$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft File: 5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft (raw, json) Hash identifier: a7U81DCEaSf/9BYaKsKOPslBBhhft2iLEA5taTl2jEE= Subject key identifier: D3:C8:8A:C4:50:AE:35:62:38:01:DB:47:53:4D:6F:70:4A:38:1B:36 Authority key identifier: 5A:E0:C2:D0:4B:B5:BA:4F:90:E7:D5:91:C0:E7:59:62:4F:79:F7:D1 Certificate issuer: /CN=5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1 Certificate serial: 4EC14352192D7C0043828D96276ACFB340B72928 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft Manifest number: 012D Signing time: Sun 19 Oct 2025 01:41:17 +0000 Manifest this update: Sun 19 Oct 2025 01:36:17 +0000 Manifest next update: Fri 24 Oct 2025 03:46:17 +0000 Files and hashes: 1: 5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl (hash: vSYa+v93101A6TwXMYGe7LdfTIPFAOBwIAVUKqsf8Es=) 2: 3138372e37332e3137362e302f32322d3234203d3e20323639393930.roa (hash: BaIX0qhp18j+XpTnYKfSF67GStiAmWNI+M78CfluqlY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c1:43:52:19:2d:7c:00:43:82:8d:96:27:6a:cf:b3:40:b7:29:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1 Validity Not Before: Oct 19 01:36:17 2025 GMT Not After : Oct 24 03:46:17 2025 GMT Subject: CN=D3C88AC450AE35623801DB47534D6F704A381B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ff:a0:87:02:ea:06:da:d0:f5:1a:31:ab:09: 64:60:28:bb:f8:26:90:37:18:fa:10:4e:e8:4f:e9: 30:ce:dc:80:4c:f2:f6:f4:2b:eb:de:fb:03:a6:6b: 9c:cb:93:23:76:e8:69:8a:e3:e4:27:92:ad:32:1d: 16:96:b9:89:fd:cf:b7:b3:d3:45:c4:2e:52:41:70: 3b:90:57:74:9b:0a:3f:24:ef:51:de:ee:64:3f:21: 6a:39:0f:2e:0e:25:39:e6:75:22:44:bf:e5:7b:b1: 1d:bb:7a:07:82:ed:41:76:fb:e1:8a:3d:75:73:89: d9:72:2c:01:76:aa:09:19:02:cf:e6:2f:b9:40:1b: 2b:df:20:d0:23:30:be:d6:d6:9d:61:08:9d:8c:8e: e3:f0:ae:4b:42:17:22:ea:0b:45:97:8a:04:cd:a5: ad:16:65:50:17:aa:f6:c0:b2:39:49:15:4b:15:8b: 8c:b1:58:56:76:c2:47:28:96:a8:68:ec:c9:e3:f5: eb:2f:f5:dc:53:95:8a:9f:2c:e6:7a:ad:9e:be:ef: c6:2e:49:6b:e0:0f:94:b3:16:a9:c2:ca:97:21:77: be:a6:eb:5f:1b:93:04:5e:3c:da:42:82:d9:f4:fe: f6:49:2e:28:c0:21:e8:b8:81:77:59:43:35:ac:ef: f4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C8:8A:C4:50:AE:35:62:38:01:DB:47:53:4D:6F:70:4A:38:1B:36 X509v3 Authority Key Identifier: keyid:5A:E0:C2:D0:4B:B5:BA:4F:90:E7:D5:91:C0:E7:59:62:4F:79:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c9:16:52:da:ab:6f:d4:66:c9:71:de:35:00:cd:1d:f9:c1: 9d:b2:9f:40:1c:43:0e:fb:55:18:1d:8f:b2:e3:ad:92:b5:2f: 