$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft File: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft (raw, json) Hash identifier: OpGtOT2wK9oUMsO6IMBrRq4l1DO9uYPercMxLoKEcTI= Subject key identifier: FA:38:26:17:F4:10:08:C6:1D:AF:F1:DC:F7:C7:EF:98:6A:99:11:80 Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Certificate serial: 69E272386691CDAA9A5D89735F8D335FEB395242 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft Manifest number: 01B2 Signing time: Mon 20 Jul 2026 22:29:21 +0000 Manifest this update: Mon 20 Jul 2026 22:24:21 +0000 Manifest next update: Sun 26 Jul 2026 22:12:21 +0000 Files and hashes: 1: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl (hash: XDUCeNUJjuVzqq5a4eoTBvsQqjz3pqJcRgN6MwGZAc8=) 2: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (hash: kTaf89zbV8DPx751zfxW+Rd67to9CAzT8zKeAESSzYo=) 3: 323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (hash: /6mQ5hvOd9I58Oo8ngAPKgLWxshGVRMkfruq/6TFz9M=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 05:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e2:72:38:66:91:cd:aa:9a:5d:89:73:5f:8d:33:5f:eb:39:52:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Validity Not Before: Jul 20 22:24:21 2026 GMT Not After : Jul 26 22:12:21 2026 GMT Subject: CN=FA382617F41008C61DAFF1DCF7C7EF986A991180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:60:24:5b:9b:74:be:d9:0c:1a:a2:8b:57: 26:7c:0c:36:b7:62:8e:13:8e:1c:76:38:c4:1c:95: 62:e6:29:03:6d:49:82:06:b7:7c:62:f2:58:72:1e: c9:ea:6e:8c:b8:cb:f5:6e:b1:4e:24:b8:76:26:cc: ea:57:82:1f:38:a4:5a:58:f9:83:b8:69:f3:27:56: 33:e0:a7:96:24:e8:ce:26:f0:e9:71:c3:70:7e:34: 86:d3:3c:8d:eb:26:f1:68:f0:93:40:bb:f3:26:a3: 52:59:1c:7e:af:23:6d:28:8f:0a:24:7d:20:f2:8f: d3:19:c1:28:82:a2:f0:17:1b:9c:e3:83:26:6b:8f: ce:e9:73:39:88:0d:dc:5c:62:5e:c9:34:9b:0c:3f: 04:04:32:17:51:00:7c:82:e2:9c:5d:5a:74:af:ce: 10:45:ae:48:e9:d0:af:fa:fd:2b:c3:0c:ba:27:3b: 3c:2e:cd:57:48:7b:d4:1f:3c:75:41:17:a1:56:e5: 3f:4e:39:62:56:ad:56:da:46:4c:39:e3:bf:60:63: 16:c2:aa:cb:ef:a3:a4:5a:d3:29:eb:fc:8e:f8:d7: 83:7d:a1:3f:92:57:ec:ba:fe:8b:ec:32:36:31:9e: 3f:1d:61:0d:ff:22:46:d0:5f:a2:39:40:ee:5a:b7: 7f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:38:26:17:F4:10:08:C6:1D:AF:F1:DC:F7:C7:EF:98:6A:99:11:80 X509v3 Authority Key Identifier: keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:30:e3:8a:25:d3:71:5c:b6:1e:96:eb:7d:c7:0f:62:33:6d: