$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft File: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft (raw, json) Hash identifier: kbovm15wQWtyRCdOsYlcrCGIyl5pO15Bp4Z01pl/huo= Subject key identifier: 84:8D:E0:07:FA:E3:6B:AA:A9:89:61:48:6F:4B:43:E0:5C:F6:96:08 Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Certificate serial: 1C5DEF315D80C494EA0DC16B09CE6370F33AA5B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft Manifest number: 0171 Signing time: Sun 15 Mar 2026 13:31:43 +0000 Manifest this update: Sun 15 Mar 2026 13:26:43 +0000 Manifest next update: Sat 21 Mar 2026 08:55:43 +0000 Files and hashes: 1: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (hash: kTaf89zbV8DPx751zfxW+Rd67to9CAzT8zKeAESSzYo=) 2: 323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (hash: /6mQ5hvOd9I58Oo8ngAPKgLWxshGVRMkfruq/6TFz9M=) 3: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl (hash: w/uTOv0Xkmo6eW/IZTSBUFAJi7FXUoQ4ZR+BtVoxhhc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Mar 2026 08:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:5d:ef:31:5d:80:c4:94:ea:0d:c1:6b:09:ce:63:70:f3:3a:a5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Validity Not Before: Mar 15 13:26:43 2026 GMT Not After : Mar 21 08:55:43 2026 GMT Subject: CN=848DE007FAE36BAAA98961486F4B43E05CF69608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:3b:26:2e:c5:1e:35:48:08:8b:6f:3d:e8: 54:9a:55:14:dd:a4:50:9d:01:e4:fc:33:ec:60:40: ed:ea:b5:5f:b2:de:76:71:da:bb:16:74:05:6a:eb: 4d:7e:ed:d6:00:e5:e5:90:30:92:e8:fc:2c:58:4b: df:d4:0c:28:4c:d3:2a:a4:61:16:13:cf:a0:dd:58: 38:7c:45:36:7a:ce:d2:64:3a:7f:4c:65:0e:5c:fe: 62:02:94:a6:5d:15:ea:f5:6d:26:81:b2:f3:e7:f4: f8:a2:89:26:03:7c:ab:a2:5e:74:d3:02:ab:33:cc: f0:0d:60:d9:6c:cf:2b:82:78:33:a8:7e:bf:cf:51: 74:66:10:8f:ed:b3:a5:8c:50:b0:1f:38:1f:93:aa: f3:56:bb:46:33:b6:44:d8:3b:60:18:19:7e:ad:e1: fe:58:fa:ef:1b:3f:73:56:f1:8f:91:1a:dc:95:f9: e3:80:35:d9:08:05:d8:bd:62:c1:87:18:04:6c:3c: 0d:8b:8e:47:b1:dc:b4:72:1b:6b:d3:af:c3:05:0e: 73:b7:ba:19:8a:14:87:14:84:68:48:70:1d:c4:8b: 0c:0c:fb:8b:be:47:ec:a4:e3:d8:d6:20:9f:6f:58: 62:6c:c1:63:ca:bf:ae:48:54:3d:ba:89:20:42:c6: ea:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8D:E0:07:FA:E3:6B:AA:A9:89:61:48:6F:4B:43:E0:5C:F6:96:08 X509v3 Authority Key Identifier: keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1a:f1:9b:5e:42:13:9e:fd:e2:8d:cd:d4:97:cd:50:a3:20: