$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft File: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft (raw, json) Hash identifier: sFAOUPimFgrldPqniFk8To+tBZz8IX2mkfTOP3nwhLE= Subject key identifier: 9B:87:A0:D9:6B:0A:EC:B4:60:48:68:CF:6F:88:8A:B2:06:C7:33:BE Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Certificate serial: 63EF309598384E7F2AE78D9693FB1A56E9D8FC41 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft Manifest number: 010F Signing time: Thu 21 Aug 2025 21:22:19 +0000 Manifest this update: Thu 21 Aug 2025 21:17:19 +0000 Manifest next update: Wed 27 Aug 2025 08:24:19 +0000 Files and hashes: 1: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (hash: yvSEv5Xfx29WmYskueRJZaLzBlNmMLZ3piPORyqzEPc=) 2: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl (hash: 6Mnm6ffWy/glhBJpCeP/FxVo8XJAuQX2WZ4kb6heHBE=) 3: 3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa (hash: +3H2vQacPst44179H9ozi8ZNmuf3gbFsNRH1xkt2BXU=) 4: 3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (hash: w3Yy4sRo0gzJGcEnOCGmEHKKiZdLPgWGX410//7WEO4=) 5: 3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (hash: M4+B8dKZV5DI02H1wVqkAPnxV4BALeFj/B9STyRTB2k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ef:30:95:98:38:4e:7f:2a:e7:8d:96:93:fb:1a:56:e9:d8:fc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Validity Not Before: Aug 21 21:17:19 2025 GMT Not After : Aug 27 08:24:19 2025 GMT Subject: CN=9B87A0D96B0AECB4604868CF6F888AB206C733BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:03:c0:d8:31:5b:4d:d5:4a:3c:91:05:f6: 6e:d1:0e:cb:96:e6:32:5f:29:ec:6e:a9:52:69:e6: 90:7f:48:3f:c5:e8:51:35:b8:2b:8e:8b:4d:e1:c1: 34:5f:b9:0d:b4:de:3b:89:48:3c:da:dd:e1:6d:4d: f2:aa:bf:ed:11:63:1f:0f:ca:49:c3:f5:fe:01:69: 35:81:1c:53:18:7f:0c:c2:2f:52:b1:a8:d6:a7:b0: 2f:d1:4f:bd:f8:59:6b:c6:d5:37:e5:61:d3:2f:15: ed:3c:6b:bb:44:1b:08:0a:ad:3b:e4:85:c3:cd:ca: 42:16:58:fc:0f:8c:85:e3:5f:5e:c4:f2:9a:d4:62: 7d:4e:04:59:a3:f6:77:92:07:91:a4:ff:85:e1:45: ed:82:d0:58:b8:d0:08:f0:a7:93:65:d9:4c:4f:90: 8c:6e:3c:c9:f0:a0:ee:d1:24:48:99:9a:f9:4e:45: 37:58:57:a4:49:6f:fd:01:bb:01:73:31:c3:cc:3c: 6b:da:92:ec:15:b4:04:82:bd:94:9e:c6:b9:88:27: c1:98:00:ce:84:d5:0b:68:34:66:77:73:b0:2d:bd: de:3b:e1:67:89:89:98:00:14:38:0d:47:9e:30:83: 3b:5b:cc:3e:fc:fd:a7:3c:4b:2d:c7:b2:23:d4:8d: 7a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:87:A0:D9:6B:0A:EC:B4:60:48:68:CF:6F:88:8A:B2:06:C7:33:BE X509v3 Authority Key Identifier: keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8d:9e:a6:99:7d:68:30:8b:e6:5f:24:22:d0:69:da:e7:f3: 