$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft File: AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft (raw, json) Hash identifier: 7EtV/RFObGidOR1h+OEEuf+G+3NI5l09hsL7scgUikE= Subject key identifier: 2E:05:4A:86:FC:A3:E1:52:00:7D:2C:1D:64:0D:C2:06:6B:D2:31:15 Authority key identifier: AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D Certificate issuer: /CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D Certificate serial: 02CD53B932F1F162E9FA7D92036AB64792161020 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft Manifest number: 1D Signing time: Tue 03 Jun 2025 05:46:59 +0000 Manifest this update: Tue 03 Jun 2025 05:41:59 +0000 Manifest next update: Sun 08 Jun 2025 16:04:59 +0000 Files and hashes: 1: 34352e3137302e3130322e302f32342d3234203d3e20323637373538.roa (hash: CXzGXfR41i/1HvoAUoAc0uTBDAAIRoe5wXtGqXceCoE=) 2: 34352e3137302e3130332e302f32342d3234203d3e20323637373538.roa (hash: jOsSdiB/f+Db39hMSrjnANZM9C7EAZn99vqRXb99hBs=) 3: AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl (hash: V+NNx0OlmJ5GOcBhX8TNAvMLY9m6HjnVWfuAZxqVHGs=) 4: 34352e3137302e3130322e302f32332d3233203d3e20323637373538.roa (hash: +dcVegBtKf/KAa/zxwv/hAK8UkNryF+L5VmJFfVQ5So=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cd:53:b9:32:f1:f1:62:e9:fa:7d:92:03:6a:b6:47:92:16:10:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D Validity Not Before: Jun 3 05:41:59 2025 GMT Not After : Jun 8 16:04:59 2025 GMT Subject: CN=2E054A86FCA3E152007D2C1D640DC2066BD23115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:38:01:6e:cc:e2:6a:a8:6f:c6:79:37:57:17: 61:e4:a1:92:77:4b:c4:a3:00:73:9a:0b:50:44:3f: 79:15:26:95:8a:9d:32:a0:c7:29:fc:ef:11:5b:25: 1a:f9:43:fa:41:5d:72:2d:b9:a0:63:32:37:19:9a: 98:cc:3d:be:b9:96:65:54:90:e4:06:86:f6:f4:ab: 7e:25:59:d5:3f:fc:d6:1a:26:bf:10:f8:db:31:69: aa:ef:64:9f:9b:65:18:50:d3:41:f0:09:d9:7d:c7: 6f:59:30:fb:ed:53:4f:22:7f:4a:b1:ee:73:27:9c: ad:a4:09:93:7b:99:e8:a6:8d:7a:8b:9b:42:95:35: b2:e5:3e:c5:2c:8f:11:df:5c:20:26:4c:54:dc:b1: 4b:b3:9a:6f:78:fc:54:88:61:a4:a7:8a:65:e7:8e: 8b:70:be:92:4d:94:bb:79:11:10:15:9d:28:28:85: b5:3b:83:c9:f4:86:3e:d2:96:15:41:d9:f3:51:03: 91:67:af:14:73:f6:67:dd:4e:e2:31:f7:95:98:24: 5f:1f:ee:1b:2b:4c:e5:e8:9a:e5:5d:70:d0:3e:42: 91:bf:58:bf:bb:c8:ec:7a:c9:6b:0e:15:9f:ed:cd: 81:de:17:a9:f8:be:24:61:25:9d:13:f1:53:bc:c0: d1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:05:4A:86:FC:A3:E1:52:00:7D:2C:1D:64:0D:C2:06:6B:D2:31:15 X509v3 Authority Key Identifier: keyid:AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:28:b2:ca:0b:3f:29:37:b2:63:59:65:c0:bb:f1:18:7a:94: 