$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft File: AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft (raw, json) Hash identifier: s9qBsPZWv4rouGRJQAn0lr8ZkBOVYvhkAAYwCG3SGik= Subject key identifier: 76:65:FA:AA:19:43:59:ED:E9:38:98:19:E9:12:BC:AF:56:2C:25:A2 Authority key identifier: AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2 Certificate issuer: /CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2 Certificate serial: 768B8EB89B43F8D811E125BF1B2B9CB986B2A1A8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft Manifest number: 8D Signing time: Fri 17 Apr 2026 01:24:12 +0000 Manifest this update: Fri 17 Apr 2026 01:19:12 +0000 Manifest next update: Wed 22 Apr 2026 14:47:12 +0000 Files and hashes: 1: 323830333a643964303a3a2f33322d3332203d3e20323734313538.roa (hash: T0oUgPSWTkNTCuDYVPvATKVNJqgqF4Xg4+Ud0zsl7s8=) 2: 3230302e33332e3130382e302f32342d3234203d3e20323734313538.roa (hash: uqIyZ5o3Twoz9lqf2/eatcYZt5rIMFyHnYHlLXTSymI=) 3: AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl (hash: GoZVErowgFEK4LGSUb8I677etVwLwnesSS2s+CJuQCE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8b:8e:b8:9b:43:f8:d8:11:e1:25:bf:1b:2b:9c:b9:86:b2:a1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2 Validity Not Before: Apr 17 01:19:12 2026 GMT Not After : Apr 22 14:47:12 2026 GMT Subject: CN=7665FAAA194359EDE9389819E912BCAF562C25A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:47:d8:9c:f4:fb:ca:3b:da:41:04:4c:51:1d: 23:f4:c0:58:8a:7f:5c:69:87:43:99:e9:b0:7e:56: a4:77:32:9c:27:12:b2:fe:e0:bb:54:57:df:3e:bc: 65:34:20:0b:1f:14:26:fb:bd:a7:c9:cf:15:cb:47: d3:3f:8c:96:26:d3:65:c6:15:58:17:67:9e:9c:6f: a4:36:a7:2e:ca:d3:87:75:5d:6e:a3:3d:b9:80:10: f8:4e:2f:cf:2e:25:fc:df:ad:e5:32:49:15:07:d1: ad:75:95:8b:8d:2d:87:cf:fa:a3:7a:ee:07:8a:1c: 4f:cf:5d:59:fc:90:44:09:1e:36:a7:84:ee:97:10: ca:15:b6:1d:ac:03:20:0e:93:2d:e6:28:82:d7:cf: e9:a7:3b:e2:32:21:84:e3:34:0c:77:d4:6a:de:25: e9:13:47:f3:7b:68:4c:f7:97:31:02:53:10:9a:6d: 25:fd:7e:f2:16:e9:5c:68:c8:f6:fc:a6:5d:a6:2c: 21:3b:67:3e:81:f1:24:00:0a:96:ff:43:d7:01:e8: 05:56:e9:dd:26:10:f4:cb:41:4e:59:56:9e:42:56: 0d:73:df:72:be:e1:67:a9:ca:32:1a:7e:c5:30:be: 0a:36:10:38:30:36:86:b7:d4:08:a6:e0:5d:e6:dc: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:65:FA:AA:19:43:59:ED:E9:38:98:19:E9:12:BC:AF:56:2C:25:A2 X509v3 Authority Key Identifier: keyid:AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:32:9e:bf:d3:95:4a:2b:db:9e:0d:5c:c5:a2:21:ac:fa:39: 