$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft File: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft (raw, json) Hash identifier: gFUL3MKqO57fPFTas+TOo0IGcxFBLqFTOJ1ILS5ZrqY= Subject key identifier: A9:FC:B8:A1:DD:36:A3:07:5F:55:8C:B7:82:93:4A:42:8C:98:57:6D Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Certificate serial: 60D8FB041AA1CB0A13F380E1DB6F96CFBF7A1EE1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft Manifest number: 0176 Signing time: Wed 25 Mar 2026 03:59:46 +0000 Manifest this update: Wed 25 Mar 2026 03:54:46 +0000 Manifest next update: Mon 30 Mar 2026 04:53:46 +0000 Files and hashes: 1: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (hash: kTaf89zbV8DPx751zfxW+Rd67to9CAzT8zKeAESSzYo=) 2: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl (hash: xnBzlb5z+AH0/HEoa3uFOT3w64Jaz2BpytaoPmBWFmY=) 3: 323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (hash: /6mQ5hvOd9I58Oo8ngAPKgLWxshGVRMkfruq/6TFz9M=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 04:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d8:fb:04:1a:a1:cb:0a:13:f3:80:e1:db:6f:96:cf:bf:7a:1e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Validity Not Before: Mar 25 03:54:46 2026 GMT Not After : Mar 30 04:53:46 2026 GMT Subject: CN=A9FCB8A1DD36A3075F558CB782934A428C98576D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:72:65:3b:e5:c3:19:83:03:ce:6b:99:1c: c2:8d:9e:d2:d1:f0:6a:70:e4:03:b5:72:86:24:58: f0:a8:42:63:c7:51:db:b8:00:23:a0:23:22:f5:12: 0c:2f:5d:16:15:30:bc:ad:44:d9:33:6a:1c:ae:18: c6:23:2f:6a:0c:72:e6:3e:af:57:f5:32:4c:6a:ff: a1:12:b1:b2:9f:80:b1:02:cc:34:7c:cc:31:bd:5b: b9:68:44:ce:ad:7f:f3:28:35:4d:ef:da:d5:51:fb: 22:81:54:24:42:20:65:2c:97:e8:9f:b8:b2:8b:82: 78:b0:d1:66:de:44:9a:d9:24:35:fb:cd:1b:9e:b4: 7c:3d:a3:72:9d:04:4a:38:a6:ce:27:64:f3:59:a4: 80:ee:cf:3b:16:d8:30:4e:62:e1:77:43:4e:db:5b: 6d:7e:24:33:ad:6f:74:65:c6:5a:0d:0e:2d:4d:44: 7f:5d:d8:4e:e8:f4:42:16:88:41:9a:f5:ff:c9:e6: 24:fa:5f:8c:67:71:52:2c:0c:dc:85:19:25:11:97: 0a:ab:7b:78:49:a0:23:54:4c:16:d3:78:80:81:1c: 57:44:7e:c2:8c:82:d4:87:a1:5b:77:0e:1e:4b:2a: 19:6e:c5:d4:9a:ac:e9:80:0f:a2:d8:2a:19:f3:16: 95:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FC:B8:A1:DD:36:A3:07:5F:55:8C:B7:82:93:4A:42:8C:98:57:6D X509v3 Authority Key Identifier: keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:da:b1:e2:07:d5:24:97:04:08:67:1f:46:67:05:83:71:be: 