$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft File: 9AFA60D4E92B5689530450825C9C35894D0EB152.mft (raw, json) Hash identifier: I9addnXLmAwO4e+a0uRxiLitXhVCwlvYL9FgJtmZHMY= Subject key identifier: B1:D9:FC:14:68:95:69:AC:24:06:56:C0:C4:42:4A:06:EB:6B:88:E8 Authority key identifier: 9A:FA:60:D4:E9:2B:56:89:53:04:50:82:5C:9C:35:89:4D:0E:B1:52 Certificate issuer: /CN=9AFA60D4E92B5689530450825C9C35894D0EB152 Certificate serial: 07718D5044722731C8EB0A6D1968E9243BAD65B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AFA60D4E92B5689530450825C9C35894D0EB152.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft Manifest number: 0121 Signing time: Sat 18 Oct 2025 17:01:00 +0000 Manifest this update: Sat 18 Oct 2025 16:56:00 +0000 Manifest next update: Fri 24 Oct 2025 00:26:00 +0000 Files and hashes: 1: 9AFA60D4E92B5689530450825C9C35894D0EB152.crl (hash: coRJ5qdiyKSP2pMzUJVHe8MCCGq/MDvXLZ7NWEF/+F4=) 2: 323830333a386231303a3a2f33322d3332203d3e20323732303733.roa (hash: MoDs6HT93M+rFgY+VC5xSnDbIDCVdwwUyZbDWl5/reM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.crl rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AFA60D4E92B5689530450825C9C35894D0EB152.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:71:8d:50:44:72:27:31:c8:eb:0a:6d:19:68:e9:24:3b:ad:65:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFA60D4E92B5689530450825C9C35894D0EB152 Validity Not Before: Oct 18 16:56:00 2025 GMT Not After : Oct 24 00:26:00 2025 GMT Subject: CN=B1D9FC14689569AC240656C0C4424A06EB6B88E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:22:b1:59:9e:c1:c1:44:34:7f:ac:17:56: 65:7a:15:ce:b3:80:b6:ff:39:6c:ec:e8:c7:f4:1f: 2a:4b:52:63:51:10:02:ac:48:ae:84:52:6b:af:06: 32:da:01:63:76:06:99:be:ef:8e:bf:e2:a8:1b:46: e7:ea:10:66:27:c5:5b:35:0d:95:38:5b:c2:56:78: 1a:89:d3:f1:4c:30:65:6a:60:29:89:04:cf:2a:04: d3:4c:ab:ba:8e:14:1f:1d:ac:9b:29:d9:b6:83:37: 0a:25:f6:3d:f5:9a:fc:09:61:cc:20:05:a6:a3:2e: f0:70:7e:9d:3f:6a:b6:3a:96:d1:d6:5f:91:cf:f5: 79:7b:d9:f2:64:c6:34:dc:20:fb:9c:cd:85:2d:df: 66:46:cf:ad:ba:e7:7a:f4:c3:dc:e9:a3:65:fa:81: 69:51:d1:1d:ee:fd:0d:ef:d0:14:ee:f1:29:76:52: b7:82:62:a8:a8:15:ef:e6:c9:22:a2:07:f6:7c:2f: 4d:43:25:b7:c3:85:fe:5d:79:e1:7a:29:b2:70:51: 56:f7:64:d7:4e:54:1d:81:af:eb:7d:09:aa:89:13: 62:7a:cb:44:b8:65:74:2a:1b:c5:56:07:06:39:70: 5e:8b:63:dc:f5:01:39:b1:3e:bc:95:85:b5:03:77: 42:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:FC:14:68:95:69:AC:24:06:56:C0:C4:42:4A:06:EB:6B:88:E8 X509v3 Authority Key Identifier: keyid:9A:FA:60:D4:E9:2B:56:89:53:04:50:82:5C:9C:35:89:4D:0E:B1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AFA60D4E92B5689530450825C9C35894D0EB152.