$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft File: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft (raw, json) Hash identifier: aS7W1xmXP5JKM4aTpp8ZtjWESrIdD0RIFUwQ3bpS3uA= Subject key identifier: 9A:DB:AB:1D:97:DE:E2:1A:C7:94:C0:F3:10:1E:91:9B:DA:24:79:6F Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Certificate serial: 5C5DF25FAAF2C273C06DD95B52C697A8A163FAA1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft Manifest number: 018D Signing time: Tue 12 May 2026 14:25:40 +0000 Manifest this update: Tue 12 May 2026 14:20:40 +0000 Manifest next update: Mon 18 May 2026 10:02:40 +0000 Files and hashes: 1: 323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (hash: /6mQ5hvOd9I58Oo8ngAPKgLWxshGVRMkfruq/6TFz9M=) 2: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl (hash: ucdgvpRk2kvGgArMuxZq8sxFVKVVpiiw0b9X8a2YMvc=) 3: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (hash: kTaf89zbV8DPx751zfxW+Rd67to9CAzT8zKeAESSzYo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 17 May 2026 14:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5d:f2:5f:aa:f2:c2:73:c0:6d:d9:5b:52:c6:97:a8:a1:63:fa:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Validity Not Before: May 12 14:20:40 2026 GMT Not After : May 18 10:02:40 2026 GMT Subject: CN=9ADBAB1D97DEE21AC794C0F3101E919BDA24796F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:2b:7c:c4:56:df:28:c3:23:d2:5f:d6:bb: 4b:69:15:6c:cd:39:d3:7d:1b:b5:18:3f:d8:46:a7: b3:98:9d:c3:f1:73:c2:c9:e0:11:03:8d:c6:3b:df: ca:a9:c0:e0:1a:8d:7c:d7:60:26:4d:13:15:df:6d: 64:bc:cc:d5:c1:ac:87:49:4e:ef:bc:3b:4f:3c:67: db:79:04:91:9a:1c:27:ec:a6:24:fb:4d:10:2c:96: 29:93:29:52:c1:db:c9:3c:48:bc:b4:f9:a7:81:8c: 51:6f:90:10:36:fa:9f:c0:b3:d3:e1:fb:06:c3:a0: 4b:cd:5d:af:fc:59:a8:7f:13:e7:1a:2f:92:6f:e3: 03:69:eb:aa:3d:9e:ab:e6:29:14:8b:00:0a:f8:2b: 3e:61:76:fd:94:f8:53:dd:6d:93:1a:11:99:d9:cd: 96:27:0e:d9:17:38:b2:84:95:70:2a:cb:5c:86:36: bb:c1:8e:f2:d9:72:61:01:39:7c:bf:16:85:3f:31: 2a:3d:b9:c2:a7:40:63:da:c9:18:f3:df:f5:11:9f: 6e:d5:e8:6c:43:f5:26:0b:65:b5:a2:56:3d:34:34: 8b:77:0b:cb:a0:78:a5:0e:2a:d1:82:72:16:e3:a9: 5c:00:aa:ea:15:85:5a:b5:99:ad:28:da:89:22:48: 0e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DB:AB:1D:97:DE:E2:1A:C7:94:C0:F3:10:1E:91:9B:DA:24:79:6F X509v3 Authority Key Identifier: keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:17:2f:d5:94:c8:c3:0f:dc:c2:d9:e8:88:a4:49:bd:bc:fa: 