$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft File: AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft (raw, json) Hash identifier: UyJCKds7eS0Rmfo92v10XsPPB6jCESyvTAUr281FBCo= Subject key identifier: 21:23:ED:2C:65:D0:74:07:40:E7:F3:3C:73:AE:4B:96:59:AE:D0:8E Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6 Certificate issuer: /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6 Certificate serial: 78ABF5037FCBEAB0493BCFB288B8A7640F9A3071 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft Manifest number: 0120 Signing time: Thu 18 Sep 2025 03:49:51 +0000 Manifest this update: Thu 18 Sep 2025 03:44:51 +0000 Manifest next update: Mon 22 Sep 2025 21:15:51 +0000 Files and hashes: 1: 3137302e38342e3231322e302f32322d3234203d3e203237373932.roa (hash: w4u7sn4Br/SzlJWc1j5+t+BwDZV8XqI+m7Q7xmgOGGk=) 2: 3139302e362e39362e302f32302d3234203d3e203237373932.roa (hash: PVP6+Aif2LoGjckv2En5VjHWt+kJjk9EEFLgY48YCS8=) 3: 3134332e3230322e32342e302f32322d3234203d3e203237373932.roa (hash: RkicQZt3HFQKsXjR9WqZwJBaILj2KxHS+v5Qc/slrcQ=) 4: 323830303a3561303a3a2f33322d3335203d3e203237373932.roa (hash: fMY9aGGR1i+J3ji8OBR1VAd6K1Ks5NePPEASVBvqcOc=) 5: 3230302e322e3132302e302f32312d3234203d3e203237373932.roa (hash: D5DMKHlHzw9CvA1rcnA1jSrkcOaXf2GeyYaX/Dm4vgg=) 6: 3138312e3138392e3139322e302f31392d3234203d3e203237373932.roa (hash: iRcxfSfIghebD6QOPTeikJfgyLmeSFqaidY7uqEUWpw=) 7: AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl (hash: dlUdUFPoD9NqyVZ3IwtdNczUA1urA3qiV+bZ8Q2uMtE=) 8: 3139302e362e3131322e302f32312d3234203d3e203237373932.roa (hash: YrOx16+iIZvmiEo/ZK0LlKWcOdGc7EJ9RvaPsFWx40Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Sep 2025 21:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ab:f5:03:7f:cb:ea:b0:49:3b:cf:b2:88:b8:a7:64:0f:9a:30:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6 Validity Not Before: Sep 18 03:44:51 2025 GMT Not After : Sep 22 21:15:51 2025 GMT Subject: CN=2123ED2C65D0740740E7F33C73AE4B9659AED08E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2b:f7:dc:fa:5e:3e:0e:e7:12:29:1b:54:25: d7:a8:94:0e:cf:22:70:ac:7f:4a:a6:c2:55:b2:fc: 6b:7a:be:74:87:01:b9:6e:42:06:87:99:c3:cb:15: 8b:31:95:25:16:51:4d:99:69:4d:e8:8b:0d:86:bb: 4e:d2:4d:f5:3c:3a:8d:25:74:08:84:60:f4:bd:c1: 37:6d:c1:2b:0b:4b:73:d6:7d:ba:cd:9e:68:de:cc: bc:54:dc:8e:dd:8f:4b:78:a9:38:f5:88:2b:c9:53: 6b:87:bf:53:31:3b:49:32:09:ed:a8:cf:3f:55:47: a1:f7:b5:d3:36:72:21:3a:0a:65:91:43:76:51:1a: 51:81:d1:c4:a9:1d:c1:86:4a:25:9e:b1:c5:c3:b4: 76:cd:4d:34:f3:53:e0:04:c3:64:4b:99:d3:28:02: 80:3e:28:82:69:be:3d:04:4a:e1:98:cf:d9:66:ac: 47:37:3e:e9:e6:5f:1d:c0:55:ac:d0:b6:e7:89:8e: e9:1c:27:94:b8:ce:a9:f9:ad:30:38:a0:fc:ab:6e: 45:a7:44:22:c1:74:68:56:b9:a2:23:38:6c:f6:a0: 12:a6:25:9b:32:d9:9e:60:56:42:76:e5:88:07:5d: c8:53:2b:bd:89:af:c9:5e:22:de:2f:01:ea:b1:a5: b5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:23:ED:2C:65:D0:74:07:40:E7:F3:3C:73:AE:4B:96:59:AE:D0:8E X509v3 Authority Key Identifier: keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f7:ca:99:f8:c1:ee:54:88:4d:9d:4d:a7:cd:4f:10:01:0a: 87:12:67:97:d8:4d:55:ca:bc:ff:41:17:25:15:e8:97:78:3e: 7b:40:64:10:59:6c:d4:94:53:8b:cb:29:6f:0d:c0:e8:f7:93: 41:58:71:31:37:a1:2d:ff:b9:3d:a5:0e:89:c4:e8:53:93:64: 7b:84:b5:1c:39:df:2a:38:77:5f:73:55:57:90:80:1c:bb:13: 96:62:9f:22:d6:d5:9d:3e:03:2b:e8:81:0a:ad:b4:f7:4b:94: 13:55:e9:68:c9:1b:74:28:16:81:e9:40:1d:cd:8d:89:c9:ad: 07:00:c3:69:57:a9:dd:8b:ef:fa:88:8e:5d:73:de:47:86:74: c1:77:61:23:f1:90:c8:76:26:fd:03:1f:54:c3:82:26:10:93: 32:78:7b:8d:89:f0:32:8f:bc:f5:2a:70:0b:28:f7:41:31:b9: 17:3e:03:00:3e:90:76:67:85:e2:e1:69:7c:8c:7e:c3:49:80: c4:c1:32:c2:37:31:87:b7:5a:fa:c1:d9:82:ee:ed:72:ab:a2: 9a:1d:3f:e4:b3:e7:ed:78:b9:7b:09:f6:b4:17:0f:04:a3:43: e1:cf:d6:6b:31:2b:d8:a4:18:cd:b7:cc:fb:f2:7d:39:d2:86: d4:55:3c:a0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeKv1A3/L6rBJO8+yiLinZA+aMHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzRjlBNkJEMTQ5QkIyQ0I3NjI3RjNCMkU1Qjc0MjlD NTVCN0JGNjAeFw0yNTA5MTgwMzQ0NTFaFw0yNTA5MjIyMTE1NTFaMDMxMTAvBgNV BAMTKDIxMjNFRDJDNjVEMDc0MDc0MEU3RjMzQzczQUU0Qjk2NTlBRUQwOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVK/fc+l4+DucSKRtUJdeolA7P InCsf0qmwlWy/Gt6vnSHAbluQgaHmcPLFYsxlSUWUU2ZaU3oiw2Gu07STfU8Oo0l dAiEYPS9wTdtwSsLS3PWfbrNnmjezLxU3I7dj0t4qTj1iCvJU2uHv1MxO0kyCe2o zz9VR6H3tdM2ciE6CmWRQ3ZRGlGB0cSpHcGGSiWescXDtHbNTTTzU+AEw2RLmdMo AoA+KIJpvj0ESuGYz9lmrEc3PunmXx3AVazQtueJjukcJ5S4zqn5rTA4oPyrbkWn RCLBdGhWuaIjOGz2oBKmJZsy2Z5gVkJ25YgHXchTK72Jr8leIt4vAeqxpbVlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUISPtLGXQdAdA5/M8c65Lllmu0I4wHwYDVR0j BBgwFoAUrz+aa9FJuyy3Yn87Llt0KcVbe/YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNUU1MkI3QjJFMzlCMUJFRkQ5MkY2REE1RTBDNUU2NDE0 Mzk2QkQ4QzEzMzVFMjM0MDYyQzI5Rjc2QTM4RjNBLzAvQUYzRjlBNkJEMTQ5QkIy Q0I3NjI3RjNCMkU1Qjc0MjlDNTVCN0JGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjNGOUE2QkQxNDlCQjJDQjc2 MjdGM0IyRTVCNzQyOUM1NUI3QkY2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjVFNTJCN0IyRTM5QjFCRUZEOTJGNkRBNUUwQzVFNjQxNDM5NkJEOEMx MzM1RTIzNDA2MkMyOUY3NkEzOEYzQS8wL0FGM0Y5QTZCRDE0OUJCMkNCNzYyN0Yz QjJFNUI3NDI5QzU1QjdCRjYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCl98qZ+MHuVIhNnU2nzU8QAQqH EmeX2E1Vyrz/QRclFeiXeD57QGQQWWzUlFOLyylvDcDo95NBWHExN6Et/7k9pQ6J xOhTk2R7hLUcOd8qOHdfc1VXkIAcuxOWYp8i1tWdPgMr6IEKrbT3S5QTVeloyRt0 KBaB6UAdzY2Jya0HAMNpV6ndi+/6iI5dc95HhnTBd2Ej8ZDIdib9Ax9Uw4ImEJMy eHuNifAyj7z1KnALKPdBMbkXPgMAPpB2Z4Xi4Wl8jH7DSYDEwTLCNzGHt1r6wdmC 7u1yq6KaHT/ks+fteLl7Cfa0Fw8Eo0Phz9ZrMSvYpBjNt8z78n050obUVTyg -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:54 2025 by rpki-client