$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft File: AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft (raw, json) Hash identifier: KXYe/gQfv8e32O/exBP9VG9/zc6EzdorPTpF9Dy/4gU= Subject key identifier: D4:5F:A3:47:D5:6D:9F:F6:74:C2:01:05:75:BF:86:96:8D:5B:29:19 Authority key identifier: AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00 Certificate issuer: /CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400 Certificate serial: 5CF32A779D48B6396BAB56B215E15AA3234829CD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft Manifest number: 0135 Signing time: Sun 02 Nov 2025 08:44:33 +0000 Manifest this update: Sun 02 Nov 2025 08:39:33 +0000 Manifest next update: Thu 06 Nov 2025 12:52:33 +0000 Files and hashes: 1: 34352e3232342e3230322e302f32342d3234203d3e203238313130.roa (hash: fiF8iAvzt7/5ZjIH+Nbn9/8/RVso6h9kelz14B9xZug=) 2: AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl (hash: +0lrqiI+xskckA+KSrFUlDSU68y/nDTn4BjNNYgQRBE=) 3: 34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa (hash: jT1E1QQ2DLRUAXUiMSpmHQQCj1+7qTNhhKnmVO0M050=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f3:2a:77:9d:48:b6:39:6b:ab:56:b2:15:e1:5a:a3:23:48:29:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400 Validity Not Before: Nov 2 08:39:33 2025 GMT Not After : Nov 6 12:52:33 2025 GMT Subject: CN=D45FA347D56D9FF674C2010575BF86968D5B2919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a4:4e:98:c5:1b:9e:42:58:6d:1c:0c:96:9f: f4:48:01:4c:93:7f:a6:97:bc:ae:9c:ba:73:46:b3: 52:2e:cd:00:ce:6a:90:27:97:e2:f0:84:e5:4a:58: d1:de:dd:18:1a:5c:1b:fa:f4:a5:4e:56:b7:70:de: 19:ed:a1:d9:db:fd:48:5b:ff:fd:9f:d2:c4:ed:f1: 65:03:e2:ed:92:d8:4b:b8:0b:99:09:3a:2e:fa:77: bb:10:da:a6:77:59:bb:7f:ec:b3:40:80:3d:0f:12: c0:f6:ce:c1:e6:b3:c6:a7:11:6d:4f:fe:68:78:dc: d7:d1:76:da:87:91:a4:c2:8d:b1:e9:9c:a3:03:2b: ba:8c:43:cf:fc:75:07:a4:f3:28:65:1c:0c:9b:04: 5a:74:18:81:11:45:e0:d4:0b:a1:cd:fa:7c:f2:8d: 0f:94:02:15:f8:64:eb:76:83:c9:29:07:f8:c7:50: 98:43:2e:d3:59:89:bc:99:3c:a1:65:2a:44:a7:d2: 20:6a:e1:d1:c4:b5:0b:cc:3e:95:6e:e5:f8:9e:4a: 7f:8c:b1:6a:32:6b:52:45:0d:99:51:f4:b6:49:0e: f1:64:da:6b:38:0d:83:e7:59:c5:bb:04:58:7b:04: b6:c8:0f:23:03:fb:93:b9:65:9a:5b:b4:b4:fe:23: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5F:A3:47:D5:6D:9F:F6:74:C2:01:05:75:BF:86:96:8D:5B:29:19 X509v3 Authority Key Identifier: keyid:AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:bb:b2:fa:2e:2a:04:a0:4a:53:00:c1:6b:eb:e8:41:88:0c: 