$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft File: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft (raw, json) Hash identifier: IQTFR/3dZvpdXKOYNf9GmnMOd/i6XMptbklchl0nKTI= Subject key identifier: 7B:CA:0D:65:71:6D:77:C7:DE:EB:B4:88:5A:A1:B1:30:7A:BF:DE:AD Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Certificate serial: 453148063A8B683A2E17DADCE74667608EBFC26A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft Manifest number: E8 Signing time: Mon 02 Jun 2025 17:44:42 +0000 Manifest this update: Mon 02 Jun 2025 17:39:42 +0000 Manifest next update: Sun 08 Jun 2025 07:18:42 +0000 Files and hashes: 1: 3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa (hash: +3H2vQacPst44179H9ozi8ZNmuf3gbFsNRH1xkt2BXU=) 2: 3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (hash: w3Yy4sRo0gzJGcEnOCGmEHKKiZdLPgWGX410//7WEO4=) 3: 3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (hash: M4+B8dKZV5DI02H1wVqkAPnxV4BALeFj/B9STyRTB2k=) 4: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl (hash: 9pi+0+On+S473EVChRSk3Yz9mRvF/AdqSO4i/6EKEgU=) 5: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (hash: yvSEv5Xfx29WmYskueRJZaLzBlNmMLZ3piPORyqzEPc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:31:48:06:3a:8b:68:3a:2e:17:da:dc:e7:46:67:60:8e:bf:c2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Validity Not Before: Jun 2 17:39:42 2025 GMT Not After : Jun 8 07:18:42 2025 GMT Subject: CN=7BCA0D65716D77C7DEEBB4885AA1B1307ABFDEAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b7:63:e4:41:e6:2e:2b:23:ae:37:f5:f5:48: 50:bc:24:1f:ac:62:9c:62:e4:6e:81:47:67:37:9c: 2d:17:74:d4:67:a7:9b:8b:7b:b3:91:e0:b5:8c:ef: 9e:15:73:20:e0:10:36:6a:3d:8f:34:d3:ad:69:15: 9b:e0:79:dd:26:a9:5d:51:e4:f6:a3:c3:4a:29:ff: ff:a5:a6:47:ef:06:3b:1b:7c:81:60:51:88:16:a6: d0:c4:28:67:4a:f6:36:90:35:6a:53:a3:17:16:ed: 0d:05:d6:54:79:08:cd:98:33:1b:27:30:85:e8:bc: 9f:3f:a6:9d:9d:e8:07:8f:20:bf:09:cd:d6:16:80: b3:3d:71:7b:f7:2e:d1:32:51:50:00:2b:d9:1c:19: 7e:22:d5:6e:21:86:7b:6f:2a:00:42:27:f6:ea:18: d4:96:bb:52:3f:c8:3b:17:ef:49:56:f9:f9:a3:00: cd:67:3f:75:ee:46:85:59:3f:1e:73:8a:22:cf:c7: ea:d0:8b:fc:de:04:11:13:ae:2d:49:53:8e:bd:98: 27:3d:47:29:f2:85:f3:e2:1f:bc:ca:3b:0b:14:64: f1:cb:1e:db:72:03:c4:81:38:b9:e2:6d:01:ee:4c: b9:7a:07:52:d9:8a:85:ee:dd:e3:87:94:48:30:17: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CA:0D:65:71:6D:77:C7:DE:EB:B4:88:5A:A1:B1:30:7A:BF:DE:AD X509v3 Authority Key Identifier: keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d5:2b:98:cf:fd:f9:a2:40:d0:dc:b3:1c:36:bc:3a:de:13: 