$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft File: AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft (raw, json) Hash identifier: sJEMhh4Dx/o+vFnsH02hBmC3DNd4CD6YysqlyqjDzmU= Subject key identifier: 13:AA:0A:66:78:A6:5A:96:F1:46:98:CF:E1:1B:73:F3:DE:7F:38:44 Authority key identifier: AF:DB:6E:B0:A5:26:B5:C5:EB:6B:D0:15:66:C3:8D:FB:7F:DD:18:1D Certificate issuer: /CN=AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D Certificate serial: 58F284BE9AAABD59BA5ED22127AAEA671671A5B2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft Manifest number: 90 Signing time: Thu 24 Jul 2025 09:39:59 +0000 Manifest this update: Thu 24 Jul 2025 09:34:59 +0000 Manifest next update: Tue 29 Jul 2025 18:26:59 +0000 Files and hashes: 1: AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl (hash: rdgg1y0/Kg6bpJ9z/FqSafve9gygMLoLT+PwAgo5QBQ=) 2: 3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa (hash: kkiUYKoLwqsqJ9tvINbxhPViXGmFtfEc8PCmddm+no0=) 3: 3230312e3133312e3132322e302f32332d3234203d3e203139353531.roa (hash: 2lY1OF4W+oeIcQrhKofjRck7LX+NlAUcZj6ZQ7tShHU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 22:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f2:84:be:9a:aa:bd:59:ba:5e:d2:21:27:aa:ea:67:16:71:a5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D Validity Not Before: Jul 24 09:34:59 2025 GMT Not After : Jul 29 18:26:59 2025 GMT Subject: CN=13AA0A6678A65A96F14698CFE11B73F3DE7F3844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:17:1c:b9:1f:ae:e2:1a:56:6b:a4:2c:02: 56:26:93:41:5a:89:6b:cd:3a:9e:8e:be:0d:fc:f9: bd:d4:68:cf:ce:ca:74:37:14:1e:43:5d:0c:d3:62: 4a:1c:c4:da:70:66:19:dd:af:d2:e9:a0:19:b6:4c: 98:1e:25:a7:40:64:65:de:bb:a6:92:0f:01:64:15: fa:7d:0d:28:c4:09:11:8c:ef:86:06:7c:06:58:a1: 11:79:9f:43:7c:b9:3e:5c:98:af:e3:eb:91:e8:cb: a9:a8:50:ce:41:7d:60:e6:08:05:e6:9f:c4:e9:bc: 15:9a:3f:29:23:8f:ff:84:ac:fd:32:07:ec:f9:56: c0:78:92:fd:cb:36:ac:0a:d2:92:ff:33:dc:c4:3f: 68:e4:bd:05:d9:08:45:cd:b4:0d:f3:8f:f0:55:e0: 59:60:8b:de:8f:34:0b:a5:64:d5:8c:c7:9f:77:ee: 26:92:ad:2e:45:65:f1:29:f3:b9:e6:10:68:bc:5d: c6:53:95:21:7b:71:ff:75:58:a4:92:e4:31:ef:2f: af:d7:eb:0f:d1:c7:3c:b5:63:1a:9a:4b:14:26:68: ef:ae:06:25:76:c1:c0:45:69:f4:c4:29:57:0e:9e: a3:7f:9e:15:f3:fc:1f:2d:39:1b:10:cd:15:f5:cc: 26:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AA:0A:66:78:A6:5A:96:F1:46:98:CF:E1:1B:73:F3:DE:7F:38:44 X509v3 Authority Key Identifier: keyid:AF:DB:6E:B0:A5:26:B5:C5:EB:6B:D0:15:66:C3:8D:FB:7F:DD:18:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d6:42:09:03:6b:86:71:80:4e:df:b3:46:dd:1b:a2:c4:b8: 