$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft (raw, json) Hash identifier: SsTTpF0Axrr9cfZhGEoqsRNJFNbLbie6jz82dzl3usg= Subject key identifier: 69:13:EE:8B:78:4C:2D:A8:E7:B7:CD:D7:D0:46:08:47:D7:8F:C7:BC Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF Certificate issuer: /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Certificate serial: 3D81F7895F8155A9201762F0AD8F49EB66FC273B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft Manifest number: 0144 Signing time: Wed 05 Nov 2025 04:33:26 +0000 Manifest this update: Wed 05 Nov 2025 04:28:26 +0000 Manifest next update: Mon 10 Nov 2025 13:18:26 +0000 Files and hashes: 1: AS22884.roa (hash: fEDPJsJW5ZSOA/r/br7IHyoptclXdu6G2CVGPXGK7zc=) 2: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl (hash: YHnZ7lD3koiSo3FDIdGDher/mH3alk4rxC0VyEl2TxI=) 3: AS17072.roa (hash: mXvGaxw3XbuWU5smYMeEZHR1M/1dTTrdjF6EGpzHg/g=) 4: AS28414.roa (hash: oLB6f9LZPceeei3hsyIsrm72NY62QAbK78fW/F63gaU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:81:f7:89:5f:81:55:a9:20:17:62:f0:ad:8f:49:eb:66:fc:27:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Validity Not Before: Nov 5 04:28:26 2025 GMT Not After : Nov 10 13:18:26 2025 GMT Subject: CN=6913EE8B784C2DA8E7B7CDD7D0460847D78FC7BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:72:a8:15:6d:3e:ae:f8:e3:d4:51:22:ff:c6: a9:da:84:42:30:17:47:5b:5c:00:91:1c:87:46:cc: 51:a5:18:97:bd:29:35:36:8e:6a:e0:43:b3:28:ff: 7e:74:ee:bc:c8:69:5f:83:55:14:52:35:e6:88:5f: 9f:76:e1:b4:ac:d0:cb:d2:f7:ea:c4:6e:b0:b3:ee: 19:0b:9e:dd:68:43:d4:24:4b:3b:f1:db:87:82:87: d5:24:7a:9b:c1:05:14:a9:74:ee:c9:ad:49:01:d0: 2d:b7:9b:05:f7:31:fb:7a:89:41:0b:ed:4a:f3:89: c0:0c:25:05:62:83:08:f0:c3:68:2e:c1:13:a9:a9: 42:f4:24:2e:ee:5a:a1:7f:b7:ac:8e:ec:bc:9d:96: e6:ff:2e:8d:1d:f8:2c:b6:14:4a:41:2d:b2:28:e1: 44:74:09:ee:55:9d:fd:12:29:f5:f2:b2:e5:0d:19: 55:fd:6e:be:23:48:8b:8b:9c:d9:f0:a6:d1:61:bb: 67:25:16:cc:fa:4b:f9:93:d2:71:a0:b5:63:bb:4b: d1:37:f3:49:ee:54:bc:87:64:30:dd:ee:8f:e4:58: c0:92:8f:06:b8:f9:95:11:e8:e8:46:b9:4a:8c:30: 60:1c:3e:9b:a1:a4:3f:cc:17:82:1a:e4:41:38:44: 37:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:13:EE:8B:78:4C:2D:A8:E7:B7:CD:D7:D0:46:08:47:D7:8F:C7:BC X509v3 Authority Key Identifier: keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ff:d5:38:86:29:00:35:56:bd:b3:18:2c:0c:b1:be:ec:16: 1e:97:16:fc:6f:97:31:be:be:75:ee:0a:49:cd:68:ec:a5:c9: 