$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft File: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft (raw, json) Hash identifier: kRKND4BLylbnPR6j+DiYbXx+EpaqOIyAcfeETebnuj8= Subject key identifier: 93:23:93:E4:FC:5D:17:F6:62:0A:06:C5:33:CB:F1:03:26:26:40:F4 Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Certificate serial: 299F1C160B07BAC616777512D8BC62FFC777B718 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft Manifest number: 0130 Signing time: Tue 04 Nov 2025 22:30:04 +0000 Manifest this update: Tue 04 Nov 2025 22:25:04 +0000 Manifest next update: Sun 09 Nov 2025 22:52:04 +0000 Files and hashes: 1: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (hash: +JLSd5uFHqiUCm06ecF1x9vzbqFut/G4zYIvoGDlY28=) 2: 323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (hash: e93lsq181dWo8xkn84usZu3Ea1Z+yoCo2KQIwjRn9xs=) 3: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl (hash: XpAfQMW8QD4NhwqSburlVGT9tHa2a0EDzpM0g6vzN/c=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:9f:1c:16:0b:07:ba:c6:16:77:75:12:d8:bc:62:ff:c7:77:b7:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Validity Not Before: Nov 4 22:25:04 2025 GMT Not After : Nov 9 22:52:04 2025 GMT Subject: CN=932393E4FC5D17F6620A06C533CBF103262640F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:ee:15:d7:2e:e1:04:8d:8d:a0:67:f6:11: 28:9f:56:9b:88:df:d3:a9:59:aa:b1:fb:50:0f:1e: 16:fc:4f:50:4b:ab:55:fc:df:5a:11:1e:70:5b:24: ec:3e:47:3a:43:93:49:20:fc:52:c3:a5:0e:ed:37: e8:7a:10:97:c3:f4:1e:bc:a6:45:90:75:46:d8:43: 7d:6e:16:11:bc:da:f4:9c:f6:d7:08:cd:40:7a:54: f4:2d:ae:99:a8:93:69:19:b9:c1:dd:03:75:d9:06: da:3b:d9:ed:ae:1a:79:ba:5c:21:6f:c2:84:78:86: 20:6a:3e:8f:3e:50:06:97:7d:a2:e3:0e:83:89:e6: 1d:42:b9:76:76:a6:79:67:b6:e8:dc:29:d7:f8:79: 5b:f8:c2:60:e0:52:6e:b5:11:40:e5:15:37:ab:84: 97:dd:32:ca:f0:c3:19:0e:4b:31:17:d9:95:68:b6: 4f:34:6e:aa:3e:35:b6:69:f7:74:9d:b4:32:9e:d8: 12:a3:80:95:14:ae:71:9c:96:d2:59:37:02:70:74: 2f:52:89:68:97:c8:f1:ab:d9:d9:2b:8b:1e:92:c5: 64:55:18:36:b4:30:7a:da:d6:46:d7:db:6a:0a:6a: 7b:23:1d:62:c8:47:e4:3a:40:ed:2d:f1:9d:be:41: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:23:93:E4:FC:5D:17:F6:62:0A:06:C5:33:CB:F1:03:26:26:40:F4 X509v3 Authority Key Identifier: keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:58:b1:ab:d7:17:d9:7e:53:09:3c:27:3f:cc:73:c2:35:9b: a2:a8:0b:5a:a2:7f:f1:59:a2:0f:26:13:b2:1f:92:45:73:e1: 31:26:08:2a:39:58:ad:8f:96:96:de:dc:d8:5e:b5:7c:52:db: f0:2d:7b:3a:25:d9:5b:82:13:a2:6f:cf:49:48:28:12:21:92: 94:a5:a4:f2:6c:f5:31:b2:59:4d:e0:93:3b:f6:7f:37:f2:27: 5c:cf:7c:e5:29:58:b3:74:4c:6f:a2:8e:8b:7e:00:55:63:36: dd:8e:56:28:81:0f:fb:0c:ca:03:32:cb:6c:1b:da:21:c6:4a: 30:59:c5:6f:74:1a:94:43:de:aa:e1:ae:97:31:72:e2:b7:eb: 06:29:87:98:f9:ad:1c:e8:64:0a:5c:f3:62:4f:63:b3:ba:6d: 3a:ab:78:35:1e:90:ec:78:10:fa:f6:5e:7e:62:5f:7c:e4:fe: b3:b7:fe:e9:f8:c9:4f:f0:dc:3a:33:0d:54:bd:3b:42:a1:cb: 26:77:61:ff:71:c8:5e:bc:e7:cc:79:77:4c:52:09:04:54:f7: 4c:2a:81:86:ce:f5:da:9b:02:f6:12:5f:a0:52:09:50:97:c4: 87:87:1b:b9:f6:e4:c6:72:9a:04:9c:84:59:ba:b6:db:c7:d0: 4c:bc:36:53 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKZ8cFgsHusYWd3US2Lxi/8d3txgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2MjdERUREODIy QzI1QThBRjAeFw0yNTExMDQyMjI1MDRaFw0yNTExMDkyMjUyMDRaMDMxMTAvBgNV BAMTKDkzMjM5M0U0RkM1RDE3RjY2MjBBMDZDNTMzQ0JGMTAzMjYyNjQwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLO4V1y7hBI2NoGf2ESifVpuI 39OpWaqx+1APHhb8T1BLq1X831oRHnBbJOw+RzpDk0kg/FLDpQ7tN+h6EJfD9B68 pkWQdUbYQ31uFhG82vSc9tcIzUB6VPQtrpmok2kZucHdA3XZBto72e2uGnm6XCFv woR4hiBqPo8+UAaXfaLjDoOJ5h1CuXZ2pnlntujcKdf4eVv4wmDgUm61EUDlFTer hJfdMsrwwxkOSzEX2ZVotk80bqo+NbZp93SdtDKe2BKjgJUUrnGcltJZNwJwdC9S iWiXyPGr2dkrix6SxWRVGDa0MHra1kbX22oKansjHWLIR+Q6QO0t8Z2+QaWRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUkyOT5PxdF/ZiCgbFM8vxAyYmQPQwHwYDVR0j BBgwFoAUr4VUAquNzJ6UDnsWJ97dgiwlqK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5 QkM5RDJEOUJBQzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5 RTk0MEU3QjE2MjdERUREODIyQzI1QThBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjg1NTQwMkFCOERDQzlFOTQw RTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjBFQTk2RDhBODVCNTk0MzExQjJERTJCOEFDMDFDQjkyOUJDOUQyRDlC QUM5NTJGNUUwODNERURFMDAxMTAxMS8wL0FGODU1NDAyQUI4RENDOUU5NDBFN0Ix NjI3REVERDgyMkMyNUE4QUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlWLGr1xfZflMJPCc/zHPCNZui qAtaon/xWaIPJhOyH5JFc+ExJggqOVitj5aW3tzYXrV8UtvwLXs6JdlbghOib89J SCgSIZKUpaTybPUxsllN4JM79n838idcz3zlKVizdExvoo6LfgBVYzbdjlYogQ/7 DMoDMstsG9ohxkowWcVvdBqUQ96q4a6XMXLit+sGKYeY+a0c6GQKXPNiT2Ozum06 q3g1HpDseBD69l5+Yl985P6zt/7p+MlP8Nw6Mw1UvTtCocsmd2H/cchevOfMeXdM UgkEVPdMKoGGzvXamwL2El+gUglQl8SHhxu59uTGcpoEnIRZurbbx9BMvDZT -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:17 2025 by rpki-client