18:5f:9d:42:b8:3b:7e:ee:1a:4f:19:fd:d8:1c:0d:1b:ad:73: 61:81:05:0c:b9:ed:72:6a:96:40:e6:0f:d8:08:1e:5d:74:00: fb:eb:af:b3:fe:97:fb:d9:b6:b1:93:3b:08:fb:74:57:6f:0c: ad:c5:67:d8:bf:f6:91:5e:22:2d:c0:f8:f8:99:ba:be:de:6d: a8:5e:47:36:d3:fd:81:92:75:5e:1e:ab:3b:5f:6b:36:9e:9c: 62:05:3a:18:9c:bf:20:3e:24:14:a2:b2:19:4e:ed:a9:a5:50: d3:ee:2d:3f:e9:82:e4:34:6d:f0:d2:68:1e:5b:b3:ff:c6:30: 14:64:2c:ba:cb:3e:f2:4f:9a:ac:4b:76:12:e4:41:80:d5:86: 78:41:d2:d3:1a:cc:bd:2f:04:09:55:82:b2:04:65:53:c9:d7: 7a:ab:92:e1:36:2c:8e:4b:e7:a0:8b:a8:71:ed:8e:dc:0e:76: 09:de:b9:c1:6c:5c:4a:c5:c5:0f:bb:54:9b:19:9c:4b:4c:ca: 73:0b:0b:4a:7c:1e:05:5a:84:42:ce:49:c4:14:a6:8f:39:75: 44:d8:9e:74:34:28:7c:f6:b7:9b:b1:5b:78:0a:25:6f:04:0e: a2:2a:d0:4f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdouOuJtD+NgR4SW/GyucuYayoagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQzNFQkZDNDQ0RTYwMjVDODM5NjE4QzNDODFDQzg5 OTY1OTlBMjAeFw0yNjA0MTcwMTE5MTJaFw0yNjA0MjIxNDQ3MTJaMDMxMTAvBgNV BAMTKDc2NjVGQUFBMTk0MzU5RURFOTM4OTgxOUU5MTJCQ0FGNTYyQzI1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvR9ic9PvKO9pBBExRHSP0wFiK f1xph0OZ6bB+VqR3MpwnErL+4LtUV98+vGU0IAsfFCb7vafJzxXLR9M/jJYm02XG FVgXZ56cb6Q2py7K04d1XW6jPbmAEPhOL88uJfzfreUySRUH0a11lYuNLYfP+qN6 7geKHE/PXVn8kEQJHjanhO6XEMoVth2sAyAOky3mKILXz+mnO+IyIYTjNAx31Gre JekTR/N7aEz3lzECUxCabSX9fvIW6VxoyPb8pl2mLCE7Zz6B8SQACpb/Q9cB6AVW 6d0mEPTLQU5ZVp5CVg1z33K+4WepyjIafsUwvgo2EDgwNoa31Aim4F3m3DTdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUdmX6qhlDWe3pOJgZ6RK8r1YsJaIwHwYDVR0j BBgwFoAUr/w+v8RE5gJcg5YYw8gcyJllmaIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRkQ2MjdDMzdBREMyMkRFOEM0RDE4OUUyRDk4RDRDQzgw QzRFRUNGMUMyOTIwRDBGNDQwOTAxOUU1NEY4QzRBLzAvQUZGQzNFQkZDNDQ0RTYw MjVDODM5NjE4QzNDODFDQzg5OTY1OTlBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkZDM0VCRkM0NDRFNjAyNUM4 Mzk2MThDM0M4MUNDODk5NjU5OUEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUZENjI3QzM3QURDMjJERThDNEQxODlFMkQ5OEQ0Q0M4MEM0RUVDRjFD MjkyMEQwRjQ0MDkwMTlFNTRGOEM0QS8wL0FGRkMzRUJGQzQ0NEU2MDI1QzgzOTYx OEMzQzgxQ0M4OTk2NTk5QTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbMp6/05VKK9ueDVzFoiGs+jkY X51CuDt+7hpPGf3YHA0brXNhgQUMue1yapZA5g/YCB5ddAD766+z/pf72baxkzsI +3RXbwytxWfYv/aRXiItwPj4mbq+3m2oXkc20/2BknVeHqs7X2s2npxiBToYnL8g PiQUorIZTu2ppVDT7i0/6YLkNG3w0mgeW7P/xjAUZCy6yz7yT5qsS3YS5EGA1YZ4 QdLTGsy9LwQJVYKyBGVTydd6q5LhNiyOS+egi6hx7Y7cDnYJ3rnBbFxKxcUPu1Sb GZxLTMpzCwtKfB4FWoRCzknEFKaPOXVE2J50NCh89rebsVt4CiVvBA6iKtBP -----END CERTIFICATE-----Generated at Fri Apr 17 21:18:37 2026 by rpki-client