$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft (raw, json) Hash identifier: 0XHNfyTcaRVmTmOzAfW1AB5hLp16k7xQp36Kuk6ZI/s= Subject key identifier: 38:19:9E:D8:A4:C9:E0:75:63:70:DE:A4:91:0E:1A:24:F1:50:BB:87 Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF Certificate issuer: /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Certificate serial: 3D324BD397E14FAA1FD61D8C34764F130928EC03 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft Manifest number: 01A3 Signing time: Mon 27 Apr 2026 21:11:13 +0000 Manifest this update: Mon 27 Apr 2026 21:06:13 +0000 Manifest next update: Sun 03 May 2026 06:48:13 +0000 Files and hashes: 1: AS22884.roa (hash: Za7Aj+bufqfodIVj9D2wDJcBrFzoweGHPtEQnUGacVw=) 2: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl (hash: S7IcB454lFtJSupG4ArX6QE0VBYA3RCIR06FsQtrWc0=) 3: AS17072.roa (hash: R+2q09GH0ungPp49w2zD7B0xJwqCbDNeaRUE/LWRMzQ=) 4: AS28414.roa (hash: oLB6f9LZPceeei3hsyIsrm72NY62QAbK78fW/F63gaU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 May 2026 06:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:32:4b:d3:97:e1:4f:aa:1f:d6:1d:8c:34:76:4f:13:09:28:ec:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Validity Not Before: Apr 27 21:06:13 2026 GMT Not After : May 3 06:48:13 2026 GMT Subject: CN=38199ED8A4C9E0756370DEA4910E1A24F150BB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:60:b6:35:08:52:c6:88:af:85:f0:a4:7c: 61:23:59:d7:5d:d2:74:0b:5d:5d:b0:21:01:b4:d1: 9f:b2:cb:9a:e0:ab:cf:c6:a3:72:6d:a8:6f:d6:74: ca:aa:7c:18:cb:1f:6a:85:2c:8d:ad:35:dc:59:8b: 93:a4:4e:cc:4a:51:37:09:1e:6b:64:99:17:74:41: 4a:fb:1b:43:2d:96:c3:65:7c:e0:46:9d:f7:69:c6: f4:1c:1b:6b:fc:b0:a0:27:bc:70:b1:bf:1c:3a:1a: 5a:b0:4c:cd:38:98:3d:34:37:55:47:22:0b:a4:40: 17:7e:99:da:55:23:b7:31:16:79:8a:df:92:97:be: 62:87:af:bc:6a:2c:ce:cb:32:ae:b4:f3:21:d1:28: 28:35:65:80:41:45:2f:5b:27:a8:df:be:e5:8a:ad: 32:ca:f6:9b:e0:34:7a:ee:e6:2d:e4:89:ca:0c:51: 63:df:e7:0b:c4:d9:93:92:7a:65:c3:6f:16:ce:a2: 2b:d4:ad:e7:c3:d9:cd:9d:7e:2d:6e:38:1d:00:09: f7:2b:f5:21:0f:d0:7d:be:ea:21:ae:65:6a:b0:dc: 2e:35:17:5a:94:1a:8e:b7:1b:2b:f7:ae:46:12:c8: d7:7f:b3:a7:db:86:0c:b9:3d:d3:a7:d1:7c:28:93: fc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:19:9E:D8:A4:C9:E0:75:63:70:DE:A4:91:0E:1A:24:F1:50:BB:87 X509v3 Authority Key Identifier: keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ab:58:95:c4:9c:cc:7c:53:00:86:db:7a:a9:1d:5f:63:d3: