$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft File: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft (raw, json) Hash identifier: V8OFnNQHTim5I1MbfYj51dqHkbOhW9Z8SL8AFW6R8pg= Subject key identifier: 0D:FD:17:A7:92:48:1E:7B:25:E8:4F:E9:81:9C:2F:85:FA:98:CD:D2 Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Certificate serial: 65F2ACBD31A730C02C19A401069944ABA93D318D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft Manifest number: 0127 Signing time: Sat 18 Oct 2025 15:19:49 +0000 Manifest this update: Sat 18 Oct 2025 15:14:49 +0000 Manifest next update: Fri 24 Oct 2025 03:11:49 +0000 Files and hashes: 1: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (hash: +JLSd5uFHqiUCm06ecF1x9vzbqFut/G4zYIvoGDlY28=) 2: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl (hash: hefyr3pr2Z+epeiz/Q9LuIayyWnEoN7RtqCS64tb/Eg=) 3: 323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (hash: e93lsq181dWo8xkn84usZu3Ea1Z+yoCo2KQIwjRn9xs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f2:ac:bd:31:a7:30:c0:2c:19:a4:01:06:99:44:ab:a9:3d:31:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Validity Not Before: Oct 18 15:14:49 2025 GMT Not After : Oct 24 03:11:49 2025 GMT Subject: CN=0DFD17A792481E7B25E84FE9819C2F85FA98CDD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:ea:a7:5d:8e:1b:3b:5b:28:51:45:42:92: a7:86:3a:bf:86:d5:ba:3b:06:ef:f3:ce:1f:86:4c: 07:f7:41:45:34:a7:f5:91:2a:e9:43:fb:b9:5b:66: 1e:35:7c:25:f2:3a:25:7b:a2:b6:e6:f2:a6:20:54: ae:70:a1:45:63:30:51:f0:12:fd:76:c7:cf:90:95: a8:f0:95:a2:7d:b4:5b:5a:dc:78:82:71:0c:42:92: 44:a1:75:99:a1:37:68:33:af:c3:68:e7:21:1e:9c: 56:47:4a:27:96:83:db:35:95:bb:61:4f:b1:b0:fc: 85:59:f7:0d:82:cc:d0:57:5f:87:de:de:05:bc:97: b6:66:41:7a:bd:38:dd:03:07:ae:0c:0d:f0:42:e8: 21:36:2d:d3:27:c5:d2:5f:bb:10:d4:76:4e:40:55: 25:f0:12:25:c1:39:ff:c8:b9:92:a6:cf:99:1a:2e: 39:9b:f7:9e:f1:91:04:42:52:fb:c4:4c:7b:de:3b: 1e:89:50:d2:5e:53:f5:12:0d:65:65:17:bc:a9:a1: d3:5e:bf:f2:f0:bd:f1:83:50:8a:92:ce:cd:70:53: 82:29:6f:cf:a8:1b:16:04:b9:2d:e8:35:df:6f:50: 58:a6:b2:1b:5d:4e:52:8c:0f:83:ed:89:57:83:43: bc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FD:17:A7:92:48:1E:7B:25:E8:4F:E9:81:9C:2F:85:FA:98:CD:D2 X509v3 Authority Key Identifier: keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d5:37:42:9c:7a:21:66:ba:2e:38:33:24:96:bb:6d:ba:53: 32:fa:56:2b:6f:24:a7:f8:e0:58:ad:b1:a0:aa:b1:0c:52:aa: aa:36:2e:ad:dd:8d:77:b2:1f:70:1f:fe:ec:36:c5:17:cb:37: e7:e8:0e:8a:eb:6d:44:e6:78:44:34:e5:3c:52:92:35:97:91: 76:82:eb:c1:f2:ac:19:ec:41:f1:55:33:3a:d5:77:ea:7d:de: 9a:22:3f:3a:49:3a:c4:91:ec:32:63:bb:1c:ea:8a:3c:a1:63: 23:64:1a:18:9d:aa:28:d4:89:be:44:d5:08:25:c4:84:66:6c: cc:12:9a:30:7a:6f:5c:fb:51:bc:e5:4a:91:23:f1:6e:1e:6e: 96:86:15:f0:2b:f9:c6:95:77:d7:af:ee:5f:9e:14:0b:20:8c: d9:e2:e3:77:af:5f:4d:c4:0c:fa:1e:de:03:59:a8:c0:48:ba: 6a:e5:27:72:bc:95:a8:27:e1:5f:26:33:08:78:00:34:a9:98: 41:7c:37:84:66:f4:07:93:6d:6d:5b:96:3d:b0:94:2d:ae:89: ef:33:7c:bc:30:06:5a:ba:f9:23:5c:77:c2:ed:2c:e2:8d:ab: d9:21:13:b7:e8:b0:43:05:d9:85:a3:72:88:b3:a8:9d:c2:02: fe:56:ea:90 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZfKsvTGnMMAsGaQBBplEq6k9MY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2MjdERUREODIy QzI1QThBRjAeFw0yNTEwMTgxNTE0NDlaFw0yNTEwMjQwMzExNDlaMDMxMTAvBgNV BAMTKDBERkQxN0E3OTI0ODFFN0IyNUU4NEZFOTgxOUMyRjg1RkE5OENERDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9w+qnXY4bO1soUUVCkqeGOr+G 1bo7Bu/zzh+GTAf3QUU0p/WRKulD+7lbZh41fCXyOiV7orbm8qYgVK5woUVjMFHw Ev12x8+QlajwlaJ9tFta3HiCcQxCkkShdZmhN2gzr8No5yEenFZHSieWg9s1lbth T7Gw/IVZ9w2CzNBXX4fe3gW8l7ZmQXq9ON0DB64MDfBC6CE2LdMnxdJfuxDUdk5A VSXwEiXBOf/IuZKmz5kaLjmb957xkQRCUvvETHveOx6JUNJeU/USDWVlF7ypodNe v/LwvfGDUIqSzs1wU4Ipb8+oGxYEuS3oNd9vUFimshtdTlKMD4PtiVeDQ7z7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDf0Xp5JIHnsl6E/pgZwvhfqYzdIwHwYDVR0j BBgwFoAUr4VUAquNzJ6UDnsWJ97dgiwlqK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5 QkM5RDJEOUJBQzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5 RTk0MEU3QjE2MjdERUREODIyQzI1QThBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjg1NTQwMkFCOERDQzlFOTQw RTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjBFQTk2RDhBODVCNTk0MzExQjJERTJCOEFDMDFDQjkyOUJDOUQyRDlC QUM5NTJGNUUwODNERURFMDAxMTAxMS8wL0FGODU1NDAyQUI4RENDOUU5NDBFN0Ix NjI3REVERDgyMkMyNUE4QUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAW1TdCnHohZrouODMklrttulMy +lYrbySn+OBYrbGgqrEMUqqqNi6t3Y13sh9wH/7sNsUXyzfn6A6K621E5nhENOU8 UpI1l5F2guvB8qwZ7EHxVTM61Xfqfd6aIj86STrEkewyY7sc6oo8oWMjZBoYnaoo 1Im+RNUIJcSEZmzMEpowem9c+1G85UqRI/FuHm6WhhXwK/nGlXfXr+5fnhQLIIzZ 4uN3r19NxAz6Ht4DWajASLpq5SdyvJWoJ+FfJjMIeAA0qZhBfDeEZvQHk21tW5Y9 sJQtronvM3y8MAZauvkjXHfC7SzijavZIRO36LBDBdmFo3KIs6idwgL+VuqQ -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:58 2025 by rpki-client