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:96:70:b0:84:ed:e5:a9:3e:00:53:d9:1d:75:c1:11:7a:29: d8:a9:a0:d0:fa:5f:f9:d1:07:01:81:06:00:31:d3:05:63:14: 87:4c:66:ff:ee:5c:f1:b9:e2:ba:d7:09:a8:5c:43:7d:73:a3: 15:d3:5b:c4:71:e9:8f:f3:a6:7a:b3:f7:ed:53:44:05:9d:b2: ff:ab:8a:00:cd:46:47:b8:94:06:75:78:99:f2:91:0f:d1:3f: 2f:a6:77:c5:8a:7f:f2:3d:27:93:76:df:bb:61:dd:66:0e:fe: 91:ea:10:e5:ad:9c:75:7f:42:cf:3e:ea:2b:f5:ee:f1:ed:6e: c5:11:51:51:18:00:79:c7:c0:83:d4:49:ae:79:d6:f4:67:2a: ce:09:d0:d6:cb:7e:82:69:d3:06:2d:a2:22:0d:ad:b3:14:93: f7:3e:b8:42:86:1f:0a:11:12:be:3c:14:39:27:c4:26:c5:6b: 0b:fa:52:67:d3:e4:fb:33:e3:11:d5:b7:99:30:5e:e3:9d:c7: f9:48:24:c1:48:95:b9:f8:91:b1:5f:ef:c2:49:57:2c:98:2f: aa:28:4e:c7:69:26:74:e8:7b:ca:7e:93:35:d9:4b:1a:25:1f: 60:44:4e:48:09:97:ef:96:31:1f:01:c0:5d:af:2d:d1:26:40: 25:51:f0:3f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUB3GNUERyJzHI6wptGWjpJDutZbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGQTYwRDRFOTJCNTY4OTUzMDQ1MDgyNUM5QzM1ODk0 RDBFQjE1MjAeFw0yNTEwMTgxNjU2MDBaFw0yNTEwMjQwMDI2MDBaMDMxMTAvBgNV BAMTKEIxRDlGQzE0Njg5NTY5QUMyNDA2NTZDMEM0NDI0QTA2RUI2Qjg4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmiKxWZ7BwUQ0f6wXVmV6Fc6z gLb/OWzs6Mf0HypLUmNREAKsSK6EUmuvBjLaAWN2Bpm+746/4qgbRufqEGYnxVs1 DZU4W8JWeBqJ0/FMMGVqYCmJBM8qBNNMq7qOFB8drJsp2baDNwol9j31mvwJYcwg BaajLvBwfp0/arY6ltHWX5HP9Xl72fJkxjTcIPuczYUt32ZGz62653r0w9zpo2X6 gWlR0R3u/Q3v0BTu8Sl2UreCYqioFe/mySKiB/Z8L01DJbfDhf5deeF6KbJwUVb3 ZNdOVB2Br+t9CaqJE2J6y0S4ZXQqG8VWBwY5cF6LY9z1ATmxPryVhbUDd0KLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUsdn8FGiVaawkBlbAxEJKButriOgwHwYDVR0j BBgwFoAUmvpg1OkrVolTBFCCXJw1iU0OsVIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRjY2M0Q4NzFDNDdGOThGQTM2MkJCNTVCMTEzRUM2RjRG RTM3M0IzODEzNjkwRDhBQUIxNzY5NUNCMURGRkQ4LzAvOUFGQTYwRDRFOTJCNTY4 OTUzMDQ1MDgyNUM5QzM1ODk0RDBFQjE1Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QUZBNjBENEU5MkI1Njg5NTMw NDUwODI1QzlDMzU4OTREMEVCMTUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkY2NjNEODcxQzQ3Rjk4RkEzNjJCQjU1QjExM0VDNkY0RkUzNzNCMzgx MzY5MEQ4QUFCMTc2OTVDQjFERkZEOC8wLzlBRkE2MEQ0RTkyQjU2ODk1MzA0NTA4 MjVDOUMzNTg5NEQwRUIxNTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1lnCwhO3lqT4AU9kddcEReinY qaDQ+l/50QcBgQYAMdMFYxSHTGb/7lzxueK61wmoXEN9c6MV01vEcemP86Z6s/ft U0QFnbL/q4oAzUZHuJQGdXiZ8pEP0T8vpnfFin/yPSeTdt+7Yd1mDv6R6hDlrZx1 f0LPPuor9e7x7W7FEVFRGAB5x8CD1Emuedb0ZyrOCdDWy36CadMGLaIiDa2zFJP3 PrhChh8KERK+PBQ5J8QmxWsL+lJn0+T7M+MR1beZMF7jncf5SCTBSJW5+JGxX+/C SVcsmC+qKE7HaSZ06HvKfpM12UsaJR9gRE5ICZfvljEfAcBdry3RJkAlUfA/ -----END CERTIFICATE-----Generated at Mon Oct 20 05:49:05 2025 by rpki-client