05:b7:e0:8b:be:52:79:62:96:57:53:7d:23:59:45:ec:e7:54: 09:ac:ba:2a:d9:0f:88:0b:84:7b:1c:b9:e1:61:d8:2e:4b:07: 4d:36:a2:45:b3:31:b9:2f:20:48:01:1b:84:e1:7d:01:58:3b: 24:c1:71:4b:45:66:b3:17:d5:fc:80:36:89:fb:23:b1:d5:0f: ad:e9:aa:57:7b:1e:a4:2b:04:bd:2d:1f:4c:db:b5:c6:a6:18: 99:85:22:af:4e:3c:52:ef:bf:03:ff:ec:b6:f6:d6:e2:d5:6a: 8f:99:21:a4:1e:7d:0c:de:56:51:21:a2:64:d6:c9:b2:0d:14: 6f:d5:25:8c:84:ec:e7:f2:72:46:ed:6c:27:1d:13:89:62:25: 73:69:0f:ab:3c:a8:79:b6:b4:ed:c7:f9:10:9c:f6:dc:76:b7: d5:47:4a:50:b4:fa:8e:26:f1:38:b4:e4:22:f7:53:67:31:49: 23:0f:d1:b2:d6:8b:f4:97:75:48:ed:d9:7e:c6:7c:6f:98:1d: 29:84:6f:54:15:a7:73:d8:f1:c4:a7:ab:93:63:a4:4b:0a:18: 58:0a:38:6e:90:9e:5d:9a:7c:89:5a:c3:5d:94:2d:a1:d4:eb: c1:1b:0e:39 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWPKEvpqqvVm6XtIhJ6rqZxZxpbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZEQjZFQjBBNTI2QjVDNUVCNkJEMDE1NjZDMzhERkI3 RkREMTgxRDAeFw0yNTA3MjQwOTM0NTlaFw0yNTA3MjkxODI2NTlaMDMxMTAvBgNV BAMTKDEzQUEwQTY2NzhBNjVBOTZGMTQ2OThDRkUxMUI3M0YzREU3RjM4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPBccuR+u4hpWa6QsAlYmk0Fa iWvNOp6Ovg38+b3UaM/OynQ3FB5DXQzTYkocxNpwZhndr9LpoBm2TJgeJadAZGXe u6aSDwFkFfp9DSjECRGM74YGfAZYoRF5n0N8uT5cmK/j65Hoy6moUM5BfWDmCAXm n8TpvBWaPykjj/+ErP0yB+z5VsB4kv3LNqwK0pL/M9zEP2jkvQXZCEXNtA3zj/BV 4Flgi96PNAulZNWMx5937iaSrS5FZfEp87nmEGi8XcZTlSF7cf91WKSS5DHvL6/X 6w/Rxzy1YxqaSxQmaO+uBiV2wcBFafTEKVcOnqN/nhXz/B8tORsQzRX1zCajAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUE6oKZnimWpbxRpjP4Rtz895/OEQwHwYDVR0j BBgwFoAUr9tusKUmtcXra9AVZsON+3/dGB0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EODhCQjlGREYxNzg1NUU2NDI4NEJCOENGMUE1RDBEQzk3 RDBENkEwNDAyQjQ2NTZGRkE3NjE1NzFFMTQ0M0ZCLzAvQUZEQjZFQjBBNTI2QjVD NUVCNkJEMDE1NjZDMzhERkI3RkREMTgxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkRCNkVCMEE1MjZCNUM1RUI2 QkQwMTU2NkMzOERGQjdGREQxODFELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDg4QkI5RkRGMTc4NTVFNjQyODRCQjhDRjFBNUQwREM5N0QwRDZBMDQw MkI0NjU2RkZBNzYxNTcxRTE0NDNGQi8wL0FGREI2RUIwQTUyNkI1QzVFQjZCRDAx NTY2QzM4REZCN0ZERDE4MUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCF1kIJA2uGcYBO37NG3RuixLgF t+CLvlJ5YpZXU30jWUXs51QJrLoq2Q+IC4R7HLnhYdguSwdNNqJFszG5LyBIARuE 4X0BWDskwXFLRWazF9X8gDaJ+yOx1Q+t6apXex6kKwS9LR9M27XGphiZhSKvTjxS 778D/+y29tbi1WqPmSGkHn0M3lZRIaJk1smyDRRv1SWMhOzn8nJG7WwnHROJYiVz aQ+rPKh5trTtx/kQnPbcdrfVR0pQtPqOJvE4tOQi91NnMUkjD9Gy1ov0l3VI7dl+ xnxvmB0phG9UFadz2PHEp6uTY6RLChhYCjhukJ5dmnyJWsNdlC2h1OvBGw45 -----END CERTIFICATE-----Generated at Thu Jul 24 12:16:14 2025 by rpki-client