47:3c:d6:dc:06:0b:7c:7a:8f:f2:69:53:52:bf:b2:e7:1a:dc: 95:45:d2:21:77:57:cc:7b:8b:10:aa:cc:b1:26:63:04:a9:1e: fb:9e:da:08:7c:e8:cb:2b:39:0e:4b:fc:e8:d2:68:62:52:63: d1:a2:c5:e0:f8:a8:ef:24:c5:1c:52:7f:39:2a:37:a9:8a:d9: ac:64:7c:e4:f0:b2:ff:fd:81:35:03:3f:0a:c2:17:85:03:0f: 14:a2:17:d9:7e:92:38:bd:01:9f:ef:6b:6b:09:18:3f:d8:49: 2a:e9:1b:52:10:d9:8e:63:73:83:28:c1:a7:dc:82:98:32:b3: 72:aa:77:e7:91:e6:79:9b:72:2f:21:05:c1:ba:f7:c6:e0:3e: 45:8b:0b:dd:9c:02:1f:33:52:3a:af:b9:a6:13:16:f0:ac:9c: 58:4e:26:db:10:73:a6:53:3e:dc:5c:c0:5e:34:9b:27:f8:90: 5e:a6:f3:d9:73:79:19:35:bd:10:aa:5e:58:4e:13:07:cd:1e: c5:40:93:16:6a:46:c9:90:86:0f:5c:e8:60:ba:b5:4a:b6:35: 0c:97:19:ee:e0:fa:75:c8:18:63:cf:db:d8:cc:5e:ea:fd:9a: 05:6c:21:cd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUY+8wlZg4Tn8q542Wk/saVunY/EEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyMUI4MUEzNUJBRjdFNUYxMEUwQzhBQkUxNjQ2Njc0 NUMzN0JGODAeFw0yNTA4MjEyMTE3MTlaFw0yNTA4MjcwODI0MTlaMDMxMTAvBgNV BAMTKDlCODdBMEQ5NkIwQUVDQjQ2MDQ4NjhDRjZGODg4QUIyMDZDNzMzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdgPA2DFbTdVKPJEF9m7RDsuW 5jJfKexuqVJp5pB/SD/F6FE1uCuOi03hwTRfuQ203juJSDza3eFtTfKqv+0RYx8P yknD9f4BaTWBHFMYfwzCL1KxqNansC/RT734WWvG1TflYdMvFe08a7tEGwgKrTvk hcPNykIWWPwPjIXjX17E8prUYn1OBFmj9neSB5Gk/4XhRe2C0Fi40Ajwp5Nl2UxP kIxuPMnwoO7RJEiZmvlORTdYV6RJb/0BuwFzMcPMPGvakuwVtASCvZSexrmIJ8GY AM6E1QtoNGZ3c7Atvd474WeJiZgAFDgNR54wgztbzD78/ac8Sy3HsiPUjXrPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUm4eg2WsK7LRgSGjPb4iKsgbHM74wHwYDVR0j BBgwFoAUqiG4GjW69+XxDgyKvhZGZ0XDe/gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MjQ0MjRFODUyNDUwMDgyQjlCNTQzODFEM0E5NEE4MUQ1 OUNENEU2NjNEREE4NUE0MkM5QjA1MTc3RDc4M0UyLzAvQUEyMUI4MUEzNUJBRjdF NUYxMEUwQzhBQkUxNjQ2Njc0NUMzN0JGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIxQjgxQTM1QkFGN0U1RjEw RTBDOEFCRTE2NDY2NzQ1QzM3QkY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzI0NDI0RTg1MjQ1MDA4MkI5QjU0MzgxRDNBOTRBODFENTlDRDRFNjYz RERBODVBNDJDOUIwNTE3N0Q3ODNFMi8wL0FBMjFCODFBMzVCQUY3RTVGMTBFMEM4 QUJFMTY0NjY3NDVDMzdCRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/jZ6mmX1oMIvmXyQi0Gna5/NH PNbcBgt8eo/yaVNSv7LnGtyVRdIhd1fMe4sQqsyxJmMEqR77ntoIfOjLKzkOS/zo 0mhiUmPRosXg+KjvJMUcUn85KjepitmsZHzk8LL//YE1Az8KwheFAw8UohfZfpI4 vQGf72trCRg/2Ekq6RtSENmOY3ODKMGn3IKYMrNyqnfnkeZ5m3IvIQXBuvfG4D5F iwvdnAIfM1I6r7mmExbwrJxYTibbEHOmUz7cXMBeNJsn+JBepvPZc3kZNb0Qql5Y ThMHzR7FQJMWakbJkIYPXOhgurVKtjUMlxnu4Pp1yBhjz9vYzF7q/ZoFbCHN -----END CERTIFICATE-----Generated at Sat Aug 23 10:57:07 2025 by rpki-client