$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft File: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft (raw, json) Hash identifier: ypzwpu/oJmtxLN2gl9knWSWAh571MujHgPNiSWkHKLk= Subject key identifier: 3F:2F:A4:C1:EB:E7:52:50:37:2D:ED:2B:6D:58:2E:35:B8:B9:4B:0F Authority key identifier: AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B Certificate issuer: /CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B Certificate serial: 486D8697B172A813FFE509476A8DD74664FF571D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft Manifest number: 01EA Signing time: Mon 26 Oct 2026 09:25:41 +0000 Manifest this update: Mon 26 Oct 2026 09:20:41 +0000 Manifest next update: Sun 01 Nov 2026 07:00:41 +0000 Files and hashes: 1: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl (hash: 85VU/OGY5+Qdc0pfXqXd1oF5zO8Uyadj9RKElLDeiM4=) 2: 3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa (hash: xOt5MgbMcs/Gu2Sz180hCjy9JznRqG+a2o1Y8PTCEjI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:6d:86:97:b1:72:a8:13:ff:e5:09:47:6a:8d:d7:46:64:ff:57:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B Validity Not Before: Oct 26 09:20:41 2026 GMT Not After : Nov 1 07:00:41 2026 GMT Subject: CN=3F2FA4C1EBE75250372DED2B6D582E35B8B94B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:83:65:35:88:37:da:87:32:f5:af:12:42: 55:1b:cb:ed:50:8c:81:c4:03:22:76:97:14:d6:46: ba:ca:8f:f0:c2:44:b1:5b:ee:f2:d7:0e:54:57:00: 16:ad:a4:17:9b:0b:86:ee:a0:22:42:54:90:0b:9d: db:99:2d:97:e8:60:52:0c:91:45:40:5a:24:4a:ac: 23:90:97:a9:83:b4:b1:29:9f:1e:b1:1e:ee:69:96: aa:72:bf:15:ff:4a:23:2f:56:fc:cf:ef:25:2a:ed: cc:be:6a:27:b9:bc:c4:8d:5f:c2:9d:e0:f9:d9:57: 26:14:27:d5:90:84:9e:83:ba:30:cf:27:dd:3b:7b: 6f:d9:28:10:71:5e:95:86:e3:78:56:e1:77:cc:bd: 80:3d:40:be:bf:3e:87:03:a2:ee:1e:e7:93:0d:dc: 70:d6:bf:8a:36:9d:d7:f7:69:55:a7:98:aa:c6:6e: 2e:4c:e3:c4:72:b9:3c:44:28:f3:24:2a:14:36:ff: 8f:a3:dc:a1:32:4b:ee:e1:c1:fd:3d:3e:0b:b5:84: 39:e6:e6:a5:ee:c7:e8:a6:26:f8:8b:1a:a8:9b:ea: 60:b8:0b:b6:ac:da:75:1c:ff:fe:49:b6:ec:66:98: 9f:7a:82:77:52:0a:3b:fc:57:4a:7b:6d:fb:56:a0: 54:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2F:A4:C1:EB:E7:52:50:37:2D:ED:2B:6D:58:2E:35:B8:B9:4B:0F X509v3 Authority Key Identifier: keyid:AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:cc:e3:4e:fd:c0:f6:ac:44:e6:f9:56:69:51:66:4f:93:4c: b5:10:00:dd:44:29:43:a1:5c:f5:e4:10:53:23:6d:7f:0c:05: 14:86:e2:dd:37:bd:69:67:d5:fc:b7:5d:0d:c9:1c:c6:3d:60: ba:32:90:a2:8b:de:72:1a:6d:16:ca:56:90:32:46:8d:0e:b5: 5a:3f:86:87:d5:66:54:65:c9:54:6d:89:dd:49:91:74:c2:a6: 70:5b:91:d1:5c:5c:b8:a6:aa:24:69:ae:79:21:91:f0:39:e9: 72:11:61:6c:d7:fd:0c:e6:24:c0:b2:d2:86:52:25:e3:98:d8: 83:76:7c:ba:98:48:90:ea:30:04:1c:01:d5:56:f1:48:3b:34: e8:c1:3d:85:1a:bc:12:1d:21:a0:f8:a0:5b:6d:4e:59:55:9d: 6d:50:6f:01:7e:af:b6:92:66:f1:42:d7:39:26:f4:a3:f6:03: fc:ba:9b:45:fa:48:73:f0:a5:2c:3f:44:94:83:0c:17:52:b4: 11:a3:8b:09:12:cf:76:af:0a:15:ee:b3:4f:95:ea:43:8f:5f: 40:15:b5:36:58:ec:a1:04:11:f1:4b:08:c7:50:e7:1b:6b:93: 22:d1:ae:0e:c1:8e:58:9a:84:05:da:9d:60:d7:35:d9:da:91: 03:9a:b4:56 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSG2Gl7FyqBP/5QlHao3XRmT/Vx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0NTk4RDgzREJDMTQyQTE2NEFENzJGNUREOTAzNkFB RURCMEExQjAeFw0yNjEwMjYwOTIwNDFaFw0yNjExMDEwNzAwNDFaMDMxMTAvBgNV BAMTKDNGMkZBNEMxRUJFNzUyNTAzNzJERUQyQjZENTgyRTM1QjhCOTRCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CYNlNYg32ocy9a8SQlUby+1Q jIHEAyJ2lxTWRrrKj/DCRLFb7vLXDlRXABatpBebC4buoCJCVJALnduZLZfoYFIM kUVAWiRKrCOQl6mDtLEpnx6xHu5plqpyvxX/SiMvVvzP7yUq7cy+aie5vMSNX8Kd 4PnZVyYUJ9WQhJ6DujDPJ907e2/ZKBBxXpWG43hW4XfMvYA9QL6/PocDou4e55MN 3HDWv4o2ndf3aVWnmKrGbi5M48RyuTxEKPMkKhQ2/4+j3KEyS+7hwf09Pgu1hDnm 5qXux+imJviLGqib6mC4C7as2nUc//5JtuxmmJ96gndSCjv8V0p7bftWoFTNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPy+kwevnUlA3Le0rbVguNbi5Sw8wHwYDVR0j BBgwFoAUqkWY2D28FCoWStcvXdkDaq7bChswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRTM3MjExN0I2MUYzMTcxRTM3OTdBOUY2ODQwREZCNDE1 NTREMTM0NUNDQTgyN0MxNEZFODhCQkY0MkZGNjZDLzAvQUE0NTk4RDgzREJDMTQy QTE2NEFENzJGNUREOTAzNkFBRURCMEExQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTQ1OThEODNEQkMxNDJBMTY0 QUQ3MkY1REQ5MDM2QUFFREIwQTFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkUzNzIxMTdCNjFGMzE3MUUzNzk3QTlGNjg0MERGQjQxNTU0RDEzNDVD Q0E4MjdDMTRGRTg4QkJGNDJGRjY2Qy8wL0FBNDU5OEQ4M0RCQzE0MkExNjRBRDcy RjVERDkwMzZBQUVEQjBBMUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0zONO/cD2rETm+VZpUWZPk0y1 EADdRClDoVz15BBTI21/DAUUhuLdN71pZ9X8t10NyRzGPWC6MpCii95yGm0WylaQ MkaNDrVaP4aH1WZUZclUbYndSZF0wqZwW5HRXFy4pqokaa55IZHwOelyEWFs1/0M 5iTAstKGUiXjmNiDdny6mEiQ6jAEHAHVVvFIOzTowT2FGrwSHSGg+KBbbU5ZVZ1t UG8Bfq+2kmbxQtc5JvSj9gP8uptF+khz8KUsP0SUgwwXUrQRo4sJEs92rwoV7rNP lepDj19AFbU2WOyhBBHxSwjHUOcba5Mi0a4OwY5YmoQF2p1g1zXZ2pEDmrRW -----END CERTIFICATE-----Generated at Wed Oct 28 13:03:42 2026 by rpki-client