b8:b0:0b:3a:a8:df:40:82:02:a5:10:b7:a5:f7:ec:e8:7c:66: 65:92:0e:e3:84:42:ee:51:41:f7:e0:d9:fd:2f:a5:7c:ca:8c: 8e:9c:10:ee:ba:21:9d:24:a8:fb:2e:06:35:f9:bf:74:a9:40: e8:c5:8a:22:ea:c9:53:87:32:d7:05:cd:f7:0d:35:94:d8:39: 55:65:5c:da:19:87:39:bd:c6:50:25:6a:b2:da:69:f6:27:c9: 29:62:89:2a:50:5b:3d:d0:96:f3:28:24:e6:f2:4e:ef:e4:9d: 0e:59:22:ff:5f:a5:d8:3f:99:d4:69:12:52:b4:e9:23:5f:f8: 04:e2:63:b8:3e:c0:27:24:4c:5b:02:de:4e:60:75:b5:60:1e: 38:b4:8a:bb:45:97:f7:db:d0:dd:32:b6:be:01:3f:27:be:05: 30:b2:d4:f0:b8:35:db:1b:01:3e:62:a5:ba:9b:f8:f2:c1:cf: 28:63:a9:ea:c9:97:d8:67:9a:90:87:42:09:38:c9:ea:bb:b7: ee:c0:62:c8:8d:25:dc:8f:0a:3a:2f:00:6b:e1:aa:ed:38:fd: 3b:d8:28:df:ed:66:dd:b9:0c:2e:29:81:88:73:ac:b5:5d:50: e4:3c:4c:7e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPTJL05fhT6of1h2MNHZPEwko7AMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYzQTI1Qzk3NUY1 OEFBMEJGRjAeFw0yNjA0MjcyMTA2MTNaFw0yNjA1MDMwNjQ4MTNaMDMxMTAvBgNV BAMTKDM4MTk5RUQ4QTRDOUUwNzU2MzcwREVBNDkxMEUxQTI0RjE1MEJCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9J2C2NQhSxoivhfCkfGEjWddd 0nQLXV2wIQG00Z+yy5rgq8/Go3JtqG/WdMqqfBjLH2qFLI2tNdxZi5OkTsxKUTcJ HmtkmRd0QUr7G0MtlsNlfOBGnfdpxvQcG2v8sKAnvHCxvxw6GlqwTM04mD00N1VH IgukQBd+mdpVI7cxFnmK35KXvmKHr7xqLM7LMq608yHRKCg1ZYBBRS9bJ6jfvuWK rTLK9pvgNHru5i3kicoMUWPf5wvE2ZOSemXDbxbOoivUrefD2c2dfi1uOB0ACfcr 9SEP0H2+6iGuZWqw3C41F1qUGo63Gyv3rkYSyNd/s6fbhgy5PdOn0Xwok/y1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOBme2KTJ4HVjcN6kkQ4aJPFQu4cwHwYDVR0j BBgwFoAUiq8cMSwkESUsf3djolyXX1iqC/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0 OTc2MjFEMjMxMDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEy NTJDN0Y3NzYzQTI1Qzk3NUY1OEFBMEJGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QUFGMUMzMTJDMjQxMTI1MkM3 Rjc3NjNBMjVDOTc1RjU4QUEwQkZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTBCRjlFMDYzMjk0QzczNUI4MzVBRUFFMTU4MTZERjA3NDk3NjIxRDIz MTA0MDlDNTc3MjlBQTY4Rjc3M0NCNC8wLzhBQUYxQzMxMkMyNDExMjUyQzdGNzc2 M0EyNUM5NzVGNThBQTBCRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2q1iVxJzMfFMAhtt6qR1fY9O4 sAs6qN9AggKlELel9+zofGZlkg7jhELuUUH34Nn9L6V8yoyOnBDuuiGdJKj7LgY1 +b90qUDoxYoi6slThzLXBc33DTWU2DlVZVzaGYc5vcZQJWqy2mn2J8kpYokqUFs9 0JbzKCTm8k7v5J0OWSL/X6XYP5nUaRJStOkjX/gE4mO4PsAnJExbAt5OYHW1YB44 tIq7RZf329DdMra+AT8nvgUwstTwuDXbGwE+YqW6m/jywc8oY6nqyZfYZ5qQh0IJ OMnqu7fuwGLIjSXcjwo6LwBr4artOP072Cjf7WbduQwuKYGIc6y1XVDkPEx+ -----END CERTIFICATE-----Generated at Thu Apr 30 05:52:25 2026 by rpki-client