$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft File: AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft (raw, json) Hash identifier: j6l9gGDKbYA9hZJiyNhoG6mPfkkdKNMFR4ZN2Fp5Ii8= Subject key identifier: D7:30:4E:05:F1:1D:D5:ED:45:C9:FA:97:F3:C9:67:D0:D0:48:29:0D Authority key identifier: AA:FB:3D:DE:DB:02:82:CB:7B:21:DA:68:34:EF:3E:E2:E7:C7:FB:B8 Certificate issuer: /CN=AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8 Certificate serial: 1C71393884A3E49F81B4770310A89C861BD5E093 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft Manifest number: 4E Signing time: Tue 04 Nov 2025 17:07:16 +0000 Manifest this update: Tue 04 Nov 2025 17:02:16 +0000 Manifest next update: Sat 08 Nov 2025 22:53:16 +0000 Files and hashes: 1: AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.crl (hash: bvaEYPSyC2Kg1mXRjUIdC0AL3q+S0h+pgaYyT6IeA/4=) 2: 323830363a3430383a3a2f33322d3438203d3e20323730313238.roa (hash: ev/GuEw1oq5XclTZ5QMKbvKRlGBnDQiCGbBPgmlLYuA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.crl rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 22:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:71:39:38:84:a3:e4:9f:81:b4:77:03:10:a8:9c:86:1b:d5:e0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8 Validity Not Before: Nov 4 17:02:16 2025 GMT Not After : Nov 8 22:53:16 2025 GMT Subject: CN=D7304E05F11DD5ED45C9FA97F3C967D0D048290D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:90:f8:29:0f:28:a8:e1:92:94:07:49:c8:c9: 39:ff:db:57:73:2b:70:20:8a:11:05:fc:3f:d7:ca: f7:74:59:59:3d:26:bc:c6:42:67:0f:31:6e:17:ee: 4a:40:53:40:84:4e:0c:37:b0:2c:b6:c7:13:06:31: 9d:a3:42:5f:b3:97:8a:0f:53:81:63:12:3c:72:a1: 14:d5:01:04:43:78:db:e0:ae:8b:e7:fa:32:6d:42: b0:4f:72:96:cb:13:17:4f:59:cd:16:a3:1c:83:1e: 86:5f:6e:d4:d0:90:d1:3c:ea:f7:2d:dc:32:cd:a4: 9d:72:e5:67:43:25:2b:15:f6:b9:ae:8a:ee:93:9a: e1:1e:5b:59:11:53:b9:93:a0:ad:da:8c:32:df:3b: 9d:e9:2c:77:32:ef:d4:81:ee:9a:41:e7:f6:b5:20: 2d:9c:48:7c:8d:84:80:ec:84:18:b0:15:84:08:3a: 35:0e:cb:31:1f:ca:9c:5f:23:64:28:fb:39:c0:0d: 39:5f:c3:7f:5e:49:94:cc:15:0e:5a:0f:1d:01:27: 17:a8:55:52:6f:34:25:69:dc:4e:8b:cf:69:8a:18: 1a:bd:3c:98:94:2b:48:ec:b5:a5:59:4c:66:33:a4: 57:fd:af:e2:9e:4c:f6:ed:66:b4:d2:24:b0:b3:b5: 38:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:30:4E:05:F1:1D:D5:ED:45:C9:FA:97:F3:C9:67:D0:D0:48:29:0D X509v3 Authority Key Identifier: keyid:AA:FB:3D:DE:DB:02:82:CB:7B:21:DA:68:34:EF:3E:E2:E7:C7:FB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:91:75:45:54:9d:1f:6a:b5:7d:ad:86:c9:1c:d1:fe:9b:07: cc:ce:f9:df:74:27:76:b4:69:c2:e1:30:71:cf:df:bb:8a:01: 9c:76:bf:79:a2:83:24:d3:a9:89:e6:dd:b3:79:00:2e:ac:c0: e5:38:65:73:dd:19:24:96:cc:25:36:8c:51:a2:5f:00:a9:49: 86:55:8e:39:a5:7b:b5:f3:8d:9f:bf:7b:8d:81:43:59:62:a2: 3a:9c:51:02:3a:5b:13:1a:f9:77:f2:17:bf:89:94:dc:e2:fd: 1a:cd:42:41:74:da:fe:b2:bb:a9:71:35:ab:0d:ec:26:32:00: 8f:ad:9e:08:2f:ad:57:26:dd:6b:6c:a3:2b:85:d8:53:26:5c: b3:2c:e5:6c:1c:94:c0:d6:f4:d1:91:17:93:d0:66:21:88:4f: e4:9d:71:b8:ed:78:da:b3:b1:af:d2:b6:5a:21:23:50:75:a8: 32:14:09:ba:e0:89:73:74:14:5d:ce:d8:4e:cc:5f:10:b1:de: 36:0a:52:b5:fc:6c:a7:8c:97:0d:cc:95:ae:b0:81:04:f9:35: b4:58:0f:4f:3e:30:5d:ee:c0:db:4f:7d:cd:b9:c7:c7:01:88: a0:d5:89:b6:c8:5e:24:0e:c8:c1:aa:6b:ad:b8:4a:99:29:b2: ca:42:b0:91 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHHE5OISj5J+BtHcDEKichhvV4JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFGQjNEREVEQjAyODJDQjdCMjFEQTY4MzRFRjNFRTJF N0M3RkJCODAeFw0yNTExMDQxNzAyMTZaFw0yNTExMDgyMjUzMTZaMDMxMTAvBgNV BAMTKEQ3MzA0RTA1RjExREQ1RUQ0NUM5RkE5N0YzQzk2N0QwRDA0ODI5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOkPgpDyio4ZKUB0nIyTn/21dz K3AgihEF/D/Xyvd0WVk9JrzGQmcPMW4X7kpAU0CETgw3sCy2xxMGMZ2jQl+zl4oP U4FjEjxyoRTVAQRDeNvgrovn+jJtQrBPcpbLExdPWc0WoxyDHoZfbtTQkNE86vct 3DLNpJ1y5WdDJSsV9rmuiu6TmuEeW1kRU7mToK3ajDLfO53pLHcy79SB7ppB5/a1 IC2cSHyNhIDshBiwFYQIOjUOyzEfypxfI2Qo+znADTlfw39eSZTMFQ5aDx0BJxeo VVJvNCVp3E6Lz2mKGBq9PJiUK0jstaVZTGYzpFf9r+KeTPbtZrTSJLCztTjRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1zBOBfEd1e1FyfqX88ln0NBIKQ0wHwYDVR0j BBgwFoAUqvs93tsCgst7IdpoNO8+4ufH+7gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9COTI1ODREN0JDM0Q0NzcxODczQTU3Mzg0MDdEMEU3M0M3 NTg5NUFEMDVBMTg2QjEwNzA2MENBNUFFQzFCMUJDLzAvQUFGQjNEREVEQjAyODJD QjdCMjFEQTY4MzRFRjNFRTJFN0M3RkJCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUZCM0RERURCMDI4MkNCN0Iy MURBNjgzNEVGM0VFMkU3QzdGQkI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjkyNTg0RDdCQzNENDc3MTg3M0E1NzM4NDA3RDBFNzNDNzU4OTVBRDA1 QTE4NkIxMDcwNjBDQTVBRUMxQjFCQy8wL0FBRkIzRERFREIwMjgyQ0I3QjIxREE2 ODM0RUYzRUUyRTdDN0ZCQjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZkXVFVJ0farV9rYbJHNH+mwfM zvnfdCd2tGnC4TBxz9+7igGcdr95ooMk06mJ5t2zeQAurMDlOGVz3RkklswlNoxR ol8AqUmGVY45pXu1842fv3uNgUNZYqI6nFECOlsTGvl38he/iZTc4v0azUJBdNr+ srupcTWrDewmMgCPrZ4IL61XJt1rbKMrhdhTJlyzLOVsHJTA1vTRkReT0GYhiE/k nXG47Xjas7Gv0rZaISNQdagyFAm64IlzdBRdzthOzF8Qsd42ClK1/GynjJcNzJWu sIEE+TW0WA9PPjBd7sDbT33NucfHAYig1Ym2yF4kDsjBqmutuEqZKbLKQrCR -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:29 2025 by rpki-client