fe:ad:7d:de:7c:19:24:5c:2c:70:4f:17:13:bb:bd:a9:68:5a: 9d:65:7e:38:df:b7:74:5c:be:b7:d3:bc:56:33:12:b0:08:97: 7e:b1:4e:9b:7d:22:ed:3f:a0:f6:57:9c:f0:f4:72:2b:5e:d3: 11:08:e0:aa:f3:ff:7e:c8:5e:ba:1f:5c:6b:f8:f4:fa:38:44: 84:a7:f9:41:be:88:81:78:6a:e1:95:93:76:86:e0:26:b1:59: 65:03:9b:4e:f9:6f:f7:f9:c5:5c:c6:57:c1:ff:84:9e:af:f0: 4b:e0:d1:97:d8:da:c2:5a:c4:0d:38:83:71:01:11:d7:29:7a: 06:22:7a:e0:b8:8b:25:dc:d7:b9:e0:16:90:59:ef:22:2b:1e: 77:f0:20:ad:a7:f0:62:f1:c4:3b:20:2c:08:9a:ea:a2:98:4a: 4c:6e:63:99:83:e2:14:4a:80:90:cd:79:c5:eb:55:c3:31:10: 36:d3:02:f7:a8:5d:9a:6f:58:f8:a6:27:1a:e3:5e:18:8e:e2: 8b:bc:4c:89:2f:4f:82:49:96:85:3f:1d:80:f9:0e:08:e2:62: 49:17:ba:81:1f:f3:32:96:3e:5a:e8:e5:79:2b:8a:0c:32:4b: fe:51:57:54 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaeJyOGaRzaqaXYlzX40zX+s5UkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2MjdERUREODIy QzI1QThBRjAeFw0yNjA3MjAyMjI0MjFaFw0yNjA3MjYyMjEyMjFaMDMxMTAvBgNV BAMTKEZBMzgyNjE3RjQxMDA4QzYxREFGRjFEQ0Y3QzdFRjk4NkE5OTExODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChPWAkW5t0vtkMGqKLVyZ8DDa3 Yo4Tjhx2OMQclWLmKQNtSYIGt3xi8lhyHsnqboy4y/VusU4kuHYmzOpXgh84pFpY +YO4afMnVjPgp5Yk6M4m8Olxw3B+NIbTPI3rJvFo8JNAu/Mmo1JZHH6vI20ojwok fSDyj9MZwSiCovAXG5zjgyZrj87pczmIDdxcYl7JNJsMPwQEMhdRAHyC4pxdWnSv zhBFrkjp0K/6/SvDDLonOzwuzVdIe9QfPHVBF6FW5T9OOWJWrVbaRkw5479gYxbC qsvvo6Ra0ynr/I7414N9oT+SV+y6/ovsMjYxnj8dYQ3/IkbQX6I5QO5at3/vAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU+jgmF/QQCMYdr/Hc98fvmGqZEYAwHwYDVR0j BBgwFoAUr4VUAquNzJ6UDnsWJ97dgiwlqK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5 QkM5RDJEOUJBQzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5 RTk0MEU3QjE2MjdERUREODIyQzI1QThBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjg1NTQwMkFCOERDQzlFOTQw RTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjBFQTk2RDhBODVCNTk0MzExQjJERTJCOEFDMDFDQjkyOUJDOUQyRDlC QUM5NTJGNUUwODNERURFMDAxMTAxMS8wL0FGODU1NDAyQUI4RENDOUU5NDBFN0Ix NjI3REVERDgyMkMyNUE4QUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPMOOKJdNxXLYelut9xw9iM23+ rX3efBkkXCxwTxcTu72paFqdZX4437d0XL6307xWMxKwCJd+sU6bfSLtP6D2V5zw 9HIrXtMRCOCq8/9+yF66H1xr+PT6OESEp/lBvoiBeGrhlZN2huAmsVllA5tO+W/3 +cVcxlfB/4Ser/BL4NGX2NrCWsQNOINxARHXKXoGInrguIsl3Ne54BaQWe8iKx53 8CCtp/Bi8cQ7ICwImuqimEpMbmOZg+IUSoCQzXnF61XDMRA20wL3qF2ab1j4pica 414YjuKLvEyJL0+CSZaFPx2A+Q4I4mJJF7qBH/Mylj5a6OV5K4oMMkv+UVdU -----END CERTIFICATE-----Generated at Tue Jul 21 11:45:52 2026 by rpki-client