$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.mft File: AF2C27ED749D14E69137DB11F778C7F3F40501DD.mft (raw, json) Hash identifier: 3N4o/EDlQ+TK47/tClX/+yzMc/isjaEvomrgjxXVh6M= Subject key identifier: 70:66:61:79:EA:72:04:63:74:A1:57:04:61:A2:3C:F4:95:3B:24:D0 Authority key identifier: AF:2C:27:ED:74:9D:14:E6:91:37:DB:11:F7:78:C7:F3:F4:05:01:DD Certificate issuer: /CN=AF2C27ED749D14E69137DB11F778C7F3F40501DD Certificate serial: 3540C5DB7016E489B3A87DD01BEED40DD0A92BBB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.mft Manifest number: 0134 Signing time: Wed 05 Nov 2025 08:20:30 +0000 Manifest this update: Wed 05 Nov 2025 08:15:30 +0000 Manifest next update: Sun 09 Nov 2025 23:05:30 +0000 Files and hashes: 1: 323830333a326663303a3a2f33322d3332203d3e20323633313730.roa (hash: tYC3Pkhha0ChwxFdqXb0euyBIeyUTVsTlTgaMlwG3vc=) 2: 3139322e3134312e342e302f32322d3234203d3e20323633313730.roa (hash: NfBLl3IM5qjqysly+WVZiJlj7l5/eqReM8/9ZXtHK3Q=) 3: AF2C27ED749D14E69137DB11F778C7F3F40501DD.crl (hash: pUOTgdNuxKE+2LxPYRVwLxEmthrBemoKt4NZB32EgAo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.crl rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:40:c5:db:70:16:e4:89:b3:a8:7d:d0:1b:ee:d4:0d:d0:a9:2b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF2C27ED749D14E69137DB11F778C7F3F40501DD Validity Not Before: Nov 5 08:15:30 2025 GMT Not After : Nov 9 23:05:30 2025 GMT Subject: CN=70666179EA72046374A1570461A23CF4953B24D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:36:49:35:7a:a1:cc:31:21:2d:bb:8f:44:51: 65:8d:0d:c3:07:97:4a:a7:2a:13:e9:e5:e6:fd:98: dc:65:3d:59:11:5a:58:46:a3:bc:b6:3e:6c:d1:11: cd:e6:65:5a:8a:65:d0:8c:95:b6:e7:a6:3f:9d:3b: cd:dd:94:9b:2d:53:03:e3:47:90:60:53:52:0e:11: 4a:3a:af:71:3c:44:f5:ee:33:93:6d:ca:22:03:58: 08:ae:45:d7:c2:8e:93:8a:80:cd:67:55:10:db:44: f0:16:28:d8:69:91:ea:90:60:2c:d5:a2:f2:8f:b8: 11:1f:67:c7:e4:48:63:ce:c5:ad:86:ed:bf:fe:7b: 14:b4:f4:7a:bc:c1:e0:6b:41:e7:e2:24:07:19:53: f3:0b:6c:99:8f:ad:59:91:fa:07:d8:2a:19:c9:ee: 67:ce:86:ad:f8:57:ae:6c:a5:fb:d3:94:cf:8f:32: 96:b1:fe:ee:21:d4:c2:a4:c4:55:98:fe:60:6e:d1: 3a:fd:ab:6c:97:49:76:ef:ea:60:10:4f:31:11:76: f4:01:ab:ba:e0:41:08:4d:cf:76:59:2d:0a:1e:d7: 6c:f3:b0:ea:0b:d8:95:8e:e1:4d:1d:25:4f:f0:07: 39:8b:22:5a:b9:e1:5b:78:cb:eb:f8:25:a4:af:d3: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:66:61:79:EA:72:04:63:74:A1:57:04:61:A2:3C:F4:95:3B:24:D0 X509v3 Authority Key Identifier: keyid:AF:2C:27:ED:74:9D:14:E6:91:37:DB:11:F7:78:C7:F3:F4:05:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0c:e5:85:2c:cb:d7:81:b0:64:2c:05:38:1b:0b:e5:f6:ca: eb:9a:2b:b5:05:a8:9c:7f:83:63:4d:c9:45:0e:b1:87:94:21: 99:27:e3:13:ec:6d:5f:61:0b:81:2f:cc:5a:df:94:b1:f7:d6: c4:06:98:85:a5:06:b1:c5:60:aa:d1:ca:f8:1b:e7:03:39:63: d2:90:13:50:96:39:b3:ce:b4:f0:a4:1d:6a:37:1a:99:a1:8c: 27:5e:9f:fe:82:2f:7c:86:11:94:44:f2:fe:fd:d4:31:4a:5b: 11:f0:a2:38:04:17:15:d3:c2:e2:87:51:a0:d0:c2:99:97:ac: f3:ad:31:a4:00:f6:7b:07:cb:de:4c:f4:e7:20:1f:a6:9d:32: 3f:23:71:1f:7f:50:34:d7:fa:46:7f:e9:a8:ef:1c:e8:5b:21: 9d:85:91:df:55:2c:c3:7a:32:43:d7:7a:34:ae:ad:5c:39:ca: d9:37:72:e9:69:b3:f0:f0:6d:05:90:dc:63:0c:11:9b:57:74: 6e:6b:b0:18:88:26:fe:3d:e9:2a:87:67:00:19:c8:29:c8:83: 23:d9:81:f3:de:58:1b:7f:ab:2e:b4:a1:9d:0e:06:20:d2:09: c6:e1:07:ae:82:f2:9a:82:0f:c6:b9:86:ff:52:0b:1e:f1:31: 54:58:74:f6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNUDF23AW5ImzqH3QG+7UDdCpK7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyQzI3RUQ3NDlEMTRFNjkxMzdEQjExRjc3OEM3RjNG NDA1MDFERDAeFw0yNTExMDUwODE1MzBaFw0yNTExMDkyMzA1MzBaMDMxMTAvBgNV BAMTKDcwNjY2MTc5RUE3MjA0NjM3NEExNTcwNDYxQTIzQ0Y0OTUzQjI0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKNkk1eqHMMSEtu49EUWWNDcMH l0qnKhPp5eb9mNxlPVkRWlhGo7y2PmzREc3mZVqKZdCMlbbnpj+dO83dlJstUwPj R5BgU1IOEUo6r3E8RPXuM5NtyiIDWAiuRdfCjpOKgM1nVRDbRPAWKNhpkeqQYCzV ovKPuBEfZ8fkSGPOxa2G7b/+exS09Hq8weBrQefiJAcZU/MLbJmPrVmR+gfYKhnJ 7mfOhq34V65spfvTlM+PMpax/u4h1MKkxFWY/mBu0Tr9q2yXSXbv6mAQTzERdvQB q7rgQQhNz3ZZLQoe12zzsOoL2JWO4U0dJU/wBzmLIlq54Vt4y+v4JaSv00xPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcGZheepyBGN0oVcEYaI89JU7JNAwHwYDVR0j BBgwFoAUrywn7XSdFOaRN9sR93jH8/QFAd0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDA5QjI0QUVGQzZDRUNFODQyQzVEN0I0NDI2QTVCQzYz MzE2NTM0ODgwRjlCN0IwRUQzODFFQjlFMUIzMDE5LzAvQUYyQzI3RUQ3NDlEMTRF NjkxMzdEQjExRjc3OEM3RjNGNDA1MDFERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjJDMjdFRDc0OUQxNEU2OTEz N0RCMTFGNzc4QzdGM0Y0MDUwMURELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0QwOUIyNEFFRkM2Q0VDRTg0MkM1RDdCNDQyNkE1QkM2MzMxNjUzNDg4 MEY5QjdCMEVEMzgxRUI5RTFCMzAxOS8wL0FGMkMyN0VENzQ5RDE0RTY5MTM3REIx MUY3NzhDN0YzRjQwNTAxREQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoDOWFLMvXgbBkLAU4Gwvl9srr miu1Baicf4NjTclFDrGHlCGZJ+MT7G1fYQuBL8xa35Sx99bEBpiFpQaxxWCq0cr4 G+cDOWPSkBNQljmzzrTwpB1qNxqZoYwnXp/+gi98hhGURPL+/dQxSlsR8KI4BBcV 08Lih1Gg0MKZl6zzrTGkAPZ7B8veTPTnIB+mnTI/I3Eff1A01/pGf+mo7xzoWyGd hZHfVSzDejJD13o0rq1cOcrZN3LpabPw8G0FkNxjDBGbV3Rua7AYiCb+Pekqh2cA GcgpyIMj2YHz3lgbf6sutKGdDgYg0gnG4QeugvKagg/GuYb/Ugse8TFUWHT2 -----END CERTIFICATE-----Generated at Wed Nov 5 21:53:24 2025 by rpki-client