$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft (raw, json) Hash identifier: g6zmk5/nSsq6WLKQ1H75a8jZW00X5LmvGdSlO1hGtMs= Subject key identifier: 95:AF:E8:43:A2:93:3E:C6:9B:25:4C:17:B1:F3:B2:D6:59:CB:A8:B1 Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF Certificate issuer: /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Certificate serial: 6F139DC89EC041D08D576F297B45009575C44327 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft Manifest number: E0 Signing time: Thu 15 May 2025 23:12:36 +0000 Manifest this update: Thu 15 May 2025 23:07:36 +0000 Manifest next update: Wed 21 May 2025 10:19:36 +0000 Files and hashes: 1: AS22884.roa (hash: XA+RKTs8swhw9SXtRuu1T4hC7EH91dG2wxMML6u8cjg=) 2: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl (hash: SpbW1K6MlXb1K7CkAWakyeJj2doICNRPNX8WD/+8jdI=) 3: AS28414.roa (hash: hG+EHS+f7EtALuSSTl5iVLK2ytAcMU9IL3+3wn1eiIM=) 4: AS17072.roa (hash: /Z+Bn4EUsmUiIWhPmW1ctyYtIpY/qScMwi0MqtYhU9E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 01:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:13:9d:c8:9e:c0:41:d0:8d:57:6f:29:7b:45:00:95:75:c4:43:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Validity Not Before: May 15 23:07:36 2025 GMT Not After : May 21 10:19:36 2025 GMT Subject: CN=95AFE843A2933EC69B254C17B1F3B2D659CBA8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:36:1e:fc:09:b9:4a:c5:62:22:02:74:d1: 0a:5b:ae:56:33:b5:df:a2:9f:6b:25:0c:5d:7d:c4: 9d:72:f2:9f:be:e5:76:f0:1a:43:44:9a:ce:45:d7: bf:b1:0e:b3:21:19:64:c7:b9:7a:d8:8d:3c:ed:d9: 7a:c2:e4:9f:50:79:07:00:a3:20:6a:ab:50:50:c7: 00:b0:b8:32:c7:26:fd:03:3d:79:98:32:43:af:c5: 33:f9:1b:9b:7f:a4:e7:ae:7f:46:a6:06:cc:37:4e: 5c:fc:17:32:c1:ee:16:47:f0:01:ef:2c:21:1b:7a: a7:ea:0d:1f:8d:4a:c4:b6:3e:f2:1b:ca:f5:16:b8: db:34:8f:76:9f:1b:8e:48:cc:d6:99:bb:64:71:0b: 9b:bb:38:8c:d0:bc:43:96:0e:74:1c:16:fb:5d:ca: 0e:07:ed:f4:62:a3:fd:49:35:18:e5:32:a2:fd:cc: 32:d1:c3:4c:e5:35:f8:51:df:7e:17:22:ca:86:4b: 2a:71:d8:52:3b:85:b0:fc:f0:73:4a:85:e4:a2:f0: d4:ea:90:04:fb:62:cb:18:e8:39:48:25:c5:ba:8f: bb:aa:ae:3a:75:12:5f:38:42:e9:85:b5:69:c5:f4: 8c:c4:33:96:cd:00:01:74:f0:e3:fd:33:20:38:35: 81:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AF:E8:43:A2:93:3E:C6:9B:25:4C:17:B1:F3:B2:D6:59:CB:A8:B1 X509v3 Authority Key Identifier: keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:0d:4c:b2:ea:74:de:12:f5:1d:c2:dc:00:cd:44:6d:4b:0d: 3e:53:84:a8:dd:56:9a:91:68:48:a7:a3:7a:b4:79:b7:7f:5d: 