$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft File: AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft (raw, json) Hash identifier: iZMf+niyrYVGfYUcKvNTQUu/ZoWKz+1bJFFLgmv2xbE= Subject key identifier: AD:A1:90:D8:C9:FA:90:C0:60:78:CF:67:40:89:49:00:51:6B:80:BF Authority key identifier: AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D Certificate issuer: /CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D Certificate serial: 7181E1200DFD2469B4425C0D7E498D2812BCA770 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft Manifest number: 33 Signing time: Sat 19 Jul 2025 16:10:30 +0000 Manifest this update: Sat 19 Jul 2025 16:05:30 +0000 Manifest next update: Fri 25 Jul 2025 06:55:30 +0000 Files and hashes: 1: 34352e3137302e3130332e302f32342d3234203d3e20323637373538.roa (hash: jOsSdiB/f+Db39hMSrjnANZM9C7EAZn99vqRXb99hBs=) 2: 34352e3137302e3130322e302f32342d3234203d3e20323637373538.roa (hash: CXzGXfR41i/1HvoAUoAc0uTBDAAIRoe5wXtGqXceCoE=) 3: 34352e3137302e3130322e302f32332d3233203d3e20323637373538.roa (hash: +dcVegBtKf/KAa/zxwv/hAK8UkNryF+L5VmJFfVQ5So=) 4: AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl (hash: CFsc2djDUsaLBg7c2Tsyr7D7rZZr4DpN1TN4883kC0g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Jul 2025 19:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:81:e1:20:0d:fd:24:69:b4:42:5c:0d:7e:49:8d:28:12:bc:a7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D Validity Not Before: Jul 19 16:05:30 2025 GMT Not After : Jul 25 06:55:30 2025 GMT Subject: CN=ADA190D8C9FA90C06078CF6740894900516B80BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:99:77:f2:2c:81:0b:f7:78:ca:a7:f5:08:57: 99:4d:20:60:85:8f:24:c9:3d:58:02:21:38:71:97: e4:86:17:0e:72:c5:5c:ad:2d:99:e1:4b:d3:a8:27: 8e:5f:0e:e9:27:d7:6a:66:72:6a:56:c5:9d:7a:08: 4d:8b:95:f0:df:97:72:e8:66:18:03:2b:a4:27:9d: ed:99:ed:d8:18:cc:e4:93:42:d3:ce:e2:35:2f:d8: 37:ee:4c:23:3c:f8:3f:74:48:85:5b:28:0c:df:04: 1e:27:6a:45:ce:af:db:ba:8b:bb:16:61:3f:20:15: 94:a9:38:d1:c8:2e:41:bc:5c:c0:58:db:be:7c:e4: 77:9d:94:a4:6b:ab:7b:46:6b:18:1c:8f:da:7b:6d: 47:0c:bf:db:ee:87:d8:d5:b7:8e:c5:da:98:b2:a2: e2:b7:c1:7a:47:b0:c2:9c:a6:a0:59:3c:f2:dd:d0: 09:90:f5:ce:6a:9d:2a:9e:b5:ba:67:47:7a:4c:80: 49:11:8a:73:07:7e:69:b8:b3:3c:a2:e4:62:f8:9a: 6b:2a:05:cb:52:6e:6d:82:b1:b2:d4:a7:20:6c:ba: 16:83:8c:c2:5c:18:c2:3a:93:2d:19:11:b9:4f:b9: 9f:24:cf:52:fb:57:d5:a0:bf:47:c3:fd:aa:a2:4f: 67:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A1:90:D8:C9:FA:90:C0:60:78:CF:67:40:89:49:00:51:6B:80:BF X509v3 Authority Key Identifier: