$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft (raw, json) Hash identifier: ac8l8l4nzdm0iwRxZGteNWJqmHMDc4+FayWpZWePQ1Y= Subject key identifier: B2:0D:2D:01:4D:BF:74:5D:8E:9B:BB:85:4D:67:03:30:48:B0:24:52 Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF Certificate issuer: /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Certificate serial: 71A8D707D7651A842060A763B7213EE87DAB32AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft Manifest number: 013D Signing time: Mon 20 Oct 2025 02:43:04 +0000 Manifest this update: Mon 20 Oct 2025 02:38:04 +0000 Manifest next update: Fri 24 Oct 2025 07:04:04 +0000 Files and hashes: 1: AS17072.roa (hash: mXvGaxw3XbuWU5smYMeEZHR1M/1dTTrdjF6EGpzHg/g=) 2: AS22884.roa (hash: fEDPJsJW5ZSOA/r/br7IHyoptclXdu6G2CVGPXGK7zc=) 3: AS28414.roa (hash: oLB6f9LZPceeei3hsyIsrm72NY62QAbK78fW/F63gaU=) 4: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl (hash: j5o2SPfPSqBz22UzmglTrTdruzY3HdCjqO+dYQ25iNA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a8:d7:07:d7:65:1a:84:20:60:a7:63:b7:21:3e:e8:7d:ab:32:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Validity Not Before: Oct 20 02:38:04 2025 GMT Not After : Oct 24 07:04:04 2025 GMT Subject: CN=B20D2D014DBF745D8E9BBB854D67033048B02452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:76:7b:30:cd:76:7a:52:fc:c6:2d:a4:53:23: 29:07:76:7e:c4:86:97:20:eb:d8:a7:d9:f1:24:a8: 18:61:a8:e2:bd:d0:af:7b:f1:85:a2:9d:ac:99:1b: 92:6c:54:62:ea:3f:db:74:5c:2a:96:b4:9b:5c:42: 09:64:43:ca:57:32:46:4e:dc:42:ed:4e:26:31:b1: 0e:f3:e8:f4:e3:89:ac:c3:7f:47:11:c9:66:76:73: 41:2f:1e:4d:fa:f3:68:c8:a9:59:9f:d1:6e:19:5d: eb:54:59:aa:dc:e3:a5:a4:5f:ef:aa:fa:19:7a:bf: 1f:3e:47:e7:76:34:dc:9d:a5:b3:42:fe:ea:66:c7: f7:38:d9:3d:4c:2d:aa:d2:56:4a:8a:f1:e1:cc:d2: 1a:ae:09:41:1e:bc:bb:e0:19:91:46:d9:df:18:b7: 9e:bd:0b:2b:e5:08:cb:03:40:63:32:9d:8b:ef:78: ab:74:38:51:5f:d6:3a:36:26:c9:ea:31:a2:ff:75: 44:c8:b6:7d:e0:60:b3:0f:58:92:90:29:6b:6f:54: 51:1d:aa:e8:33:78:00:2a:9d:01:5d:c9:0d:5c:79: 73:cd:0e:90:c3:6b:ba:77:ec:c0:11:88:b2:df:50: e8:86:ad:f5:dc:76:a5:5d:54:a0:37:e9:48:58:de: 2c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0D:2D:01:4D:BF:74:5D:8E:9B:BB:85:4D:67:03:30:48:B0:24:52 X509v3 Authority Key Identifier: keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c6:f6:9d:07:10:a8:f1:37:f4:62:55:b7:0f:58:87:61:19: ee:14:63:76:72:44:a4:f3:0a:c8:5a:4a:39:69:e1:61:ee:c7: 