$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft File: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft (raw, json) Hash identifier: vyGlQ3UVJHj/Q13J50M8raSPOAOCvIiqghP3OD1boq4= Subject key identifier: 7A:3E:E8:A7:34:B2:CF:D3:5A:A8:EF:65:81:48:21:FD:B7:38:E1:7A Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Certificate serial: 55967781F0B41A53C9532B769E012CA64AA68D39 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft Manifest number: F7 Signing time: Fri 04 Jul 2025 09:04:12 +0000 Manifest this update: Fri 04 Jul 2025 08:59:12 +0000 Manifest next update: Wed 09 Jul 2025 20:15:12 +0000 Files and hashes: 1: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl (hash: xefTE+3YaGUBmalRdytDmF2lhwNaWn1/szc0rjwY3p4=) 2: 3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (hash: M4+B8dKZV5DI02H1wVqkAPnxV4BALeFj/B9STyRTB2k=) 3: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (hash: yvSEv5Xfx29WmYskueRJZaLzBlNmMLZ3piPORyqzEPc=) 4: 3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (hash: w3Yy4sRo0gzJGcEnOCGmEHKKiZdLPgWGX410//7WEO4=) 5: 3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa (hash: +3H2vQacPst44179H9ozi8ZNmuf3gbFsNRH1xkt2BXU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:96:77:81:f0:b4:1a:53:c9:53:2b:76:9e:01:2c:a6:4a:a6:8d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Validity Not Before: Jul 4 08:59:12 2025 GMT Not After : Jul 9 20:15:12 2025 GMT Subject: CN=7A3EE8A734B2CFD35AA8EF65814821FDB738E17A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:7d:c9:9e:4b:a8:f1:a1:25:dd:5c:83:b9: 7d:fc:eb:e0:ca:83:48:17:95:17:6c:f6:47:7a:a6: 2b:37:9b:7c:29:33:d5:05:f9:7a:45:00:be:90:f8: 6b:66:a9:13:f1:e0:e4:3f:a8:8f:6a:6c:47:ee:92: 31:f1:08:12:90:17:c6:e2:6c:cd:6c:b3:50:db:61: f0:d1:da:fd:3e:a4:e2:e2:81:27:7d:c9:06:57:cd: 61:19:74:c9:17:2c:1a:b3:95:6d:5c:6b:d7:05:e2: 00:e9:23:d7:45:d2:df:50:cd:ab:03:fd:4a:60:a9: 40:9c:d7:97:f0:f2:fa:55:2b:2c:13:14:5d:fc:03: d2:ff:7c:e2:27:80:4b:70:af:3f:f5:92:15:cf:9a: 04:d5:da:74:5d:c2:56:dc:b0:8a:5f:d2:51:90:80: 8c:f4:00:6e:b0:c9:3e:ff:41:03:f3:4b:b6:3a:cd: af:1b:b8:c7:00:77:ff:ad:b6:0c:50:01:6d:82:9a: 24:5c:14:ac:0f:51:e3:da:a9:8c:5b:23:8b:cf:2b: 64:ae:64:06:95:1d:bb:17:e7:a4:5c:e2:30:fc:a1: e7:7a:2c:0d:1e:6a:6c:80:01:2e:66:3e:e2:87:d8: 57:07:4a:d8:8c:a5:cd:1e:3d:7b:c6:b9:be:00:23: 7c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3E:E8:A7:34:B2:CF:D3:5A:A8:EF:65:81:48:21:FD:B7:38:E1:7A X509v3 Authority Key Identifier: keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:61:0a:b2:39:11:dc:9a:13:d2:3f:1c:8e:b9:b6:67:dd:0b: 