$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft File: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft (raw, json) Hash identifier: rG40+kec1cu6VcgM+k86Z56ey5+UbH8Znbmn9VDMNfI= Subject key identifier: 03:1D:12:2B:37:67:96:19:43:28:22:D1:2A:38:14:58:6C:41:83:34 Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Certificate serial: 080C9BBBF30D4DC39C7ED36258CA14B9FAFFFB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft Manifest number: E4 Signing time: Mon 02 Jun 2025 12:01:14 +0000 Manifest this update: Mon 02 Jun 2025 11:56:14 +0000 Manifest next update: Sat 07 Jun 2025 11:58:14 +0000 Files and hashes: 1: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl (hash: D+llidyJpLrU8FRCf0ZjxEuXxMT466DdtuXJR84mMZc=) 2: 323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (hash: e93lsq181dWo8xkn84usZu3Ea1Z+yoCo2KQIwjRn9xs=) 3: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (hash: +JLSd5uFHqiUCm06ecF1x9vzbqFut/G4zYIvoGDlY28=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 11:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0c:9b:bb:f3:0d:4d:c3:9c:7e:d3:62:58:ca:14:b9:fa:ff:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Validity Not Before: Jun 2 11:56:14 2025 GMT Not After : Jun 7 11:58:14 2025 GMT Subject: CN=031D122B37679619432822D12A3814586C418334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:48:1c:bb:20:25:23:3e:0d:b4:57:4f:84: b8:9d:92:69:ff:94:f0:e1:0f:af:56:77:cc:26:2b: d1:1a:60:9f:63:2f:ea:56:98:61:96:bf:c0:ae:a7: 32:df:a0:31:21:ef:2c:96:68:2e:83:b2:ce:81:3c: 5b:2e:99:94:e0:1f:f1:e7:aa:1c:7c:bb:34:74:b0: d2:b9:b9:bb:14:1e:23:67:3e:16:4e:20:85:06:19: 21:90:eb:1b:9a:d0:13:fe:a0:42:6f:2c:2e:30:ec: 24:c7:e5:5e:42:d1:91:7d:cb:fa:52:84:e4:84:f8: 30:e7:34:1c:a0:43:5a:d9:08:6f:0f:0c:62:19:b4: 44:60:88:43:fa:be:f6:86:b0:8e:6c:4f:53:92:3d: 7a:f3:a7:44:8c:4f:4c:9a:19:04:3f:02:0c:b7:ee: 53:b9:9b:60:36:e7:3d:fc:2c:1f:9f:e0:87:1a:68: fd:f1:d6:d5:bf:dd:ad:8b:d9:8e:03:1c:48:eb:f3: 66:17:1e:0d:81:84:f2:3c:bc:55:e2:be:83:69:25: 96:2f:dd:5c:8e:7c:84:5c:77:63:d0:bc:dd:8d:3e: eb:e3:2a:f0:f0:ab:10:64:42:33:08:b1:91:70:ce: cb:ea:27:15:ed:5e:cf:8d:14:68:9d:4f:89:04:55: 73:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1D:12:2B:37:67:96:19:43:28:22:D1:2A:38:14:58:6C:41:83:34 X509v3 Authority Key Identifier: keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5e:ab:88:4f:eb:1d:56:49:ff:04:c8:fb:33:03:ad:ba:bd: 81:8a:d7:b5:b0:f1:61:ae:3f:68:7a:c9:2c:61:ec:ea:41:d5: 0c:7c:e8:9b:2d:5a:0e:27:ff:70:d7:b2:04:04:a7:cc:43:9d: 