$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft (raw, json) Hash identifier: 8cu1mxJrCtPES3eVxKWZEs2P5ksN29ljW9Hy59NoK0o= Subject key identifier: E3:E0:71:E3:A3:41:0D:D3:0C:9C:37:7E:F1:14:09:66:5C:EF:F0:0B Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF Certificate issuer: /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Certificate serial: 4AAA97663BF018B30C1602436F0C742F25DB199A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft Manifest number: F2 Signing time: Fri 20 Jun 2025 11:37:34 +0000 Manifest this update: Fri 20 Jun 2025 11:32:34 +0000 Manifest next update: Wed 25 Jun 2025 17:14:34 +0000 Files and hashes: 1: AS17072.roa (hash: /Z+Bn4EUsmUiIWhPmW1ctyYtIpY/qScMwi0MqtYhU9E=) 2: AS22884.roa (hash: XA+RKTs8swhw9SXtRuu1T4hC7EH91dG2wxMML6u8cjg=) 3: AS28414.roa (hash: hG+EHS+f7EtALuSSTl5iVLK2ytAcMU9IL3+3wn1eiIM=) 4: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl (hash: l8gwYAIGEDUoHXrCV3FYU892YSATClH4vGlLGqR07O0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 17:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:aa:97:66:3b:f0:18:b3:0c:16:02:43:6f:0c:74:2f:25:db:19:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Validity Not Before: Jun 20 11:32:34 2025 GMT Not After : Jun 25 17:14:34 2025 GMT Subject: CN=E3E071E3A3410DD30C9C377EF11409665CEFF00B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:9f:f7:35:f2:da:87:a3:aa:df:e3:c5:cc: 4b:37:af:9e:8d:90:d1:01:61:94:f1:fa:22:ce:bf: 71:14:9d:c3:5c:bf:f3:07:a4:2e:d2:b8:d5:83:cc: aa:bf:19:4d:c5:b4:2f:4a:d7:dc:05:a6:fa:8f:65: 9b:ef:79:00:5b:8d:b0:ca:98:06:2a:24:ad:9f:4e: 7b:b1:59:55:03:03:49:d5:e8:6c:51:0e:43:97:98: 60:fc:17:c9:5a:10:ba:40:19:bc:ca:0c:cc:fb:12: 20:b8:e1:3b:a6:77:75:52:dd:1a:41:33:cf:e6:85: ec:3e:a6:95:16:a4:d9:75:e2:06:f9:0c:79:f5:0f: 4c:50:9b:e3:57:2f:5c:75:f3:e2:08:0d:2b:b8:df: 00:e4:6c:6e:d9:e6:e5:62:19:9e:a0:be:10:3c:51: d8:77:a4:18:60:fe:1a:0e:ad:8c:98:1f:1f:ad:81: 8d:76:51:62:c2:c1:23:2d:3d:91:2b:0b:6a:5a:8f: 4f:c6:a7:86:c9:06:b5:d1:e5:2d:16:da:1c:88:59: 05:43:c7:79:f7:61:10:ae:0a:6a:df:e1:96:51:1e: ea:f1:fa:33:98:fc:b7:bf:2b:fd:64:e0:8e:b5:07: 0e:11:48:b1:03:8e:3c:f7:f5:e6:2c:36:4f:a7:32: 2a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E0:71:E3:A3:41:0D:D3:0C:9C:37:7E:F1:14:09:66:5C:EF:F0:0B X509v3 Authority Key Identifier: keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ef:8e:78:93:52:96:a7:ad:0e:0b:e8:4c:ee:fd:0c:85:08: cb:1b:08:1c:6b:1b:7d:9d:21:84:27:99:e8:de:f2:ed:99:42: cb:53:7e:11:f2:de:f8:52:7b:b9:f9:0e:62:48:19:aa:37:9d: 65:ae:4a:81:50:99:ac:f2:cd:50:f2:bd:52:69:b2:fe:e5:e1: 1d:2b:f8:fd:d9:2d:e5:e6:2b:03:00:ee:76:8b:8e:66:b8:28: 3d:2d:5a:b6:69:a7:2f:4e:a2:04:87:71:2e:cb:ea:fe:77:73: 54:15:b6:5e:5d:ec:32:77:d2:56:1e:20:ed:5b:c8:dc:fd:53: 51:f9:14:90:e0:26:3c:56:e4:e2:d3:27:f5:d8:99:44:e5:30: 83:b6:71:cd:76:2c:00:1a:ca:a0:ba:2b:b6:e7:08:9e:40:ab: e1:b7:f4:17:03:84:28:27:92:95:c4:95:bc:76:3f:a1:c6:59: f2:16:a7:64:e7:27:91:bc:0a:04:38:86:c7:d0:99:f6:a4:2f: 4c:58:a7:90:cb:a1:ec:b4:be:02:c8:b0:a1:19:ac:f1:ad:74: 94:46:04:71:b0:7a:98:37:d2:09:fb:5a:c1:13:bd:54:41:c1: fc:41:1b:fe:ce:a8:72:89:82:f2:b6:5e:32:72:d8:e6:18:b2: 01:fc:68:95 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSqqXZjvwGLMMFgJDbwx0LyXbGZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYzQTI1Qzk3NUY1 OEFBMEJGRjAeFw0yNTA2MjAxMTMyMzRaFw0yNTA2MjUxNzE0MzRaMDMxMTAvBgNV BAMTKEUzRTA3MUUzQTM0MTBERDMwQzlDMzc3RUYxMTQwOTY2NUNFRkYwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUTZ/3NfLah6Oq3+PFzEs3r56N kNEBYZTx+iLOv3EUncNcv/MHpC7SuNWDzKq/GU3FtC9K19wFpvqPZZvveQBbjbDK mAYqJK2fTnuxWVUDA0nV6GxRDkOXmGD8F8laELpAGbzKDMz7EiC44Tumd3VS3RpB M8/mhew+ppUWpNl14gb5DHn1D0xQm+NXL1x18+IIDSu43wDkbG7Z5uViGZ6gvhA8 Udh3pBhg/hoOrYyYHx+tgY12UWLCwSMtPZErC2paj0/Gp4bJBrXR5S0W2hyIWQVD x3n3YRCuCmrf4ZZRHurx+jOY/Le/K/1k4I61Bw4RSLEDjjz39eYsNk+nMiqdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU4+Bx46NBDdMMnDd+8RQJZlzv8AswHwYDVR0j BBgwFoAUiq8cMSwkESUsf3djolyXX1iqC/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0 OTc2MjFEMjMxMDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEy NTJDN0Y3NzYzQTI1Qzk3NUY1OEFBMEJGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QUFGMUMzMTJDMjQxMTI1MkM3 Rjc3NjNBMjVDOTc1RjU4QUEwQkZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTBCRjlFMDYzMjk0QzczNUI4MzVBRUFFMTU4MTZERjA3NDk3NjIxRDIz MTA0MDlDNTc3MjlBQTY4Rjc3M0NCNC8wLzhBQUYxQzMxMkMyNDExMjUyQzdGNzc2 M0EyNUM5NzVGNThBQTBCRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ7454k1KWp60OC+hM7v0MhQjL Gwgcaxt9nSGEJ5no3vLtmULLU34R8t74Unu5+Q5iSBmqN51lrkqBUJms8s1Q8r1S abL+5eEdK/j92S3l5isDAO52i45muCg9LVq2aacvTqIEh3Euy+r+d3NUFbZeXewy d9JWHiDtW8jc/VNR+RSQ4CY8VuTi0yf12JlE5TCDtnHNdiwAGsqguiu25wieQKvh t/QXA4QoJ5KVxJW8dj+hxlnyFqdk5yeRvAoEOIbH0Jn2pC9MWKeQy6HstL4CyLCh GazxrXSURgRxsHqYN9IJ+1rBE71UQcH8QRv+zqhyiYLytl4yctjmGLIB/GiV -----END CERTIFICATE-----Generated at Sun Jun 22 16:29:51 2025 by rpki-client