1a:40:b1:39:4e:d6:9e:08:ac:7c:47:31:1c:09:3d:17:4c:45: 55:a9:9c:6a:43:08:20:2d:d1:81:c1:3a:bc:23:92:ea:e8:a5: 56:e7:53:2e:da:50:44:c3:ef:af:4e:a1:79:b2:06:42:0f:c2: e4:61:38:86:d3:45:a9:71:d2:9b:df:3b:61:f2:80:3f:83:5e: 6b:27:a7:d5:ac:93:0c:72:86:28:ee:70:24:2a:be:83:81:84: 1e:17:2d:12:78:c4:50:e9:e0:d7:9d:9f:b3:11:2e:84:c5:f3: 6f:94:1b:e7:17:9a:20:c4:ae:f3:84:97:ae:22:63:8a:9e:bb: 06:c1:94:89:e4:6e:40:dd:c3:d7:0a:b6:26:af:9e:a2:a3:25: da:8a:1c:3e:46:0f:f7:29:51:3c:89:31:72:96:65:fc:a2:41: 1e:cf:db:bf:c1:1c:d4:01:a5:37:0d:d5:f2:0e:cf:26:dc:7f: 9d:a3:6e:10:56:44:e8:3b:73:a2:26:9b:80:a7:8a:a4:84:61: 5d:c4:f5:17:54:ec:a6:05:f0:3b:89:4d:20:3c:1a:e0:36:73: d1:3f:d3:f7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPYH3iV+BVakgF2LwrY9J62b8JzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYzQTI1Qzk3NUY1 OEFBMEJGRjAeFw0yNTExMDUwNDI4MjZaFw0yNTExMTAxMzE4MjZaMDMxMTAvBgNV BAMTKDY5MTNFRThCNzg0QzJEQThFN0I3Q0REN0QwNDYwODQ3RDc4RkM3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKcqgVbT6u+OPUUSL/xqnahEIw F0dbXACRHIdGzFGlGJe9KTU2jmrgQ7Mo/3507rzIaV+DVRRSNeaIX5924bSs0MvS 9+rEbrCz7hkLnt1oQ9QkSzvx24eCh9UkepvBBRSpdO7JrUkB0C23mwX3Mft6iUEL 7UrzicAMJQVigwjww2guwROpqUL0JC7uWqF/t6yO7Lydlub/Lo0d+Cy2FEpBLbIo 4UR0Ce5Vnf0SKfXysuUNGVX9br4jSIuLnNnwptFhu2clFsz6S/mT0nGgtWO7S9E3 80nuVLyHZDDd7o/kWMCSjwa4+ZUR6OhGuUqMMGAcPpuhpD/MF4Ia5EE4RDcHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaRPui3hMLajnt83X0EYIR9ePx7wwHwYDVR0j BBgwFoAUiq8cMSwkESUsf3djolyXX1iqC/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0 OTc2MjFEMjMxMDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEy NTJDN0Y3NzYzQTI1Qzk3NUY1OEFBMEJGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QUFGMUMzMTJDMjQxMTI1MkM3 Rjc3NjNBMjVDOTc1RjU4QUEwQkZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTBCRjlFMDYzMjk0QzczNUI4MzVBRUFFMTU4MTZERjA3NDk3NjIxRDIz MTA0MDlDNTc3MjlBQTY4Rjc3M0NCNC8wLzhBQUYxQzMxMkMyNDExMjUyQzdGNzc2 M0EyNUM5NzVGNThBQTBCRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCA/9U4hikANVa9sxgsDLG+7BYe lxb8b5cxvr517gpJzWjspckaQLE5TtaeCKx8RzEcCT0XTEVVqZxqQwggLdGBwTq8 I5Lq6KVW51Mu2lBEw++vTqF5sgZCD8LkYTiG00WpcdKb3zth8oA/g15rJ6fVrJMM coYo7nAkKr6DgYQeFy0SeMRQ6eDXnZ+zES6ExfNvlBvnF5ogxK7zhJeuImOKnrsG wZSJ5G5A3cPXCrYmr56ioyXaihw+Rg/3KVE8iTFylmX8okEez9u/wRzUAaU3DdXy Ds8m3H+do24QVkToO3OiJpuAp4qkhGFdxPUXVOymBfA7iU0gPBrgNnPRP9P3 -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:51 2025 by rpki-client