$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft File: AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft (raw, json) Hash identifier: f/IgcbHBcEP/zxwiveRCzdPtIYwfLadIAaVOXc714jk= Subject key identifier: 72:BA:50:1B:75:C7:AB:3F:FC:80:19:B0:D5:35:93:42:D0:79:A0:14 Authority key identifier: AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D Certificate issuer: /CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D Certificate serial: 3A77229179764E269C6C62612A7AE00230C7CF86 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft Manifest number: 67 Signing time: Tue 04 Nov 2025 13:45:25 +0000 Manifest this update: Tue 04 Nov 2025 13:40:25 +0000 Manifest next update: Mon 10 Nov 2025 10:02:25 +0000 Files and hashes: 1: AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl (hash: dLemOutwzcGnCvw+7i6m+xELZEpQKZPI/cH+XYveDas=) 2: 34352e3137302e3130322e302f32332d3233203d3e20323637373538.roa (hash: +dcVegBtKf/KAa/zxwv/hAK8UkNryF+L5VmJFfVQ5So=) 3: 34352e3137302e3130322e302f32342d3234203d3e203634313339.roa (hash: Qd3f2DxjsXw0of+rJGJhoSPvAFpd5h5Ix5J/kZIBpmI=) 4: 34352e3137302e3130332e302f32342d3234203d3e20323637373538.roa (hash: jOsSdiB/f+Db39hMSrjnANZM9C7EAZn99vqRXb99hBs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:77:22:91:79:76:4e:26:9c:6c:62:61:2a:7a:e0:02:30:c7:cf:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D Validity Not Before: Nov 4 13:40:25 2025 GMT Not After : Nov 10 10:02:25 2025 GMT Subject: CN=72BA501B75C7AB3FFC8019B0D5359342D079A014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:8b:cf:34:c4:21:4e:fd:8f:fa:55:70:a2: 5d:15:76:34:d5:89:7a:0a:d7:75:da:8d:4a:27:91: 4c:24:2b:ad:bf:e3:b9:af:75:af:ac:26:33:a8:3d: 72:9f:d3:d1:64:61:e7:69:3c:85:20:a0:ee:c4:a4: 5d:4e:7b:6a:30:4b:5e:b7:39:51:7b:3d:cf:5d:e7: 9b:15:c2:04:e2:36:a2:39:c9:ed:d7:c1:3d:e1:7a: 78:18:da:6f:0b:ef:97:2a:e6:3f:59:0d:d3:2f:73: c4:56:bf:26:9f:50:a1:96:50:98:97:ae:67:af:f8: 8e:b2:39:9c:07:c0:1f:e1:db:79:a6:bd:20:02:0e: 7a:95:6f:5e:b6:b0:e2:60:d8:d3:17:0a:04:06:0f: fd:22:64:44:6a:34:9b:7a:f4:a6:3c:69:36:c1:73: 52:06:e3:37:15:79:ee:2f:e8:2d:0a:1d:af:7d:f1: 27:d2:02:4d:85:c4:84:08:c5:ff:b7:89:19:de:a4: 33:df:1b:e9:8f:77:ba:46:54:27:21:12:5e:ed:01: 9b:7e:b4:fa:3b:81:f4:4b:1b:e0:a9:39:38:da:3a: 8f:bf:cd:4d:64:06:df:5b:52:c4:10:43:d7:6a:f3: fb:ac:a1:dd:e8:8c:90:ec:19:a8:bb:f4:f9:f9:eb: b3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BA:50:1B:75:C7:AB:3F:FC:80:19:B0:D5:35:93:42:D0:79:A0:14 X509v3 Authority Key Identifier: keyid:AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:48:82:37:1d:8b:4b:b9:28:f1:e5:93:3a:6e:5e:73:d0:ac: 