$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft File: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft (raw, json) Hash identifier: 97Y9otbsz5ZgteodQlxU088ix0DacatA/9poy8vUqC4= Subject key identifier: 2F:15:A8:09:92:D2:30:3D:CC:E9:80:34:A0:14:01:F7:C5:05:A8:B2 Authority key identifier: AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C Certificate issuer: /CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C Certificate serial: 1BF65CBA6F2D2F00EF70CA2950AAAB71300A20E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft Manifest number: 012C Signing time: Sat 25 Oct 2025 03:42:55 +0000 Manifest this update: Sat 25 Oct 2025 03:37:55 +0000 Manifest next update: Fri 31 Oct 2025 01:54:55 +0000 Files and hashes: 1: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl (hash: 4icdt7ik2g+451Q8MR/qanDBiN0X0owrJCyRTr2peFU=) 2: 323830333a346135303a3a2f33322d3438203d3e20323733313736.roa (hash: 1S7U/necixh7xAZEJOiccJW6Tn6fQBFFDZB4GRKHA+s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f6:5c:ba:6f:2d:2f:00:ef:70:ca:29:50:aa:ab:71:30:0a:20:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C Validity Not Before: Oct 25 03:37:55 2025 GMT Not After : Oct 31 01:54:55 2025 GMT Subject: CN=2F15A80992D2303DCCE98034A01401F7C505A8B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:90:11:1a:94:e0:84:3d:87:10:01:63:59: a8:ae:f3:10:17:e5:1e:ec:5a:8d:e7:a1:75:5d:2b: d1:47:ad:8b:10:fd:b9:0d:c1:cf:6c:6d:23:ce:41: 60:a9:3c:b8:90:52:b6:0f:7d:71:6d:8e:83:e3:bd: 35:94:67:0f:88:fd:75:52:bd:d1:2d:59:4c:88:3e: 78:86:dc:47:0d:45:3a:8c:e2:96:2c:db:a9:90:0c: f0:4f:b7:87:cf:6c:5b:54:96:3a:0a:01:bd:2d:cd: 50:11:f4:8c:23:eb:93:b7:9c:90:06:9c:ab:48:bf: 77:c0:5e:f8:04:c6:c7:6d:54:9f:39:72:6e:b2:02: c9:f6:ff:2d:94:c9:5c:76:5c:88:a1:ae:f5:12:c1: 25:50:51:1f:1e:24:b2:47:e1:45:ee:0e:8a:76:6b: 3b:69:d1:f8:4b:3f:b8:f5:1a:db:03:d6:7a:03:ee: 0a:e5:71:0c:6e:75:1e:8f:1b:1a:6a:93:89:38:ed: d2:3e:9e:b9:11:7f:bf:f2:d8:ae:09:a9:ac:2e:7c: a9:19:5e:4a:f0:34:9e:2c:58:83:5d:7e:16:1b:18: bc:80:61:64:3e:c0:33:6e:7a:69:fa:f0:c1:24:f7: f5:6a:49:8a:41:67:de:34:3a:33:fa:ca:51:47:b1: 54:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:15:A8:09:92:D2:30:3D:CC:E9:80:34:A0:14:01:F7:C5:05:A8:B2 X509v3 Authority Key Identifier: keyid:AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a5:84:f9:02:48:cd:59:04:cb:06:e0:6c:2b:f6:6f:a3:22: 25:d9:8e:e3:65:9e:02:46:10:3c:ef:09:d1:d2:6e:ad:e8:fc: 8f:cf:0e:88:74:56:83:23:ca:a0:74:5c:61:48:b5:89:29:df: c4:62:76:f2:52:7d:c0:64:10:22:05:2a:62:59:7b:a4:df:92: c8:12:2f:59:15:34:11:92:7b:ff:07:a1:11:71:50:c8:68:db: fb:ec:9e:47:ef:cc:9a:a2:a1:b6:c5:83:3e:e8:57:65:9a:f6: be:a2:c0:4c:1f:99:0a:c0:55:08:5b:cd:45:c3:ac:7a:71:3e: 6a:7d:ad:e8:f1:d1:ba:f1:fe:34:32:2a:c8:7d:fb:62:80:57: df:9b:7d:b6:98:dd:82:0a:6a:8a:3c:43:10:d7:c8:87:7c:fa: ab:1d:8d:a2:b9:a4:99:91:53:08:e6:40:cb:12:79:05:68:f3: 97:1a:05:c6:c2:ad:57:d6:53:34:91:54:af:f5:88:3c:b8:bd: e5:68:ab:de:96:0d:26:33:04:a3:67:fe:e0:69:f4:d0:b4:11: e3:db:ba:f3:20:a1:62:c9:f7:61:82:22:c8:e8:b7:f0:62:95: c5:fb:1a:54:de:16:96:e8:03:77:59:7a:e2:14:30:c4:c6:ad: 40:c4:ad:5f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUG/Zcum8tLwDvcMopUKqrcTAKIOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFGODFBNkU3OUNGRjBCMUM0RUVGQkMzMkNGRDNCMzE0 NEE1MTA0QzAeFw0yNTEwMjUwMzM3NTVaFw0yNTEwMzEwMTU0NTVaMDMxMTAvBgNV BAMTKDJGMTVBODA5OTJEMjMwM0RDQ0U5ODAzNEEwMTQwMUY3QzUwNUE4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvzJARGpTghD2HEAFjWaiu8xAX 5R7sWo3noXVdK9FHrYsQ/bkNwc9sbSPOQWCpPLiQUrYPfXFtjoPjvTWUZw+I/XVS vdEtWUyIPniG3EcNRTqM4pYs26mQDPBPt4fPbFtUljoKAb0tzVAR9Iwj65O3nJAG nKtIv3fAXvgExsdtVJ85cm6yAsn2/y2UyVx2XIihrvUSwSVQUR8eJLJH4UXuDop2 aztp0fhLP7j1GtsD1noD7grlcQxudR6PGxpqk4k47dI+nrkRf7/y2K4JqawufKkZ XkrwNJ4sWINdfhYbGLyAYWQ+wDNuemn68MEk9/VqSYpBZ940OjP6ylFHsVQtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULxWoCZLSMD3M6YA0oBQB98UFqLIwHwYDVR0j BBgwFoAUqvgabnnP8LHE7vvDLP07MUSlEEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEUyMzk4RTIxNEI4MDZFRDVGNkJFQUY5QzBGRDU4NjU1 NjM3NTk1MzFEODIwQjQ2NzFGNEE3RUY2NDQzOEQ2LzAvQUFGODFBNkU3OUNGRjBC MUM0RUVGQkMzMkNGRDNCMzE0NEE1MTA0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUY4MUE2RTc5Q0ZGMEIxQzRF RUZCQzMyQ0ZEM0IzMTQ0QTUxMDRDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhFMjM5OEUyMTRCODA2RUQ1RjZCRUFGOUMwRkQ1ODY1NTYzNzU5NTMx RDgyMEI0NjcxRjRBN0VGNjQ0MzhENi8wL0FBRjgxQTZFNzlDRkYwQjFDNEVFRkJD MzJDRkQzQjMxNDRBNTEwNEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUpYT5AkjNWQTLBuBsK/ZvoyIl 2Y7jZZ4CRhA87wnR0m6t6PyPzw6IdFaDI8qgdFxhSLWJKd/EYnbyUn3AZBAiBSpi WXuk35LIEi9ZFTQRknv/B6ERcVDIaNv77J5H78yaoqG2xYM+6Fdlmva+osBMH5kK wFUIW81Fw6x6cT5qfa3o8dG68f40MirIfftigFffm322mN2CCmqKPEMQ18iHfPqr HY2iuaSZkVMI5kDLEnkFaPOXGgXGwq1X1lM0kVSv9Yg8uL3laKvelg0mMwSjZ/7g afTQtBHj27rzIKFiyfdhgiLI6LfwYpXF+xpU3haW6AN3WXriFDDExq1AxK1f -----END CERTIFICATE-----Generated at Sun Oct 26 11:34:51 2025 by rpki-client