$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft File: AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft (raw, json) Hash identifier: muWArujNCt1Wkv5V5ext04MJi4p0xVpgEoj3a0xwN3M= Subject key identifier: 3B:F3:37:54:93:66:BB:B2:ED:84:3A:54:D4:F7:40:44:04:39:69:AF Authority key identifier: AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00 Certificate issuer: /CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400 Certificate serial: 66A1D5085064C316FE720E912BF40C82863FD82F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft Manifest number: 012F Signing time: Mon 20 Oct 2025 11:29:07 +0000 Manifest this update: Mon 20 Oct 2025 11:24:07 +0000 Manifest next update: Sat 25 Oct 2025 20:30:07 +0000 Files and hashes: 1: 34352e3232342e3230322e302f32342d3234203d3e203238313130.roa (hash: fiF8iAvzt7/5ZjIH+Nbn9/8/RVso6h9kelz14B9xZug=) 2: 34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa (hash: jT1E1QQ2DLRUAXUiMSpmHQQCj1+7qTNhhKnmVO0M050=) 3: AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl (hash: 4qbHbmeJE5fKOQExP7CyP8DEES93SAUemt5T6R7wn6E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a1:d5:08:50:64:c3:16:fe:72:0e:91:2b:f4:0c:82:86:3f:d8:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400 Validity Not Before: Oct 20 11:24:07 2025 GMT Not After : Oct 25 20:30:07 2025 GMT Subject: CN=3BF337549366BBB2ED843A54D4F74044043969AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:8a:e3:7a:39:f1:d7:53:24:92:ed:f8:0d: 54:03:93:c5:f2:9a:8a:6f:b0:01:41:b2:5a:dd:35: 3b:d2:2f:ce:c2:fc:5b:d8:f7:d0:a5:81:90:c2:57: aa:12:e3:52:20:d1:02:1f:dd:56:f2:d2:c5:f0:15: 06:2b:61:5f:60:45:33:0d:09:45:62:02:72:fb:fc: 2a:18:8c:9f:d5:59:53:03:1d:91:92:79:fe:28:ac: 5d:0b:c4:08:ca:cd:52:3f:5c:c5:a6:00:c7:70:f3: c6:97:60:d2:58:28:90:02:96:1f:9a:90:04:d9:45: 34:a1:48:b6:49:1b:e2:cb:7d:f0:28:23:97:10:d3: 7f:11:ab:8e:91:e7:9a:60:67:cb:d7:b4:52:21:8e: b6:8a:df:09:d8:a2:2a:d0:d4:0b:51:dc:19:7a:b6: 04:55:cc:b9:cc:17:65:a0:3b:9b:67:96:08:1f:35: 06:cd:12:e0:8b:5e:19:16:75:54:06:fc:ac:9a:31: b0:e2:43:b2:2d:27:cc:e9:34:5d:db:57:69:80:db: 82:9e:ff:dc:5c:fd:f5:0a:37:7d:64:7e:d4:5a:f8: 9b:1b:49:b8:37:4c:54:80:55:2f:a5:88:0b:b1:a9: 78:32:d6:e4:c8:33:85:af:25:f0:d8:48:9e:5e:3b: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F3:37:54:93:66:BB:B2:ED:84:3A:54:D4:F7:40:44:04:39:69:AF X509v3 Authority Key Identifier: keyid:AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:01:d0:bb:ee:91:93:d4:20:06:b0:32:28:b2:b0:dc:33:bd: 06:23:93:24:d5:bb:3e:7c:0c:32:b2:20:71:e5:8b:c8:97:27: 