5c:b9:2e:89:99:ba:0c:d8:8d:f3:7c:c1:10:39:cf:4a:76:c5: db:a5:ba:46:c3:6e:cf:1c:de:89:cf:75:89:17:15:c2:67:45: 7b:3f:8c:b2:34:f1:d9:00:8f:ba:a3:ee:ae:e4:0d:6d:1c:c9: b2:ec:cb:fa:21:23:23:5f:94:de:43:c7:0d:54:1b:b6:5c:19: 4b:0f:84:94:b1:c0:4c:6e:c1:11:74:ea:3d:60:21:1b:f5:d8: 45:96:4c:fb:2b:7f:8e:41:31:d8:87:95:69:7f:98:2c:72:89: 62:82:d9:9c:da:16:4a:5a:2e:a2:a0:80:3f:ea:52:4b:80:cf: 00:84:4f:7d:93:9d:17:6a:d5:35:f7:95:14:a2:75:25:21:03: 48:ab:d5:dc:90:45:55:ab:0c:fc:8f:d6:95:de:0f:eb:f5:27: 82:c5:74:88:64:74:b8:7a:9c:3b:6d:96:aa:0d:e9:08:58:92: 25:29:fc:c1:d9:ba:3a:4f:67:37:ef:a2:08:dc:64:92:f3:62: 05:4b:e5:dc -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgITCAybu/MNTcOcftNiWMoUufr/+zANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhBRjg1NTQwMkFCOERDQzlFOTQwRTdCMTYyN0RFREQ4MjJD MjVBOEFGMB4XDTI1MDYwMjExNTYxNFoXDTI1MDYwNzExNTgxNFowMzExMC8GA1UE AxMoMDMxRDEyMkIzNzY3OTYxOTQzMjgyMkQxMkEzODE0NTg2QzQxODMzNDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMR9SBy7ICUjPg20V0+EuJ2Saf+U 8OEPr1Z3zCYr0Rpgn2Mv6laYYZa/wK6nMt+gMSHvLJZoLoOyzoE8Wy6ZlOAf8eeq HHy7NHSw0rm5uxQeI2c+Fk4ghQYZIZDrG5rQE/6gQm8sLjDsJMflXkLRkX3L+lKE 5IT4MOc0HKBDWtkIbw8MYhm0RGCIQ/q+9oawjmxPU5I9evOnRIxPTJoZBD8CDLfu U7mbYDbnPfwsH5/ghxpo/fHW1b/drYvZjgMcSOvzZhceDYGE8jy8VeK+g2klli/d XI58hFx3Y9C83Y0+6+Mq8PCrEGRCMwixkXDOy+onFe1ez40UaJ1PiQRVc4sCAwEA AaOCAtMwggLPMB0GA1UdDgQWBBQDHRIrN2eWGUMoItEqOBRYbEGDNDAfBgNVHSME GDAWgBSvhVQCq43MnpQOexYn3t2CLCWorzAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0 L3Jwa2kvbGFjbmljLzYwRUE5NkQ4QTg1QjU5NDMxMUIyREUyQjhBQzAxQ0I5MjlC QzlEMkQ5QkFDOTUyRjVFMDgzREVERTAwMTEwMTEvMC9BRjg1NTQwMkFCOERDQzlF OTQwRTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNybDCBuQYIKwYBBQUHAQEEgawwgakw gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wL0FGODU1NDAyQUI4RENDOUU5NDBF N0IxNjI3REVERDgyMkMyNUE4QUYuY2VyMIG5BggrBgEFBQcBCwSBrDCBqTCBpgYI KwYBBQUHMAuGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5QkM5RDJEOUJB Qzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2 MjdERUREODIyQzI1QThBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD9eq4hP6x1WSf8EyPszA626vYGK 17Ww8WGuP2h6ySxh7OpB1Qx86JstWg4n/3DXsgQEp8xDnVy5LomZugzYjfN8wRA5 z0p2xdulukbDbs8c3onPdYkXFcJnRXs/jLI08dkAj7qj7q7kDW0cybLsy/ohIyNf lN5Dxw1UG7ZcGUsPhJSxwExuwRF06j1gIRv12EWWTPsrf45BMdiHlWl/mCxyiWKC 2ZzaFkpaLqKggD/qUkuAzwCET32TnRdq1TX3lRSidSUhA0ir1dyQRVWrDPyP1pXe D+v1J4LFdIhkdLh6nDttlqoN6QhYkiUp/MHZujpPZzfvogjcZJLzYgVL5dw= -----END CERTIFICATE-----Generated at Wed Jun 4 12:24:27 2025 by rpki-client