a:6d:cd:d9:e9:e6:24:6b:f6:e8:55:96:5f:
2f:40:1e:79:b3:92:b6:d4:e1:5a:bf:d5:d5:6b:8f:
c0:ca:50:b3:ee:00:62:07:60:58:81:e6:dd:60:4e:
be:30:f9:1f:b1:15:80:6e:a2:59:00:d4:f5:39:b4:
44:57:1d:56:48:b6:54:85:33:57:14:09:d1:2c:8d:
57:14:98:aa:8c:6d:4d:ba:a8:cf:f3:6c:5f:98:4e:
77:dd:ac:56:8d:5b:a5:40:fe:46:4b:5e:e5:66:a6:
20:76:77:8d:2b:1b:0a:50:14:e9:02:81:0b:17:67:
5b:67:5e:d8:3f:97:57:a5:2a:b6:de:32:50:bf:c8:
82:ce:39:36:a3:de:9a:3b:b3:cb:70:1a:c8:7a:76:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:42:1F:43:2D:46:2C:5F:C8:CB:F0:29:51:35:FC:2A:6A:40:1F:A1
X509v3 Authority Key Identifier:
keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:17:6b:33:a3:66:35:09:03:40:f4:48:d0:97:27:34:d0:36:
7c:69:bb:b1:65:db:db:86:13:2b:02:74:a5:5a:da:b5:bd:62:
01:2e:63:13:9c:8b:0b:f9:c3:28:1e:91:d2:0f:2e:1c:37:0f:
08:d6:d6:97:a3:ad:31:be:5d:d5:b4:af:a0:ac:3b:7b:fe:a9:
e9:fc:35:d3:c7:69:be:b7:d1:52:07:d3:06:ea:9f:56:fd:ad:
41:47:64:e1:bb:6e:6a:58:34:e9:1a:2b:2d:7d:c2:15:1e:93:
cb:14:45:fa:e1:6f:bf:02:e0:f9:e5:a8:4d:21:45:20:11:e7:
2e:c2:5c:df:7b:dc:e3:24:92:23:ca:b5:26:c2:38:98:45:2a:
a3:e1:9a:2d:06:f1:68:72:01:ee:fb:4d:1f:e6:fb:fe:b1:c2:
db:92:1b:56:79:7a:1d:5f:2d:1e:1e:a0:f1:bb:7e:aa:0d:bc:
5b:ec:ec:4f:f8:50:5e:c9:94:ba:82:21:24:ac:53:ef:60:a9:
ec:7f:cd:41:fb:c9:6d:d8:bf:c6:7d:3d:5e:ff:3f:5c:76:70:
91:fa:4c:70:43:56:80:5f:31:a5:61:67:5a:a1:9f:40:fd:81:
f1:44:7b:8d:b1:10:7c:e5:64:f8:6c:b9:25:78:c7:78:db:c3:
16:0a:e6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 15:58:59 2026 by rpki-client