$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BFDD1555C8465C71EA51AF7C4CD118BC7FE6DC1EAA27054049776BBD68D9AAA/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.mft File: AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.mft (raw, json) Hash identifier: Q9M6qrjoUgdlOFj277OUiJ/X/R8YFITWAEnr6Jb5WeY= Subject key identifier: BC:E1:0E:60:E9:11:C4:98:20:62:B2:13:13:BD:04:8F:01:B3:AE:82 Authority key identifier: AA:EB:3F:98:55:C7:BF:65:86:9D:EB:D3:AA:FD:93:46:BF:C1:E6:F6 Certificate issuer: /CN=AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6 Certificate serial: 6A834AC2A0AC7A137944C10FAD3323AF5947907A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8BFDD1555C8465C71EA51AF7C4CD118BC7FE6DC1EAA27054049776BBD68D9AAA/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.mft Manifest number: 010C Signing time: Tue 19 Aug 2025 18:50:19 +0000 Manifest this update: Tue 19 Aug 2025 18:45:19 +0000 Manifest next update: Mon 25 Aug 2025 16:20:19 +0000 Files and hashes: 1: AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.crl (hash: PWcSzgovPRCkfxygPJZXjYVAFUhSXS47HHe5+UsvprY=) 2: 323830363a3363643a3a2f33322d3332203d3e20323635353233.roa (hash: qv8h6cVjjy3NKGztybPpj/b0KwUa2DUAA/9n6rrOpCw=) 3: 3138362e3230392e39322e302f32322d3232203d3e20323635353233.roa (hash: kTdkFPGnexoHoQB9rZ28c8mB7A+uTQK3DhC58MMRk2k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8BFDD1555C8465C71EA51AF7C4CD118BC7FE6DC1EAA27054049776BBD68D9AAA/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.crl rsync://repository.lacnic.net/rpki/lacnic/8BFDD1555C8465C71EA51AF7C4CD118BC7FE6DC1EAA27054049776BBD68D9AAA/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 Aug 2025 05:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:83:4a:c2:a0:ac:7a:13:79:44:c1:0f:ad:33:23:af:59:47:90:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6 Validity Not Before: Aug 19 18:45:19 2025 GMT Not After : Aug 25 16:20:19 2025 GMT Subject: CN=BCE10E60E911C4982062B21313BD048F01B3AE82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:42:3e:ce:ec:15:40:e1:f6:0d:bf:bd:85:ec: 45:04:7e:b1:7b:90:94:54:a1:5e:b4:81:d8:e9:6a: 0a:ab:b2:5b:be:37:e9:bc:67:76:fc:92:32:6a:ac: 6a:bd:bf:89:5e:9f:c3:0c:0c:b2:83:91:57:05:b4: 9a:e7:39:02:af:cd:9a:6f:a2:0e:fb:af:96:11:4e: d1:6e:ca:3b:26:43:2e:d8:0c:f8:fc:8d:13:c4:56: 43:7d:f0:23:a3:f7:83:43:dc:07:24:aa:cd:2e:c0: bb:90:11:e3:fc:22:c5:73:dc:9b:49:7f:5c:02:8d: 6e:c2:df:bf:bf:8c:d3:88:37:6e:5b:f6:e5:ce:d4: 62:08:4c:49:90:1c:35:ee:4f:6f:90:a1:89:c5:5b: 6d:e4:7a:1b:8e:b6:ee:c7:bb:67:ca:3b:6f:6d:de: 4b:d9:7a:c5:a2:2a:a5:52:71:75:27:e7:86:6a:97: 4a:e4:0c:41:5b:a7:19:aa:12:b9:24:58:d4:b2:3c: 08:03:3b:78:7c:07:bb:3c:85:9d:85:ea:d6:ab:3f: 27:07:50:28:4e:df:66:92:4b:49:87:7e:ad:a2:ba: ff:ce:5f:cc:1e:c6:ba:29:9b:21:95:57:78:3a:0e: a5:a9:37:26:d4:eb:cb:28:34:ef:bd:c0:01:13:c5: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E1:0E:60:E9:11:C4:98:20:62:B2:13:13:BD:04:8F:01:B3:AE:82 X509v3 Authority