4d:33:72:14:fc:6b:cb:c2:5d:a2:44:f4:46:fb:94:b9:24:76: 93:30:0d:21:24:c6:ab:40:e1:d5:6c:0d:e8:b7:da:00:dc:fa: 49:3d:a1:cd:5b:f3:9c:42:30:67:f8:9a:cf:58:5f:8f:83:ce: ec:1d:2a:1a:53:24:ad:f5:80:08:39:86:6b:76:03:81:fc:a0: de:55:c9:75:8b:fb:83:65:88:52:43:0e:70:a3:51:12:97:ec: 6b:9b:7b:74:24:ab:2d:00:d8:2c:82:c3:6a:72:84:e9:94:0f: 12:99:88:d5:85:d9:29:f7:da:ad:73:ab:21:93:3c:30:f6:69: 77:ff:bc:ca:7e:c7:7f:30:19:8f:a3:51:71:98:6a:7e:b4:c6: 61:c5:59:9b:da:19:8e:bd:50:b3:6c:55:41:c5:8c:89:82:7b: 13:3e:3c:eb:c7:44:e0:68:d2:4b:90:2f:e0:04:41:21:dc:91: 05:2a:85:d3:df:58:dd:07:76:16:f7:5f:9e:2a:91:f3:5c:02: e3:94:87:b8:33:a5:f8:56:c7:51:73:c2:a9:f8:ef:ac:fc:aa: cd:ce:e3:30 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZqHVCFBkwxb+cg6RK/QMgoY/2C8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBNUI3MTU5Qjc5RTEwQjUxRTFGQURFREI0QzI1QzY1 MUNFMDQwMDAeFw0yNTEwMjAxMTI0MDdaFw0yNTEwMjUyMDMwMDdaMDMxMTAvBgNV BAMTKDNCRjMzNzU0OTM2NkJCQjJFRDg0M0E1NEQ0Rjc0MDQ0MDQzOTY5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyc4rjejnx11Mkku34DVQDk8Xy mopvsAFBslrdNTvSL87C/FvY99ClgZDCV6oS41Ig0QIf3Vby0sXwFQYrYV9gRTMN CUViAnL7/CoYjJ/VWVMDHZGSef4orF0LxAjKzVI/XMWmAMdw88aXYNJYKJAClh+a kATZRTShSLZJG+LLffAoI5cQ038Rq46R55pgZ8vXtFIhjraK3wnYoirQ1AtR3Bl6 tgRVzLnMF2WgO5tnlggfNQbNEuCLXhkWdVQG/KyaMbDiQ7ItJ8zpNF3bV2mA24Ke /9xc/fUKN31kftRa+JsbSbg3TFSAVS+liAuxqXgy1uTIM4WvJfDYSJ5eO8b/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUO/M3VJNmu7LthDpU1PdARAQ5aa8wHwYDVR0j BBgwFoAUr6W3FZt54QtR4fre20wlxlHOBAAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMUVGMjJBMEVBRDI5N0RENTlCRkEwRDlDMzg4NTk2RTY5 ODM0NDZCMTMzQzMxNUJGOTRBMDM4NEY3Qjc2RUI4LzAvQUZBNUI3MTU5Qjc5RTEw QjUxRTFGQURFREI0QzI1QzY1MUNFMDQwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkE1QjcxNTlCNzlFMTBCNTFF MUZBREVEQjRDMjVDNjUxQ0UwNDAwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjFFRjIyQTBFQUQyOTdERDU5QkZBMEQ5QzM4ODU5NkU2OTgzNDQ2QjEz M0MzMTVCRjk0QTAzODRGN0I3NkVCOC8wL0FGQTVCNzE1OUI3OUUxMEI1MUUxRkFE RURCNEMyNUM2NTFDRTA0MDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnAdC77pGT1CAGsDIosrDcM70G I5Mk1bs+fAwysiBx5YvIlydNM3IU/GvLwl2iRPRG+5S5JHaTMA0hJMarQOHVbA3o t9oA3PpJPaHNW/OcQjBn+JrPWF+Pg87sHSoaUySt9YAIOYZrdgOB/KDeVcl1i/uD ZYhSQw5wo1ESl+xrm3t0JKstANgsgsNqcoTplA8SmYjVhdkp99qtc6shkzww9ml3 /7zKfsd/MBmPo1FxmGp+tMZhxVmb2hmOvVCzbFVBxYyJgnsTPjzrx0TgaNJLkC/g BEEh3JEFKoXT31jdB3YW91+eKpHzXALjlIe4M6X4VsdRc8Kp+O+s/KrNzuMw -----END CERTIFICATE-----Generated at Tue Oct 21 02:54:19 2025 by rpki-client