$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft File: AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft (raw, json) Hash identifier: +pbgCdLJtPLZy/x18OAm1RF0R6GlyksDcdtoL6nTbg0= Subject key identifier: 48:F5:A8:68:27:28:8A:4C:0D:1E:E3:46:41:EF:BC:A7:08:1E:AD:26 Authority key identifier: AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2 Certificate issuer: /CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2 Certificate serial: 3A271FAD5EDD41ED7AEDD51E699BF009B98044DC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft Manifest number: 3C Signing time: Tue 04 Nov 2025 23:30:34 +0000 Manifest this update: Tue 04 Nov 2025 23:25:34 +0000 Manifest next update: Mon 10 Nov 2025 23:15:34 +0000 Files and hashes: 1: AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl (hash: XnmEc994KcxAO+0aSfqE6FS7kEVWuRLAWuSk6sfyVgY=) 2: 3230302e33332e3130382e302f32342d3234203d3e20323734313538.roa (hash: uqIyZ5o3Twoz9lqf2/eatcYZt5rIMFyHnYHlLXTSymI=) 3: 323830333a643964303a3a2f33322d3332203d3e20323734313538.roa (hash: T0oUgPSWTkNTCuDYVPvATKVNJqgqF4Xg4+Ud0zsl7s8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:27:1f:ad:5e:dd:41:ed:7a:ed:d5:1e:69:9b:f0:09:b9:80:44:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2 Validity Not Before: Nov 4 23:25:34 2025 GMT Not After : Nov 10 23:15:34 2025 GMT Subject: CN=48F5A86827288A4C0D1EE34641EFBCA7081EAD26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:65:eb:99:a5:51:43:6f:33:d8:d0:02:fe: 05:53:d7:80:8a:41:af:7f:52:37:18:24:f5:ba:38: ac:84:9f:72:54:dd:1b:3b:a1:7d:cd:80:ff:13:42: 2f:2d:51:62:51:cf:67:0c:47:a7:4c:e5:d8:bf:10: 9a:69:03:09:ba:d8:3e:f2:3d:95:2a:3d:31:9d:85: 79:b6:39:44:89:b0:7a:af:84:59:a7:eb:59:83:33: 2d:83:47:4e:21:4c:de:cd:16:81:34:1f:c6:01:12: 73:2e:0f:0f:36:6c:84:44:a0:a0:12:1e:f1:15:a1: 0e:14:72:05:28:fd:ff:f2:98:6b:5e:11:6c:68:2b: b8:df:23:4a:50:6b:3f:d3:68:54:0e:ea:c7:75:ad: 4f:37:4f:19:40:f7:f6:40:68:2e:2a:81:85:e8:ac: 04:f7:23:d3:be:1c:94:59:45:b5:ba:20:79:ed:f1: 82:a0:a9:67:c6:88:05:69:3c:db:2d:d0:fb:68:fa: 12:15:54:5d:78:12:ee:8f:3c:d1:78:a1:3c:c5:69: 7a:04:ff:6a:7b:67:13:2f:97:12:05:de:f8:55:49: 35:dc:3a:55:dc:cf:2c:9c:5b:a5:3d:c5:ad:ac:dc: a7:c5:3b:e9:23:81:11:6a:44:19:aa:c6:6c:b0:23: 28:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F5:A8:68:27:28:8A:4C:0D:1E:E3:46:41:EF:BC:A7:08:1E:AD:26 X509v3 Authority Key Identifier: keyid:AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0f:0b:f8:14:ef:af:81:b1:cc:aa:79:55:9f:56:7a:30:4e: 