Key Identifier: keyid:AA:EB:3F:98:55:C7:BF:65:86:9D:EB:D3:AA:FD:93:46:BF:C1:E6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8BFDD1555C8465C71EA51AF7C4CD118BC7FE6DC1EAA27054049776BBD68D9AAA/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BFDD1555C8465C71EA51AF7C4CD118BC7FE6DC1EAA27054049776BBD68D9AAA/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c6:e5:a6:1d:b3:7b:9f:1a:fe:b7:a6:04:6d:0b:d9:84:86: b5:81:f7:47:55:70:98:07:29:01:40:d8:8a:7e:ac:3c:08:5a: 6a:bb:c9:17:04:59:de:2a:e0:cd:51:75:ad:57:a5:83:26:3b: 5e:02:27:25:72:25:44:bf:4c:a3:7a:64:eb:e3:85:c6:e1:19: 22:47:08:76:ac:ba:bf:46:9c:c3:84:42:62:05:bf:e5:3e:9a: 6c:64:84:ef:34:71:41:b2:6d:14:9a:8f:1d:bb:6b:0e:45:c3: 16:0e:1a:e9:eb:75:9c:e5:a6:43:42:e5:5e:e9:b2:24:c6:f8: 4b:1d:ec:0f:74:22:4b:02:b3:ad:36:75:26:fe:7f:62:b5:e3: bd:62:22:2d:f4:a6:73:5f:be:bf:51:84:1b:f4:b2:5d:a9:69: f7:36:89:6a:25:19:9b:e7:69:1c:13:db:71:e3:48:e4:a5:3f: 17:97:1a:cc:27:ae:a4:b2:97:06:95:49:61:7b:ad:f7:fe:26: 85:9d:fc:f9:0f:c1:79:d4:42:9d:9b:d4:ea:7a:1b:6c:a5:c4: d4:04:b0:6a:e7:43:a4:a7:f0:0f:0e:f4:d3:b6:8b:09:3a:d8: 8f:8c:a6:29:fe:f2:b8:c9:de:12:23:29:5d:6e:80:3e:7e:c0: 67:a1:18:b1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaoNKwqCsehN5RMEPrTMjr1lHkHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFQjNGOTg1NUM3QkY2NTg2OURFQkQzQUFGRDkzNDZC RkMxRTZGNjAeFw0yNTA4MTkxODQ1MTlaFw0yNTA4MjUxNjIwMTlaMDMxMTAvBgNV BAMTKEJDRTEwRTYwRTkxMUM0OTgyMDYyQjIxMzEzQkQwNDhGMDFCM0FFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNQj7O7BVA4fYNv72F7EUEfrF7 kJRUoV60gdjpagqrslu+N+m8Z3b8kjJqrGq9v4len8MMDLKDkVcFtJrnOQKvzZpv og77r5YRTtFuyjsmQy7YDPj8jRPEVkN98COj94ND3Ackqs0uwLuQEeP8IsVz3JtJ f1wCjW7C37+/jNOIN25b9uXO1GIITEmQHDXuT2+QoYnFW23kehuOtu7Hu2fKO29t 3kvZesWiKqVScXUn54Zql0rkDEFbpxmqErkkWNSyPAgDO3h8B7s8hZ2F6tarPycH UChO32aSS0mHfq2iuv/OX8wexropmyGVV3g6DqWpNybU68soNO+9wAETxSHZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvOEOYOkRxJggYrITE70EjwGzroIwHwYDVR0j BBgwFoAUqus/mFXHv2WGnevTqv2TRr/B5vYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QkZERDE1NTVDODQ2NUM3MUVBNTFBRjdDNENEMTE4QkM3 RkU2REMxRUFBMjcwNTQwNDk3NzZCQkQ2OEQ5QUFBLzAvQUFFQjNGOTg1NUM3QkY2 NTg2OURFQkQzQUFGRDkzNDZCRkMxRTZGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUVCM0Y5ODU1QzdCRjY1ODY5 REVCRDNBQUZEOTM0NkJGQzFFNkY2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEJGREQxNTU1Qzg0NjVDNzFFQTUxQUY3QzRDRDExOEJDN0ZFNkRDMUVB QTI3MDU0MDQ5Nzc2QkJENjhEOUFBQS8wL0FBRUIzRjk4NTVDN0JGNjU4NjlERUJE M0FBRkQ5MzQ2QkZDMUU2RjYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0xuWmHbN7nxr+t6YEbQvZhIa1 gfdHVXCYBykBQNiKfqw8CFpqu8kXBFneKuDNUXWtV6WDJjteAiclciVEv0yjemTr 44XG4RkiRwh2rLq/RpzDhEJiBb/lPppsZITvNHFBsm0Umo8du2sORcMWDhrp63Wc 5aZDQuVe6bIkxvhLHewPdCJLArOtNnUm/n9iteO9YiIt9KZzX76/UYQb9LJdqWn3 NolqJRmb52kcE9tx40jkpT8XlxrMJ66kspcGlUlhe633/iaFnfz5D8F51EKdm9Tq ehtspcTUBLBq50Okp/APDvTTtosJOtiPjKYp/vK4yd4SIyldboA+fsBnoRix -----END CERTIFICATE-----Generated at Thu Aug 21 09:45:09 2025 by rpki-client