$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft File: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft (raw, json) Hash identifier: yv6Myrmlzj2P0Td73jnTw44PLYPJP2Uh3UQ12WUQ8pw= Subject key identifier: CA:F5:38:60:A9:57:2C:09:53:AA:FC:C2:16:12:3B:54:8C:C6:C8:88 Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Certificate serial: 07F657B9F336F34B708307A5DCCB71B0336B9B56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft Manifest number: 0109 Signing time: Mon 11 Aug 2025 01:11:14 +0000 Manifest this update: Mon 11 Aug 2025 01:06:14 +0000 Manifest next update: Fri 15 Aug 2025 21:59:14 +0000 Files and hashes: 1: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl (hash: 277E1FWyleqv5B+c1yBSVhdbJbKZcLv5GBgwg/B1viA=) 2: 3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (hash: M4+B8dKZV5DI02H1wVqkAPnxV4BALeFj/B9STyRTB2k=) 3: 3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa (hash: +3H2vQacPst44179H9ozi8ZNmuf3gbFsNRH1xkt2BXU=) 4: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (hash: yvSEv5Xfx29WmYskueRJZaLzBlNmMLZ3piPORyqzEPc=) 5: 3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (hash: w3Yy4sRo0gzJGcEnOCGmEHKKiZdLPgWGX410//7WEO4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 15 Aug 2025 13:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f6:57:b9:f3:36:f3:4b:70:83:07:a5:dc:cb:71:b0:33:6b:9b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Validity Not Before: Aug 11 01:06:14 2025 GMT Not After : Aug 15 21:59:14 2025 GMT Subject: CN=CAF53860A9572C0953AAFCC216123B548CC6C888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:66:be:a1:78:f4:04:b2:e4:21:44:dc:ec: ec:25:65:d0:fa:bf:a1:f8:4b:7a:ac:9c:46:16:01: 8a:9d:12:e6:53:81:75:ad:e4:e2:66:30:31:6f:72: 8d:55:82:8d:8e:a4:08:74:f8:6b:00:f6:a4:5b:e8: 8f:c9:e2:9c:19:58:b3:29:d2:8d:df:b5:e4:88:a0: 46:2c:75:6a:43:ca:5c:84:fc:4c:db:da:2c:85:ec: 48:d5:2b:f0:35:ce:4d:f4:58:61:24:45:ce:6e:24: a9:99:05:10:11:03:d1:93:2e:6f:48:84:51:fe:6e: bb:79:24:c4:47:79:49:af:61:2a:d0:ce:2c:92:c8: f0:30:20:95:6c:44:76:2d:dc:7e:ea:0e:b9:ce:f2: 68:69:3c:04:1a:f5:d6:55:f6:ff:a5:f4:40:ca:3b: f2:8b:13:2b:47:c9:d1:0e:1a:96:a4:9b:4c:7e:38: 8a:c6:d6:51:62:1f:e2:a9:70:51:94:24:61:a0:cb: 50:1d:dc:16:1d:92:e3:3c:47:49:0e:da:57:08:bc: c3:e8:c3:ad:48:a0:69:c4:46:84:77:a9:1e:e6:e4: 12:be:f6:77:d5:2c:71:b7:b0:49:50:3e:b0:8f:8a: 7a:4e:ef:11:f0:d4:00:cf:dd:36:e5:8b:7a:8f:ed: c1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F5:38:60:A9:57:2C:09:53:AA:FC:C2:16:12:3B:54:8C:C6:C8:88 X509v3 Authority Key Identifier: keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a7:b7:5f:b0:97:1c:40:2c:d4:d6:d2:9e:63:51:fa:d0:67: fb:f0:73:af:68:6b:8e:44:7d:69:0e:61:96:4c:10:66:c4:1a: 08:da:a9:a7:e2:a6:8e:ca:56:75:76:21:bc:f3:9e:f5:71:10: d9:87:18:55:b0:5f:ce:6b:8c:5c:92:24:42:0d:b3:b2:f9:d0: d0:45:8c:ab:a2:25:4f:7d:08:b3:0a:84:01:18:82:e1:f1:1f: 6e:11:43:b9:61:38:f6:92:c7:39:d4:3f:fc:bf:86:4c:54:b4: 42:6f:fd:6d:c3:6d:ff:34:66:5e:5b:b4:55:22:98:56:32:43: ab:71:df:24:fb:ff:b2:07:63:ff:e0:a9:c4:2b:ba:18:fc:b3: 5f:dc:db:95:a0:96:f7:43:a3:fe:f1:8c:d8:f4:28:39:27:2f: 56:f4:7b:8b:0d:a2:94:8c:21:3f:a5:a4:ca:f1:89:99:84:68: 5a:b2:fd:1b:52:54:f3:6f:b0:25:84:0e:87:91:3b:cc:d6:01: a1:fa:db:5b:9f:62:34:42:07:78:37:ca:6c:20:e5:69:8b:f6: e3:9f:37:1b:3c:9f:e2:d6:9d:27:32:a6:f6:e5:90:e4:8d:2d: e2:19:cd:cd:23:03:0a:55:17:89:ff:8b:a7:d0:1b:86:ea:93: 62:26:26:37 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUB/ZXufM280twgwel3MtxsDNrm1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyMUI4MUEzNUJBRjdFNUYxMEUwQzhBQkUxNjQ2Njc0 NUMzN0JGODAeFw0yNTA4MTEwMTA2MTRaFw0yNTA4MTUyMTU5MTRaMDMxMTAvBgNV BAMTKENBRjUzODYwQTk1NzJDMDk1M0FBRkNDMjE2MTIzQjU0OENDNkM4ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjma+oXj0BLLkIUTc7OwlZdD6 v6H4S3qsnEYWAYqdEuZTgXWt5OJmMDFvco1Vgo2OpAh0+GsA9qRb6I/J4pwZWLMp 0o3fteSIoEYsdWpDylyE/Ezb2iyF7EjVK/A1zk30WGEkRc5uJKmZBRARA9GTLm9I hFH+brt5JMRHeUmvYSrQziySyPAwIJVsRHYt3H7qDrnO8mhpPAQa9dZV9v+l9EDK O/KLEytHydEOGpakm0x+OIrG1lFiH+KpcFGUJGGgy1Ad3BYdkuM8R0kO2lcIvMPo w61IoGnERoR3qR7m5BK+9nfVLHG3sElQPrCPinpO7xHw1ADP3Tbli3qP7cG/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyvU4YKlXLAlTqvzCFhI7VIzGyIgwHwYDVR0j BBgwFoAUqiG4GjW69+XxDgyKvhZGZ0XDe/gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MjQ0MjRFODUyNDUwMDgyQjlCNTQzODFEM0E5NEE4MUQ1 OUNENEU2NjNEREE4NUE0MkM5QjA1MTc3RDc4M0UyLzAvQUEyMUI4MUEzNUJBRjdF NUYxMEUwQzhBQkUxNjQ2Njc0NUMzN0JGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIxQjgxQTM1QkFGN0U1RjEw RTBDOEFCRTE2NDY2NzQ1QzM3QkY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzI0NDI0RTg1MjQ1MDA4MkI5QjU0MzgxRDNBOTRBODFENTlDRDRFNjYz RERBODVBNDJDOUIwNTE3N0Q3ODNFMi8wL0FBMjFCODFBMzVCQUY3RTVGMTBFMEM4 QUJFMTY0NjY3NDVDMzdCRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBop7dfsJccQCzU1tKeY1H60Gf7 8HOvaGuORH1pDmGWTBBmxBoI2qmn4qaOylZ1diG88571cRDZhxhVsF/Oa4xckiRC DbOy+dDQRYyroiVPfQizCoQBGILh8R9uEUO5YTj2ksc51D/8v4ZMVLRCb/1tw23/ NGZeW7RVIphWMkOrcd8k+/+yB2P/4KnEK7oY/LNf3NuVoJb3Q6P+8YzY9Cg5Jy9W 9HuLDaKUjCE/paTK8YmZhGhasv0bUlTzb7AlhA6HkTvM1gGh+ttbn2I0Qgd4N8ps IOVpi/bjnzcbPJ/i1p0nMqb25ZDkjS3iGc3NIwMKVReJ/4un0BuG6pNiJiY3 -----END CERTIFICATE-----Generated at Mon Aug 11 13:36:37 2025 by rpki-client