$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft File: 2AA949233251849B5F79085FA81406E588FF36E5.mft (raw, json) Hash identifier: ND1fU5ukXlqwmJuBiTvxRTYtz5E8bWka0wnNnBb4SUk= Subject key identifier: 4A:15:03:6C:2A:F3:EB:AC:EC:B9:C3:94:F4:72:78:92:01:53:64:CF Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 Certificate issuer: /CN=2AA949233251849B5F79085FA81406E588FF36E5 Certificate serial: 1AEF6B6983199E9400AAE9BFA838897A88486E04 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft Manifest number: 0128 Signing time: Sun 19 Oct 2025 06:14:40 +0000 Manifest this update: Sun 19 Oct 2025 06:09:40 +0000 Manifest next update: Thu 23 Oct 2025 21:12:40 +0000 Files and hashes: 1: 34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (hash: 0wG8UAY7ipzPPU6H/Qn8ayAErVsbpJ3ILXn1Xxmg05c=) 2: 323830333a333736303a3a2f33322d3332203d3e20323639383238.roa (hash: YCM1oXKAOqvvmUFyPpzwfn80NaYV4PR/y9/a34CTUWE=) 3: 2AA949233251849B5F79085FA81406E588FF36E5.crl (hash: cF6vNNIzhnZOcxoOVdHOs7JUS6OqPvS7ntg5b+Mhyeg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 21:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ef:6b:69:83:19:9e:94:00:aa:e9:bf:a8:38:89:7a:88:48:6e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5 Validity Not Before: Oct 19 06:09:40 2025 GMT Not After : Oct 23 21:12:40 2025 GMT Subject: CN=4A15036C2AF3EBACECB9C394F4727892015364CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:c5:ec:14:34:f0:2d:3f:88:a4:50:37:49: df:00:85:56:a2:a7:42:2c:2b:33:09:1d:f2:6c:c4: c8:72:df:70:c8:cf:5a:22:d6:2b:b6:6c:3d:ae:ea: 4e:b9:b6:b0:9d:e7:0e:a6:92:51:2a:7b:e5:a1:e9: 47:c7:14:78:94:8f:48:c5:39:07:57:7e:d9:e5:8d: cf:59:40:08:9f:10:05:3c:20:7a:21:81:74:f2:10: 50:87:ac:f8:7e:ae:a6:a5:0b:ea:b1:f1:5a:3b:ac: de:19:83:77:e9:5e:6f:11:ed:ee:b2:fb:27:de:5c: ea:76:fb:07:c4:34:c9:b9:ca:f7:84:9f:6b:54:c7: ae:52:a5:ff:bc:6e:77:3a:ce:cd:43:e0:79:a4:5e: bd:49:8f:ff:72:b6:d0:3c:65:24:15:4e:eb:dd:ac: 78:01:4c:17:ae:ec:28:8c:2c:4a:5c:39:71:b7:68: ae:23:2f:89:c1:f7:9e:26:97:55:83:f8:41:4f:06: 76:5c:1b:45:17:d1:83:18:c4:14:09:cc:31:be:0b: 8e:b7:9b:35:5b:f2:3a:ea:4a:fc:0d:c5:3d:5b:0b: 07:0a:7a:68:67:8c:20:8e:f6:2d:00:8d:37:6e:b5: f0:ce:6f:88:5e:9b:0c:1d:a9:f6:ed:55:5d:c0:92: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:15:03:6C:2A:F3:EB:AC:EC:B9:C3:94:F4:72:78:92:01:53:64:CF X509v3 Authority Key Identifier: keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:db:87:64:f6:75:68:37:e4:03:9b:d7:29:38:4e:e5:dd:f5: 20:96:16:95:44:2b:9e:3d:82:f2:51:46:a6:9d:ad:d9:16:06: 