64:7f:76:1d:fa:f5:9a:3d:5b:ba:6c:12:f6:ca:9e:63:ac:f3: d8:9d:45:b6:3f:a2:8b:e4:ec:f9:64:f0:d9:54:62:06:e6:71: c3:b8:0c:72:1f:75:5b:5a:84:b1:2c:c2:64:e5:93:3d:b9:67: 9b:37:2b:af:54:81:84:cb:09:8f:da:b6:09:99:d9:f5:c5:8f: fa:7e:50:73:cd:97:0b:42:b8:13:04:42:68:28:e1:00:38:91: e9:c8:02:0f:82:6b:b0:0f:30:41:d6:de:31:02:2f:23:d6:2e: 6f:02:7d:c7:c4:c0:ea:12:a2:33:7a:9a:c6:00:d6:ea:8f:4b: 6a:4a:5e:f3:f7:16:0d:86:9a:ec:83:f0:d0:07:da:c7:48:95: 99:4d:05:e7:12:fa:3d:4a:b2:f5:c2:3f:74:8e:f0:e9:79:58: 08:67:07:45:1e:68:99:3a:19:86:2d:79:89:d5:87:ca:a2:23: 69:1a:60:16:ac:4c:e3:f0:ff:d1:c9:a5:13:ef:16:2d:f0:27: c7:26:4c:d5:d8:26:38:11:b4:8b:fd:8b:94:d6:ee:78:e7:53: d5:8c:f0:9b:48:62:01:69:8d:e6:6e:a4:6f:98:7e:16:67:81: b6:9a:4d:f8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXPMqd51Itjlrq1ayFeFaoyNIKc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBNUI3MTU5Qjc5RTEwQjUxRTFGQURFREI0QzI1QzY1 MUNFMDQwMDAeFw0yNTExMDIwODM5MzNaFw0yNTExMDYxMjUyMzNaMDMxMTAvBgNV BAMTKEQ0NUZBMzQ3RDU2RDlGRjY3NEMyMDEwNTc1QkY4Njk2OEQ1QjI5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCapE6YxRueQlhtHAyWn/RIAUyT f6aXvK6cunNGs1IuzQDOapAnl+LwhOVKWNHe3RgaXBv69KVOVrdw3hntodnb/Uhb //2f0sTt8WUD4u2S2Eu4C5kJOi76d7sQ2qZ3Wbt/7LNAgD0PEsD2zsHms8anEW1P /mh43NfRdtqHkaTCjbHpnKMDK7qMQ8/8dQek8yhlHAybBFp0GIERReDUC6HN+nzy jQ+UAhX4ZOt2g8kpB/jHUJhDLtNZibyZPKFlKkSn0iBq4dHEtQvMPpVu5fieSn+M sWoya1JFDZlR9LZJDvFk2ms4DYPnWcW7BFh7BLbIDyMD+5O5ZZpbtLT+I3T3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1F+jR9Vtn/Z0wgEFdb+Glo1bKRkwHwYDVR0j BBgwFoAUr6W3FZt54QtR4fre20wlxlHOBAAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMUVGMjJBMEVBRDI5N0RENTlCRkEwRDlDMzg4NTk2RTY5 ODM0NDZCMTMzQzMxNUJGOTRBMDM4NEY3Qjc2RUI4LzAvQUZBNUI3MTU5Qjc5RTEw QjUxRTFGQURFREI0QzI1QzY1MUNFMDQwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkE1QjcxNTlCNzlFMTBCNTFF MUZBREVEQjRDMjVDNjUxQ0UwNDAwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjFFRjIyQTBFQUQyOTdERDU5QkZBMEQ5QzM4ODU5NkU2OTgzNDQ2QjEz M0MzMTVCRjk0QTAzODRGN0I3NkVCOC8wL0FGQTVCNzE1OUI3OUUxMEI1MUUxRkFE RURCNEMyNUM2NTFDRTA0MDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByu7L6LioEoEpTAMFr6+hBiAxk f3Yd+vWaPVu6bBL2yp5jrPPYnUW2P6KL5Oz5ZPDZVGIG5nHDuAxyH3VbWoSxLMJk 5ZM9uWebNyuvVIGEywmP2rYJmdn1xY/6flBzzZcLQrgTBEJoKOEAOJHpyAIPgmuw DzBB1t4xAi8j1i5vAn3HxMDqEqIzeprGANbqj0tqSl7z9xYNhprsg/DQB9rHSJWZ TQXnEvo9SrL1wj90jvDpeVgIZwdFHmiZOhmGLXmJ1YfKoiNpGmAWrEzj8P/RyaUT 7xYt8CfHJkzV2CY4EbSL/YuU1u5451PVjPCbSGIBaY3mbqRvmH4WZ4G2mk34 -----END CERTIFICATE-----Generated at Sun Nov 2 20:54:09 2025 by rpki-client