$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft File: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft (raw, json) Hash identifier: hOh0SsNzQs53qyY/7gvaWlq52KIC6cGP7gz+QOnKTzs= Subject key identifier: 39:99:48:28:26:69:76:5D:A5:1D:4A:47:52:B3:DD:2A:6C:C7:A8:83 Authority key identifier: AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B Certificate issuer: /CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B Certificate serial: 3694CFA696B423D2777255D188AF3000AE2F2C67 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft Manifest number: 0134 Signing time: Sat 01 Nov 2025 07:35:56 +0000 Manifest this update: Sat 01 Nov 2025 07:30:56 +0000 Manifest next update: Thu 06 Nov 2025 16:58:56 +0000 Files and hashes: 1: 3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa (hash: +0qop7Ilf9Isuak762oOoJinzztVUgOiRadVElgbPMc=) 2: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl (hash: WUuD7Rkts2Yks/kqtJroByC+ra563Yu/2xEG3cEB6Bc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:94:cf:a6:96:b4:23:d2:77:72:55:d1:88:af:30:00:ae:2f:2c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B Validity Not Before: Nov 1 07:30:56 2025 GMT Not After : Nov 6 16:58:56 2025 GMT Subject: CN=399948282669765DA51D4A4752B3DD2A6CC7A883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:8f:55:16:54:8a:89:90:b9:43:bf:2d:9b: 75:9d:c8:a3:c3:2c:01:22:1d:9c:60:7e:68:e8:2f: 4b:e2:b9:60:7d:8f:e5:8e:e5:6b:46:39:fa:00:b0: 0f:9f:64:ae:49:17:df:32:ff:5c:b8:2e:9a:85:9c: 55:19:11:5e:c9:54:56:de:92:25:96:c1:20:96:43: f7:8a:01:b7:83:1c:40:aa:39:46:70:4f:1e:f8:6c: 6d:77:4c:0e:54:1e:6a:4f:fa:54:69:c5:3e:37:1c: 56:1e:62:39:ae:77:d1:a4:61:85:ae:c6:2f:17:db: f1:e5:ae:7a:ff:c3:a9:4d:9f:c6:7d:e8:f7:a5:ca: 52:b9:23:37:27:ae:bc:0d:55:d9:65:a7:63:d6:48: f4:2e:42:5e:89:d2:a3:4c:f1:89:b2:0d:54:e1:bd: e3:3e:00:19:0f:cc:25:43:26:6e:ec:2e:4d:0b:c7: 27:a2:c6:2f:91:f5:2d:2d:86:08:7b:a8:63:4b:1c: 3a:0c:13:0b:10:0d:b6:ae:11:c9:15:85:80:02:b7: fa:e0:0b:f7:81:51:97:df:a0:51:cc:40:65:13:cd: 3f:75:a1:e6:50:8a:f1:a0:eb:6e:25:64:36:b6:e8: 25:6b:54:1c:65:c2:48:e7:2a:59:11:49:74:7f:75: 43:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:99:48:28:26:69:76:5D:A5:1D:4A:47:52:B3:DD:2A:6C:C7:A8:83 X509v3 Authority Key Identifier: keyid:AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:46:5e:53:86:43:0e:c3:fc:3e:15:d2:4b:c0:dc:f0:a4:ec: f8:f5:fe:1c:eb:c4:82:96:17:a1:da:c9:bc:e6:6d:47:ee:90: 48:9c:eb:88:9d:2c:63:c7:cd:e3:7f:f2:c0:f3:ee:80:26:f2: 