8f:26:1d:87:43:30:f9:16:05:6d:dd:c4:5e:12:cb:dc:1f:b6: d1:de:d0:7f:c9:6c:6a:73:aa:2d:88:36:e4:22:05:96:cd:ad: 70:21:e0:b8:9f:bd:17:d3:69:22:22:34:b6:81:5a:ec:f3:c6: 61:ff:9e:1d:32:2e:6f:fe:0c:7f:c4:b5:90:25:0f:76:62:11: 7b:cb:31:f6:f4:2f:cd:66:cd:b4:b4:e6:b2:8f:a2:0b:e0:78: 91:c6:43:c6:b0:b6:dc:91:83:54:b0:5c:c7:f3:ab:5b:7e:7c: b3:ac:44:5f:15:7b:38:1b:89:d3:91:94:99:fe:09:1f:f3:e3: 60:52:af:13:6e:a6:7a:ff:d2:85:ba:25:b4:ca:f2:db:36:b4: 51:d1:ef:30:63:da:6d:cc:47:39:33:37:e7:dd:14:42:52:93: df:db:9b:dd:44:32:08:4d:c2:1e:1f:70:37:5e:5e:67:0f:72: 25:de:b6:19:9b:33:a7:7d:4e:67:9a:11:7d:34:b6:26:9f:13: 90:86:03:1f:69:42:a6:0b:34:af:bb:8c:c9:17:36:17:23:39: 7c:b5:cc:9f:14:f2:90:e9:5f:28:76:90:07:27:7f:e5:d9:0e: da:c3:b2:9e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVZZ3gfC0GlPJUyt2ngEspkqmjTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyMUI4MUEzNUJBRjdFNUYxMEUwQzhBQkUxNjQ2Njc0 NUMzN0JGODAeFw0yNTA3MDQwODU5MTJaFw0yNTA3MDkyMDE1MTJaMDMxMTAvBgNV BAMTKDdBM0VFOEE3MzRCMkNGRDM1QUE4RUY2NTgxNDgyMUZEQjczOEUxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5H3Jnkuo8aEl3VyDuX386+DK g0gXlRds9kd6pis3m3wpM9UF+XpFAL6Q+GtmqRPx4OQ/qI9qbEfukjHxCBKQF8bi bM1ss1DbYfDR2v0+pOLigSd9yQZXzWEZdMkXLBqzlW1ca9cF4gDpI9dF0t9QzasD /UpgqUCc15fw8vpVKywTFF38A9L/fOIngEtwrz/1khXPmgTV2nRdwlbcsIpf0lGQ gIz0AG6wyT7/QQPzS7Y6za8buMcAd/+ttgxQAW2CmiRcFKwPUePaqYxbI4vPK2Su ZAaVHbsX56Rc4jD8oed6LA0eamyAAS5mPuKH2FcHStiMpc0ePXvGub4AI3wvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUej7opzSyz9NaqO9lgUgh/bc44XowHwYDVR0j BBgwFoAUqiG4GjW69+XxDgyKvhZGZ0XDe/gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MjQ0MjRFODUyNDUwMDgyQjlCNTQzODFEM0E5NEE4MUQ1 OUNENEU2NjNEREE4NUE0MkM5QjA1MTc3RDc4M0UyLzAvQUEyMUI4MUEzNUJBRjdF NUYxMEUwQzhBQkUxNjQ2Njc0NUMzN0JGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIxQjgxQTM1QkFGN0U1RjEw RTBDOEFCRTE2NDY2NzQ1QzM3QkY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzI0NDI0RTg1MjQ1MDA4MkI5QjU0MzgxRDNBOTRBODFENTlDRDRFNjYz RERBODVBNDJDOUIwNTE3N0Q3ODNFMi8wL0FBMjFCODFBMzVCQUY3RTVGMTBFMEM4 QUJFMTY0NjY3NDVDMzdCRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtYQqyORHcmhPSPxyOubZn3QuP Jh2HQzD5FgVt3cReEsvcH7bR3tB/yWxqc6otiDbkIgWWza1wIeC4n70X02kiIjS2 gVrs88Zh/54dMi5v/gx/xLWQJQ92YhF7yzH29C/NZs20tOayj6IL4HiRxkPGsLbc kYNUsFzH86tbfnyzrERfFXs4G4nTkZSZ/gkf8+NgUq8TbqZ6/9KFuiW0yvLbNrRR 0e8wY9ptzEc5Mzfn3RRCUpPf25vdRDIITcIeH3A3Xl5nD3Il3rYZmzOnfU5nmhF9 NLYmnxOQhgMfaUKmCzSvu4zJFzYXIzl8tcyfFPKQ6V8odpAHJ3/l2Q7aw7Ke -----END CERTIFICATE-----Generated at Fri Jul 4 11:40:31 2025 by rpki-client