keyid:AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8c:95:44:80:6d:60:26:72:fc:53:94:db:76:1f:74:fd:e1: ed:ca:6d:78:1a:6f:ca:08:d4:b2:37:c2:da:e6:ff:8e:70:a3: 38:82:7e:d4:fe:13:b6:ae:a3:a6:3a:2c:cf:d9:53:04:63:51: b4:b9:35:ce:4e:33:a5:5b:ff:c1:90:20:de:f9:9c:0c:cd:69: 9c:7a:bc:fb:d9:f4:6f:28:34:52:13:43:66:d5:88:f1:bb:2b: 5a:f2:16:a2:0e:a4:d0:fa:e4:d2:61:fb:9a:a2:66:4b:bd:5a: a5:08:e6:b2:b8:90:56:87:ce:2a:31:34:f4:9a:e7:85:8c:ed: 5b:b0:c0:ce:c5:d8:99:20:50:d0:38:56:2f:ca:9b:bd:0d:6c: f5:e1:43:40:57:0f:d9:68:70:70:93:54:9d:d1:11:5c:0f:15: d4:31:e9:d9:01:e7:01:cd:8f:9a:01:08:63:dd:b4:92:77:4d: d7:7a:2f:a9:14:03:a8:87:fb:90:8f:5f:48:87:d7:dd:7c:4c: c7:04:57:15:44:d9:31:86:27:3f:81:c7:e6:86:fa:5e:9e:68: 0e:25:a9:39:2a:16:cd:c2:6c:44:cd:65:1f:0c:47:33:ef:d2: ad:18:68:ca:96:64:be:2b:9e:38:c5:77:90:9d:6d:4a:ae:24: 54:82:7d:32 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcYHhIA39JGm0QlwNfkmNKBK8p3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBRkVDQkQ4RDhCRUI1QkU0MTQwM0RBREM0RDBGN0Mz QThCNEI4RDAeFw0yNTA3MTkxNjA1MzBaFw0yNTA3MjUwNjU1MzBaMDMxMTAvBgNV BAMTKEFEQTE5MEQ4QzlGQTkwQzA2MDc4Q0Y2NzQwODk0OTAwNTE2QjgwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQmXfyLIEL93jKp/UIV5lNIGCF jyTJPVgCIThxl+SGFw5yxVytLZnhS9OoJ45fDukn12pmcmpWxZ16CE2LlfDfl3Lo ZhgDK6Qnne2Z7dgYzOSTQtPO4jUv2DfuTCM8+D90SIVbKAzfBB4nakXOr9u6i7sW YT8gFZSpONHILkG8XMBY27585HedlKRrq3tGaxgcj9p7bUcMv9vuh9jVt47F2piy ouK3wXpHsMKcpqBZPPLd0AmQ9c5qnSqetbpnR3pMgEkRinMHfmm4szyi5GL4mmsq BctSbm2CsbLUpyBsuhaDjMJcGMI6ky0ZEblPuZ8kz1L7V9Wgv0fD/aqiT2dvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUraGQ2Mn6kMBgeM9nQIlJAFFrgL8wHwYDVR0j BBgwFoAUr6/svY2L61vkFAPa3E0PfDqLS40wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRUU0MjQwMDZGNTM3RjBEN0FCMzVCM0E2N0Q0MzgxMkUw RjcxMEQ0MDc5QjJFNEVFREMzMTRCNENCMEFDOEQ4LzAvQUZBRkVDQkQ4RDhCRUI1 QkU0MTQwM0RBREM0RDBGN0MzQThCNEI4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkFGRUNCRDhEOEJFQjVCRTQx NDAzREFEQzREMEY3QzNBOEI0QjhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUVFNDI0MDA2RjUzN0YwRDdBQjM1QjNBNjdENDM4MTJFMEY3MTBENDA3 OUIyRTRFRURDMzE0QjRDQjBBQzhEOC8wL0FGQUZFQ0JEOEQ4QkVCNUJFNDE0MDNE QURDNEQwRjdDM0E4QjRCOEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJjJVEgG1gJnL8U5Tbdh90/eHt ym14Gm/KCNSyN8La5v+OcKM4gn7U/hO2rqOmOizP2VMEY1G0uTXOTjOlW//BkCDe +ZwMzWmcerz72fRvKDRSE0Nm1Yjxuyta8haiDqTQ+uTSYfuaomZLvVqlCOayuJBW h84qMTT0mueFjO1bsMDOxdiZIFDQOFYvypu9DWz14UNAVw/ZaHBwk1Sd0RFcDxXU MenZAecBzY+aAQhj3bSSd03Xei+pFAOoh/uQj19Ih9fdfEzHBFcVRNkxhic/gcfm hvpenmgOJak5KhbNwmxEzWUfDEcz79KtGGjKlmS+K544xXeQnW1KriRUgn0y -----END CERTIFICATE-----Generated at Sun Jul 20 19:01:21 2025 by rpki-client