$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft File: AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft (raw, json) Hash identifier: GJ3+6rdu1sqOStts9uAUXXIDmIMWqr94ks4YswYMGDY= Subject key identifier: 72:CF:5D:1A:18:3B:F8:F9:0D:BE:3A:9C:8E:A5:9E:BE:2E:69:2D:B6 Authority key identifier: AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00 Certificate issuer: /CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400 Certificate serial: 4B0A6044F4426549218D4728AFCDA1E373A53AD8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft Manifest number: 017C Signing time: Thu 26 Mar 2026 02:12:40 +0000 Manifest this update: Thu 26 Mar 2026 02:07:40 +0000 Manifest next update: Mon 30 Mar 2026 20:12:40 +0000 Files and hashes: 1: 34352e3232342e3230322e302f32342d3234203d3e203238313130.roa (hash: fiF8iAvzt7/5ZjIH+Nbn9/8/RVso6h9kelz14B9xZug=) 2: 34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa (hash: xslvgn/MXIkldjGCcYYuvg586s3T/JwWgVZMkj/qTr4=) 3: AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl (hash: mX9W5T7ThwCIzKZO+VfC5kAJED8iA5AgIfiaMTSLDF0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0a:60:44:f4:42:65:49:21:8d:47:28:af:cd:a1:e3:73:a5:3a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400 Validity Not Before: Mar 26 02:07:40 2026 GMT Not After : Mar 30 20:12:40 2026 GMT Subject: CN=72CF5D1A183BF8F90DBE3A9C8EA59EBE2E692DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fc:66:5c:77:b3:6f:91:c9:09:53:22:8a:bb: fb:73:8a:f5:4e:d6:a8:49:15:01:84:85:ae:36:d7: dc:a7:33:1d:d7:13:84:9a:dc:1f:9f:13:e8:b4:76: 34:f2:bf:f5:ee:31:6b:4e:a5:c1:26:ad:15:ef:5d: 28:4d:e7:67:4c:8c:6d:91:db:e6:2b:a2:50:44:67: d6:8a:18:66:fc:e1:fc:1a:53:83:b9:be:4a:3d:2c: 55:36:4b:ed:ea:c7:16:95:84:de:4f:ab:a1:c1:83: 29:20:b2:61:b1:9c:2e:93:38:a8:74:9f:82:09:d8: fe:80:8c:57:16:69:1e:4f:c0:88:26:b3:a3:18:89: 70:80:ca:35:9a:3f:59:f4:a4:8d:7c:17:61:b3:8d: 4f:ca:17:b4:b0:5e:af:db:29:5f:64:30:2c:82:d1: 16:78:48:13:76:1b:4d:05:d5:cb:93:52:5b:9a:71: 08:fb:55:fe:24:b1:20:e6:d5:e6:6f:6e:d8:03:59: a0:87:13:e4:96:e7:f0:3a:f9:1f:9e:9a:79:45:ca: 4f:91:f0:f6:99:16:bf:2c:76:8a:69:9d:dc:e0:9a: ed:85:61:80:1a:03:c0:1a:c0:75:30:e1:cb:22:dd: 85:7f:42:6d:33:a0:27:cc:ea:75:5a:a2:c2:dd:a5: cf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CF:5D:1A:18:3B:F8:F9:0D:BE:3A:9C:8E:A5:9E:BE:2E:69:2D:B6 X509v3 Authority Key Identifier: keyid:AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a8:aa:4c:ac:1b:29:41:22:0b:0f:bb:d9:85:c1:93:19:d6: 