$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft File: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft (raw, json) Hash identifier: r9x0CyJDzDD9pfVErYssLi3Kl3+rdm332TSy29Wey9c= Subject key identifier: BF:CA:86:1D:15:48:EC:90:CC:A5:FA:3B:DF:2C:3E:3F:85:8A:EB:AF Authority key identifier: AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C Certificate issuer: /CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C Certificate serial: 4DE1459A734EE902371E35A8069E6CD4C196EE87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft Manifest number: F4 Signing time: Thu 03 Jul 2025 08:19:52 +0000 Manifest this update: Thu 03 Jul 2025 08:14:52 +0000 Manifest next update: Tue 08 Jul 2025 06:27:52 +0000 Files and hashes: 1: 323830333a346135303a3a2f33322d3438203d3e20323733313736.roa (hash: 1S7U/necixh7xAZEJOiccJW6Tn6fQBFFDZB4GRKHA+s=) 2: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl (hash: fsPYBdEHDe1fqOEp0gO4a5W6Ij6EKWGf7L6LpDmrvdg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e1:45:9a:73:4e:e9:02:37:1e:35:a8:06:9e:6c:d4:c1:96:ee:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C Validity Not Before: Jul 3 08:14:52 2025 GMT Not After : Jul 8 06:27:52 2025 GMT Subject: CN=BFCA861D1548EC90CCA5FA3BDF2C3E3F858AEBAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:27:64:96:ba:3c:a9:58:80:65:1d:d6:55: 61:48:bf:d2:8e:9c:f5:a9:5f:1a:6a:98:fc:e0:98: f2:d5:8d:ec:0a:76:ac:24:52:fe:a6:1c:58:38:71: 26:e7:9b:39:85:e5:e8:fd:3a:6c:ef:c2:d1:d0:ea: 19:73:51:e0:51:17:b5:4d:a3:98:df:fa:19:dd:b8: 24:85:e0:11:2c:90:f4:ab:42:da:5d:07:5b:96:1c: 95:be:6d:04:ee:13:84:a4:b1:bb:3c:b1:69:01:88: c5:4c:82:1c:25:41:48:7b:40:0c:2f:3d:94:51:5e: 38:bb:70:e7:53:bd:10:dd:44:6a:33:c3:97:81:d4: 52:9c:28:fd:a4:73:b1:fe:87:b5:a4:1b:9c:f8:92: 1b:a9:7e:b0:d8:80:8b:7c:98:87:81:bd:ed:75:ed: ff:ba:b1:7b:dd:1b:ec:fb:97:b7:00:5c:fb:25:d4: 29:68:4d:d9:c3:53:6c:44:84:70:e9:14:4c:5d:86: 98:54:db:55:b5:8f:f1:4a:31:2b:0b:1d:21:bb:11: c3:1d:5e:2f:8c:e5:e4:45:fe:fc:cc:69:1e:8e:d6: 22:40:58:a1:54:d2:6d:8c:de:ec:c0:f5:7a:37:af: db:1b:60:d4:d5:9f:33:92:18:6a:38:ce:c1:35:4c: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CA:86:1D:15:48:EC:90:CC:A5:FA:3B:DF:2C:3E:3F:85:8A:EB:AF X509v3 Authority Key Identifier: keyid:AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f4:af:2b:a1:27:ca:2d:c5:e9:79:dc:a1:66:f9:8e:19:b7: ff:48:44:07:9f:6e:2e:f8:c0:b8:de:d3:a5:9c:39:1c:2e:d2: 25:d5:67:5a:82:81:9b:97:c3:9e:77:0d:1b:e2:c2:d1:de:60: 