$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.mft File: AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.mft (raw, json) Hash identifier: AzJze/w58k2qIkL3tpo06h9KOU7cg8wpQSUR3BApUeU= Subject key identifier: E1:61:4D:CC:9A:39:98:89:62:1E:52:8A:4A:16:22:7B:76:A6:3A:1A Authority key identifier: AA:AD:6C:B4:C2:34:07:78:75:F9:DC:AD:B1:FC:79:B4:34:7A:BD:B3 Certificate issuer: /CN=AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3 Certificate serial: 7A788CD53F7BB35BDBF5B2BD36982980460C18D0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.mft Manifest number: 0138 Signing time: Mon 10 Nov 2025 00:54:08 +0000 Manifest this update: Mon 10 Nov 2025 00:49:08 +0000 Manifest next update: Fri 14 Nov 2025 22:27:08 +0000 Files and hashes: 1: AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.crl (hash: ICGjBIeTkNimNKrrGyXDdKTMjYVw9L/Q+meYWpbqqAY=) 2: 34352e3233362e3130342e302f32322d3234203d3e20323633323338.roa (hash: L4N+sBi30NuCWvhLjQ/lOi2RG/i6gf+/l6fs8Mp0VZY=) 3: 323830333a663061303a3a2f33322d3634203d3e20323633323338.roa (hash: XVccYgu7KCilrijrjo+VNhaAQ+BqSNrIXGY2flmcIPA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.crl rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 14 Nov 2025 22:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:78:8c:d5:3f:7b:b3:5b:db:f5:b2:bd:36:98:29:80:46:0c:18:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3 Validity Not Before: Nov 10 00:49:08 2025 GMT Not After : Nov 14 22:27:08 2025 GMT Subject: CN=E1614DCC9A399889621E528A4A16227B76A63A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8d:17:21:4e:4c:42:5d:f6:36:2d:92:db:af: e3:22:73:59:bf:69:0f:5c:cc:d3:24:45:ac:e0:c3: 2b:b9:ee:02:af:f0:f7:17:e1:23:97:dd:b9:1e:4a: e7:ac:43:fd:d6:f1:47:f5:2e:27:ac:d8:45:27:94: 2c:9c:eb:bd:14:b2:6c:29:91:ab:e9:11:bc:85:47: 68:40:5a:4c:1d:3d:c2:f2:cb:30:2a:b7:62:48:86: e1:47:94:ac:9c:88:a5:93:75:a4:15:f3:56:5d:25: aa:d2:41:72:ab:e6:59:ee:95:6d:7c:83:be:65:03: 06:24:cf:63:10:56:58:3a:c8:5a:18:c8:67:0a:ef: 53:ce:67:38:42:f4:8a:a2:97:42:4c:3e:f1:47:e8: 0d:8e:a2:d5:0e:d7:2b:e0:32:13:9f:26:ac:ed:42: 6f:01:b5:aa:14:91:bf:4f:4e:ef:97:dc:2a:90:88: 0f:92:d2:09:49:65:4d:c4:9a:2a:a5:76:6f:4c:32: af:d9:ac:1d:47:d0:fe:9d:47:dd:fc:67:4c:eb:48: a6:14:55:9a:47:b9:a0:8a:9e:40:fd:bf:86:cb:45: 05:0d:7d:ab:84:64:42:67:3d:82:ff:d7:61:ef:5e: 28:a8:a3:04:b1:a2:ef:15:7b:54:06:a4:9e:56:b0: ac:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:61:4D:CC:9A:39:98:89:62:1E:52:8A:4A:16:22:7B:76:A6:3A:1A X509v3 Authority Key Identifier: keyid:AA:AD:6C:B4:C2:34:07:78:75:F9:DC:AD:B1:FC:79:B4:34:7A:BD:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:03:b1:01:e2:d7:b2:82:23:54:e2:c5:26:eb:ad:32:61:0f: 