$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft File: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft (raw, json) Hash identifier: pBdeIkjpf4pf7fLFO4gsMgEIVuZUNh4/m1k5GpLS+RI= Subject key identifier: 52:F4:15:F6:B3:71:C7:BB:DC:12:8B:7D:AF:87:BD:EC:62:70:E6:3C Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Certificate serial: 08FEDB61DAEB3BFF450FC81BA7BD5930D7B236F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft Manifest number: F2 Signing time: Tue 01 Jul 2025 23:04:21 +0000 Manifest this update: Tue 01 Jul 2025 22:59:21 +0000 Manifest next update: Mon 07 Jul 2025 10:18:21 +0000 Files and hashes: 1: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (hash: +JLSd5uFHqiUCm06ecF1x9vzbqFut/G4zYIvoGDlY28=) 2: 323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (hash: e93lsq181dWo8xkn84usZu3Ea1Z+yoCo2KQIwjRn9xs=) 3: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl (hash: Iigrx1q1hcrxjvbc3Nt/iAP/oFquRy+R7qyPKuXeqqo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 10:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fe:db:61:da:eb:3b:ff:45:0f:c8:1b:a7:bd:59:30:d7:b2:36:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Validity Not Before: Jul 1 22:59:21 2025 GMT Not After : Jul 7 10:18:21 2025 GMT Subject: CN=52F415F6B371C7BBDC128B7DAF87BDEC6270E63C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:47:72:bb:c2:14:c8:36:cc:9f:9a:5c:9c:e9: 64:2e:99:66:e0:ec:4f:4a:42:a0:85:cb:06:19:f1: 8c:a5:d1:4c:d4:b8:40:fb:8a:7a:a5:02:04:90:67: 66:ca:a1:16:8d:80:4f:b3:57:80:5f:87:e8:b8:fc: 8b:a3:f1:b9:9f:3d:2d:01:0a:a0:e2:fd:10:8b:a7: b5:20:2b:1a:d3:b3:11:c4:76:8f:75:1a:73:0b:24: 1b:09:52:2f:12:99:74:f1:50:5d:86:22:f6:08:e9: 57:a2:e1:11:9e:a8:9c:51:1f:b9:4b:ec:1d:86:fd: 47:89:5b:7c:11:76:98:10:d2:7b:e6:99:77:c0:53: a0:29:99:a0:f0:1b:22:6f:d2:3e:e5:7d:b0:61:58: fd:3e:80:82:ac:02:a5:46:09:b3:67:e4:10:60:7c: f1:f5:db:5a:12:9d:ae:0a:c8:34:d2:f0:a8:76:8b: 00:a8:cf:41:bd:2c:e9:62:06:df:4b:9f:3c:36:8a: eb:bb:89:21:95:89:b4:0a:93:51:60:de:91:44:07: 86:a0:18:7c:18:b2:65:91:69:38:13:0f:f0:b6:2d: fe:bb:85:1e:73:55:df:2e:f8:57:f4:da:16:42:84: 88:83:de:35:35:b0:97:15:f7:51:0f:3d:43:49:46: f2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F4:15:F6:B3:71:C7:BB:DC:12:8B:7D:AF:87:BD:EC:62:70:E6:3C X509v3 Authority Key Identifier: keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d9:39:2c:6c:53:75:1f:68:3b:55:39:eb:36:15:5d:2d:a6: 