$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft File: AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft (raw, json) Hash identifier: Iq2zNLGu4lKS6GQjglHHBJAESNqe+mvUjlogrbs7Fq8= Subject key identifier: E6:44:36:88:DE:70:FF:F1:63:B8:F7:EC:72:E5:A5:D1:50:AA:3A:A3 Authority key identifier: AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D Certificate issuer: /CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D Certificate serial: 6ABA13C42B3206C944E25E446081229A9557D58B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft Manifest number: 0100 Signing time: Sat 02 Aug 2025 21:59:59 +0000 Manifest this update: Sat 02 Aug 2025 21:54:59 +0000 Manifest next update: Thu 07 Aug 2025 23:06:59 +0000 Files and hashes: 1: 323830363a3334353a3a2f33322d3332203d3e20323635353936.roa (hash: gJ2KE+hhCnBlKNK4IXm1DBQhXwWRHEEVfQKtsDSjF60=) 2: 34352e3138312e34312e302f32342d3234203d3e20323635353936.roa (hash: s8yQ/QgUIAqa25dgGeYtbxFFxdmE0jZHErLW8CLLt5U=) 3: 34352e3138312e34302e302f32342d3234203d3e20323635353936.roa (hash: SvkXsMv55PSYZqXEFuqtC+A52E6JploJKAslELlq4Tg=) 4: 34352e3138312e34302e302f32332d3233203d3e20323635353936.roa (hash: utTDuCeDQ9y7DdWOw6eKSHmHCX93JDTJCDaEfjqE2FI=) 5: AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl (hash: GvevjaL5BeWvmin42FvcEV8Fo1VyNuli88RAbeLMs1A=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ba:13:c4:2b:32:06:c9:44:e2:5e:44:60:81:22:9a:95:57:d5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D Validity Not Before: Aug 2 21:54:59 2025 GMT Not After : Aug 7 23:06:59 2025 GMT Subject: CN=E6443688DE70FFF163B8F7EC72E5A5D150AA3AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:7c:3b:b8:fa:d5:e5:27:f2:20:4e:9a:30: 89:87:85:cf:ec:2a:85:d0:e5:27:7c:17:d5:9a:f0: da:92:cb:93:3c:98:a3:79:b1:f8:8a:31:e3:a9:f6: 97:e5:30:8f:e9:b4:bc:ff:b9:c1:8a:99:5f:7c:78: ad:50:a9:e9:9c:1d:85:c9:e4:77:c0:1f:87:e6:c3: fb:66:df:71:cd:00:ef:d5:64:56:2f:95:d5:33:b6: 54:6f:67:d0:c8:ac:55:e6:33:f1:ef:5e:61:b2:0a: d0:51:56:d3:11:f0:3c:56:ca:15:e5:db:07:fd:86: d1:1e:0a:e3:c9:09:7a:b0:bd:28:4a:ff:57:a1:36: 03:41:5e:73:b2:d6:0c:05:0b:2c:6c:bc:c7:25:5b: d6:8c:94:43:db:a9:d2:4e:eb:64:6b:5c:39:51:31: f7:c1:86:ff:90:01:84:7f:a2:16:9c:63:cc:bc:f4: 63:04:47:cb:1c:73:c4:1f:f2:cb:7d:f1:cc:59:41: 08:06:a6:4a:c1:38:e0:3f:89:0d:35:28:ab:cc:f4: 75:87:70:d3:02:3f:d0:a9:72:3c:7c:95:31:a1:c5: 01:59:d0:cb:4a:ef:c1:9b:88:a9:88:4d:3b:38:c2: 9c:3c:2c:aa:7e:6f:aa:93:97:21:1b:8b:db:f7:5e: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:44:36:88:DE:70:FF:F1:63:B8:F7:EC:72:E5:A5:D1:50:AA:3A:A3 X509v3 Authority Key Identifier: