
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft
File: AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft (raw, json)
Hash identifier: DzD1wdMBYVkDHygPxPh3oqTk47iQ9YVkkP9D6NUlgiY=
Subject key identifier: A9:BC:9A:A0:20:A0:BA:6B:91:87:D8:F0:3E:9E:D2:83:7C:E6:C8:FB
Authority key identifier: AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D
Certificate issuer: /CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D
Certificate serial: 55E86BA5E393374CE49E9E6C1BE017E5ED5229C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft
Manifest number: AF
Signing time: Thu 26 Mar 2026 15:40:32 +0000
Manifest this update: Thu 26 Mar 2026 15:35:32 +0000
Manifest next update: Wed 01 Apr 2026 02:31:32 +0000
Files and hashes: 1: 34352e3137302e3130322e302f32342d3234203d3e203634313339.roa (hash: Qd3f2DxjsXw0of+rJGJhoSPvAFpd5h5Ix5J/kZIBpmI=)
2: AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl (hash: bUc61BpDs/p1F4IaGupLMK2lMOtcLb8jEQIfktngok0=)
3: 34352e3137302e3130322e302f32332d3233203d3e203634313339.roa (hash: exOtejDUHgJs2mW3YfL8zrKRUt8KqH0dfyKPAYpRCa8=)
4: 34352e3137302e3130332e302f32342d3234203d3e203634313339.roa (hash: JnEqnlLKgVAJlYH4hEz+CkBpRAUNGPFOnhvuoCgs6lA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl
rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e8:6b:a5:e3:93:37:4c:e4:9e:9e:6c:1b:e0:17:e5:ed:52:29:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D
Validity
Not Before: Mar 26 15:35:32 2026 GMT
Not After : Apr 1 02:31:32 2026 GMT
Subject: CN=A9BC9AA020A0BA6B9187D8F03E9ED2837CE6C8FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:eb:e6:b6:0b:61:d5:3c:82:d8:54:31:07:
4c:60:73:d5:e9:8e:76:a3:b0:15:9c:cb:a2:ab:e5:
72:4c:1d:f0:05:1e:9e:7c:09:f9:d2:71:a4:32:e6:
41:b0:04:de:f8:53:3e:eb:a8:a7:cf:57:ab:ec:ed:
55:46:a4:71:9f:b4:b7:72:ed:79:6b:c9:9c:61:dc:
81:90:0d:4a:92:3b:3f:83:8c:7b:9b:28:7e:7a:cc:
56:cb:fd:5c:6c:47:3d:19:8f:2e:37:cd:e3:06:24:
9d:15:34:a5:bd:95:2a:2d:16:f0:20:23:11:4c:67:
50:e5:23:ea:8d:64:39:2f:42:0a:dd:2b:96:fa:3d:
90:fc:0d:bc:f7:d1:4e:7a:80:4c:b6:b9:23:d4:3f:
70:f2:e7:30:85:07:98:29:b3:44:65:55:2d:d7:f4:
19:71:58:8a:63:92:80:35:d2:7a:46:ef:0e:e2:e4:
01:6d:d2:e9:19:71:4a:43:e3:d3:10:07:cc:85:f0:
18:43:f6:09:5a:ba:13:b3:4f:8c:b9:da:05:fd:ae:
47:34:d2:41:13:47:a0:48:14:ba:c1:8f:4e:d7:13:
ae:82:ca:a4:da:68:b3:a0:e2:a5:59:1b:9d:53:a4:
70:24:d7:b8:1d:ec:df:1e:db:04:60:3b:d6:a5:e9:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BC:9A:A0:20:A0:BA:6B:91:87:D8:F0:3E:9E:D2:83:7C:E6:C8:FB
X509v3 Authority Key Identifier:
keyid:AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2a:43:99:b8:6a:52:d6:51:d2:6d:eb:82:fa:59:60:86:42:
66:93:f1:df:8f:2e:6b:b5:85:9f:ec:75:3b:e2:84:91:c0:a7:
dd:c5:7b:a9:27:57:82:53:3f:84:9f:97:da:65:70:4f:c8:11:
31:61:9c:e3:de:73:03:f1:a2:9a:4a:a0:f3:e7:00:0e:3b:42:
ac:fc:84:22:88:07:3a:58:3a:87:01:58:2a:a4:3b:88:1e:d5:
fa:c9:8c:64:f4:75:60:91:07:23:54:82:de:49:cd:98:97:ca:
bc:8f:71:20:cb:fc:cd:bb:c1:3e:3a:7b:c5:64:bb:34:f4:a7:
0b:68:7d:c1:e6:5c:f1:53:af:61:e6:6e:8d:60:e1:e8:26:f7:
b9:7c:43:b5:af:da:1e:21:08:60:80:fe:41:a4:2d:45:d9:63:
67:7e:0a:71:15:5d:40:74:59:90:5c:8a:18:4e:52:e8:58:b8:
49:b6:55:a1:91:1c:1d:fd:e1:8a:7f:0f:c4:ef:ec:47:ca:22:
11:5f:14:9b:21:83:83:0c:58:a4:e8:c3:93:69:7f:d4:74:1e:
15:ce:a2:3f:fd:a9:dd:59:d7:a9:47:6d:32:d0:c0:ca:54:f2:
02:7a:da:92:2e:94:cf:34:00:fe:d0:89:ca:29:96:a6:ad:a3:
71:aa:68:12
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUVehrpeOTN0zknp5sG+AX5e1SKcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZBRkVDQkQ4RDhCRUI1QkU0MTQwM0RBREM0RDBGN0Mz
QThCNEI4RDAeFw0yNjAzMjYxNTM1MzJaFw0yNjA0MDEwMjMxMzJaMDMxMTAvBgNV
BAMTKEE5QkM5QUEwMjBBMEJBNkI5MTg3RDhGMDNFOUVEMjgzN0NFNkM4RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcevmtgth1TyC2FQxB0xgc9Xp
jnajsBWcy6Kr5XJMHfAFHp58CfnScaQy5kGwBN74Uz7rqKfPV6vs7VVGpHGftLdy
7XlryZxh3IGQDUqSOz+DjHubKH56zFbL/VxsRz0Zjy43zeMGJJ0VNKW9lSotFvAg
IxFMZ1DlI+qNZDkvQgrdK5b6PZD8Dbz30U56gEy2uSPUP3Dy5zCFB5gps0RlVS3X
9BlxWIpjkoA10npG7w7i5AFt0ukZcUpD49MQB8yF8BhD9glauhOzT4y52gX9rkc0
0kETR6BIFLrBj07XE66CyqTaaLOg4qVZG51TpHAk17gd7N8e2wRgO9al6R5nAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUqbyaoCCgumuRh9jwPp7Sg3zmyPswHwYDVR0j
BBgwFoAUr6/svY2L61vkFAPa3E0PfDqLS40wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUU0MjQwMDZGNTM3RjBEN0FCMzVCM0E2N0Q0MzgxMkUw
RjcxMEQ0MDc5QjJFNEVFREMzMTRCNENCMEFDOEQ4LzAvQUZBRkVDQkQ4RDhCRUI1
QkU0MTQwM0RBREM0RDBGN0MzQThCNEI4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkFGRUNCRDhEOEJFQjVCRTQx
NDAzREFEQzREMEY3QzNBOEI0QjhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVFNDI0MDA2RjUzN0YwRDdBQjM1QjNBNjdENDM4MTJFMEY3MTBENDA3
OUIyRTRFRURDMzE0QjRDQjBBQzhEOC8wL0FGQUZFQ0JEOEQ4QkVCNUJFNDE0MDNE
QURDNEQwRjdDM0E4QjRCOEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5KkOZuGpS1lHSbeuC+llghkJm
k/Hfjy5rtYWf7HU74oSRwKfdxXupJ1eCUz+En5faZXBPyBExYZzj3nMD8aKaSqDz
5wAOO0Ks/IQiiAc6WDqHAVgqpDuIHtX6yYxk9HVgkQcjVILeSc2Yl8q8j3Egy/zN
u8E+OnvFZLs09KcLaH3B5lzxU69h5m6NYOHoJve5fEO1r9oeIQhggP5BpC1F2WNn
fgpxFV1AdFmQXIoYTlLoWLhJtlWhkRwd/eGKfw/E7+xHyiIRXxSbIYODDFik6MOT
aX/UdB4VzqI//andWdepR20y0MDKVPICetqSLpTPNAD+0InKKZamraNxqmgS
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:35:48 2026 by rpki-client