0e:5d:3a:d3:57:c2:ed:d8:ad:de:5c:82:a1:99:53:79:38:82: 8e:7a:16:7e:1c:21:36:36:98:12:7e:aa:b2:85:91:ff:74:3e: e0:58:4a:c4:60:9b:ed:99:d5:bc:d0:25:e1:6f:1d:ad:8c:08: ba:51:e9:07:ca:cb:db:ca:cd:2f:4a:cc:4b:ce:51:83:da:62: ed:82:0b:12:ba:ab:5f:84:52:88:42:2a:c8:26:1c:e9:c2:00: 09:d5:9a:f9:95:2a:dd:83:10:2f:cc:bf:40:6c:d2:13:a7:4a: b9:0b:64:c4:77:3a:4a:fc:a1:90:71:fd:ac:90:cb:a6:fe:b5: 70:d9:c9:82:2a:14:28:56:dd:1a:39:34:e0:43:c4:86:1a:d5: 43:05:c6:fb:ce:b8:91:2f:1c:a3:61:ef:1a:54:b6:a7:40:17: b7:69:31:38:f9:c5:4a:35:64:60:1a:cc:29:bb:68:78:19:2b: 59:d2:45:b4:85:b9:10:47:4d:4e:6d:ef:0c:1e:c6:23:9e:9e: b0:26:0a:35:e3:b4:f5:24:f5:8b:4f:4d:a6:ce:2a:20:0b:b9: 3c:14:86:e9:19:94:9a:8e:28:1a:6b:71:c8:c8:e4:18:49:ca: 23:e7:16:a6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOicfrV7dQe167dUeaZvwCbmARNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQzNFQkZDNDQ0RTYwMjVDODM5NjE4QzNDODFDQzg5 OTY1OTlBMjAeFw0yNTExMDQyMzI1MzRaFw0yNTExMTAyMzE1MzRaMDMxMTAvBgNV BAMTKDQ4RjVBODY4MjcyODhBNEMwRDFFRTM0NjQxRUZCQ0E3MDgxRUFEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mGXrmaVRQ28z2NAC/gVT14CK Qa9/UjcYJPW6OKyEn3JU3Rs7oX3NgP8TQi8tUWJRz2cMR6dM5di/EJppAwm62D7y PZUqPTGdhXm2OUSJsHqvhFmn61mDMy2DR04hTN7NFoE0H8YBEnMuDw82bIREoKAS HvEVoQ4UcgUo/f/ymGteEWxoK7jfI0pQaz/TaFQO6sd1rU83TxlA9/ZAaC4qgYXo rAT3I9O+HJRZRbW6IHnt8YKgqWfGiAVpPNst0Pto+hIVVF14Eu6PPNF4oTzFaXoE /2p7ZxMvlxIF3vhVSTXcOlXczyycW6U9xa2s3KfFO+kjgRFqRBmqxmywIyjXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSPWoaCcoikwNHuNGQe+8pwgerSYwHwYDVR0j BBgwFoAUr/w+v8RE5gJcg5YYw8gcyJllmaIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRkQ2MjdDMzdBREMyMkRFOEM0RDE4OUUyRDk4RDRDQzgw QzRFRUNGMUMyOTIwRDBGNDQwOTAxOUU1NEY4QzRBLzAvQUZGQzNFQkZDNDQ0RTYw MjVDODM5NjE4QzNDODFDQzg5OTY1OTlBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkZDM0VCRkM0NDRFNjAyNUM4 Mzk2MThDM0M4MUNDODk5NjU5OUEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUZENjI3QzM3QURDMjJERThDNEQxODlFMkQ5OEQ0Q0M4MEM0RUVDRjFD MjkyMEQwRjQ0MDkwMTlFNTRGOEM0QS8wL0FGRkMzRUJGQzQ0NEU2MDI1QzgzOTYx OEMzQzgxQ0M4OTk2NTk5QTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSDwv4FO+vgbHMqnlVn1Z6ME4O XTrTV8Lt2K3eXIKhmVN5OIKOehZ+HCE2NpgSfqqyhZH/dD7gWErEYJvtmdW80CXh bx2tjAi6UekHysvbys0vSsxLzlGD2mLtggsSuqtfhFKIQirIJhzpwgAJ1Zr5lSrd gxAvzL9AbNITp0q5C2TEdzpK/KGQcf2skMum/rVw2cmCKhQoVt0aOTTgQ8SGGtVD Bcb7zriRLxyjYe8aVLanQBe3aTE4+cVKNWRgGswpu2h4GStZ0kW0hbkQR01Obe8M HsYjnp6wJgo147T1JPWLT02mziogC7k8FIbpGZSajigaa3HIyOQYScoj5xam -----END CERTIFICATE-----Generated at Wed Nov 5 15:34:50 2025 by rpki-client