9b:62:85:c2:a1:20:be:4b:d1:c7:4b:6d:f3:ef:3a:8d:93:56: 38:7f:d5:b3:e8:0d:25:fd:62:ac:f5:e9:c6:86:64:1c:ac:ef: b5:e6:c0:bf:65:f2:f7:b9:7b:4e:69:ee:58:c8:af:a5:a1:51: d9:ab:59:33:aa:6f:d3:7a:d1:12:66:94:9a:3b:95:2f:fb:84: 19:9b:84:ea:b9:de:d6:66:36:b6:6d:88:77:c9:c2:4b:75:7c: 2b:43:92:34:99:35:a0:e0:db:0f:61:3c:0c:4c:72:83:e1:84: 1a:7e:92:22:65:89:a4:db:9a:20:88:ac:ec:6c:84:00:e2:35: 95:80:bc:2c:61:b2:33:ce:59:5f:66:ee:c2:20:c3:4b:bd:98: 24:58:e9:3b:3e:3b:af:52:bf:09:ed:8c:cb:c6:39:a5:01:70: 38:36:4d:14:7b:da:bd:15:87:a7:ef:65:d9:58:7c:d4:b6:ab: a8:6d:15:ba:79:d1:f9:51:28:2c:45:7f:61:7c:96:d7:93:4d: d1:a0:ec:fe:b4:9b:4c:c7:c1:5b:4a:b6:cf:41:f2:88:85:70: bd:a6:91:f8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTsFDUhktfABDgo2WJ2rPs0C3KSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMEMyRDA0QkI1QkE0RjkwRTdENTkxQzBFNzU5NjI0 Rjc5RjdEMTAeFw0yNTEwMTkwMTM2MTdaFw0yNTEwMjQwMzQ2MTdaMDMxMTAvBgNV BAMTKEQzQzg4QUM0NTBBRTM1NjIzODAxREI0NzUzNEQ2RjcwNEEzODFCMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt/6CHAuoG2tD1GjGrCWRgKLv4 JpA3GPoQTuhP6TDO3IBM8vb0K+ve+wOma5zLkyN26GmK4+Qnkq0yHRaWuYn9z7ez 00XELlJBcDuQV3SbCj8k71He7mQ/IWo5Dy4OJTnmdSJEv+V7sR27egeC7UF2++GK PXVzidlyLAF2qgkZAs/mL7lAGyvfINAjML7W1p1hCJ2MjuPwrktCFyLqC0WXigTN pa0WZVAXqvbAsjlJFUsVi4yxWFZ2wkcolqho7Mnj9esv9dxTlYqfLOZ6rZ6+78Yu SWvgD5SzFqnCypchd76m618bkwRePNpCgtn0/vZJLijAIei4gXdZQzWs7/QLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU08iKxFCuNWI4AdtHU01vcEo4GzYwHwYDVR0j BBgwFoAUWuDC0Eu1uk+Q59WRwOdZYk9599EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QUU4MUIxNDVGRDA2MEMxOTA4QTI4RjEwOTAxMTJGRTlE NjE2NzMwNzEwMUM3NDYyMTI3QjE2Mjk5OTdBQUI5LzAvNUFFMEMyRDA0QkI1QkE0 RjkwRTdENTkxQzBFNzU5NjI0Rjc5RjdEMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QUUwQzJEMDRCQjVCQTRGOTBF N0Q1OTFDMEU3NTk2MjRGNzlGN0QxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEFFODFCMTQ1RkQwNjBDMTkwOEEyOEYxMDkwMTEyRkU5RDYxNjczMDcx MDFDNzQ2MjEyN0IxNjI5OTk3QUFCOS8wLzVBRTBDMkQwNEJCNUJBNEY5MEU3RDU5 MUMwRTc1OTYyNEY3OUY3RDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJyRZS2qtv1GbJcd41AM0d+cGd sp9AHEMO+1UYHY+y462StS+bYoXCoSC+S9HHS23z7zqNk1Y4f9Wz6A0l/WKs9enG hmQcrO+15sC/ZfL3uXtOae5YyK+loVHZq1kzqm/TetESZpSaO5Uv+4QZm4Tqud7W Zja2bYh3ycJLdXwrQ5I0mTWg4NsPYTwMTHKD4YQafpIiZYmk25ogiKzsbIQA4jWV gLwsYbIzzllfZu7CIMNLvZgkWOk7PjuvUr8J7YzLxjmlAXA4Nk0Ue9q9FYen72XZ WHzUtquobRW6edH5USgsRX9hfJbXk03RoOz+tJtMx8FbSrbPQfKIhXC9ppH4 -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:02 2025 by rpki-client