8e:41:2e:a6:4f:12:8b:1e:db:3c:a3:99:b6:6b:3f:bb:de:af: 83:d8:46:27:c0:c0:9c:7d:17:41:83:eb:cc:ed:1c:69:bb:4f: c9:15:4d:94:09:f3:23:17:b0:23:69:d3:07:a1:6d:24:45:41: 2b:35:1d:c4:b7:ed:5e:4b:bc:b4:49:b8:60:9f:5e:71:0c:84: 9f:9d:32:f5:ef:ca:7f:2b:ed:87:8f:1f:a1:8f:67:be:a5:7b: a6:26:78:3b:5d:54:5e:88:43:08:f3:14:4d:47:f3:70:07:48: 10:1f:1f:3a:76:07:84:25:01:65:a1:27:97:2d:f2:9c:37:60: 8c:cf:ee:3c:70:51:1d:03:3a:fb:b9:c8:35:80:f2:ad:47:35: ec:68:41:ed:b5:31:30:44:c5:28:97:06:d9:e3:50:52:1c:b8: 6b:13:1f:7d:34:b8:40:5c:db:f9:af:38:3d:ef:f3:42:8e:f9: 7a:61:b2:46:6e:da:da:61:4d:42:9b:14:d5:9b:59:96:68:5b: b9:8a:fc:ce:3e:51:8d:00:24:e1:9f:fa:5d:f1:ea:c0:2e:65: a7:fb:98:fa:75:42:7d:dd:2e:f8:fd:be:84:53:24:86:5a:c8: 71:0e:33:3f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeniM1T97s1vb9bK9NpgpgEYMGNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFBRDZDQjRDMjM0MDc3ODc1RjlEQ0FEQjFGQzc5QjQz NDdBQkRCMzAeFw0yNTExMTAwMDQ5MDhaFw0yNTExMTQyMjI3MDhaMDMxMTAvBgNV BAMTKEUxNjE0RENDOUEzOTk4ODk2MjFFNTI4QTRBMTYyMjdCNzZBNjNBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfjRchTkxCXfY2LZLbr+Mic1m/ aQ9czNMkRazgwyu57gKv8PcX4SOX3bkeSuesQ/3W8Uf1Lies2EUnlCyc670Usmwp kavpEbyFR2hAWkwdPcLyyzAqt2JIhuFHlKyciKWTdaQV81ZdJarSQXKr5lnulW18 g75lAwYkz2MQVlg6yFoYyGcK71POZzhC9Iqil0JMPvFH6A2OotUO1yvgMhOfJqzt Qm8BtaoUkb9PTu+X3CqQiA+S0glJZU3Emiqldm9MMq/ZrB1H0P6dR938Z0zrSKYU VZpHuaCKnkD9v4bLRQUNfauEZEJnPYL/12HvXiioowSxou8Ve1QGpJ5WsKwJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU4WFNzJo5mIliHlKKShYie3amOhowHwYDVR0j BBgwFoAUqq1stMI0B3h1+dytsfx5tDR6vbMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNUVEMDRGMUFENTg2OTVDNjkwQkQ0MUMwRDYzQUVBRDUx RDE1QUVCNTY4NkQ4Q0QxNjI0NzZGQkJFMzYzOUM5LzAvQUFBRDZDQjRDMjM0MDc3 ODc1RjlEQ0FEQjFGQzc5QjQzNDdBQkRCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUFENkNCNEMyMzQwNzc4NzVG OURDQURCMUZDNzlCNDM0N0FCREIzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzVFRDA0RjFBRDU4Njk1QzY5MEJENDFDMEQ2M0FFQUQ1MUQxNUFFQjU2 ODZEOENEMTYyNDc2RkJCRTM2MzlDOS8wL0FBQUQ2Q0I0QzIzNDA3Nzg3NUY5RENB REIxRkM3OUI0MzQ3QUJEQjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2A7EB4teygiNU4sUm660yYQ+O QS6mTxKLHts8o5m2az+73q+D2EYnwMCcfRdBg+vM7Rxpu0/JFU2UCfMjF7AjadMH oW0kRUErNR3Et+1eS7y0Sbhgn15xDISfnTL178p/K+2Hjx+hj2e+pXumJng7XVRe iEMI8xRNR/NwB0gQHx86dgeEJQFloSeXLfKcN2CMz+48cFEdAzr7ucg1gPKtRzXs aEHttTEwRMUolwbZ41BSHLhrEx99NLhAXNv5rzg97/NCjvl6YbJGbtraYU1CmxTV m1mWaFu5ivzOPlGNACThn/pd8erALmWn+5j6dUJ93S74/b6EUySGWshxDjM/ -----END CERTIFICATE-----Generated at Tue Nov 11 10:38:58 2025 by rpki-client