24:77:94:ee:a4:39:b2:e6:fd:77:75:6e:cb:96:b9:27:77:18: 61:33:8f:42:3c:12:fc:64:be:34:69:7d:5e:2b:3c:85:d7:b9: f2:95:c0:15:e9:bb:72:ad:ba:0c:b5:83:98:0e:9f:58:f1:e2: df:e6:62:24:90:96:35:34:72:84:66:c8:51:13:50:2f:5d:12: ea:9b:bc:b0:65:3c:ea:e7:49:9e:3e:14:d8:4e:b4:0b:54:2b: c2:49:99:f3:d6:d0:23:c8:7c:a6:3c:72:f5:c2:a6:b9:82:2c: a0:f1:77:f9:e4:78:5c:44:c9:fc:4d:af:b7:0b:36:fa:ef:89: 16:50:bf:d7:28:ba:25:e1:e7:53:4e:af:96:6d:7a:70:23:88: fd:46:ab:ee:a5:93:ea:7d:b4:ef:05:8c:58:05:5a:d8:9b:77: 02:39:24:3e:af:d3:26:e8:58:90:1d:ce:7f:fb:3f:38:0b:f7: 62:a2:40:cc:80:a7:03:a6:25:ef:d5:a0:97:ee:22:a6:65:32: 63:df:4d:0e:62:7d:de:6e:4e:61:e5:df:02:e2:89:1d:8e:39: f7:0c:4f:a5:e2:b5:10:39:82:e9:45:16:04:57:97:14:cc:e3: 97:7f:e9:e7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXF3yX6rywnPAbdlbUsaXqKFj+qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2MjdERUREODIy QzI1QThBRjAeFw0yNjA1MTIxNDIwNDBaFw0yNjA1MTgxMDAyNDBaMDMxMTAvBgNV BAMTKDlBREJBQjFEOTdERUUyMUFDNzk0QzBGMzEwMUU5MTlCREEyNDc5NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DCt8xFbfKMMj0l/Wu0tpFWzN OdN9G7UYP9hGp7OYncPxc8LJ4BEDjcY738qpwOAajXzXYCZNExXfbWS8zNXBrIdJ Tu+8O088Z9t5BJGaHCfspiT7TRAslimTKVLB28k8SLy0+aeBjFFvkBA2+p/As9Ph +wbDoEvNXa/8Wah/E+caL5Jv4wNp66o9nqvmKRSLAAr4Kz5hdv2U+FPdbZMaEZnZ zZYnDtkXOLKElXAqy1yGNrvBjvLZcmEBOXy/FoU/MSo9ucKnQGPayRjz3/URn27V 6GxD9SYLZbWiVj00NIt3C8ugeKUOKtGCchbjqVwAquoVhVq1ma0o2okiSA7XAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUmturHZfe4hrHlMDzEB6Rm9okeW8wHwYDVR0j BBgwFoAUr4VUAquNzJ6UDnsWJ97dgiwlqK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5 QkM5RDJEOUJBQzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5 RTk0MEU3QjE2MjdERUREODIyQzI1QThBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjg1NTQwMkFCOERDQzlFOTQw RTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjBFQTk2RDhBODVCNTk0MzExQjJERTJCOEFDMDFDQjkyOUJDOUQyRDlC QUM5NTJGNUUwODNERURFMDAxMTAxMS8wL0FGODU1NDAyQUI4RENDOUU5NDBFN0Ix NjI3REVERDgyMkMyNUE4QUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0Fy/VlMjDD9zC2eiIpEm9vPok d5TupDmy5v13dW7LlrkndxhhM49CPBL8ZL40aX1eKzyF17nylcAV6btyrboMtYOY Dp9Y8eLf5mIkkJY1NHKEZshRE1AvXRLqm7ywZTzq50mePhTYTrQLVCvCSZnz1tAj yHymPHL1wqa5giyg8Xf55HhcRMn8Ta+3Czb674kWUL/XKLol4edTTq+WbXpwI4j9 RqvupZPqfbTvBYxYBVrYm3cCOSQ+r9Mm6FiQHc5/+z84C/diokDMgKcDpiXv1aCX 7iKmZTJj300OYn3ebk5h5d8C4okdjjn3DE+l4rUQOYLpRRYEV5cUzOOXf+nn -----END CERTIFICATE-----Generated at Wed May 13 16:04:08 2026 by rpki-client