$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft File: AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft (raw, json) Hash identifier: ZI8f+fJoIBKWz5ihcajaLn93mR09yGMzs5UJeJ0Gjq0= Subject key identifier: DA:22:EF:F3:C3:AA:4A:76:0D:FE:8F:85:6F:73:7C:66:73:72:75:08 Authority key identifier: AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2 Certificate issuer: /CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2 Certificate serial: 1D0F33345C6B79DB98B317484A64E1A386128A14 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft Manifest number: 99 Signing time: Tue 12 May 2026 13:45:10 +0000 Manifest this update: Tue 12 May 2026 13:40:10 +0000 Manifest next update: Mon 18 May 2026 01:54:10 +0000 Files and hashes: 1: 3230302e33332e3130382e302f32342d3234203d3e20323734313538.roa (hash: uqIyZ5o3Twoz9lqf2/eatcYZt5rIMFyHnYHlLXTSymI=) 2: 323830333a643964303a3a2f33322d3332203d3e20323734313538.roa (hash: T0oUgPSWTkNTCuDYVPvATKVNJqgqF4Xg4+Ud0zsl7s8=) 3: AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl (hash: WdHmozPkfVUQL4UVm7Fr6Xl/5rfinsCo5ksp6PgkyC4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 16 May 2026 11:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0f:33:34:5c:6b:79:db:98:b3:17:48:4a:64:e1:a3:86:12:8a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2 Validity Not Before: May 12 13:40:10 2026 GMT Not After : May 18 01:54:10 2026 GMT Subject: CN=DA22EFF3C3AA4A760DFE8F856F737C6673727508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:f9:e9:39:f2:95:65:ad:17:bd:9c:8d:28: da:f4:ae:15:f0:ec:59:98:20:78:b0:e5:11:8c:e0: b2:e4:d0:1b:e1:58:61:5b:5b:a5:0b:64:80:6a:52: 97:5c:61:cd:68:2d:a2:0d:3c:89:16:f7:7c:08:d5: 8f:be:95:24:0b:d9:64:07:38:5f:2a:56:6f:5b:a6: 66:b8:28:e2:b9:da:cc:ed:4c:ce:8c:5c:6c:e4:dd: 5d:a5:b5:dd:cd:67:76:db:70:3b:5e:e2:ea:f6:32: 7a:59:9c:6a:bf:56:54:b1:ef:26:85:ae:9f:c9:30: e4:e2:07:2d:fb:bc:e0:44:25:3c:8a:59:79:47:11: e7:3e:0f:53:c1:fc:85:a7:bf:59:98:40:26:b8:9b: 0f:26:f0:8a:50:fa:f1:bd:22:1e:37:5b:f7:94:e7: 08:30:89:f2:52:ad:c9:8d:2f:78:ab:91:7f:7e:1d: c4:cb:52:8d:6c:f0:44:74:78:6a:6c:48:33:dd:b9: 00:08:81:b3:e5:49:78:1a:08:40:4a:4e:c3:60:19: da:ce:cc:18:28:dd:8a:aa:36:1d:0f:6e:dd:3d:cc: 21:9a:ad:b5:e5:d7:68:ae:27:cd:53:f7:c9:76:38: 4a:3b:52:20:a7:11:70:26:22:95:51:eb:86:8e:51: 43:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:22:EF:F3:C3:AA:4A:76:0D:FE:8F:85:6F:73:7C:66:73:72:75:08 X509v3 Authority Key Identifier: keyid:AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0b:4c:a8:c4:33:19:10:b3:97:2d:85:3e:8b:6b:e9:95:e0: 