58:9c:26:cc:ed:f9:2d:36:34:41:59:c0:a6:2c:66:f9:50:66: bf:b1:9a:18:f8:e8:f2:5e:48:58:19:4b:8e:d3:d5:e1:ec:16: d1:99:05:06:cb:22:b1:d8:87:18:38:6b:4e:8a:40:21:d0:9e: ce:25:8b:51:b4:b3:e5:63:40:70:10:28:1a:01:d4:c5:55:4b: 82:34:fa:1f:82:73:f9:56:57:6d:79:07:8b:01:c1:87:0f:f8: 08:2f:ec:42:1f:7c:54:b6:0b:a5:5e:b7:04:4e:17:07:b1:f8: a1:f5:a1:8a:22:28:92:2f:54:89:0c:b1:45:bf:65:5d:60:d1: 9e:71:67:08:32:8a:ba:2b:eb:db:2c:f3:b2:41:00:ae:85:d0: e0:b0:67:72:38:5b:8e:fa:05:e7:30:b2:a8:29:87:06:6f:c8: 7b:38:c9:75:7e:ee:f3:67:9c:6f:c4:2f:cc:2c:cc:06:7b:3e: a7:08:2e:fb:f8:46:42:85:6a:4d:26:9b:00:9e:35:ad:31:e8: 47:08:b9:8b:26:9d:0f:8a:c6:f5:35:80:da:5c:bc:e3:77:cd: 3a:d6:31:22 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcajXB9dlGoQgYKdjtyE+6H2rMq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYzQTI1Qzk3NUY1 OEFBMEJGRjAeFw0yNTEwMjAwMjM4MDRaFw0yNTEwMjQwNzA0MDRaMDMxMTAvBgNV BAMTKEIyMEQyRDAxNERCRjc0NUQ4RTlCQkI4NTRENjcwMzMwNDhCMDI0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dnswzXZ6UvzGLaRTIykHdn7E hpcg69in2fEkqBhhqOK90K978YWinayZG5JsVGLqP9t0XCqWtJtcQglkQ8pXMkZO 3ELtTiYxsQ7z6PTjiazDf0cRyWZ2c0EvHk3682jIqVmf0W4ZXetUWarc46WkX++q +hl6vx8+R+d2NNydpbNC/upmx/c42T1MLarSVkqK8eHM0hquCUEevLvgGZFG2d8Y t569CyvlCMsDQGMynYvveKt0OFFf1jo2JsnqMaL/dUTItn3gYLMPWJKQKWtvVFEd qugzeAAqnQFdyQ1ceXPNDpDDa7p37MARiLLfUOiGrfXcdqVdVKA36UhY3izbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUsg0tAU2/dF2Om7uFTWcDMEiwJFIwHwYDVR0j BBgwFoAUiq8cMSwkESUsf3djolyXX1iqC/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0 OTc2MjFEMjMxMDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEy NTJDN0Y3NzYzQTI1Qzk3NUY1OEFBMEJGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QUFGMUMzMTJDMjQxMTI1MkM3 Rjc3NjNBMjVDOTc1RjU4QUEwQkZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTBCRjlFMDYzMjk0QzczNUI4MzVBRUFFMTU4MTZERjA3NDk3NjIxRDIz MTA0MDlDNTc3MjlBQTY4Rjc3M0NCNC8wLzhBQUYxQzMxMkMyNDExMjUyQzdGNzc2 M0EyNUM5NzVGNThBQTBCRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2xvadBxCo8Tf0YlW3D1iHYRnu FGN2ckSk8wrIWko5aeFh7sdYnCbM7fktNjRBWcCmLGb5UGa/sZoY+OjyXkhYGUuO 09Xh7BbRmQUGyyKx2IcYOGtOikAh0J7OJYtRtLPlY0BwECgaAdTFVUuCNPofgnP5 VldteQeLAcGHD/gIL+xCH3xUtgulXrcEThcHsfih9aGKIiiSL1SJDLFFv2VdYNGe cWcIMoq6K+vbLPOyQQCuhdDgsGdyOFuO+gXnMLKoKYcGb8h7OMl1fu7zZ5xvxC/M LMwGez6nCC77+EZChWpNJpsAnjWtMehHCLmLJp0Pisb1NYDaXLzjd8061jEi -----END CERTIFICATE-----Generated at Tue Oct 21 01:40:21 2025 by rpki-client