
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json)
Hash identifier: uBtwMhrka7HzqAfNWafbjt1btwTgPjN0ZEMowktG3Ww=
Subject key identifier: 1E:EE:C7:99:B7:AF:47:BB:5F:1E:6E:AE:B7:8F:9F:09:C1:E5:8C:6E
Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Certificate serial: 2486D29A67D0B8CBB755579429A3ABA8329DD34F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
Manifest number: 01AF
Signing time: Mon 27 Jul 2026 20:47:38 +0000
Manifest this update: Mon 27 Jul 2026 20:42:38 +0000
Manifest next update: Sun 02 Aug 2026 06:07:38 +0000
Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: JqSzzKtH7WTqeSjtgfTKgdgz8dn8rZiduEYkUeIrIvo=)
2: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: i60G+Ez8rTBa4ASS3h8/uXMgXXgR7dnj4LxndkmOJZg=)
3: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: RJWKCtcb0QGuHY5Gw6N2Gh/MDb+QMK63ndDyMj3r9fI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 02 Aug 2026 06:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:86:d2:9a:67:d0:b8:cb:b7:55:57:94:29:a3:ab:a8:32:9d:d3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Validity
Not Before: Jul 27 20:42:38 2026 GMT
Not After : Aug 2 06:07:38 2026 GMT
Subject: CN=1EEEC799B7AF47BB5F1E6EAEB78F9F09C1E58C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:30:33:c6:3c:4c:c8:5a:f1:b3:08:c1:36:
12:a3:e1:40:6f:5c:93:0e:60:a6:cd:86:c8:6c:ef:
12:39:7b:8e:70:05:a6:f4:13:ee:77:88:62:5f:1c:
6a:29:71:17:ab:a5:64:5d:35:75:9b:14:82:cd:d5:
6c:d8:b2:02:ca:5c:09:93:ae:4a:af:2d:ee:ce:46:
ad:41:c8:72:4b:9c:c6:da:f2:8d:ae:92:68:f3:2b:
5b:87:11:54:ff:8e:db:e5:1a:a3:0c:1a:c1:10:fb:
50:30:60:ce:f9:ec:c1:2d:d5:7f:a1:46:80:3d:8a:
ce:41:b7:5c:98:de:54:6e:4c:80:05:8a:49:b3:24:
9b:2e:4a:7a:dd:36:2f:c7:1a:0e:1f:41:75:b8:d5:
68:42:a6:32:2c:26:04:b2:6d:d2:73:8b:e6:04:f2:
8b:fd:f3:de:2b:34:a1:23:89:30:18:43:3f:f9:33:
16:7c:0c:15:96:dd:46:24:d3:93:ea:01:eb:c9:4a:
27:8a:df:13:b8:f7:5c:2d:35:50:ef:b5:12:08:5a:
4d:17:b1:c5:22:2c:3c:aa:49:8e:96:e4:52:96:d7:
fb:1b:24:6a:7a:c2:28:dd:b7:ac:59:55:77:99:16:
88:68:49:5f:a2:c8:0f:6f:fc:e5:38:f2:52:4b:22:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EE:C7:99:B7:AF:47:BB:5F:1E:6E:AE:B7:8F:9F:09:C1:E5:8C:6E
X509v3 Authority Key Identifier:
keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b1:db:45:67:6b:af:bd:f3:3a:24:3f:5b:e8:95:30:65:6c:
9c:8d:a6:6e:9b:45:67:ed:ce:b5:e1:33:ec:89:2c:7c:2c:21:
dc:07:d0:d3:b8:1c:9f:c3:4f:b1:1f:96:1a:41:28:a3:a9:01:
f2:98:af:f1:3f:8a:9d:26:08:7d:9b:6e:12:cc:f2:58:eb:41:
47:ae:75:1f:af:cd:44:cc:f7:55:1a:6a:b8:b2:ba:c1:3e:77:
3d:d2:50:e1:81:8b:63:87:c7:dc:aa:60:3c:8f:09:1c:1a:03:
d6:f6:ad:e9:f5:e0:fd:27:7a:30:92:10:ee:d4:a4:bb:c7:24:
5f:cb:2f:6e:17:07:5c:2b:1f:09:e7:f6:af:81:ad:eb:a8:12:
1c:97:ca:e5:54:30:0f:7b:41:45:d8:c9:96:66:98:e4:25:0c:
8a:79:b5:d0:2d:2e:41:bd:fe:7b:fa:06:a1:ef:79:97:49:36:
7e:d2:eb:1d:c7:b2:14:dd:54:f1:86:67:57:89:ed:50:c1:42:
78:a0:f9:13:44:30:05:a0:82:27:c2:5a:2e:8b:88:da:e2:db:
f0:8f:9e:c3:52:73:07:97:c2:3f:d8:ca:68:a1:08:85:8b:6b:
b0:20:ad:95:ce:ad:6b:af:7a:0b:28:ba:de:ba:b7:93:d4:e8:
4a:0f:ee:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:02:58 2026 by rpki-client