$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft File: AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft (raw, json) Hash identifier: Sx/DLpAi3VU8Ub5HEan5jiQcl/z1x6mNXGJioGBxfPo= Subject key identifier: C0:0C:B6:3E:6A:0C:31:12:CF:2A:70:41:62:9A:82:BE:AD:FE:A3:B6 Authority key identifier: AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2 Certificate issuer: /CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2 Certificate serial: 69559894BFD257ED6EBE99EAA9881B676598D0EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft Manifest number: 25 Signing time: Thu 18 Sep 2025 19:45:22 +0000 Manifest this update: Thu 18 Sep 2025 19:40:22 +0000 Manifest next update: Tue 23 Sep 2025 07:21:22 +0000 Files and hashes: 1: 323830333a643964303a3a2f33322d3332203d3e20323734313538.roa (hash: T0oUgPSWTkNTCuDYVPvATKVNJqgqF4Xg4+Ud0zsl7s8=) 2: 3230302e33332e3130382e302f32342d3234203d3e20323734313538.roa (hash: uqIyZ5o3Twoz9lqf2/eatcYZt5rIMFyHnYHlLXTSymI=) 3: AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl (hash: 3qhaLCTgwYQcVs/FfFlH78yQ0BKI8jT6W9cG+/MNAUU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Sep 2025 23:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:55:98:94:bf:d2:57:ed:6e:be:99:ea:a9:88:1b:67:65:98:d0:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2 Validity Not Before: Sep 18 19:40:22 2025 GMT Not After : Sep 23 07:21:22 2025 GMT Subject: CN=C00CB63E6A0C3112CF2A7041629A82BEADFEA3B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:35:9b:c2:b7:d8:47:68:65:15:04:92:c4: 98:de:4a:3c:d5:cd:32:a3:f4:82:6c:57:38:13:67: 6b:4d:56:54:64:82:1a:01:cf:c5:3c:cc:54:43:d0: c9:9c:50:b0:6f:19:ec:a9:17:f7:09:7e:c5:0f:14: 3c:20:b8:a5:8b:fb:a3:4b:3e:c4:b9:46:32:36:6c: b4:d4:f3:3b:d5:e7:fa:85:45:0c:c4:72:a4:f4:0a: 0b:87:ec:8a:49:b7:4e:fa:c3:d0:61:0b:55:d7:bb: 08:07:00:a9:86:c6:8f:1e:c2:a1:71:5e:82:0f:d3: b1:d4:d9:bc:4f:c8:e1:74:ae:25:e9:34:c9:07:86: 9e:db:5a:b2:1c:f2:7a:e4:04:c2:80:1d:55:02:4f: 6e:d1:aa:25:0e:3c:1a:73:3c:19:d5:bc:e1:64:05: ab:58:4b:84:fe:19:37:0e:05:92:82:e1:38:df:c9: 3c:a7:f9:c1:1f:ff:04:aa:e1:3a:5b:5b:15:cb:b1: 08:d4:f1:66:a0:cc:71:58:d4:38:b6:c2:19:8f:4f: 50:16:04:53:bd:3a:4a:e4:d0:f7:e7:1c:51:85:34: 99:0a:ed:f1:d5:ff:75:a6:b6:1a:a2:95:93:aa:e7: 42:5d:d3:eb:2f:84:06:68:42:30:d1:00:16:19:b9: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0C:B6:3E:6A:0C:31:12:CF:2A:70:41:62:9A:82:BE:AD:FE:A3:B6 X509v3 Authority Key Identifier: keyid:AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9a:6e:f1:1b:0c:75:24:26:e3:8a:ad:4e:a7:22:70:29:7f: 