$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.mft File: AA01668E71E93FC51932988C8351C9140C557FEA.mft (raw, json) Hash identifier: OB0OkdREXCpU2EtVPRt/AbOYy/TK+UckNNYEQFZSiSM= Subject key identifier: 3E:AE:48:17:F6:4B:63:44:86:0B:A9:44:49:62:D1:42:83:F6:41:62 Authority key identifier: AA:01:66:8E:71:E9:3F:C5:19:32:98:8C:83:51:C9:14:0C:55:7F:EA Certificate issuer: /CN=AA01668E71E93FC51932988C8351C9140C557FEA Certificate serial: 422E46A762E6BFA1C4713073E4EEE7FF8B71D773 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.mft Manifest number: 0137 Signing time: Wed 05 Nov 2025 11:22:04 +0000 Manifest this update: Wed 05 Nov 2025 11:17:04 +0000 Manifest next update: Mon 10 Nov 2025 07:57:04 +0000 Files and hashes: 1: AA01668E71E93FC51932988C8351C9140C557FEA.crl (hash: jSfrNCJzIcsi5oJbqnXXRrQRGhiGNtMJQ5+YSyPIP8I=) 2: 3136312e302e3132302e302f32312d3234203d3e203631343432.roa (hash: CvAMDHhU12MOXazVt4oBQ0994v5+gVwqrMZYmJqXRKg=) 3: 323830333a323638303a3a2f33322d3332203d3e203631343432.roa (hash: dlVazrBVrgDzVUVGmWrlveL2W/QMI6c7DhmT3HXmTlE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.crl rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2e:46:a7:62:e6:bf:a1:c4:71:30:73:e4:ee:e7:ff:8b:71:d7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA01668E71E93FC51932988C8351C9140C557FEA Validity Not Before: Nov 5 11:17:04 2025 GMT Not After : Nov 10 07:57:04 2025 GMT Subject: CN=3EAE4817F64B6344860BA9444962D14283F64162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:c1:12:66:fe:e7:3f:62:53:8a:58:21:a3: 12:08:4d:71:fc:49:87:8d:13:3d:91:d7:0d:d2:7a: c6:3a:7f:30:17:ff:02:24:79:49:5c:b9:42:d4:e6: 9c:dc:4c:cf:d2:aa:83:d3:60:38:e2:f4:52:09:23: c0:65:aa:fe:70:9d:2c:78:0c:37:a6:61:a3:6a:29: 6b:e1:d1:d6:12:14:a4:dc:1a:28:98:1f:c6:da:d4: c3:b6:75:72:fa:6b:1e:9b:df:5d:1c:a5:9d:5c:90: 0f:0d:6d:da:49:fd:b1:9c:07:69:a7:cb:bc:f3:68: fc:ae:a6:a0:6d:8f:31:9e:0f:64:5c:ef:f7:39:ed: 0e:f1:5f:a7:88:d1:17:b9:49:10:69:cb:e9:f4:41: a0:03:84:74:bc:f2:d1:e2:b4:6e:b5:72:71:71:41: 55:fb:15:7a:0e:1f:7b:37:0e:68:ea:83:62:2e:f4: 82:70:72:b9:ba:f9:c7:74:15:6f:87:7b:d2:46:18: d6:0e:4b:ac:0e:b9:f5:c8:dd:38:ff:06:4c:76:c0: 91:a2:70:cc:21:41:51:b5:97:1a:30:f1:78:91:bb: 4b:ce:7f:3b:c9:5b:e1:e1:65:8e:6c:99:ac:1f:51: ad:89:d2:04:16:b1:8b:da:ef:9a:d7:19:3f:3c:a1: 27:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AE:48:17:F6:4B:63:44:86:0B:A9:44:49:62:D1:42:83:F6:41:62 X509v3 Authority Key Identifier: keyid:AA:01:66:8E:71:E9:3F:C5:19:32:98:8C:83:51:C9:14:0C:55:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ff:de:bc:1a:58:31:8a:d3:f4:ff:e9:00:0b:cd:e9:07:12: a0:a2:90:ec:e2:4c:b6:ca:43:db:3e:b1:c0:a5:d7:bc:43:ce: 0e:c0:c7:82:03:70:53:8b:07:b1:0f:e6:6b:22:54:44:4e:cb: 7e:e2:89:06:de:04:c6:5e:f4:12:5b:c6:92:fe:78:14:7a:58: 6b:19:9c:22:d0:44:98:c0:19:80:40:02:b5:ab:3c:0b:66:54: 7a:7c:e5:b7:a4:f9:55:f3:15:fb:39:cd:76:37:6d:05:08:ae: 4c:2a:5e:d2:b2:4f:89:62:11:6e:7b:a2:f3:72:ca:82:8b:18: 16:c0:80:9c:8e:f2:8b:fb:15:80:32:67:74:af:2c:f8:a5:e2: 07:2c:00:ce:4b:14:02:20:6c:14:4f:e7:1f:d3:c8:c5:32:06: 41:66:4a:26:b6:9c:43:48:8e:0a:8d:66:8c:af:4d:34:9a:72: 9d:a3:a0:3c:26:8f:0e:da:e0:ef:f1:49:94:7d:75:4c:51:44: 5c:bd:f6:65:70:dc:73:25:12:8f:12:31:ac:06:36:a4:c5:51: 2b:fa:94:59:a1:b3:c7:0a:9e:17:b3:9d:ff:ea:cf:63:ce:2a: be:8e:d5:59:df:d7:93:76:50:8c:29:f0:ae:15:8f:a3:1a:48: 72:46:ec:40 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQi5Gp2Lmv6HEcTBz5O7n/4tx13MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEwMTY2OEU3MUU5M0ZDNTE5MzI5ODhDODM1MUM5MTQw QzU1N0ZFQTAeFw0yNTExMDUxMTE3MDRaFw0yNTExMTAwNzU3MDRaMDMxMTAvBgNV BAMTKDNFQUU0ODE3RjY0QjYzNDQ4NjBCQTk0NDQ5NjJEMTQyODNGNjQxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5IsESZv7nP2JTilghoxIITXH8 SYeNEz2R1w3SesY6fzAX/wIkeUlcuULU5pzcTM/SqoPTYDji9FIJI8Blqv5wnSx4 DDemYaNqKWvh0dYSFKTcGiiYH8ba1MO2dXL6ax6b310cpZ1ckA8NbdpJ/bGcB2mn y7zzaPyupqBtjzGeD2Rc7/c57Q7xX6eI0Re5SRBpy+n0QaADhHS88tHitG61cnFx QVX7FXoOH3s3Dmjqg2Iu9IJwcrm6+cd0FW+He9JGGNYOS6wOufXI3Tj/Bkx2wJGi cMwhQVG1lxow8XiRu0vOfzvJW+HhZY5smawfUa2J0gQWsYva75rXGT88oScLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPq5IF/ZLY0SGC6lESWLRQoP2QWIwHwYDVR0j BBgwFoAUqgFmjnHpP8UZMpiMg1HJFAxVf+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMUIzM0VBRUVBM0UyRkJBNUY3NTg1QTE2Rjk2NTREMDIz MDgzNDc4MTlDREE2NUEyRUM4OERGOTYxMTMwN0Q1LzAvQUEwMTY2OEU3MUU5M0ZD NTE5MzI5ODhDODM1MUM5MTQwQzU1N0ZFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTAxNjY4RTcxRTkzRkM1MTkz Mjk4OEM4MzUxQzkxNDBDNTU3RkVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjFCMzNFQUVFQTNFMkZCQTVGNzU4NUExNkY5NjU0RDAyMzA4MzQ3ODE5 Q0RBNjVBMkVDODhERjk2MTEzMDdENS8wL0FBMDE2NjhFNzFFOTNGQzUxOTMyOTg4 QzgzNTFDOTE0MEM1NTdGRUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2/968GlgxitP0/+kAC83pBxKg opDs4ky2ykPbPrHApde8Q84OwMeCA3BTiwexD+ZrIlRETst+4okG3gTGXvQSW8aS /ngUelhrGZwi0ESYwBmAQAK1qzwLZlR6fOW3pPlV8xX7Oc12N20FCK5MKl7Ssk+J YhFue6LzcsqCixgWwICcjvKL+xWAMmd0ryz4peIHLADOSxQCIGwUT+cf08jFMgZB ZkomtpxDSI4KjWaMr000mnKdo6A8Jo8O2uDv8UmUfXVMUURcvfZlcNxzJRKPEjGs BjakxVEr+pRZobPHCp4Xs53/6s9jziq+jtVZ39eTdlCMKfCuFY+jGkhyRuxA -----END CERTIFICATE-----Generated at Wed Nov 5 20:09:32 2025 by rpki-client