06:8f:01:7b:63:50:7f:bc:62:9f:a0:ca:a2:2e:b7:01:4a:50: 27:06:0c:6b:c6:6b:e0:ca:65:96:90:8f:79:0a:66:3e:f0:7c: f5:75:ac:38:b9:b8:e2:18:e3:f5:88:82:1b:e6:b5:a5:92:f0: d1:89:33:51:50:06:55:00:61:04:b2:be:53:dd:80:b9:90:98: 6b:1f:5b:ab:d1:1c:f4:2a:32:1b:17:8c:84:9e:96:26:72:09: e4:6c:be:ca:9b:62:5d:49:14:91:4a:52:8d:5c:41:8a:6a:a6: 62:e7:32:7d:c1:86:f6:2b:49:df:51:49:71:73:ac:4f:ab:f8: 7b:07:f6:93:8f:3a:ee:58:50:a8:ac:00:9b:11:9e:74:13:f0: 6a:eb:96:2e:96:ec:95:92:01:6f:44:73:ee:1b:46:a0:90:e5: 0f:52:77:8a:c8:32:53:96:ae:13:70:05:6f:31:e0:d9:d4:07: ea:73:46:fb:2a:ae:e2:ff:f4:bd:3a:2f:47:00:b8:56:e9:49: f6:94:47:90:73:da:02:e5:82:b6:29:84:04:28:6b:8c:a7:41: dc:7c:7a:de:d2:d9:9d:c5:30:96:0d:69:bd:5d:8d:97:08:db: 3d:63:ce:f1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSwpgRPRCZUkhjUcor82h43OlOtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBNUI3MTU5Qjc5RTEwQjUxRTFGQURFREI0QzI1QzY1 MUNFMDQwMDAeFw0yNjAzMjYwMjA3NDBaFw0yNjAzMzAyMDEyNDBaMDMxMTAvBgNV BAMTKDcyQ0Y1RDFBMTgzQkY4RjkwREJFM0E5QzhFQTU5RUJFMkU2OTJEQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq/GZcd7NvkckJUyKKu/tzivVO 1qhJFQGEha4219ynMx3XE4Sa3B+fE+i0djTyv/XuMWtOpcEmrRXvXShN52dMjG2R 2+YrolBEZ9aKGGb84fwaU4O5vko9LFU2S+3qxxaVhN5Pq6HBgykgsmGxnC6TOKh0 n4IJ2P6AjFcWaR5PwIgms6MYiXCAyjWaP1n0pI18F2GzjU/KF7SwXq/bKV9kMCyC 0RZ4SBN2G00F1cuTUluacQj7Vf4ksSDm1eZvbtgDWaCHE+SW5/A6+R+emnlFyk+R 8PaZFr8sdoppndzgmu2FYYAaA8AawHUw4csi3YV/Qm0zoCfM6nVaosLdpc9nAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcs9dGhg7+PkNvjqcjqWevi5pLbYwHwYDVR0j BBgwFoAUr6W3FZt54QtR4fre20wlxlHOBAAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMUVGMjJBMEVBRDI5N0RENTlCRkEwRDlDMzg4NTk2RTY5 ODM0NDZCMTMzQzMxNUJGOTRBMDM4NEY3Qjc2RUI4LzAvQUZBNUI3MTU5Qjc5RTEw QjUxRTFGQURFREI0QzI1QzY1MUNFMDQwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkE1QjcxNTlCNzlFMTBCNTFF MUZBREVEQjRDMjVDNjUxQ0UwNDAwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjFFRjIyQTBFQUQyOTdERDU5QkZBMEQ5QzM4ODU5NkU2OTgzNDQ2QjEz M0MzMTVCRjk0QTAzODRGN0I3NkVCOC8wL0FGQTVCNzE1OUI3OUUxMEI1MUUxRkFE RURCNEMyNUM2NTFDRTA0MDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAqKpMrBspQSILD7vZhcGTGdYG jwF7Y1B/vGKfoMqiLrcBSlAnBgxrxmvgymWWkI95CmY+8Hz1daw4ubjiGOP1iIIb 5rWlkvDRiTNRUAZVAGEEsr5T3YC5kJhrH1ur0Rz0KjIbF4yEnpYmcgnkbL7Km2Jd SRSRSlKNXEGKaqZi5zJ9wYb2K0nfUUlxc6xPq/h7B/aTjzruWFCorACbEZ50E/Bq 65YuluyVkgFvRHPuG0agkOUPUneKyDJTlq4TcAVvMeDZ1Afqc0b7Kq7i//S9Oi9H ALhW6Un2lEeQc9oC5YK2KYQEKGuMp0HcfHre0tmdxTCWDWm9XY2XCNs9Y87x -----END CERTIFICATE-----Generated at Thu Mar 26 22:21:05 2026 by rpki-client