29:50:ec:8e:7a:24:a4:7d:9a:70:68:45:12:5a:89:c1:44:3e: b2:df:64:5c:13:d8:b3:8e:4f:04:df:99:fa:ae:29:a3:f1:7e: 6f:6a:0c:95:b6:d3:70:c3:95:0e:00:36:d5:d0:a6:83:0d:dd: 1c:e3:16:c8:bb:79:b9:d8:65:52:a9:e7:43:5a:3e:57:3c:4d: dc:32:4a:88:3c:c7:29:e8:b1:a5:0b:d0:7c:9f:b3:ef:ea:32: d9:1a:2f:06:45:4b:a9:c4:78:fa:6a:c6:97:23:c1:6f:e9:34: 0b:d0:93:80:f6:c5:6f:30:f6:14:42:82:50:0d:cd:7a:60:04: 18:9d:2f:52:6c:8c:f6:25:bf:87:fb:b7:c4:21:92:51:45:a8: 1a:d4:5d:97:d3:ff:b0:cb:0d:6c:5e:3a:38:42:0a:5e:0a:aa: 3f:73:27:dd:67:86:a2:1d:70:9a:d9:78:f1:5c:c9:1e:c3:bd: d8:ee:11:b7:e9:08:95:53:bd:ee:52:92:ba:28:af:eb:a6:46: 64:88:7d:2c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTeFFmnNO6QI3HjWoBp5s1MGW7ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFGODFBNkU3OUNGRjBCMUM0RUVGQkMzMkNGRDNCMzE0 NEE1MTA0QzAeFw0yNTA3MDMwODE0NTJaFw0yNTA3MDgwNjI3NTJaMDMxMTAvBgNV BAMTKEJGQ0E4NjFEMTU0OEVDOTBDQ0E1RkEzQkRGMkMzRTNGODU4QUVCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYSdklro8qViAZR3WVWFIv9KO nPWpXxpqmPzgmPLVjewKdqwkUv6mHFg4cSbnmzmF5ej9OmzvwtHQ6hlzUeBRF7VN o5jf+hnduCSF4BEskPSrQtpdB1uWHJW+bQTuE4Sksbs8sWkBiMVMghwlQUh7QAwv PZRRXji7cOdTvRDdRGozw5eB1FKcKP2kc7H+h7WkG5z4khupfrDYgIt8mIeBve11 7f+6sXvdG+z7l7cAXPsl1CloTdnDU2xEhHDpFExdhphU21W1j/FKMSsLHSG7EcMd Xi+M5eRF/vzMaR6O1iJAWKFU0m2M3uzA9Xo3r9sbYNTVnzOSGGo4zsE1TJ6PAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUv8qGHRVI7JDMpfo73yw+P4WK668wHwYDVR0j BBgwFoAUqvgabnnP8LHE7vvDLP07MUSlEEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEUyMzk4RTIxNEI4MDZFRDVGNkJFQUY5QzBGRDU4NjU1 NjM3NTk1MzFEODIwQjQ2NzFGNEE3RUY2NDQzOEQ2LzAvQUFGODFBNkU3OUNGRjBC MUM0RUVGQkMzMkNGRDNCMzE0NEE1MTA0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUY4MUE2RTc5Q0ZGMEIxQzRF RUZCQzMyQ0ZEM0IzMTQ0QTUxMDRDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhFMjM5OEUyMTRCODA2RUQ1RjZCRUFGOUMwRkQ1ODY1NTYzNzU5NTMx RDgyMEI0NjcxRjRBN0VGNjQ0MzhENi8wL0FBRjgxQTZFNzlDRkYwQjFDNEVFRkJD MzJDRkQzQjMxNDRBNTEwNEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBk9K8roSfKLcXpedyhZvmOGbf/ SEQHn24u+MC43tOlnDkcLtIl1WdagoGbl8Oedw0b4sLR3mApUOyOeiSkfZpwaEUS WonBRD6y32RcE9izjk8E35n6rimj8X5vagyVttNww5UOADbV0KaDDd0c4xbIu3m5 2GVSqedDWj5XPE3cMkqIPMcp6LGlC9B8n7Pv6jLZGi8GRUupxHj6asaXI8Fv6TQL 0JOA9sVvMPYUQoJQDc16YAQYnS9SbIz2Jb+H+7fEIZJRRaga1F2X0/+wyw1sXjo4 QgpeCqo/cyfdZ4aiHXCa2XjxXMkew73Y7hG36QiVU73uUpK6KK/rpkZkiH0s -----END CERTIFICATE-----Generated at Fri Jul 4 05:36:10 2025 by rpki-client