11:99:3b:3d:dd:3e:d1:87:48:a6:a0:b0:d9:ae:5d:c4:40:c8: f4:75:f3:c3:17:7c:40:11:ba:0a:97:09:b1:d9:fb:00:1a:93: e5:43:76:52:c4:b2:a3:26:2a:27:d8:5c:a4:a3:ce:eb:cd:31: 97:5a:ea:66:e3:5d:67:b9:fd:ad:92:b9:e0:db:93:a1:09:4f: 45:34:ce:d2:be:35:5b:01:0a:18:a5:95:09:8a:95:7d:0b:d9: d1:ce:01:36:79:fd:a3:a2:6b:7a:03:a8:53:25:f3:e2:2e:16: fa:5d:24:77:21:3c:8a:84:ab:72:f4:a5:63:93:67:ec:58:b6: 0b:c5:3d:c6:47:dd:54:f2:c3:a8:65:00:6c:f3:cb:1c:1d:5e: c4:c6:a8:c5:fb:a3:3b:4a:1d:d0:69:2b:49:a0:9c:a1:f8:07: c2:f7:ee:f9:cb:2a:22:34:c4:69:fb:bf:34:37:7a:3e:77:c6: 0c:36:6f:b6:f1:d0:35:41:94:65:29:c8:5c:e6:1d:f5:4a:1f: ad:30:41:2b:5d:fb:79:4a:90:3c:a1:21:71:59:73:b4:8b:86: 6c:5c:fb:b2:a0:36:8f:b7:ed:11:d7:dd:d7:e3:23:6f:72:2b: 38:a3:0e:92 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCP7bYdrrO/9FD8gbp71ZMNeyNvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2MjdERUREODIy QzI1QThBRjAeFw0yNTA3MDEyMjU5MjFaFw0yNTA3MDcxMDE4MjFaMDMxMTAvBgNV BAMTKDUyRjQxNUY2QjM3MUM3QkJEQzEyOEI3REFGODdCREVDNjI3MEU2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/R3K7whTINsyfmlyc6WQumWbg 7E9KQqCFywYZ8Yyl0UzUuED7inqlAgSQZ2bKoRaNgE+zV4Bfh+i4/Iuj8bmfPS0B CqDi/RCLp7UgKxrTsxHEdo91GnMLJBsJUi8SmXTxUF2GIvYI6Vei4RGeqJxRH7lL 7B2G/UeJW3wRdpgQ0nvmmXfAU6ApmaDwGyJv0j7lfbBhWP0+gIKsAqVGCbNn5BBg fPH121oSna4KyDTS8Kh2iwCoz0G9LOliBt9Lnzw2iuu7iSGVibQKk1Fg3pFEB4ag GHwYsmWRaTgTD/C2Lf67hR5zVd8u+Ff02hZChIiD3jU1sJcV91EPPUNJRvIrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUUvQV9rNxx7vcEot9r4e97GJw5jwwHwYDVR0j BBgwFoAUr4VUAquNzJ6UDnsWJ97dgiwlqK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5 QkM5RDJEOUJBQzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5 RTk0MEU3QjE2MjdERUREODIyQzI1QThBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjg1NTQwMkFCOERDQzlFOTQw RTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjBFQTk2RDhBODVCNTk0MzExQjJERTJCOEFDMDFDQjkyOUJDOUQyRDlC QUM5NTJGNUUwODNERURFMDAxMTAxMS8wL0FGODU1NDAyQUI4RENDOUU5NDBFN0Ix NjI3REVERDgyMkMyNUE4QUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAu2TksbFN1H2g7VTnrNhVdLaYR mTs93T7Rh0imoLDZrl3EQMj0dfPDF3xAEboKlwmx2fsAGpPlQ3ZSxLKjJion2Fyk o87rzTGXWupm411nuf2tkrng25OhCU9FNM7SvjVbAQoYpZUJipV9C9nRzgE2ef2j omt6A6hTJfPiLhb6XSR3ITyKhKty9KVjk2fsWLYLxT3GR91U8sOoZQBs88scHV7E xqjF+6M7Sh3QaStJoJyh+AfC9+75yyoiNMRp+780N3o+d8YMNm+28dA1QZRlKchc 5h31Sh+tMEErXft5SpA8oSFxWXO0i4ZsXPuyoDaPt+0R193X4yNvcis4ow6S -----END CERTIFICATE-----Generated at Fri Jul 4 07:51:04 2025 by rpki-client