05:35:a6:58:8d:e0:a4:7f:8b:70:67:c8:aa:de:a8:37:f4:05: 32:ab:49:7a:cf:62:fb:e7:3a:c0:dd:1f:d5:21:46:ca:7a:ae: 70:a8:30:7e:a1:e8:ca:49:08:89:86:79:88:aa:d6:dd:01:a5: ae:9f:05:ce:30:1d:a1:ef:25:ed:1c:8b:d1:db:66:55:3f:0b: 04:f7:57:4e:a9:08:7d:3c:dc:6a:2a:67:f2:56:7b:23:89:d1: 19:19:e6:97:c3:a5:55:b9:0f:2a:f1:38:04:cf:1e:7b:46:a4: bd:83:91:6c:4f:ef:0b:63:5c:0a:b2:1d:fe:2d:77:c9:20:22: cd:3a:82:b4:55:59:53:42:8a:9e:fb:bc:04:57:ca:29:94:a4: f4:cb:01:ff:a0:97:75:00:5d:96:1d:64:af:a8:5c:f3:97:73: 01:96:a7:3d:93:d4:d9:e9:6b:05:9d:f4:dd:f7:05:a2:d6:e4: ee:93:85:b3:85:4d:91:78:f7:ac:56:38:80:ba:ed:63:fa:17: c5:41:11:70:48:45:f4:67:45:4f:b3:92:2b:a3:52:5a:cb:23: cd:69:41:57 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGu9raYMZnpQAqum/qDiJeohIbgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBOTQ5MjMzMjUxODQ5QjVGNzkwODVGQTgxNDA2RTU4 OEZGMzZFNTAeFw0yNTEwMTkwNjA5NDBaFw0yNTEwMjMyMTEyNDBaMDMxMTAvBgNV BAMTKDRBMTUwMzZDMkFGM0VCQUNFQ0I5QzM5NEY0NzI3ODkyMDE1MzY0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrccXsFDTwLT+IpFA3Sd8AhVai p0IsKzMJHfJsxMhy33DIz1oi1iu2bD2u6k65trCd5w6mklEqe+Wh6UfHFHiUj0jF OQdXftnljc9ZQAifEAU8IHohgXTyEFCHrPh+rqalC+qx8Vo7rN4Zg3fpXm8R7e6y +yfeXOp2+wfENMm5yveEn2tUx65Spf+8bnc6zs1D4HmkXr1Jj/9yttA8ZSQVTuvd rHgBTBeu7CiMLEpcOXG3aK4jL4nB954ml1WD+EFPBnZcG0UX0YMYxBQJzDG+C463 mzVb8jrqSvwNxT1bCwcKemhnjCCO9i0AjTdutfDOb4hemwwdqfbtVV3AksodAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUShUDbCrz66zsucOU9HJ4kgFTZM8wHwYDVR0j BBgwFoAUKqlJIzJRhJtfeQhfqBQG5Yj/NuUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zOTFGNEMxRkNCREZDOTE4Q0ZCQzgxQTU4Q0JFNDQ2QTBE OTJEM0Q2M0UxMEM4NUREQkIzQ0Y2RUY1RjQ4RkJDLzAvMkFBOTQ5MjMzMjUxODQ5 QjVGNzkwODVGQTgxNDA2RTU4OEZGMzZFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUE5NDkyMzMyNTE4NDlCNUY3 OTA4NUZBODE0MDZFNTg4RkYzNkU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzkxRjRDMUZDQkRGQzkxOENGQkM4MUE1OENCRTQ0NkEwRDkyRDNENjNF MTBDODVEREJCM0NGNkVGNUY0OEZCQy8wLzJBQTk0OTIzMzI1MTg0OUI1Rjc5MDg1 RkE4MTQwNkU1ODhGRjM2RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCT24dk9nVoN+QDm9cpOE7l3fUg lhaVRCuePYLyUUamna3ZFgYFNaZYjeCkf4twZ8iq3qg39AUyq0l6z2L75zrA3R/V IUbKeq5wqDB+oejKSQiJhnmIqtbdAaWunwXOMB2h7yXtHIvR22ZVPwsE91dOqQh9 PNxqKmfyVnsjidEZGeaXw6VVuQ8q8TgEzx57RqS9g5FsT+8LY1wKsh3+LXfJICLN OoK0VVlTQoqe+7wEV8oplKT0ywH/oJd1AF2WHWSvqFzzl3MBlqc9k9TZ6WsFnfTd 9wWi1uTuk4WzhU2RePesVjiAuu1j+hfFQRFwSEX0Z0VPs5Iro1JayyPNaUFX -----END CERTIFICATE-----Generated at Mon Oct 20 00:36:05 2025 by rpki-client