0f:39:37:11:58:31:8d:49:bc:50:09:c4:3b:44:d4:37:7b:5d: fa:bf:f1:d1:00:6c:18:c4:89:67:af:49:b5:85:cb:77:ce:0a: e1:a0:59:8d:b4:a3:ac:c1:73:4b:13:a0:95:cc:20:1e:c0:9b: 4f:48:c0:3e:e1:2e:a2:45:5f:2e:7d:b5:92:db:ea:e9:70:1c: 42:f5:c5:f1:e2:f2:c0:a0:50:cd:fe:ca:a7:8a:be:03:8e:a8: 75:6f:c0:9c:31:b1:ae:8b:c7:ea:05:ca:5e:9a:63:15:6f:3a: 30:03:73:52:1f:38:58:a5:54:60:dd:f4:4d:32:07:62:29:11: 64:28:09:10:24:ee:1a:b0:4a:df:1a:e0:d6:e6:0a:b0:a7:7a: 71:d5:6b:08:f7:ee:be:ee:7f:45:84:42:cf:12:25:f6:14:e0: 0b:d1:af:e9:47:e5:9e:a8:4b:0f:25:0d:fc:39:98:f8:20:d8: d9:87:22:e0:46:85:d8:bf:74:00:23:0f:de:59:d4:c8:96:95: ef:ab:3a:0e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNpTPppa0I9J3clXRiK8wAK4vLGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0NTk4RDgzREJDMTQyQTE2NEFENzJGNUREOTAzNkFB RURCMEExQjAeFw0yNTExMDEwNzMwNTZaFw0yNTExMDYxNjU4NTZaMDMxMTAvBgNV BAMTKDM5OTk0ODI4MjY2OTc2NURBNTFENEE0NzUyQjNERDJBNkNDN0E4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZY9VFlSKiZC5Q78tm3WdyKPD LAEiHZxgfmjoL0viuWB9j+WO5WtGOfoAsA+fZK5JF98y/1y4LpqFnFUZEV7JVFbe kiWWwSCWQ/eKAbeDHECqOUZwTx74bG13TA5UHmpP+lRpxT43HFYeYjmud9GkYYWu xi8X2/Hlrnr/w6lNn8Z96PelylK5IzcnrrwNVdllp2PWSPQuQl6J0qNM8YmyDVTh veM+ABkPzCVDJm7sLk0Lxyeixi+R9S0thgh7qGNLHDoMEwsQDbauEckVhYACt/rg C/eBUZffoFHMQGUTzT91oeZQivGg624lZDa26CVrVBxlwkjnKlkRSXR/dUPhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOZlIKCZpdl2lHUpHUrPdKmzHqIMwHwYDVR0j BBgwFoAUqkWY2D28FCoWStcvXdkDaq7bChswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRTM3MjExN0I2MUYzMTcxRTM3OTdBOUY2ODQwREZCNDE1 NTREMTM0NUNDQTgyN0MxNEZFODhCQkY0MkZGNjZDLzAvQUE0NTk4RDgzREJDMTQy QTE2NEFENzJGNUREOTAzNkFBRURCMEExQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTQ1OThEODNEQkMxNDJBMTY0 QUQ3MkY1REQ5MDM2QUFFREIwQTFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkUzNzIxMTdCNjFGMzE3MUUzNzk3QTlGNjg0MERGQjQxNTU0RDEzNDVD Q0E4MjdDMTRGRTg4QkJGNDJGRjY2Qy8wL0FBNDU5OEQ4M0RCQzE0MkExNjRBRDcy RjVERDkwMzZBQUVEQjBBMUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGRl5ThkMOw/w+FdJLwNzwpOz4 9f4c68SClheh2sm85m1H7pBInOuInSxjx83jf/LA8+6AJvIPOTcRWDGNSbxQCcQ7 RNQ3e136v/HRAGwYxIlnr0m1hct3zgrhoFmNtKOswXNLE6CVzCAewJtPSMA+4S6i RV8ufbWS2+rpcBxC9cXx4vLAoFDN/sqnir4Djqh1b8CcMbGui8fqBcpemmMVbzow A3NSHzhYpVRg3fRNMgdiKRFkKAkQJO4asErfGuDW5gqwp3px1WsI9+6+7n9FhELP EiX2FOAL0a/pR+WeqEsPJQ38OZj4INjZhyLgRoXYv3QAIw/eWdTIlpXvqzoO -----END CERTIFICATE-----Generated at Sun Nov 2 01:28:24 2025 by rpki-client