6b:d3:69:4d:c9:4d:22:04:0c:45:c1:93:f2:42:9a:a2:b9:e3: a8:8c:9e:47:0c:38:1e:a6:ac:ee:50:81:d9:9a:63:de:13:55: d4:01:b6:8d:1c:25:ba:fc:54:a2:50:88:38:e5:a1:de:cd:71: 37:6c:4e:77:7a:61:eb:01:85:ca:1d:b0:16:4e:62:8e:b4:a6: 2e:49:77:1c:45:54:60:28:99:95:fd:0c:c9:65:9f:6b:9f:44: fa:c6:9a:59:3a:83:8c:0b:c6:b1:dc:57:00:9c:ee:db:21:b4: 60:ba:1a:e7:42:cf:ec:cb:b2:76:83:77:ff:52:87:0b:52:9c: e4:2b:5d:1f:f3:5c:f3:4e:e9:0d:c0:d5:df:d8:a1:25:3e:ef: 34:6f:3d:43:ff:7f:d2:77:c3:c1:ae:08:96:3d:61:1a:45:1e: ad:82:17:5a:70:4d:d9:07:76:4d:01:c8:6c:95:80:1a:b4:ed: ce:67:83:90:08:7b:9b:be:6e:f1:f7:23:7a:ef:ff:3a:d0:4d: 5e:04:86:f3:71:3c:2b:a3:35:87:3f:f5:17:7d:0a:d2:e9:61: ae:ce:e6:d8:39:26:21:05:ae:bf:39:28:58:57:67:bb:85:65: 6f:8e:7c:a2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOncikXl2TiacbGJhKnrgAjDHz4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBRkVDQkQ4RDhCRUI1QkU0MTQwM0RBREM0RDBGN0Mz QThCNEI4RDAeFw0yNTExMDQxMzQwMjVaFw0yNTExMTAxMDAyMjVaMDMxMTAvBgNV BAMTKDcyQkE1MDFCNzVDN0FCM0ZGQzgwMTlCMEQ1MzU5MzQyRDA3OUEwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5R4vPNMQhTv2P+lVwol0VdjTV iXoK13XajUonkUwkK62/47mvda+sJjOoPXKf09FkYedpPIUgoO7EpF1Oe2owS163 OVF7Pc9d55sVwgTiNqI5ye3XwT3hengY2m8L75cq5j9ZDdMvc8RWvyafUKGWUJiX rmev+I6yOZwHwB/h23mmvSACDnqVb162sOJg2NMXCgQGD/0iZERqNJt69KY8aTbB c1IG4zcVee4v6C0KHa998SfSAk2FxIQIxf+3iRnepDPfG+mPd7pGVCchEl7tAZt+ tPo7gfRLG+CpOTjaOo+/zU1kBt9bUsQQQ9dq8/usod3ojJDsGai79Pn567N7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcrpQG3XHqz/8gBmw1TWTQtB5oBQwHwYDVR0j BBgwFoAUr6/svY2L61vkFAPa3E0PfDqLS40wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRUU0MjQwMDZGNTM3RjBEN0FCMzVCM0E2N0Q0MzgxMkUw RjcxMEQ0MDc5QjJFNEVFREMzMTRCNENCMEFDOEQ4LzAvQUZBRkVDQkQ4RDhCRUI1 QkU0MTQwM0RBREM0RDBGN0MzQThCNEI4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkFGRUNCRDhEOEJFQjVCRTQx NDAzREFEQzREMEY3QzNBOEI0QjhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUVFNDI0MDA2RjUzN0YwRDdBQjM1QjNBNjdENDM4MTJFMEY3MTBENDA3 OUIyRTRFRURDMzE0QjRDQjBBQzhEOC8wL0FGQUZFQ0JEOEQ4QkVCNUJFNDE0MDNE QURDNEQwRjdDM0E4QjRCOEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrSII3HYtLuSjx5ZM6bl5z0Kxr 02lNyU0iBAxFwZPyQpqiueOojJ5HDDgepqzuUIHZmmPeE1XUAbaNHCW6/FSiUIg4 5aHezXE3bE53emHrAYXKHbAWTmKOtKYuSXccRVRgKJmV/QzJZZ9rn0T6xppZOoOM C8ax3FcAnO7bIbRguhrnQs/sy7J2g3f/UocLUpzkK10f81zzTukNwNXf2KElPu80 bz1D/3/Sd8PBrgiWPWEaRR6tghdacE3ZB3ZNAchslYAatO3OZ4OQCHubvm7x9yN6 7/860E1eBIbzcTwrozWHP/UXfQrS6WGuzubYOSYhBa6/OShYV2e7hWVvjnyi -----END CERTIFICATE-----Generated at Wed Nov 5 15:21:15 2025 by rpki-client