57:67:8a:27:fd:02:85:99:1c:20:fa:47:b0:d5:5c:22:6e:f1: c5:9d:f9:e0:66:90:51:f3:c9:24:f8:0f:de:ce:45:f3:2b:2e: 73:2f:43:48:3b:f6:79:06:9d:75:dc:ff:bc:f2:97:de:5b:ac: 84:c9:2c:9f:4b:10:7b:5c:66:43:18:dc:23:5f:b5:a3:81:04: 50:f5:e3:be:a4:bc:e2:af:8c:1f:e0:b4:46:12:fc:23:a0:d0: 66:18:03:a7:5c:da:65:5d:cb:ec:e3:c6:35:09:fc:57:18:2b: c5:e2:52:1b:ef:c5:36:b4:49:bf:ce:33:ee:45:5f:2e:e9:fa: a5:28:3b:d0:b1:c2:cb:5f:6c:76:d3:7d:33:5a:4a:7f:6c:f8: 20:a8:17:2f:5d:e6:20:58:81:97:4f:cf:96:17:75:80:fc:31: 6d:6d:14:9c:2b:bb:87:d5:e4:bd:98:fe:9a:f0:e3:7b:cf:cd: bf:eb:01:8b:b6:be:04:ba:c5:14:bc:2f:c0:88:ac:11:17:29: 76:a4:d0:09:23:84:bb:dc:05:6b:1d:a5:f5:c9:b9:81:eb:e4: 59:90:58:9d:47:79:80:ad:a2:ed:c2:ea:c2:1f:be:6a:5a:54: 73:70:90:a3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaVWYlL/SV+1uvpnqqYgbZ2WY0OswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQzNFQkZDNDQ0RTYwMjVDODM5NjE4QzNDODFDQzg5 OTY1OTlBMjAeFw0yNTA5MTgxOTQwMjJaFw0yNTA5MjMwNzIxMjJaMDMxMTAvBgNV BAMTKEMwMENCNjNFNkEwQzMxMTJDRjJBNzA0MTYyOUE4MkJFQURGRUEzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoDWbwrfYR2hlFQSSxJjeSjzV zTKj9IJsVzgTZ2tNVlRkghoBz8U8zFRD0MmcULBvGeypF/cJfsUPFDwguKWL+6NL PsS5RjI2bLTU8zvV5/qFRQzEcqT0CguH7IpJt076w9BhC1XXuwgHAKmGxo8ewqFx XoIP07HU2bxPyOF0riXpNMkHhp7bWrIc8nrkBMKAHVUCT27RqiUOPBpzPBnVvOFk BatYS4T+GTcOBZKC4TjfyTyn+cEf/wSq4TpbWxXLsQjU8WagzHFY1Di2whmPT1AW BFO9Okrk0PfnHFGFNJkK7fHV/3WmthqilZOq50Jd0+svhAZoQjDRABYZuQRpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUwAy2PmoMMRLPKnBBYpqCvq3+o7YwHwYDVR0j BBgwFoAUr/w+v8RE5gJcg5YYw8gcyJllmaIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRkQ2MjdDMzdBREMyMkRFOEM0RDE4OUUyRDk4RDRDQzgw QzRFRUNGMUMyOTIwRDBGNDQwOTAxOUU1NEY4QzRBLzAvQUZGQzNFQkZDNDQ0RTYw MjVDODM5NjE4QzNDODFDQzg5OTY1OTlBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkZDM0VCRkM0NDRFNjAyNUM4 Mzk2MThDM0M4MUNDODk5NjU5OUEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUZENjI3QzM3QURDMjJERThDNEQxODlFMkQ5OEQ0Q0M4MEM0RUVDRjFD MjkyMEQwRjQ0MDkwMTlFNTRGOEM0QS8wL0FGRkMzRUJGQzQ0NEU2MDI1QzgzOTYx OEMzQzgxQ0M4OTk2NTk5QTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsmm7xGwx1JCbjiq1OpyJwKX9X Z4on/QKFmRwg+kew1VwibvHFnfngZpBR88kk+A/ezkXzKy5zL0NIO/Z5Bp113P+8 8pfeW6yEySyfSxB7XGZDGNwjX7WjgQRQ9eO+pLzir4wf4LRGEvwjoNBmGAOnXNpl Xcvs48Y1CfxXGCvF4lIb78U2tEm/zjPuRV8u6fqlKDvQscLLX2x2030zWkp/bPgg qBcvXeYgWIGXT8+WF3WA/DFtbRScK7uH1eS9mP6a8ON7z82/6wGLtr4EusUUvC/A iKwRFyl2pNAJI4S73AVrHaX1ybmB6+RZkFidR3mAraLtwurCH75qWlRzcJCj -----END CERTIFICATE-----Generated at Fri Sep 19 04:50:59 2025 by rpki-client