$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft File: AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft (raw, json) Hash identifier: /CQ0rCc0/NHuk9ebsKFQfphYMvFtcNspY500+heGlqE= Subject key identifier: 41:F8:EA:E2:C0:C8:B7:65:4A:62:B5:A9:12:8D:BF:30:67:A1:29:AF Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5 Certificate issuer: /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5 Certificate serial: 04BB172094C1C5D114C9DE914B5DB0B0FF9F2822 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft Manifest number: 0129 Signing time: Mon 20 Oct 2025 09:22:43 +0000 Manifest this update: Mon 20 Oct 2025 09:17:43 +0000 Manifest next update: Sat 25 Oct 2025 08:53:43 +0000 Files and hashes: 1: AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl (hash: UrjBb4lcbpzm++s0KwPNuVrPxhsjwa/YvL2FMYxOWAs=) 2: 323830303a6264303a3a2f33322d3332203d3e20323639373530.roa (hash: qhbwBZk9vlgCg+3+LKKtZAbyHyHvM9g+PWDyKgdskwA=) 3: 3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa (hash: 0k9qDpTmLE2nbCuOYGwHhpQG6NprgyA5OYqIcFmQjes=) 4: 3139302e382e3136382e302f32322d3234203d3e20323639373530.roa (hash: UtWNbpcaOx4dXnwvc8FOMHSTl5Fy6LtCAa7z45s6mPk=) 5: 3133382e3138362e3137362e302f32322d3234203d3e20323639373530.roa (hash: 1s0hS3AGn6xn/fvJMbGEY5uRH7RcEEHhCEJ/z0p1Vj8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:bb:17:20:94:c1:c5:d1:14:c9:de:91:4b:5d:b0:b0:ff:9f:28:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5 Validity Not Before: Oct 20 09:17:43 2025 GMT Not After : Oct 25 08:53:43 2025 GMT Subject: CN=41F8EAE2C0C8B7654A62B5A9128DBF3067A129AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:b9:e4:b4:e5:ab:5b:68:d7:11:3b:50:93: ee:86:45:25:aa:24:28:5a:98:dc:20:02:9f:f1:40: 18:5d:c2:3b:de:97:f7:e9:9f:f5:06:ef:85:86:26: c4:40:af:2d:11:f7:7b:ea:2a:4b:f8:11:b2:34:28: e6:40:b9:5a:d4:a6:5c:30:6a:10:3c:7f:c6:9f:23: 51:e2:fd:bf:a3:ae:6d:11:92:26:8f:89:6e:c7:9c: 30:4f:ad:27:5b:09:f3:a2:f1:83:3f:80:74:5e:81: ff:e5:82:26:94:e2:47:d5:99:dc:ca:4b:50:8e:ec: ec:48:0a:49:75:d8:c7:3a:80:26:b3:f6:3b:02:31: 06:9e:64:96:81:d7:99:49:fe:21:15:a6:17:a0:cb: ea:b5:de:40:50:8f:01:e7:4d:a0:e1:33:fb:79:24: 99:b9:92:7b:12:a4:41:b0:0c:44:3a:f2:17:7f:e7: 10:55:4e:c5:ea:44:fe:b1:85:5f:14:7f:6e:6e:99: 36:55:58:85:fd:d4:b7:15:d9:83:25:77:3b:1a:b0: a0:69:83:56:9c:b4:4a:de:c4:af:74:35:87:a8:66: 74:7f:b3:67:0a:43:ba:51:d5:96:c1:e7:81:10:91: 7e:cc:7d:aa:3c:63:99:3e:ad:65:0f:68:34:b0:cb: 88:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F8:EA:E2:C0:C8:B7:65:4A:62:B5:A9:12:8D:BF:30:67:A1:29:AF X509v3 Authority Key Identifier: keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:76:7b:a8:b6:66:5c:1a:a2:de:ce:d5:3b:1c:7f:e0:36:9a: 6b:ea:27:9b:a2:84:12:91:70:5c:b3:7d:9b:b6:a3:68:42:9c: 07:0a:35:af:c7:ee:21:fb:93:01:f9:fe:f6:3f:9b:d8:60:48: 64:a9:e2:21:bf:bd:18:8a:de:60:61:8b:6e:ea:0b:cf:30:d8: 02:b9:3b:50:a4:ce:66:16:97:e9:79:af:a3:d8:5b:f8:24:4b: a9:2d:69:dc:cc:de:d2:71:2b:65:4d:ee:dc:ea:7f:a2:0d:f1: 1f:20:6d:01:1f:37:1f:9f:c1:9e:fc:fc:9b:25:55:4e:71:9b: 64:54:03:96:55:1e:57:1f:5c:7b:c7:e5:dd:eb:34:56:fc:f7: 5a:11:12:72:52:09:29:39:f3:47:d0:90:ee:5e:68:58:28:77: c4:95:6d:8d:a0:0d:a7:8b:2d:e7:bc:56:2d:ff:ed:61:8c:c2: 3b:aa:c2:89:5c:29:35:cd:db:07:4b:bb:c3:cc:b1:3c:81:2e: 7c:dd:05:ef:6f:9a:ba:69:ff:58:6e:2c:67:f3:0e:fa:25:9a: ad:85:7b:7e:c2:92:b4:d8:35:24:a5:9f:cf:fd:0f:d6:71:bb: e2:8a:14:b9:5a:be:eb:8a:04:a7:da:e9:87:09:17:6e:cf:67: 1a:c7:01:a3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBLsXIJTBxdEUyd6RS12wsP+fKCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFRkEzMkU5QjA3N0YwMDQ1RjY2QThDNkIyRUU1ODIw RkFCMDRDNTAeFw0yNTEwMjAwOTE3NDNaFw0yNTEwMjUwODUzNDNaMDMxMTAvBgNV BAMTKDQxRjhFQUUyQzBDOEI3NjU0QTYyQjVBOTEyOERCRjMwNjdBMTI5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvabnktOWrW2jXETtQk+6GRSWq JChamNwgAp/xQBhdwjvel/fpn/UG74WGJsRAry0R93vqKkv4EbI0KOZAuVrUplww ahA8f8afI1Hi/b+jrm0RkiaPiW7HnDBPrSdbCfOi8YM/gHRegf/lgiaU4kfVmdzK S1CO7OxICkl12Mc6gCaz9jsCMQaeZJaB15lJ/iEVphegy+q13kBQjwHnTaDhM/t5 JJm5knsSpEGwDEQ68hd/5xBVTsXqRP6xhV8Uf25umTZVWIX91LcV2YMldzsasKBp g1actErexK90NYeoZnR/s2cKQ7pR1ZbB54EQkX7Mfao8Y5k+rWUPaDSwy4ifAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQfjq4sDIt2VKYrWpEo2/MGehKa8wHwYDVR0j BBgwFoAUqu+jLpsHfwBF9mqMay7lgg+rBMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80REJCRTFBNTZGRkQ2MUFGMURGMjZBM0Y0RjQwNzlCOEE1 NjExRUM1MTE1QkJEQzc5NTcwMURDMTQ0NTU4MkJFLzAvQUFFRkEzMkU5QjA3N0Yw MDQ1RjY2QThDNkIyRUU1ODIwRkFCMDRDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUVGQTMyRTlCMDc3RjAwNDVG NjZBOEM2QjJFRTU4MjBGQUIwNEM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNERCQkUxQTU2RkZENjFBRjFERjI2QTNGNEY0MDc5QjhBNTYxMUVDNTEx NUJCREM3OTU3MDFEQzE0NDU1ODJCRS8wL0FBRUZBMzJFOUIwNzdGMDA0NUY2NkE4 QzZCMkVFNTgyMEZBQjA0QzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5dnuotmZcGqLeztU7HH/gNppr 6iebooQSkXBcs32btqNoQpwHCjWvx+4h+5MB+f72P5vYYEhkqeIhv70Yit5gYYtu 6gvPMNgCuTtQpM5mFpfpea+j2Fv4JEupLWnczN7ScStlTe7c6n+iDfEfIG0BHzcf n8Ge/PybJVVOcZtkVAOWVR5XH1x7x+Xd6zRW/PdaERJyUgkpOfNH0JDuXmhYKHfE lW2NoA2niy3nvFYt/+1hjMI7qsKJXCk1zdsHS7vDzLE8gS583QXvb5q6af9Ybixn 8w76JZqthXt+wpK02DUkpZ/P/Q/WcbviihS5Wr7rigSn2umHCRduz2caxwGj -----END CERTIFICATE-----Generated at Tue Oct 21 00:11:22 2025 by rpki-client