$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft File: AADC68CACCD7A12B6A019949E964F33953EF7228.mft (raw, json) Hash identifier: veySSd6xYJrxi2S0IHLhKKRVIAtyeEHPNjtjSH5ixdo= Subject key identifier: 63:41:1A:94:7B:16:79:DD:2D:44:57:17:E9:00:F4:83:D7:FD:D3:0E Authority key identifier: AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28 Certificate issuer: /CN=AADC68CACCD7A12B6A019949E964F33953EF7228 Certificate serial: 3D4F94B68AFFFBBAB831596DCEFDB0A72C2CF02D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft Manifest number: 012A Signing time: Mon 20 Oct 2025 02:12:38 +0000 Manifest this update: Mon 20 Oct 2025 02:07:38 +0000 Manifest next update: Sun 26 Oct 2025 00:25:38 +0000 Files and hashes: 1: 323830313a31323a653830303a3a2f34382d3438203d3e20323731383835.roa (hash: ehKjQ37txh23E0VUOn87XdDHbgue7WMTP7mdcs99HW8=) 2: 323830313a31323a653830303a3a2f34382d3438203d3e203237393239.roa (hash: V4ZE5Uab78fcIDcTzc31eKLt9gMqmX1D9SgmnAw6VTU=) 3: AADC68CACCD7A12B6A019949E964F33953EF7228.crl (hash: FhMyRgYI3fqWj3IiLZViPiTArixR2kXo9/+nHbUd5U0=) 4: 34352e36382e342e302f32322d3234203d3e203237393239.roa (hash: aMhbGsIspiAOM4+R5TE2QDtYJ535n+yDu297Was/ZLI=) 5: 34352e36382e342e302f32322d3234203d3e20323731383835.roa (hash: V97ySs3+COs0bPt1iZbLdmN2jaA4i4OrFRnpEm+lOw4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4f:94:b6:8a:ff:fb:ba:b8:31:59:6d:ce:fd:b0:a7:2c:2c:f0:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AADC68CACCD7A12B6A019949E964F33953EF7228 Validity Not Before: Oct 20 02:07:38 2025 GMT Not After : Oct 26 00:25:38 2025 GMT Subject: CN=63411A947B1679DD2D445717E900F483D7FDD30E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:a4:32:42:8a:3a:ff:b7:25:0d:2a:a5:77: 17:a2:be:38:e2:a6:1c:41:96:d9:91:46:03:bd:df: 64:74:a6:90:6f:20:de:ba:7b:df:9a:aa:ad:ea:77: 8c:72:0f:d1:6a:aa:69:2d:08:60:e5:ce:8f:af:ff: bd:b0:02:ac:e3:06:77:e0:ab:65:5a:1f:be:aa:d7: 39:f8:c4:9f:89:28:1d:1a:43:53:d2:cf:df:a8:b4: f1:c0:fe:33:1f:ad:0c:71:59:94:36:14:cb:07:5e: 0c:24:cd:4d:1c:be:28:70:09:53:a7:7b:f5:4b:7d: 1d:d7:89:0f:c6:09:f6:46:0d:db:63:f6:10:96:ee: 9a:f8:e1:e9:16:25:58:8e:05:a6:cf:b2:d3:87:d5: 43:c6:23:fb:ff:0a:64:9b:3e:4e:5b:b5:04:90:9d: fb:4d:07:b3:e6:06:73:d5:4d:d6:d9:ca:2a:d5:60: 5c:3d:7b:88:63:73:36:f0:d5:86:2e:cb:b7:e8:83: f3:ee:ce:68:3a:92:4c:4f:4d:58:a3:5d:5d:5c:1a: 1f:1e:97:2c:93:2c:dc:10:5c:60:a8:eb:b3:0e:75: db:77:bf:c6:a5:d5:34:00:49:7f:da:b6:ec:6f:c9: b5:ab:f1:3c:77:7b:0c:56:bd:6e:53:fa:cc:4a:e5: 1f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:41:1A:94:7B:16:79:DD:2D:44:57:17:E9:00:F4:83:D7:FD:D3:0E X509v3 Authority Key Identifier: keyid:AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:dc:17:f5:5c:8d:3b:55:3b:71:7a:f4:4d:06:be:33:80:21: 46:b2:3f:0a:e4:da:e3:22:c6:6e:66:16:7a:7e:39:0d:5e:49: 15:16:5a:0c:09:6c:5d:a4:9d:8d:b5:d2:72:5b:63:17:4c:4e: 11:fe:1b:e2:db:b7:87:08:91:82:d4:22:2e:9f:35:1b:0b:15: 71:f9:35:be:fc:fd:fe:dd:28:5e:ad:c4:c0:93:bb:c0:d2:07: 83:dc:a6:42:60:47:48:4a:42:69:c0:c4:38:29:12:19:d5:e2: 47:01:ad:51:f0:19:94:17:5d:48:81:9c:eb:ca:ec:b4:82:e1: e5:a2:12:2f:3c:7f:cc:7f:f2:51:49:6d:24:5f:25:ff:df:fb: 7d:06:f4:9a:fa:db:0d:bd:c6:f0:27:31:d3:ea:81:72:d3:78: b3:b1:fe:9f:a7:88:3e:24:46:89:0c:9a:f7:ba:fe:52:0d:e2: c0:8b:fd:89:38:78:8f:2b:a4:fd:da:a9:fd:6c:95:18:31:7e: 7b:0c:82:75:18:33:65:5c:cf:4a:30:0b:29:8b:d5:5a:a2:16: 3a:3a:b8:7f:28:5d:e7:42:1b:e9:bb:9a:13:c2:9f:c0:69:5e: e0:42:7b:c8:ec:a7:48:bb:65:cb:be:dd:6d:c2:ed:30:fa:78: c4:a6:22:c6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPU+Utor/+7q4MVltzv2wpyws8C0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFEQzY4Q0FDQ0Q3QTEyQjZBMDE5OTQ5RTk2NEYzMzk1 M0VGNzIyODAeFw0yNTEwMjAwMjA3MzhaFw0yNTEwMjYwMDI1MzhaMDMxMTAvBgNV BAMTKDYzNDExQTk0N0IxNjc5REQyRDQ0NTcxN0U5MDBGNDgzRDdGREQzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VaQyQoo6/7clDSqldxeivjji phxBltmRRgO932R0ppBvIN66e9+aqq3qd4xyD9FqqmktCGDlzo+v/72wAqzjBnfg q2VaH76q1zn4xJ+JKB0aQ1PSz9+otPHA/jMfrQxxWZQ2FMsHXgwkzU0cvihwCVOn e/VLfR3XiQ/GCfZGDdtj9hCW7pr44ekWJViOBabPstOH1UPGI/v/CmSbPk5btQSQ nftNB7PmBnPVTdbZyirVYFw9e4hjczbw1YYuy7fog/Puzmg6kkxPTVijXV1cGh8e lyyTLNwQXGCo67MOddt3v8al1TQASX/atuxvybWr8Tx3ewxWvW5T+sxK5R/pAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUY0EalHsWed0tRFcX6QD0g9f90w4wHwYDVR0j BBgwFoAUqtxoyszXoStqAZlJ6WTzOVPvcigwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMjFFRDExNERCRDYwOThDMjhFQTlERkMzM0UwRkIxQUNE QUNCNDEwQzkxRDcyNUExQzIyOTVCNDM5QTlGQzNDLzAvQUFEQzY4Q0FDQ0Q3QTEy QjZBMDE5OTQ5RTk2NEYzMzk1M0VGNzIyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQURDNjhDQUNDRDdBMTJCNkEw MTk5NDlFOTY0RjMzOTUzRUY3MjI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjIxRUQxMTREQkQ2MDk4QzI4RUE5REZDMzNFMEZCMUFDREFDQjQxMEM5 MUQ3MjVBMUMyMjk1QjQzOUE5RkMzQy8wL0FBREM2OENBQ0NEN0ExMkI2QTAxOTk0 OUU5NjRGMzM5NTNFRjcyMjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCK3Bf1XI07VTtxevRNBr4zgCFG sj8K5NrjIsZuZhZ6fjkNXkkVFloMCWxdpJ2NtdJyW2MXTE4R/hvi27eHCJGC1CIu nzUbCxVx+TW+/P3+3ShercTAk7vA0geD3KZCYEdISkJpwMQ4KRIZ1eJHAa1R8BmU F11IgZzryuy0guHlohIvPH/Mf/JRSW0kXyX/3/t9BvSa+tsNvcbwJzHT6oFy03iz sf6fp4g+JEaJDJr3uv5SDeLAi/2JOHiPK6T92qn9bJUYMX57DIJ1GDNlXM9KMAsp i9VaohY6Orh/KF3nQhvpu5oTwp/AaV7gQnvI7KdIu2XLvt1twu0w+njEpiLG -----END CERTIFICATE-----Generated at Mon Oct 20 14:08:50 2025 by rpki-client