$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft File: AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft (raw, json) Hash identifier: 5GjPmQ0LAcRf/5K7SiyxBWa35VBkdmsJqC71gCe/+z0= Subject key identifier: 5C:C6:B5:E7:37:60:87:EA:97:A2:DE:A3:21:B2:6B:65:59:EE:27:FB Authority key identifier: AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D Certificate issuer: /CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D Certificate serial: 38924FE5246EC2689C46EFD819759BF298D51DFF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft Manifest number: 2B Signing time: Tue 01 Jul 2025 18:26:22 +0000 Manifest this update: Tue 01 Jul 2025 18:21:22 +0000 Manifest next update: Mon 07 Jul 2025 03:46:22 +0000 Files and hashes: 1: 34352e3137302e3130322e302f32342d3234203d3e20323637373538.roa (hash: CXzGXfR41i/1HvoAUoAc0uTBDAAIRoe5wXtGqXceCoE=) 2: AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl (hash: OGD7gOy19Xztwg9V5aNup1GK/wSHsfrJv4Dwdq5U8qE=) 3: 34352e3137302e3130322e302f32332d3233203d3e20323637373538.roa (hash: +dcVegBtKf/KAa/zxwv/hAK8UkNryF+L5VmJFfVQ5So=) 4: 34352e3137302e3130332e302f32342d3234203d3e20323637373538.roa (hash: jOsSdiB/f+Db39hMSrjnANZM9C7EAZn99vqRXb99hBs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 03:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:92:4f:e5:24:6e:c2:68:9c:46:ef:d8:19:75:9b:f2:98:d5:1d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D Validity Not Before: Jul 1 18:21:22 2025 GMT Not After : Jul 7 03:46:22 2025 GMT Subject: CN=5CC6B5E7376087EA97A2DEA321B26B6559EE27FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ea:0e:95:db:b0:ba:e0:22:5f:58:4f:5c:77: ff:41:73:69:55:39:bf:4a:50:ed:59:6f:fa:59:8f: a8:99:e4:f8:15:5c:f9:bc:e0:ba:2d:4a:15:45:50: 93:b5:2c:a5:37:fb:38:38:94:53:1c:e6:a5:51:c8: da:bc:e1:6f:80:58:88:2f:06:d6:8e:3e:d5:ac:6f: 72:82:ff:b2:d8:f6:81:df:1e:b0:d2:ee:02:ee:30: d3:4b:b7:eb:ac:c1:5a:f2:4d:e5:6d:3a:e2:3b:0c: cb:ae:f3:99:f2:fb:05:f6:f0:e1:d8:ad:18:56:9a: a2:e8:d6:7f:ff:17:ce:65:07:03:57:31:c6:db:fe: 39:fc:71:4f:cf:3f:2d:11:d9:3c:72:5a:25:75:45: 76:4f:11:78:c3:44:22:62:84:0b:8a:ec:8b:66:a9: 3f:52:fb:f4:81:12:7e:60:1a:40:3a:05:55:4c:36: 80:59:03:fd:44:8e:36:f1:a6:f0:3f:ed:9d:d6:cd: 54:f3:1d:2d:48:38:95:9e:0c:79:97:57:ba:b1:4c: b0:1b:19:7d:50:39:7c:59:87:38:09:2c:16:1b:20: 15:c2:a0:62:62:07:3d:06:e7:7c:eb:8b:24:9a:5a: cb:4e:1c:4d:dd:97:c8:57:0d:1b:ee:74:94:88:73: 59:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C6:B5:E7:37:60:87:EA:97:A2:DE:A3:21:B2:6B:65:59:EE:27:FB X509v3 Authority Key Identifier: keyid:AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:68:66:81:fc:67:d5:57:20:65:5d:d1:60:b8:72:ff:ee:13: 6a:b2:bc:5f:a1:f5:24:3d:02:bb:fe:1c:c9:f4:13:e8:fc:44: 55:67:8c:4c:b9:ed:45:0a:5d:63:35:b3:be:e7:8f:18:66:02: a3:bd:a2:bd:98:aa:1a:b0:8d:ea:bc:5c:c9:20:40:e0:7e:9f: 3a:31:b1:41:83:ff:a1:a5:44:1e:e8:f3:c1:b8:be:78:75:c7: 99:d9:3a:c0:2d:84:ba:9e:04:f1:de:54:35:25:7e:18:6f:a5: 57:83:41:54:65:30:8e:42:d8:2b:7e:65:92:d1:0e:7d:3b:01: 0b:36:81:a3:a9:3e:b8:d8:1c:80:2f:cf:1a:24:43:9a:fa:0e: e3:29:db:cb:88:1a:d6:b2:35:31:a6:e2:a9:2b:17:86:bf:ab: fe:e7:e8:bc:0a:12:1b:a6:30:b3:b7:73:51:f3:a1:6f:b1:3a: d3:e3:fa:2e:40:da:20:af:08:5f:6f:3b:69:9a:78:bb:3a:56: 9a:43:63:aa:e2:0f:a2:b4:b3:c6:32:97:10:85:85:46:e3:7e: 01:a8:38:24:10:a3:5d:41:dd:de:5f:94:41:c1:46:bb:e4:92: 64:72:a0:7e:b0:8b:94:e1:42:9f:1f:29:64:cc:cb:cf:32:02: 65:d9:29:ce -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOJJP5SRuwmicRu/YGXWb8pjVHf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBRkVDQkQ4RDhCRUI1QkU0MTQwM0RBREM0RDBGN0Mz QThCNEI4RDAeFw0yNTA3MDExODIxMjJaFw0yNTA3MDcwMzQ2MjJaMDMxMTAvBgNV BAMTKDVDQzZCNUU3Mzc2MDg3RUE5N0EyREVBMzIxQjI2QjY1NTlFRTI3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN6g6V27C64CJfWE9cd/9Bc2lV Ob9KUO1Zb/pZj6iZ5PgVXPm84LotShVFUJO1LKU3+zg4lFMc5qVRyNq84W+AWIgv BtaOPtWsb3KC/7LY9oHfHrDS7gLuMNNLt+uswVryTeVtOuI7DMuu85ny+wX28OHY rRhWmqLo1n//F85lBwNXMcbb/jn8cU/PPy0R2TxyWiV1RXZPEXjDRCJihAuK7Itm qT9S+/SBEn5gGkA6BVVMNoBZA/1EjjbxpvA/7Z3WzVTzHS1IOJWeDHmXV7qxTLAb GX1QOXxZhzgJLBYbIBXCoGJiBz0G53zriySaWstOHE3dl8hXDRvudJSIc1nVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXMa15zdgh+qXot6jIbJrZVnuJ/swHwYDVR0j BBgwFoAUr6/svY2L61vkFAPa3E0PfDqLS40wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRUU0MjQwMDZGNTM3RjBEN0FCMzVCM0E2N0Q0MzgxMkUw RjcxMEQ0MDc5QjJFNEVFREMzMTRCNENCMEFDOEQ4LzAvQUZBRkVDQkQ4RDhCRUI1 QkU0MTQwM0RBREM0RDBGN0MzQThCNEI4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkFGRUNCRDhEOEJFQjVCRTQx NDAzREFEQzREMEY3QzNBOEI0QjhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUVFNDI0MDA2RjUzN0YwRDdBQjM1QjNBNjdENDM4MTJFMEY3MTBENDA3 OUIyRTRFRURDMzE0QjRDQjBBQzhEOC8wL0FGQUZFQ0JEOEQ4QkVCNUJFNDE0MDNE QURDNEQwRjdDM0E4QjRCOEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApaGaB/GfVVyBlXdFguHL/7hNq srxfofUkPQK7/hzJ9BPo/ERVZ4xMue1FCl1jNbO+548YZgKjvaK9mKoasI3qvFzJ IEDgfp86MbFBg/+hpUQe6PPBuL54dceZ2TrALYS6ngTx3lQ1JX4Yb6VXg0FUZTCO QtgrfmWS0Q59OwELNoGjqT642ByAL88aJEOa+g7jKdvLiBrWsjUxpuKpKxeGv6v+ 5+i8ChIbpjCzt3NR86FvsTrT4/ouQNogrwhfbztpmni7OlaaQ2Oq4g+itLPGMpcQ hYVG434BqDgkEKNdQd3eX5RBwUa75JJkcqB+sIuU4UKfHylkzMvPMgJl2SnO -----END CERTIFICATE-----Generated at Fri Jul 4 00:53:49 2025 by rpki-client