47:75:d8:48:43:f1:b9:7b:5b:96:98:ec:5d:d4:18:c0:2c:26: de:6d:17:ae:f2:07:45:e0:80:3e:75:2b:49:6f:ae:86:0a:ec: 70:61:a9:06:41:c8:3f:cc:41:b1:22:3a:e7:77:09:46:b9:c9: a4:01:10:27:4e:68:14:fb:c9:3e:ba:02:db:cd:3d:04:41:22: ae:5d:0f:c5:9d:b3:07:9f:57:c1:c2:ea:ce:46:9e:f2:91:c4: 9e:cc:d0:91:00:51:e7:66:78:ff:7b:79:19:fa:29:07:3f:a5: 60:96:e4:51:41:41:9a:e4:db:5a:6e:43:36:80:5b:cb:12:1d: f9:66:f6:d0:8d:8c:cb:d8:40:3a:a8:0c:07:ec:54:9b:77:59: 8e:e1:f2:d2:20:ac:2f:a8:3d:12:ec:b3:a7:27:b4:5a:47:76: f7:da:2c:3c:e6:11:47:3d:42:1e:0f:7d:7b:4f:ad:79:bd:0b: 3a:8a:51:e6:8d:6f:c8:ea:c3:5a:7b:31:89:36:d5:56:98:9c: 84:59:e9:7d:ce:6b:86:ef:31:a3:a7:5d:8b:75:4d:1b:33:75: 38:12:e7:c9:05:ee:4d:71:48:17:18:6d:56:d1:b1:a1:a2:cc: d6:93:66:ab -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAs1TuTLx8WLp+n2SA2q2R5IWECAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBRkVDQkQ4RDhCRUI1QkU0MTQwM0RBREM0RDBGN0Mz QThCNEI4RDAeFw0yNTA2MDMwNTQxNTlaFw0yNTA2MDgxNjA0NTlaMDMxMTAvBgNV BAMTKDJFMDU0QTg2RkNBM0UxNTIwMDdEMkMxRDY0MERDMjA2NkJEMjMxMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOAFuzOJqqG/GeTdXF2HkoZJ3 S8SjAHOaC1BEP3kVJpWKnTKgxyn87xFbJRr5Q/pBXXItuaBjMjcZmpjMPb65lmVU kOQGhvb0q34lWdU//NYaJr8Q+NsxaarvZJ+bZRhQ00HwCdl9x29ZMPvtU08if0qx 7nMnnK2kCZN7meimjXqLm0KVNbLlPsUsjxHfXCAmTFTcsUuzmm94/FSIYaSnimXn jotwvpJNlLt5ERAVnSgohbU7g8n0hj7SlhVB2fNRA5FnrxRz9mfdTuIx95WYJF8f 7hsrTOXomuVdcNA+QpG/WL+7yOx6yWsOFZ/tzYHeF6n4viRhJZ0T8VO8wNHlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULgVKhvyj4VIAfSwdZA3CBmvSMRUwHwYDVR0j BBgwFoAUr6/svY2L61vkFAPa3E0PfDqLS40wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRUU0MjQwMDZGNTM3RjBEN0FCMzVCM0E2N0Q0MzgxMkUw RjcxMEQ0MDc5QjJFNEVFREMzMTRCNENCMEFDOEQ4LzAvQUZBRkVDQkQ4RDhCRUI1 QkU0MTQwM0RBREM0RDBGN0MzQThCNEI4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkFGRUNCRDhEOEJFQjVCRTQx NDAzREFEQzREMEY3QzNBOEI0QjhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUVFNDI0MDA2RjUzN0YwRDdBQjM1QjNBNjdENDM4MTJFMEY3MTBENDA3 OUIyRTRFRURDMzE0QjRDQjBBQzhEOC8wL0FGQUZFQ0JEOEQ4QkVCNUJFNDE0MDNE QURDNEQwRjdDM0E4QjRCOEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIKLLKCz8pN7JjWWXAu/EYepRH ddhIQ/G5e1uWmOxd1BjALCbebReu8gdF4IA+dStJb66GCuxwYakGQcg/zEGxIjrn dwlGucmkARAnTmgU+8k+ugLbzT0EQSKuXQ/FnbMHn1fBwurORp7ykcSezNCRAFHn Znj/e3kZ+ikHP6VgluRRQUGa5NtabkM2gFvLEh35ZvbQjYzL2EA6qAwH7FSbd1mO 4fLSIKwvqD0S7LOnJ7RaR3b32iw85hFHPUIeD317T615vQs6ilHmjW/I6sNaezGJ NtVWmJyEWel9zmuG7zGjp12LdU0bM3U4EufJBe5NcUgXGG1W0bGhoszWk2ar -----END CERTIFICATE-----Generated at Wed Jun 4 12:30:13 2025 by rpki-client