$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft File: AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft (raw, json) Hash identifier: hnQ9B/oShP+sYje2TZmA2H9vQDnQlMFDc1wqXkiXtsg= Subject key identifier: 72:C7:71:CC:50:BE:68:F0:D0:48:A3:5B:3E:11:E3:2F:0E:C3:A5:83 Authority key identifier: AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2 Certificate issuer: /CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2 Certificate serial: 313558DDBA6CDC13B645FE1FF9C35E1A3B297C78 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft Manifest number: 18 Signing time: Fri 22 Aug 2025 12:31:51 +0000 Manifest this update: Fri 22 Aug 2025 12:26:51 +0000 Manifest next update: Tue 26 Aug 2025 22:58:51 +0000 Files and hashes: 1: 323830333a643964303a3a2f33322d3332203d3e20323734313538.roa (hash: T0oUgPSWTkNTCuDYVPvATKVNJqgqF4Xg4+Ud0zsl7s8=) 2: 3230302e33332e3130382e302f32342d3234203d3e20323734313538.roa (hash: uqIyZ5o3Twoz9lqf2/eatcYZt5rIMFyHnYHlLXTSymI=) 3: AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl (hash: b7YNW/4cVaoz6s8yNesJ0DPqGWtLdUITeYoBGPiuUKU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 22:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:35:58:dd:ba:6c:dc:13:b6:45:fe:1f:f9:c3:5e:1a:3b:29:7c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2 Validity Not Before: Aug 22 12:26:51 2025 GMT Not After : Aug 26 22:58:51 2025 GMT Subject: CN=72C771CC50BE68F0D048A35B3E11E32F0EC3A583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f5:59:90:b2:e1:66:49:98:02:be:e2:51:a1: f7:bb:67:ee:8c:b7:44:89:3f:b7:1a:6c:c5:28:ae: 2f:e7:a4:83:9e:5f:58:83:60:b5:73:09:3f:62:85: 48:84:0f:a6:e6:20:d7:89:06:29:e0:95:e3:e4:2d: b9:ee:8f:9c:8a:ea:19:45:a3:7f:a7:17:13:de:bf: ee:c0:ed:7b:63:92:15:23:9d:50:f7:f3:80:4d:c3: df:b5:45:d4:7c:6d:1c:cd:6a:ca:90:40:70:56:67: 26:dd:3a:7e:94:f7:be:1f:d8:e2:6c:d1:ba:c4:a9: 05:24:c5:7e:98:93:44:b0:bf:ee:26:c4:fa:01:32: 08:ba:59:29:af:45:d8:c1:5b:4b:be:f4:85:12:aa: 3c:53:5a:b2:b1:c7:9e:e3:95:9a:f4:f6:b2:b1:59: 11:e8:9b:6e:77:21:22:35:48:0b:96:b4:40:82:7c: 92:a9:1f:07:74:d4:eb:46:c7:d6:7c:15:4e:88:28: 00:c6:7b:77:e3:6e:04:f7:a0:ca:ab:70:85:85:2e: 47:6c:7d:98:7f:b9:4a:d9:b6:3f:2e:9d:31:f1:23: f9:42:67:61:cb:a8:4f:f6:b0:91:70:d8:9b:dd:f5: 8e:59:7e:48:f1:75:25:38:4a:39:95:39:4b:d0:48: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C7:71:CC:50:BE:68:F0:D0:48:A3:5B:3E:11:E3:2F:0E:C3:A5:83 X509v3 Authority Key Identifier: keyid:AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:2d:7c:a1:ae:69:4e:af:54:26:af:07:b5:69:d4:1b:8e:a2: a3:a7:21:9b:78:bf:fb:50:37:d1:dd:98:d4:b7:14:ee:73:aa: a4:e9:9d:c9:c9:7c:5e:bd:dd:7d:9f:83:46:eb:58:92:e4:cf: 0d:9d:5f:27:33:f9:f6:96:ee:65:58:77:3a:0c:2c:27:8a:ec: 2a:d4:29:c7:4d:97:8e:95:11:27:ff:40:50:c7:8c:bb:2d:ff: 71:3d:4a:70:a2:ad:00:85:69:1d:7d:61:0e:d8:e7:5b:37:7c: 6e:6c:fe:19:a3:2c:27:0d:5c:07:eb:d3:34:29:3e:e4:54:31: b1:0f:b3:a8:87:07:d1:ea:5d:e8:75:e5:fc:3b:08:ca:b0:c1: 54:b8:56:86:58:d6:66:d3:d5:59:73:9b:19:4c:57:bc:02:cc: 31:52:5e:49:58:90:30:b7:2e:96:0e:da:35:c1:d0:60:af:39: be:ec:f6:69:c7:fd:e3:7d:b8:3b:74:1f:26:c7:ff:a8:16:1c: 8f:fd:16:13:8a:22:08:62:ff:8d:56:87:37:f1:a7:42:63:c7: a7:a0:1e:6d:b9:80:d1:b0:4e:f4:ba:09:ab:07:ae:4e:5b:15: 0e:ef:fa:32:4e:35:91:84:e2:75:88:6a:47:42:d7:31:58:c1: 1f:f9:2d:90 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMTVY3bps3BO2Rf4f+cNeGjspfHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQzNFQkZDNDQ0RTYwMjVDODM5NjE4QzNDODFDQzg5 OTY1OTlBMjAeFw0yNTA4MjIxMjI2NTFaFw0yNTA4MjYyMjU4NTFaMDMxMTAvBgNV BAMTKDcyQzc3MUNDNTBCRTY4RjBEMDQ4QTM1QjNFMTFFMzJGMEVDM0E1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU9VmQsuFmSZgCvuJRofe7Z+6M t0SJP7cabMUori/npIOeX1iDYLVzCT9ihUiED6bmINeJBinglePkLbnuj5yK6hlF o3+nFxPev+7A7XtjkhUjnVD384BNw9+1RdR8bRzNasqQQHBWZybdOn6U974f2OJs 0brEqQUkxX6Yk0Swv+4mxPoBMgi6WSmvRdjBW0u+9IUSqjxTWrKxx57jlZr09rKx WRHom253ISI1SAuWtECCfJKpHwd01OtGx9Z8FU6IKADGe3fjbgT3oMqrcIWFLkds fZh/uUrZtj8unTHxI/lCZ2HLqE/2sJFw2Jvd9Y5ZfkjxdSU4SjmVOUvQSLtlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcsdxzFC+aPDQSKNbPhHjLw7DpYMwHwYDVR0j BBgwFoAUr/w+v8RE5gJcg5YYw8gcyJllmaIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRkQ2MjdDMzdBREMyMkRFOEM0RDE4OUUyRDk4RDRDQzgw QzRFRUNGMUMyOTIwRDBGNDQwOTAxOUU1NEY4QzRBLzAvQUZGQzNFQkZDNDQ0RTYw MjVDODM5NjE4QzNDODFDQzg5OTY1OTlBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkZDM0VCRkM0NDRFNjAyNUM4 Mzk2MThDM0M4MUNDODk5NjU5OUEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUZENjI3QzM3QURDMjJERThDNEQxODlFMkQ5OEQ0Q0M4MEM0RUVDRjFD MjkyMEQwRjQ0MDkwMTlFNTRGOEM0QS8wL0FGRkMzRUJGQzQ0NEU2MDI1QzgzOTYx OEMzQzgxQ0M4OTk2NTk5QTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkLXyhrmlOr1Qmrwe1adQbjqKj pyGbeL/7UDfR3ZjUtxTuc6qk6Z3JyXxevd19n4NG61iS5M8NnV8nM/n2lu5lWHc6 DCwniuwq1CnHTZeOlREn/0BQx4y7Lf9xPUpwoq0AhWkdfWEO2OdbN3xubP4Zoywn DVwH69M0KT7kVDGxD7OohwfR6l3odeX8OwjKsMFUuFaGWNZm09VZc5sZTFe8Aswx Ul5JWJAwty6WDto1wdBgrzm+7PZpx/3jfbg7dB8mx/+oFhyP/RYTiiIIYv+NVoc3 8adCY8enoB5tuYDRsE70ugmrB65OWxUO7/oyTjWRhOJ1iGpHQtcxWMEf+S2Q -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:29 2025 by rpki-client