$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft File: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft (raw, json) Hash identifier: UCYbMxk1zCyNKHkjbAmjDjHlaV+l/TE0NL7Zdfnvv3w= Subject key identifier: 4B:6A:8E:1C:A7:94:37:52:06:17:02:05:15:C9:B6:76:69:31:B7:F5 Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Certificate serial: 1FF4685969F8DB8B7A6D0BAC1AD3C5402F0BA08B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft Manifest number: 010C Signing time: Sat 23 Aug 2025 06:18:47 +0000 Manifest this update: Sat 23 Aug 2025 06:13:47 +0000 Manifest next update: Wed 27 Aug 2025 08:06:47 +0000 Files and hashes: 1: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (hash: +JLSd5uFHqiUCm06ecF1x9vzbqFut/G4zYIvoGDlY28=) 2: 323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (hash: e93lsq181dWo8xkn84usZu3Ea1Z+yoCo2KQIwjRn9xs=) 3: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl (hash: jO6tXlTWy288hqI5C+A7EYCXRiwqgh1Fq14oFxNV+z4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f4:68:59:69:f8:db:8b:7a:6d:0b:ac:1a:d3:c5:40:2f:0b:a0:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Validity Not Before: Aug 23 06:13:47 2025 GMT Not After : Aug 27 08:06:47 2025 GMT Subject: CN=4B6A8E1CA79437520617020515C9B6766931B7F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:bc:de:94:29:c4:49:dd:82:78:dc:36:c0: 72:e9:39:29:c9:35:b3:92:3f:e2:c1:55:e9:ee:e7: c0:83:37:e9:dd:52:4c:64:28:1f:ea:e7:d0:44:64: fb:64:bb:c0:9c:28:36:60:82:22:25:62:8b:1a:5b: 87:5f:ac:08:9b:dd:3a:25:66:b1:43:97:79:62:8a: 15:43:88:74:96:68:c3:59:4e:8e:a9:08:06:3e:6d: 9c:6c:cf:7d:15:4b:14:f4:c0:53:01:5c:de:4d:be: 61:9a:9e:39:b1:bd:7b:57:b8:e4:54:72:2a:5e:4c: 88:c8:af:df:68:0b:34:99:1b:68:79:ae:8f:26:07: a2:ee:50:76:e4:4a:2e:c7:08:fe:f7:06:d6:c7:72: 53:61:c5:f8:b5:12:14:5a:12:4c:c7:db:11:d8:83: ad:44:50:9e:62:68:ff:87:6e:b6:b3:71:41:cc:0a: 07:51:79:1e:ba:93:27:07:6a:28:b4:c4:e7:8c:ff: 54:f5:25:ad:7f:63:79:1f:94:e3:b7:21:df:69:84: e3:73:3c:5d:5d:b7:ef:05:98:f1:ae:24:67:32:83: 58:0d:aa:c2:16:39:f8:ad:fc:c7:3d:9b:8a:3e:8a: 8a:b4:ce:32:f2:75:52:ed:39:e7:ad:5d:40:bf:db: f1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6A:8E:1C:A7:94:37:52:06:17:02:05:15:C9:B6:76:69:31:B7:F5 X509v3 Authority Key Identifier: keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5d:ed:3b:4b:da:d9:c8:44:13:39:6c:ff:c1:22:8d:a2:6e: e3:cc:58:7a:85:b8:8f:75:15:91:18:dc:31:86:84:6d:b2:5b: 96:2e:79:be:52:3a:f6:1e:68:c2:9c:01:ad:d5:bc:dd:3d:21: 02:7a:b4:6d:35:44:31:35:38:37:5b:cc:37:cb:64:8a:27:92: e2:87:10:52:33:11:17:95:59:d0:84:e8:69:7d:6c:a3:d6:60: 6f:a5:3d:59:59:a2:7c:c2:67:ee:99:ec:a0:86:d6:62:59:02: 73:13:50:62:82:0a:54:1b:bc:25:74:06:d7:15:10:9d:cb:b5: ff:9d:1b:60:b9:4e:90:c7:17:9c:ff:fa:25:ae:f5:7d:74:e9: b4:be:ec:f1:71:83:cf:16:2d:94:6a:49:db:4e:01:f9:33:a2: a5:80:3b:fa:96:28:ef:23:fc:bc:54:8c:df:0f:45:0c:e8:8d: b5:e5:c9:cf:12:51:86:5f:0c:46:be:a4:f4:1f:55:4b:13:7d: c2:c2:c1:16:8b:4d:8f:a7:fd:49:03:04:2c:04:2d:d5:a7:fa: 95:d7:83:28:88:7a:37:5e:2d:bf:8a:71:03:ff:1a:31:ca:b6: 06:c0:11:3f:48:37:b0:fe:e4:42:fc:c2:df:13:f9:2c:e0:d0: a1:69:80:87 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUH/RoWWn424t6bQusGtPFQC8LoIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2MjdERUREODIy QzI1QThBRjAeFw0yNTA4MjMwNjEzNDdaFw0yNTA4MjcwODA2NDdaMDMxMTAvBgNV BAMTKDRCNkE4RTFDQTc5NDM3NTIwNjE3MDIwNTE1QzlCNjc2NjkzMUI3RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2LzelCnESd2CeNw2wHLpOSnJ NbOSP+LBVenu58CDN+ndUkxkKB/q59BEZPtku8CcKDZggiIlYosaW4dfrAib3Tol ZrFDl3liihVDiHSWaMNZTo6pCAY+bZxsz30VSxT0wFMBXN5NvmGanjmxvXtXuORU cipeTIjIr99oCzSZG2h5ro8mB6LuUHbkSi7HCP73BtbHclNhxfi1EhRaEkzH2xHY g61EUJ5iaP+HbrazcUHMCgdReR66kycHaii0xOeM/1T1Ja1/Y3kflOO3Id9phONz PF1dt+8FmPGuJGcyg1gNqsIWOfit/Mc9m4o+ioq0zjLydVLtOeetXUC/2/HtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUS2qOHKeUN1IGFwIFFcm2dmkxt/UwHwYDVR0j BBgwFoAUr4VUAquNzJ6UDnsWJ97dgiwlqK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5 QkM5RDJEOUJBQzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5 RTk0MEU3QjE2MjdERUREODIyQzI1QThBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjg1NTQwMkFCOERDQzlFOTQw RTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjBFQTk2RDhBODVCNTk0MzExQjJERTJCOEFDMDFDQjkyOUJDOUQyRDlC QUM5NTJGNUUwODNERURFMDAxMTAxMS8wL0FGODU1NDAyQUI4RENDOUU5NDBFN0Ix NjI3REVERDgyMkMyNUE4QUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoXe07S9rZyEQTOWz/wSKNom7j zFh6hbiPdRWRGNwxhoRtsluWLnm+Ujr2HmjCnAGt1bzdPSECerRtNUQxNTg3W8w3 y2SKJ5LihxBSMxEXlVnQhOhpfWyj1mBvpT1ZWaJ8wmfumeyghtZiWQJzE1BiggpU G7wldAbXFRCdy7X/nRtguU6Qxxec//olrvV9dOm0vuzxcYPPFi2UaknbTgH5M6Kl gDv6lijvI/y8VIzfD0UM6I215cnPElGGXwxGvqT0H1VLE33CwsEWi02Pp/1JAwQs BC3Vp/qV14MoiHo3Xi2/inED/xoxyrYGwBE/SDew/uRC/MLfE/ks4NChaYCH -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:35 2025 by rpki-client