75:f0:3e:22:a2:f4:b8:dd:04:bd:b2:e5:98:cb:93:13:28:fd: 7f:b5:ae:2a:02:fd:53:da:66:08:70:aa:18:5c:96:fb:62:3d: d9:3d:fc:a9:1f:16:42:46:5e:de:49:d3:96:60:2b:09:81:72: 40:1b:7b:f1:c2:14:ca:d1:54:90:ab:40:40:74:4b:a7:b3:b0: 7d:bf:e3:20:e6:f3:bb:da:a4:57:fe:50:bf:83:7f:8d:b0:d5: 63:a7:f7:2e:f6:8d:36:44:8a:23:7d:8e:44:f2:7a:93:be:31: c4:95:e9:c3:45:75:7b:31:88:fb:0a:0f:f9:c4:86:47:6e:6d: 78:a8:d7:3b:56:50:66:69:45:4b:0a:81:ec:d9:1c:42:03:92: b7:b5:bb:3f:6e:13:f2:f3:48:17:1b:71:15:01:00:97:46:39: 8b:57:a8:cd:40:a6:51:2a:5b:95:78:64:81:73:a2:1b:14:6d: b4:df:52:c6:40:78:8d:43:39:13:ea:15:5c:44:59:c4:e1:0b: 43:33:90:1f:da:16:a8:48:bf:cd:ec:80:49:b7:45:39:f0:c2: fb:93:e8:a2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbxOdyJ7AQdCNV28pe0UAlXXEQycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYzQTI1Qzk3NUY1 OEFBMEJGRjAeFw0yNTA1MTUyMzA3MzZaFw0yNTA1MjExMDE5MzZaMDMxMTAvBgNV BAMTKDk1QUZFODQzQTI5MzNFQzY5QjI1NEMxN0IxRjNCMkQ2NTlDQkE4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYDYe/Am5SsViIgJ00QpbrlYz td+in2slDF19xJ1y8p++5XbwGkNEms5F17+xDrMhGWTHuXrYjTzt2XrC5J9QeQcA oyBqq1BQxwCwuDLHJv0DPXmYMkOvxTP5G5t/pOeuf0amBsw3Tlz8FzLB7hZH8AHv LCEbeqfqDR+NSsS2PvIbyvUWuNs0j3afG45IzNaZu2RxC5u7OIzQvEOWDnQcFvtd yg4H7fRio/1JNRjlMqL9zDLRw0zlNfhR334XIsqGSypx2FI7hbD88HNKheSi8NTq kAT7YssY6DlIJcW6j7uqrjp1El84QumFtWnF9IzEM5bNAAF08OP9MyA4NYGjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUla/oQ6KTPsabJUwXsfOy1lnLqLEwHwYDVR0j BBgwFoAUiq8cMSwkESUsf3djolyXX1iqC/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0 OTc2MjFEMjMxMDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEy NTJDN0Y3NzYzQTI1Qzk3NUY1OEFBMEJGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QUFGMUMzMTJDMjQxMTI1MkM3 Rjc3NjNBMjVDOTc1RjU4QUEwQkZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTBCRjlFMDYzMjk0QzczNUI4MzVBRUFFMTU4MTZERjA3NDk3NjIxRDIz MTA0MDlDNTc3MjlBQTY4Rjc3M0NCNC8wLzhBQUYxQzMxMkMyNDExMjUyQzdGNzc2 M0EyNUM5NzVGNThBQTBCRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjDUyy6nTeEvUdwtwAzURtSw0+ U4So3VaakWhIp6N6tHm3f1118D4iovS43QS9suWYy5MTKP1/ta4qAv1T2mYIcKoY XJb7Yj3ZPfypHxZCRl7eSdOWYCsJgXJAG3vxwhTK0VSQq0BAdEuns7B9v+Mg5vO7 2qRX/lC/g3+NsNVjp/cu9o02RIojfY5E8nqTvjHElenDRXV7MYj7Cg/5xIZHbm14 qNc7VlBmaUVLCoHs2RxCA5K3tbs/bhPy80gXG3EVAQCXRjmLV6jNQKZRKluVeGSB c6IbFG2031LGQHiNQzkT6hVcRFnE4QtDM5Af2haoSL/N7IBJt0U58ML7k+ii -----END CERTIFICATE-----Generated at Sat May 17 13:29:39 2025 by rpki-client