keyid:AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:41:4f:3d:6f:05:0b:ab:83:e6:60:57:80:84:eb:32:af:74: e5:24:fe:68:62:25:63:aa:d3:63:04:de:e7:eb:4b:c5:34:6d: 0d:00:a7:07:31:ca:9d:3c:c5:b2:dc:eb:c8:d7:1b:66:3b:d7: 5a:9d:73:c9:34:ed:38:c6:7a:f9:df:34:3a:42:f1:4a:00:55: 52:46:cb:05:6e:cb:1d:6e:97:70:2f:39:05:a0:ef:46:74:83: 5e:1b:e4:80:69:95:c1:7f:d8:da:04:89:60:a4:43:73:bd:64: 5d:a4:47:10:d6:35:36:b9:11:3a:8a:5e:e8:94:50:2c:0e:b3: 99:80:fa:e2:24:17:c6:32:f3:7d:f4:7a:8c:43:a3:2c:56:8a: 84:71:36:0d:f8:be:e4:14:04:df:a9:79:f7:ed:46:67:55:3b: 61:cc:5a:93:a4:aa:32:2f:37:59:2a:58:7c:e7:e5:8f:56:a9: b0:5e:c0:eb:a8:4c:e6:b1:8d:ab:8e:2e:d4:45:fa:bb:50:76: 98:58:8c:e8:af:ae:bf:d4:3a:01:3c:f7:c0:0c:0c:ab:ea:9c: 86:4d:05:fa:77:d2:72:01:66:d3:8d:d7:69:d0:18:67:5e:42: 24:8a:ac:bd:4b:a2:04:19:9a:25:29:ce:f0:4d:2b:d2:3e:00: 12:df:48:90 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaroTxCsyBslE4l5EYIEimpVX1YswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5QTBBMEM0MTExQkEwMjc4MkEyRTk3NjkxRjlGQzZD MDhGRUY0RDAeFw0yNTA4MDIyMTU0NTlaFw0yNTA4MDcyMzA2NTlaMDMxMTAvBgNV BAMTKEU2NDQzNjg4REU3MEZGRjE2M0I4RjdFQzcyRTVBNUQxNTBBQTNBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDknw7uPrV5SfyIE6aMImHhc/s KoXQ5Sd8F9Wa8NqSy5M8mKN5sfiKMeOp9pflMI/ptLz/ucGKmV98eK1QqemcHYXJ 5HfAH4fmw/tm33HNAO/VZFYvldUztlRvZ9DIrFXmM/HvXmGyCtBRVtMR8DxWyhXl 2wf9htEeCuPJCXqwvShK/1ehNgNBXnOy1gwFCyxsvMclW9aMlEPbqdJO62RrXDlR MffBhv+QAYR/ohacY8y89GMER8scc8Qf8st98cxZQQgGpkrBOOA/iQ01KKvM9HWH cNMCP9Cpcjx8lTGhxQFZ0MtK78GbiKmITTs4wpw8LKp+b6qTlyEbi9v3XjDRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU5kQ2iN5w//FjuPfscuWl0VCqOqMwHwYDVR0j BBgwFoAUqpoKDEERugJ4Ki6XaR+fxsCP700wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85RTIxQjlCRkEwQzIzNzQzNDZGMzNFNkNFMUFFQzc5NDEy QjJERkI1ODY2QzVGQzBDMUMwQzY1QzQ2NjVDNTg4LzAvQUE5QTBBMEM0MTExQkEw Mjc4MkEyRTk3NjkxRjlGQzZDMDhGRUY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTlBMEEwQzQxMTFCQTAyNzgy QTJFOTc2OTFGOUZDNkMwOEZFRjRELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUUyMUI5QkZBMEMyMzc0MzQ2RjMzRTZDRTFBRUM3OTQxMkIyREZCNTg2 NkM1RkMwQzFDMEM2NUM0NjY1QzU4OC8wL0FBOUEwQTBDNDExMUJBMDI3ODJBMkU5 NzY5MUY5RkM2QzA4RkVGNEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyQU89bwULq4PmYFeAhOsyr3Tl JP5oYiVjqtNjBN7n60vFNG0NAKcHMcqdPMWy3OvI1xtmO9danXPJNO04xnr53zQ6 QvFKAFVSRssFbssdbpdwLzkFoO9GdINeG+SAaZXBf9jaBIlgpENzvWRdpEcQ1jU2 uRE6il7olFAsDrOZgPriJBfGMvN99HqMQ6MsVoqEcTYN+L7kFATfqXn37UZnVTth zFqTpKoyLzdZKlh85+WPVqmwXsDrqEzmsY2rji7URfq7UHaYWIzor66/1DoBPPfA DAyr6pyGTQX6d9JyAWbTjddp0BhnXkIkiqy9S6IEGZolKc7wTSvSPgAS30iQ -----END CERTIFICATE-----Generated at Sun Aug 3 16:03:59 2025 by rpki-client