11:95:6e:f5:5e:f2:ad:3f:be:20:a7:0f:ea:df:67:6c:13:bb: fb:0d:b9:38:b3:f5:21:89:71:da:1b:1d:4b:29:6b:c4:b9:91: a7:a9:eb:e4:52:81:08:75:fd:a6:fd:34:04:01:1e:74:67:e2: c1:d5:6d:f0:98:81:3e:31:14:2e:c6:de:2b:4f:27:32:e7:f0: 4e:3a:a6:dd:8e:8f:52:1d:91:97:94:0d:f1:d9:81:c7:d9:26: 64:70:58:52:08:63:7b:b0:81:51:ca:04:8d:f7:e5:83:84:96: fc:1d:b4:7e:f8:db:4a:b3:d3:92:78:b2:77:2b:19:14:68:76: b7:36:7b:19:a2:e1:c3:28:7c:59:6b:1b:f6:21:de:a0:d3:34: 9c:ca:6c:12:b2:ad:8b:50:82:c0:6e:0e:f8:c1:22:5b:fe:6a: 94:e9:90:33:73:ed:12:39:da:00:d4:8a:58:e4:9e:aa:7e:0d: 35:ef:69:b1:a5:a1:99:01:77:f9:22:8f:95:27:2a:d0:2e:4c: 3c:98:0f:e4:12:4d:83:b9:dd:60:11:2b:0f:d5:0a:18:67:e4: 50:ff:5c:a5:b7:3a:4f:35:d9:28:4c:60:64:56:e4:76:11:f9: 6e:4f:c0:ad -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURTFIBjqLaDouF9rc50ZnYI6/wmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyMUI4MUEzNUJBRjdFNUYxMEUwQzhBQkUxNjQ2Njc0 NUMzN0JGODAeFw0yNTA2MDIxNzM5NDJaFw0yNTA2MDgwNzE4NDJaMDMxMTAvBgNV BAMTKDdCQ0EwRDY1NzE2RDc3QzdERUVCQjQ4ODVBQTFCMTMwN0FCRkRFQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbt2PkQeYuKyOuN/X1SFC8JB+s Ypxi5G6BR2c3nC0XdNRnp5uLe7OR4LWM754VcyDgEDZqPY80061pFZvged0mqV1R 5Pajw0op//+lpkfvBjsbfIFgUYgWptDEKGdK9jaQNWpToxcW7Q0F1lR5CM2YMxsn MIXovJ8/pp2d6AePIL8JzdYWgLM9cXv3LtEyUVAAK9kcGX4i1W4hhntvKgBCJ/bq GNSWu1I/yDsX70lW+fmjAM1nP3XuRoVZPx5ziiLPx+rQi/zeBBETri1JU469mCc9 RynyhfPiH7zKOwsUZPHLHttyA8SBOLnibQHuTLl6B1LZioXu3eOHlEgwF1czAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUe8oNZXFtd8fe67SIWqGxMHq/3q0wHwYDVR0j BBgwFoAUqiG4GjW69+XxDgyKvhZGZ0XDe/gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MjQ0MjRFODUyNDUwMDgyQjlCNTQzODFEM0E5NEE4MUQ1 OUNENEU2NjNEREE4NUE0MkM5QjA1MTc3RDc4M0UyLzAvQUEyMUI4MUEzNUJBRjdF NUYxMEUwQzhBQkUxNjQ2Njc0NUMzN0JGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIxQjgxQTM1QkFGN0U1RjEw RTBDOEFCRTE2NDY2NzQ1QzM3QkY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzI0NDI0RTg1MjQ1MDA4MkI5QjU0MzgxRDNBOTRBODFENTlDRDRFNjYz RERBODVBNDJDOUIwNTE3N0Q3ODNFMi8wL0FBMjFCODFBMzVCQUY3RTVGMTBFMEM4 QUJFMTY0NjY3NDVDMzdCRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBg1SuYz/35okDQ3LMcNrw63hMR lW71XvKtP74gpw/q32dsE7v7Dbk4s/UhiXHaGx1LKWvEuZGnqevkUoEIdf2m/TQE AR50Z+LB1W3wmIE+MRQuxt4rTycy5/BOOqbdjo9SHZGXlA3x2YHH2SZkcFhSCGN7 sIFRygSN9+WDhJb8HbR++NtKs9OSeLJ3KxkUaHa3NnsZouHDKHxZaxv2Id6g0zSc ymwSsq2LUILAbg74wSJb/mqU6ZAzc+0SOdoA1IpY5J6qfg0172mxpaGZAXf5Io+V JyrQLkw8mA/kEk2Dud1gESsP1QoYZ+RQ/1yltzpPNdkoTGBkVuR2EfluT8Ct -----END CERTIFICATE-----Generated at Wed Jun 4 12:30:58 2025 by rpki-client