$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.mft File: AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.mft (raw, json) Hash identifier: CnBK+S5CHcyOZDWiNEVmlMXZPOSfmtajf6uQeGdrRHM= Subject key identifier: CD:4E:B5:93:61:F8:8E:6F:EA:7E:6A:86:72:51:17:B0:F5:ED:E6:62 Authority key identifier: AE:7F:1E:DD:64:F1:46:28:86:6E:F0:3B:A5:6A:3C:8D:93:91:4D:B1 Certificate issuer: /CN=AE7F1EDD64F14628866EF03BA56A3C8D93914DB1 Certificate serial: 69D2A27D06084414AA65695CA9760D0AD0D91DB9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.mft Manifest number: 012F Signing time: Sun 19 Oct 2025 20:59:29 +0000 Manifest this update: Sun 19 Oct 2025 20:54:29 +0000 Manifest next update: Sat 25 Oct 2025 02:52:29 +0000 Files and hashes: 1: 323830333a333865303a3a2f33322d3332203d3e20323639383830.roa (hash: +YBIWzZDkt7U25KSw6MpVtLaXcoJ4cMEKXQROYzRlGE=) 2: 34352e3139302e36342e302f32322d3232203d3e2033323537.roa (hash: kWrJqZVltJcx6OeWLImWyjMGM4zsufWk4mMbpT2IBXo=) 3: AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.crl (hash: 8MQ3zphdkPipCtQ7+rIwC0yxo0wSjNvQjdnu5IIrkpA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.crl rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d2:a2:7d:06:08:44:14:aa:65:69:5c:a9:76:0d:0a:d0:d9:1d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7F1EDD64F14628866EF03BA56A3C8D93914DB1 Validity Not Before: Oct 19 20:54:29 2025 GMT Not After : Oct 25 02:52:29 2025 GMT Subject: CN=CD4EB59361F88E6FEA7E6A86725117B0F5EDE662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:9f:20:fe:f2:4b:4a:cf:49:01:aa:94:c1: 57:f8:44:db:7e:b0:48:c2:8e:c1:a7:7b:ca:38:3d: e6:5f:a4:f8:86:31:8f:a1:af:97:a4:5a:8d:d5:79: bb:82:da:aa:d7:d8:a2:71:2e:c2:1a:59:8e:f8:4f: 15:97:65:50:d2:ba:69:f4:34:7f:ab:fc:8a:bc:88: 2a:c1:59:9d:02:4d:a7:6a:1e:01:58:1c:78:bc:34: 89:d7:eb:2e:db:89:03:68:88:60:43:d9:72:99:ad: 70:09:b0:99:6f:d6:60:cd:f8:1a:e4:58:73:87:70: dc:d3:c4:76:45:8c:ba:ae:c2:d1:16:c2:37:71:cc: 1d:f6:c0:f6:1b:82:5b:b6:6a:04:37:1c:3f:6d:84: 48:f4:84:26:23:59:ba:fe:26:47:2e:5f:67:7f:07: d4:9f:a9:b1:b7:3c:6d:67:fc:85:7e:e9:ee:16:f1: 4a:d2:58:c9:56:d8:b8:bd:64:be:db:43:16:3f:36: 86:32:ad:93:13:ef:89:c5:ef:8d:31:57:b0:b0:30: 75:4c:28:dd:43:44:c5:78:40:92:93:e3:81:2f:fc: 3f:83:6a:5d:90:81:c3:da:00:bf:5d:5a:af:e0:4e: df:11:c7:93:18:99:84:ee:30:de:4d:b1:29:6b:bb: 49:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4E:B5:93:61:F8:8E:6F:EA:7E:6A:86:72:51:17:B0:F5:ED:E6:62 X509v3 Authority Key Identifier: keyid:AE:7F:1E:DD:64:F1:46:28:86:6E:F0:3B:A5:6A:3C:8D:93:91:4D:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:5b:4c:65:7d:52:53:a9:44:45:e6:e1:ef:17:ce:c0:64:7f: 