$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft File: 2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft (raw, json) Hash identifier: /XF92JxrcTUDDP9qwlhBNSNk85p/hPs8ve6BOMqkTew= Subject key identifier: 6E:D9:A5:CB:A4:24:2E:79:DF:80:F0:63:0D:33:BB:66:9C:18:1A:01 Authority key identifier: 2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78 Certificate issuer: /CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078 Certificate serial: 661FD70A9610B8F4E25355B4AB265123C4FF4057 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft Manifest number: 012F Signing time: Sat 18 Oct 2025 10:52:04 +0000 Manifest this update: Sat 18 Oct 2025 10:47:04 +0000 Manifest next update: Fri 24 Oct 2025 02:48:04 +0000 Files and hashes: 1: 2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl (hash: 8ihXhCC3uZ5FYBLl2Ad5JaV5vGIk90TGcxx7mIcAetk=) 2: 323830333a393439303a3a2f33322d3438203d3e20323732383233.roa (hash: 0oKhwsbvlRw+epUBcLEJDUcYeM+rU2io5fVuH6LDEi4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1f:d7:0a:96:10:b8:f4:e2:53:55:b4:ab:26:51:23:c4:ff:40:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078 Validity Not Before: Oct 18 10:47:04 2025 GMT Not After : Oct 24 02:48:04 2025 GMT Subject: CN=6ED9A5CBA4242E79DF80F0630D33BB669C181A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:55:f2:ef:1c:7d:79:c9:c7:bf:2a:11:e5:94: 50:c1:ac:28:d2:3f:82:a2:44:de:28:ab:3c:0a:6b: c7:8b:30:99:dc:d1:e9:c0:11:f7:6d:b2:01:4d:f7: 6f:dc:77:46:0d:38:cc:cd:2a:c3:40:2e:2a:64:43: 68:75:6f:c8:30:69:9d:41:fe:84:d5:9f:d9:ce:fb: 63:12:bb:2f:ce:2a:a5:2a:19:6c:f1:ba:59:d1:47: 7f:16:4f:73:ce:48:1c:45:8b:5b:60:48:6f:0e:59: d0:19:c3:7e:92:b3:82:16:e3:87:3d:6b:71:86:14: 90:e1:c0:17:76:5b:9d:ca:7a:8c:f2:e7:47:8a:98: a9:ae:24:97:33:c7:34:de:46:01:f2:24:dd:86:04: 02:10:1e:6c:8e:bb:6c:f5:0a:83:71:c3:56:66:57: 50:63:2d:9d:fa:ae:dc:af:a6:b6:b6:cd:29:21:81: d8:67:6d:6f:62:0d:6a:0e:71:35:73:a5:46:20:1e: a8:9c:6b:72:b6:c3:d7:7e:1a:f4:7b:28:dc:2c:07: 1c:f2:17:77:ab:ae:dc:47:2d:d6:ae:2f:04:87:ec: a8:31:73:bb:24:44:73:d3:eb:19:df:ee:cc:37:5d: 63:c7:9b:c8:82:cd:d9:91:28:dc:d9:b5:9c:f7:74: 56:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D9:A5:CB:A4:24:2E:79:DF:80:F0:63:0D:33:BB:66:9C:18:1A:01 X509v3 Authority Key Identifier: keyid:2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3f:18:d4:f3:64:d5:e9:53:47:7a:f4:b1:de:36:a7:64:69: 46:00:2d:c3:2a:4f:49:99:6f:bf:3a:df:a1:06:5e:53:d9:54: e1:d4:ae:6c:fb:8f:f7:e4:e0:fc:6a:9b:45:28:07:63:be:9b: 4e:09:b7:cf:b5:43:4e:6f:95:55:b1:e8:f9:fd:76:dc:24:76: e3:f5:29:6d:7e:99:ad:b4:b0:e3:29:be:29:24:be:66:fa:c7: 42:a5:83:0a:bb:36:54:93:2e:ee:73:f4:10:25:a2:3b:f5:19: 79:a5:0a:f4:13:6b:de:07:4f:5f:44:5a:bc:9d:54:0a:3a:80: 04:89:88:fc:f9:36:25:30:a0:45:ef:02:b2:33:44:70:f8:aa: 14:df:04:fe:87:04:f0:83:38:f5:1b:59:d1:1e:13:62:88:c9: 90:3f:81:04:1d:bf:bb:ab:4a:8c:5c:e2:35:79:d4:ac:19:0b: ee:87:f2:34:11:52:b9:bd:12:fc:df:69:31:bf:bf:24:9e:c7: c3:99:fd:ee:0b:88:7c:6c:17:96:cb:04:58:2e:83:95:fd:4a: 32:e6:65:8f:76:53:71:18:b0:18:35:28:f1:d6:c1:db:e1:6e: e9:6d:03:56:af:de:b6:be:13:1c:90:ac:38:98:67:a9:33:ba: 71:f7:64:ab -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZh/XCpYQuPTiU1W0qyZRI8T/QFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGRjE0MkFFNzhBN0Q5NjVGOEUyMjdERkFBNjU5RTJG RUJERTA3ODAeFw0yNTEwMTgxMDQ3MDRaFw0yNTEwMjQwMjQ4MDRaMDMxMTAvBgNV BAMTKDZFRDlBNUNCQTQyNDJFNzlERjgwRjA2MzBEMzNCQjY2OUMxODFBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVfLvHH15yce/KhHllFDBrCjS P4KiRN4oqzwKa8eLMJnc0enAEfdtsgFN92/cd0YNOMzNKsNALipkQ2h1b8gwaZ1B /oTVn9nO+2MSuy/OKqUqGWzxulnRR38WT3POSBxFi1tgSG8OWdAZw36Ss4IW44c9 a3GGFJDhwBd2W53Keozy50eKmKmuJJczxzTeRgHyJN2GBAIQHmyOu2z1CoNxw1Zm V1BjLZ36rtyvpra2zSkhgdhnbW9iDWoOcTVzpUYgHqica3K2w9d+GvR7KNwsBxzy F3errtxHLdauLwSH7Kgxc7skRHPT6xnf7sw3XWPHm8iCzdmRKNzZtZz3dFYvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUbtmly6QkLnnfgPBjDTO7ZpwYGgEwHwYDVR0j BBgwFoAUKv8UKueKfZZfjiJ9+qZZ4v694HgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MjQ0RjY4MzVFMjJCQTI2OTk5MjgyMDNCRkI4M0FEQjVE MjQ0QTA5OUY1MzUyOEI1Rjc4RDIyOEQ2OTU5MzczLzAvMkFGRjE0MkFFNzhBN0Q5 NjVGOEUyMjdERkFBNjU5RTJGRUJERTA3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUZGMTQyQUU3OEE3RDk2NUY4 RTIyN0RGQUE2NTlFMkZFQkRFMDc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDI0NEY2ODM1RTIyQkEyNjk5OTI4MjAzQkZCODNBREI1RDI0NEEwOTlG NTM1MjhCNUY3OEQyMjhENjk1OTM3My8wLzJBRkYxNDJBRTc4QTdEOTY1RjhFMjI3 REZBQTY1OUUyRkVCREUwNzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7PxjU82TV6VNHevSx3janZGlG AC3DKk9JmW+/Ot+hBl5T2VTh1K5s+4/35OD8aptFKAdjvptOCbfPtUNOb5VVsej5 /XbcJHbj9SltfpmttLDjKb4pJL5m+sdCpYMKuzZUky7uc/QQJaI79Rl5pQr0E2ve B09fRFq8nVQKOoAEiYj8+TYlMKBF7wKyM0Rw+KoU3wT+hwTwgzj1G1nRHhNiiMmQ P4EEHb+7q0qMXOI1edSsGQvuh/I0EVK5vRL832kxv78knsfDmf3uC4h8bBeWywRY LoOV/Uoy5mWPdlNxGLAYNSjx1sHb4W7pbQNWr962vhMckKw4mGepM7px92Sr -----END CERTIFICATE-----Generated at Mon Oct 20 17:37:58 2025 by rpki-client