2a:6d:8b:ff:95:38:83:8e:9e:d6:e1:b2:d2:32:eb:45:b3:c4: 56:47:a0:fc:18:ab:99:07:35:05:52:e3:39:38:bf:6b:4c:d7: bd:1a:48:5a:00:12:d8:e6:89:bf:3b:a5:8e:11:bd:7b:31:0a: 25:73:b4:f3:1f:0f:f0:6c:18:51:d5:bf:cf:f7:a4:08:9c:ca: 6a:a3:c0:ff:68:58:76:c1:85:5d:f0:68:eb:78:d6:5b:78:01: d4:51:b1:49:cc:34:a7:b9:41:f9:de:a2:57:75:d5:4d:af:40: 6a:2d:9e:4f:c5:08:b0:84:2d:e7:41:4b:57:00:8b:62:66:f5: c8:e0:70:46:69:d6:16:6a:bd:b8:bd:c5:39:06:c1:e8:10:42: 5c:e0:22:ae:c8:a8:dd:61:c0:b8:12:33:39:18:0b:fb:71:ef: 3a:a6:97:3d:26:d3:26:71:49:6a:88:e5:98:df:f9:8c:87:a5: f5:8d:c3:2d:fc:b0:25:ea:24:17:c5:28:0a:11:46:39:c9:c3: 18:6c:22:c3:06:fc:ef:f5:a3:69:d3:a2:68:30:92:70:2d:f3: 63:7b:e1:45:c8:ba:ec:85:20:08:69:13:28:d4:60:75:d8:63: 9f:c6:b5:c6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHQ8zNFxreduYsxdISmTho4YSihQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQzNFQkZDNDQ0RTYwMjVDODM5NjE4QzNDODFDQzg5 OTY1OTlBMjAeFw0yNjA1MTIxMzQwMTBaFw0yNjA1MTgwMTU0MTBaMDMxMTAvBgNV BAMTKERBMjJFRkYzQzNBQTRBNzYwREZFOEY4NTZGNzM3QzY2NzM3Mjc1MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRfnpOfKVZa0XvZyNKNr0rhXw 7FmYIHiw5RGM4LLk0BvhWGFbW6ULZIBqUpdcYc1oLaINPIkW93wI1Y++lSQL2WQH OF8qVm9bpma4KOK52sztTM6MXGzk3V2ltd3NZ3bbcDte4ur2MnpZnGq/VlSx7yaF rp/JMOTiBy37vOBEJTyKWXlHEec+D1PB/IWnv1mYQCa4mw8m8IpQ+vG9Ih43W/eU 5wgwifJSrcmNL3irkX9+HcTLUo1s8ER0eGpsSDPduQAIgbPlSXgaCEBKTsNgGdrO zBgo3YqqNh0Pbt09zCGarbXl12iuJ81T98l2OEo7UiCnEXAmIpVR64aOUUNrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2iLv88OqSnYN/o+Fb3N8ZnNydQgwHwYDVR0j BBgwFoAUr/w+v8RE5gJcg5YYw8gcyJllmaIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRkQ2MjdDMzdBREMyMkRFOEM0RDE4OUUyRDk4RDRDQzgw QzRFRUNGMUMyOTIwRDBGNDQwOTAxOUU1NEY4QzRBLzAvQUZGQzNFQkZDNDQ0RTYw MjVDODM5NjE4QzNDODFDQzg5OTY1OTlBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkZDM0VCRkM0NDRFNjAyNUM4 Mzk2MThDM0M4MUNDODk5NjU5OUEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUZENjI3QzM3QURDMjJERThDNEQxODlFMkQ5OEQ0Q0M4MEM0RUVDRjFD MjkyMEQwRjQ0MDkwMTlFNTRGOEM0QS8wL0FGRkMzRUJGQzQ0NEU2MDI1QzgzOTYx OEMzQzgxQ0M4OTk2NTk5QTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2C0yoxDMZELOXLYU+i2vpleAq bYv/lTiDjp7W4bLSMutFs8RWR6D8GKuZBzUFUuM5OL9rTNe9GkhaABLY5om/O6WO Eb17MQolc7TzHw/wbBhR1b/P96QInMpqo8D/aFh2wYVd8GjreNZbeAHUUbFJzDSn uUH53qJXddVNr0BqLZ5PxQiwhC3nQUtXAItiZvXI4HBGadYWar24vcU5BsHoEEJc 4CKuyKjdYcC4EjM5GAv7ce86ppc9JtMmcUlqiOWY3/mMh6X1jcMt/LAl6iQXxSgK EUY5ycMYbCLDBvzv9aNp06JoMJJwLfNje+FFyLrshSAIaRMo1GB12GOfxrXG -----END CERTIFICATE-----Generated at Wed May 13 11:43:10 2026 by rpki-client