00:b6:66:46:b6:58:89:62:aa:ad:44:6b:d0:79:73:3e:a4:e8: 31:3e:4b:bc:41:ae:63:ca:95:7e:88:8f:fa:af:e4:3c:49:32: b7:40:56:1d:36:5c:ca:00:2e:66:a5:61:74:a2:9a:fe:95:e7: 86:4a:44:29:02:2b:31:54:98:19:13:dd:19:12:8e:ea:db:b8: ce:46:80:65:48:71:e8:e8:fe:76:c1:58:88:0d:91:ef:cc:01: 9c:f0:6a:5a:d8:45:d1:e4:87:47:ae:5f:e2:c5:c2:d7:3f:6d: 2a:be:d8:80:2f:0e:5b:2a:de:8d:ea:ee:b7:35:b1:bb:52:5e: 7f:ca:29:0b:5c:2f:a8:b1:e4:d1:7c:d7:c5:b1:30:74:02:61: 0d:64:a0:48:44:65:3a:3d:44:d2:4d:eb:7d:4f:1f:3a:3e:df: 0c:99:b9:0d:44:4a:60:a9:8d:5e:e6:4f:2d:52:01:6b:60:a3: b2:aa:fd:17:d0:13:ab:cb:0a:ef:eb:bd:31:fb:c9:b2:50:9a: bf:de:3c:48:a0:22:79:5b:b6:51:e1:48:f8:0c:f4:63:16:91: 87:d8:4e:f0:9a:72:4c:1c:78:19:e2:43:22:7a:04:b9:4f:8b: 55:b8:c0:a6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYNj7BBqhywoT84Dh22+Wz796HuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2MjdERUREODIy QzI1QThBRjAeFw0yNjAzMjUwMzU0NDZaFw0yNjAzMzAwNDUzNDZaMDMxMTAvBgNV BAMTKEE5RkNCOEExREQzNkEzMDc1RjU1OENCNzgyOTM0QTQyOEM5ODU3NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSXJlO+XDGYMDzmuZHMKNntLR 8Gpw5AO1coYkWPCoQmPHUdu4ACOgIyL1EgwvXRYVMLytRNkzahyuGMYjL2oMcuY+ r1f1Mkxq/6ESsbKfgLECzDR8zDG9W7loRM6tf/MoNU3v2tVR+yKBVCRCIGUsl+if uLKLgniw0WbeRJrZJDX7zRuetHw9o3KdBEo4ps4nZPNZpIDuzzsW2DBOYuF3Q07b W21+JDOtb3RlxloNDi1NRH9d2E7o9EIWiEGa9f/J5iT6X4xncVIsDNyFGSURlwqr e3hJoCNUTBbTeICBHFdEfsKMgtSHoVt3Dh5LKhluxdSarOmAD6LYKhnzFpWpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqfy4od02owdfVYy3gpNKQoyYV20wHwYDVR0j BBgwFoAUr4VUAquNzJ6UDnsWJ97dgiwlqK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5 QkM5RDJEOUJBQzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5 RTk0MEU3QjE2MjdERUREODIyQzI1QThBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjg1NTQwMkFCOERDQzlFOTQw RTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjBFQTk2RDhBODVCNTk0MzExQjJERTJCOEFDMDFDQjkyOUJDOUQyRDlC QUM5NTJGNUUwODNERURFMDAxMTAxMS8wL0FGODU1NDAyQUI4RENDOUU5NDBFN0Ix NjI3REVERDgyMkMyNUE4QUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA82rHiB9UklwQIZx9GZwWDcb4A tmZGtliJYqqtRGvQeXM+pOgxPku8Qa5jypV+iI/6r+Q8STK3QFYdNlzKAC5mpWF0 opr+leeGSkQpAisxVJgZE90ZEo7q27jORoBlSHHo6P52wViIDZHvzAGc8Gpa2EXR 5IdHrl/ixcLXP20qvtiALw5bKt6N6u63NbG7Ul5/yikLXC+oseTRfNfFsTB0AmEN ZKBIRGU6PUTSTet9Tx86Pt8MmbkNREpgqY1e5k8tUgFrYKOyqv0X0BOrywrv670x +8myUJq/3jxIoCJ5W7ZR4Uj4DPRjFpGH2E7wmnJMHHgZ4kMiegS5T4tVuMCm -----END CERTIFICATE-----Generated at Thu Mar 26 20:00:55 2026 by rpki-client