$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft File: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft (raw, json) Hash identifier: WoN07EsEAC96HBvH2OXxOzWRQlEnGkrF5hDLHlUjvzY= Subject key identifier: 8B:A9:A5:12:F2:90:70:05:3A:B6:E5:3D:08:2C:4A:99:98:D0:9F:42 Authority key identifier: AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C Certificate issuer: /CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C Certificate serial: 70CC735EBAB16F2E2521D3D28EA8C59F4915CC11 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft Manifest number: 0174 Signing time: Wed 25 Mar 2026 08:47:50 +0000 Manifest this update: Wed 25 Mar 2026 08:42:50 +0000 Manifest next update: Mon 30 Mar 2026 14:54:50 +0000 Files and hashes: 1: 323830333a346135303a3a2f33322d3438203d3e20323733313736.roa (hash: UUBAOvgOUgq/NLYCC7QYqDjUg5uQSFav0HyuyzhrMSs=) 2: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl (hash: TkpvYGrAiXNzl4xWBvhwc+aVBUdvEA9Ff/DLi3S58LI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 14:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cc:73:5e:ba:b1:6f:2e:25:21:d3:d2:8e:a8:c5:9f:49:15:cc:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C Validity Not Before: Mar 25 08:42:50 2026 GMT Not After : Mar 30 14:54:50 2026 GMT Subject: CN=8BA9A512F29070053AB6E53D082C4A9998D09F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:e6:c7:7c:7a:5e:e8:30:90:c3:5e:f9:b7: 51:53:27:45:fd:c0:66:d3:41:3c:a7:3f:62:b6:d5: 2f:c6:c5:22:f7:93:db:42:4f:b8:90:3f:83:65:57: f7:6e:e3:3f:86:74:a7:df:f3:37:71:59:ee:ca:b5: 52:d8:49:10:90:80:01:9e:48:79:ea:b4:0b:e4:d1: d9:e7:f3:2d:30:1d:0f:64:ac:54:c9:ad:c9:d9:1e: 0f:92:21:10:b4:dc:3f:6c:be:06:18:09:d4:8d:80: f7:bc:c4:8e:5e:f7:b1:89:82:b9:fc:7c:88:76:ba: 64:e6:c2:9e:f3:1c:d9:2b:f5:ac:93:8e:2d:a3:eb: 34:f7:2f:19:10:6c:48:c7:8c:54:43:f8:cc:81:cf: 91:ee:4d:59:95:63:77:70:ec:1a:b8:5a:79:18:50: f4:ef:57:1f:c1:01:be:65:29:1e:64:6e:93:33:aa: 99:59:be:f5:b4:3a:b3:ab:52:2e:65:58:54:57:f3: 01:00:d3:3c:15:c9:fe:30:f6:b2:17:79:71:f6:25: 18:7d:53:f1:c8:79:f9:a3:1c:16:71:56:bd:a7:cd: 23:d6:88:84:a0:de:88:45:3f:ec:bc:8f:0b:20:cc: 2c:53:b3:fa:85:41:ac:3f:62:ad:09:23:49:cf:b2: a1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A9:A5:12:F2:90:70:05:3A:B6:E5:3D:08:2C:4A:99:98:D0:9F:42 X509v3 Authority Key Identifier: keyid:AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c3:09:5f:b1:af:e4:7d:ba:da:d3:5a:a2:a8:78:c3:66:f0: 50:92:50:26:67:7e:cc:aa:b6:b9:31:97:8d:b3:f6:7b:f1:8b: e0:7f:1c:b7:0d:2f:e5:1b:89:d8:ef:03:90:fd:72:ef:a9:26: c4:6d:ab:0d:ca:87:4f:d5:4b:19:18:20:04:b4:4e:d6:c7:6e: a7:c5:db:d2:a2:42:f7:f9:47:3a:86:df:9e:6c:41:f8:a3:c7: 85:0e:60:9f:d1:a6:5d:67:49:9a:29:27:52:2f:ec:a5:fa:59: 5a:20:c1:bd:c4:10:5e:52:8f:5e:c0:71:60:05:ee:aa:6a:1a: 76:e1:c5:ff:77:94:00:3e:1a:40:81:3e:4c:4e:f8:fb:3d:2c: f0:3d:64:c6:e7:f3:7a:0e:73:68:b9:80:66:2a:9e:cb:b3:b8: 2a:7b:9f:ca:c9:72:4b:c7:26:c5:cc:3b:e3:a2:11:74:60:b5: 75:d8:34:45:e1:11:de:22:af:29:01:98:50:56:f6:80:69:8e: 7e:df:29:d4:01:a6:d9:a2:97:48:e1:2f:a2:bd:b7:7e:3a:d4: 41:54:e9:f3:79:1b:a6:1b:2a:ce:b8:14:c3:41:79:d0:31:d8: 84:d8:5a:2f:d5:22:e3:61:46:65:28:a9:37:90:91:9b:60:13: 42:6e:58:d6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcMxzXrqxby4lIdPSjqjFn0kVzBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFGODFBNkU3OUNGRjBCMUM0RUVGQkMzMkNGRDNCMzE0 NEE1MTA0QzAeFw0yNjAzMjUwODQyNTBaFw0yNjAzMzAxNDU0NTBaMDMxMTAvBgNV BAMTKDhCQTlBNTEyRjI5MDcwMDUzQUI2RTUzRDA4MkM0QTk5OThEMDlGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iebHfHpe6DCQw175t1FTJ0X9 wGbTQTynP2K21S/GxSL3k9tCT7iQP4NlV/du4z+GdKff8zdxWe7KtVLYSRCQgAGe SHnqtAvk0dnn8y0wHQ9krFTJrcnZHg+SIRC03D9svgYYCdSNgPe8xI5e97GJgrn8 fIh2umTmwp7zHNkr9ayTji2j6zT3LxkQbEjHjFRD+MyBz5HuTVmVY3dw7Bq4WnkY UPTvVx/BAb5lKR5kbpMzqplZvvW0OrOrUi5lWFRX8wEA0zwVyf4w9rIXeXH2JRh9 U/HIefmjHBZxVr2nzSPWiISg3ohFP+y8jwsgzCxTs/qFQaw/Yq0JI0nPsqG9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUi6mlEvKQcAU6tuU9CCxKmZjQn0IwHwYDVR0j BBgwFoAUqvgabnnP8LHE7vvDLP07MUSlEEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEUyMzk4RTIxNEI4MDZFRDVGNkJFQUY5QzBGRDU4NjU1 NjM3NTk1MzFEODIwQjQ2NzFGNEE3RUY2NDQzOEQ2LzAvQUFGODFBNkU3OUNGRjBC MUM0RUVGQkMzMkNGRDNCMzE0NEE1MTA0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUY4MUE2RTc5Q0ZGMEIxQzRF RUZCQzMyQ0ZEM0IzMTQ0QTUxMDRDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhFMjM5OEUyMTRCODA2RUQ1RjZCRUFGOUMwRkQ1ODY1NTYzNzU5NTMx RDgyMEI0NjcxRjRBN0VGNjQ0MzhENi8wL0FBRjgxQTZFNzlDRkYwQjFDNEVFRkJD MzJDRkQzQjMxNDRBNTEwNEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYwwlfsa/kfbra01qiqHjDZvBQ klAmZ37Mqra5MZeNs/Z78Yvgfxy3DS/lG4nY7wOQ/XLvqSbEbasNyodP1UsZGCAE tE7Wx26nxdvSokL3+Uc6ht+ebEH4o8eFDmCf0aZdZ0maKSdSL+yl+llaIMG9xBBe Uo9ewHFgBe6qahp24cX/d5QAPhpAgT5MTvj7PSzwPWTG5/N6DnNouYBmKp7Ls7gq e5/KyXJLxybFzDvjohF0YLV12DRF4RHeIq8pAZhQVvaAaY5+3ynUAabZopdI4S+i vbd+OtRBVOnzeRumGyrOuBTDQXnQMdiE2Fov1SLjYUZlKKk3kJGbYBNCbljW -----END CERTIFICATE-----Generated at Fri Mar 27 05:44:02 2026 by rpki-client