e6:4b:50:a3:32:76:23:a0:07:ad:81:19:a9:f2:9d:e5:f7:74: 7a:02:e1:52:0f:5f:8e:c5:7c:27:fa:19:bd:4b:fb:e8:fe:30: b5:c7:25:a9:c9:0d:aa:df:5f:2f:86:66:0b:fc:6a:6e:32:f5: 9b:91:f6:df:3e:83:88:32:a8:18:22:83:fb:50:b8:8f:8e:7a: 9d:e0:21:c8:00:56:03:93:27:31:58:d8:b7:68:a6:41:0a:74: af:7c:04:d4:cf:6a:89:cc:c3:9c:40:ba:96:eb:68:3d:ad:1f: 5e:b8:4a:04:8f:5f:2c:36:fa:a7:b1:7c:2d:07:52:aa:73:6d: d1:76:61:00:e0:a2:1b:8a:6b:c6:eb:e7:7a:ac:a7:49:84:01: 41:25:11:81:a7:c2:ef:ca:71:2d:af:7c:90:bd:fd:52:21:19: 05:21:64:b6:48:b7:1f:7b:21:10:59:f2:20:32:8c:a7:dd:da: 5e:49:45:af:51:fc:4d:c2:47:e6:5a:03:0f:dc:3e:9f:15:2b: fe:d2:fb:dd:90:3d:b5:87:be:c0:97:fc:7a:bb:2c:da:64:ca: 31:43:31:0c:cc:aa:81:42:ea:18:aa:29:aa:1f:59:5b:b4:2a: d1:8f:88:2d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHF3vMV2AxJTqDcFrCc5jcPM6pbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2MjdERUREODIy QzI1QThBRjAeFw0yNjAzMTUxMzI2NDNaFw0yNjAzMjEwODU1NDNaMDMxMTAvBgNV BAMTKDg0OERFMDA3RkFFMzZCQUFBOTg5NjE0ODZGNEI0M0UwNUNGNjk2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCruTsmLsUeNUgIi2896FSaVRTd pFCdAeT8M+xgQO3qtV+y3nZx2rsWdAVq601+7dYA5eWQMJLo/CxYS9/UDChM0yqk YRYTz6DdWDh8RTZ6ztJkOn9MZQ5c/mIClKZdFer1bSaBsvPn9PiiiSYDfKuiXnTT AqszzPANYNlszyuCeDOofr/PUXRmEI/ts6WMULAfOB+TqvNWu0YztkTYO2AYGX6t 4f5Y+u8bP3NW8Y+RGtyV+eOANdkIBdi9YsGHGARsPA2Ljkex3LRyG2vTr8MFDnO3 uhmKFIcUhGhIcB3EiwwM+4u+R+yk49jWIJ9vWGJswWPKv65IVD26iSBCxuorAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUhI3gB/rja6qpiWFIb0tD4Fz2lggwHwYDVR0j BBgwFoAUr4VUAquNzJ6UDnsWJ97dgiwlqK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5 QkM5RDJEOUJBQzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5 RTk0MEU3QjE2MjdERUREODIyQzI1QThBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjg1NTQwMkFCOERDQzlFOTQw RTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjBFQTk2RDhBODVCNTk0MzExQjJERTJCOEFDMDFDQjkyOUJDOUQyRDlC QUM5NTJGNUUwODNERURFMDAxMTAxMS8wL0FGODU1NDAyQUI4RENDOUU5NDBFN0Ix NjI3REVERDgyMkMyNUE4QUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoGvGbXkITnv3ijc3Ul81QoyDm S1CjMnYjoAetgRmp8p3l93R6AuFSD1+OxXwn+hm9S/vo/jC1xyWpyQ2q318vhmYL /GpuMvWbkfbfPoOIMqgYIoP7ULiPjnqd4CHIAFYDkycxWNi3aKZBCnSvfATUz2qJ zMOcQLqW62g9rR9euEoEj18sNvqnsXwtB1Kqc23RdmEA4KIbimvG6+d6rKdJhAFB JRGBp8LvynEtr3yQvf1SIRkFIWS2SLcfeyEQWfIgMoyn3dpeSUWvUfxNwkfmWgMP 3D6fFSv+0vvdkD21h77Al/x6uyzaZMoxQzEMzKqBQuoYqimqH1lbtCrRj4gt -----END CERTIFICATE-----Generated at Wed Mar 18 09:57:51 2026 by rpki-client