6f:16:ee:24:a8:76:09:48:1a:b0:7d:9a:ba:e2:80:0c:17:e5: 92:8b:78:e3:1f:8b:9c:a7:46:6a:3d:65:60:a3:0a:dc:7c:e4: 13:25:4c:79:cb:29:79:5e:f2:0f:3d:17:aa:33:25:f6:28:5b: 06:6c:93:4b:fc:f5:35:b6:8a:e7:f3:43:e1:71:10:70:a3:f1: 30:7d:0f:ce:0b:16:24:0a:0d:27:f2:be:da:f0:64:aa:37:15: af:d3:16:1e:9f:fe:45:b3:50:65:56:df:dd:55:55:6b:ca:ec: 2e:6f:80:1f:80:eb:9a:00:68:d1:1b:bf:0e:a2:da:91:4c:04: ce:45:51:68:b6:27:f0:79:c0:04:75:fd:69:a3:2a:2d:c9:a2: c4:b3:50:3d:af:50:2e:c3:2e:01:91:d9:08:45:35:c9:96:0a: a2:9e:a3:84:b7:bd:55:2a:72:e6:67:de:f5:83:46:dc:09:63: e4:74:6b:c6:2a:74:b9:33:90:30:d5:f7:07:79:67:ec:12:90: f9:eb:d3:45:89:e6:cb:02:75:a0:f5:7e:9a:a6:8d:ee:35:11: 26:90:6c:4c:9f:16:b1:08:c0:9e:b9:d7:8c:af:d7:af:5c:a8: 3b:91:b7:ed -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUadKifQYIRBSqZWlcqXYNCtDZHbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3RjFFREQ2NEYxNDYyODg2NkVGMDNCQTU2QTNDOEQ5 MzkxNERCMTAeFw0yNTEwMTkyMDU0MjlaFw0yNTEwMjUwMjUyMjlaMDMxMTAvBgNV BAMTKENENEVCNTkzNjFGODhFNkZFQTdFNkE4NjcyNTExN0IwRjVFREU2NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpE58g/vJLSs9JAaqUwVf4RNt+ sEjCjsGne8o4PeZfpPiGMY+hr5ekWo3VebuC2qrX2KJxLsIaWY74TxWXZVDSumn0 NH+r/Iq8iCrBWZ0CTadqHgFYHHi8NInX6y7biQNoiGBD2XKZrXAJsJlv1mDN+Brk WHOHcNzTxHZFjLquwtEWwjdxzB32wPYbglu2agQ3HD9thEj0hCYjWbr+JkcuX2d/ B9SfqbG3PG1n/IV+6e4W8UrSWMlW2Li9ZL7bQxY/NoYyrZMT74nF740xV7CwMHVM KN1DRMV4QJKT44Ev/D+Dal2QgcPaAL9dWq/gTt8Rx5MYmYTuMN5NsSlru0mtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzU61k2H4jm/qfmqGclEXsPXt5mIwHwYDVR0j BBgwFoAUrn8e3WTxRiiGbvA7pWo8jZORTbEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMkY4Q0MwNUExOUNCOTI4QkYxRkUxRjUzRUM0RkFFQThE Q0Y1QTFEQjYxRDQyQkZEMTk3MzMyNzRFQzk2Qzc4LzAvQUU3RjFFREQ2NEYxNDYy ODg2NkVGMDNCQTU2QTNDOEQ5MzkxNERCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRTdGMUVERDY0RjE0NjI4ODY2 RUYwM0JBNTZBM0M4RDkzOTE0REIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjJGOENDMDVBMTlDQjkyOEJGMUZFMUY1M0VDNEZBRUE4RENGNUExREI2 MUQ0MkJGRDE5NzMzMjc0RUM5NkM3OC8wL0FFN0YxRURENjRGMTQ2Mjg4NjZFRjAz QkE1NkEzQzhEOTM5MTREQjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCuW0xlfVJTqURF5uHvF87AZH9v Fu4kqHYJSBqwfZq64oAMF+WSi3jjH4ucp0ZqPWVgowrcfOQTJUx5yyl5XvIPPReq MyX2KFsGbJNL/PU1torn80PhcRBwo/EwfQ/OCxYkCg0n8r7a8GSqNxWv0xYen/5F s1BlVt/dVVVryuwub4AfgOuaAGjRG78OotqRTATORVFotifwecAEdf1poyotyaLE s1A9r1Auwy4BkdkIRTXJlgqinqOEt71VKnLmZ971g0bcCWPkdGvGKnS5M5Aw1fcH eWfsEpD569NFiebLAnWg9X6apo3uNREmkGxMnxaxCMCeudeMr9evXKg7kbft -----END CERTIFICATE-----Generated at Mon Oct 20 00:20:38 2025 by rpki-client