$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft File: AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft (raw, json) Hash identifier: 1fXkhyT3CjY6fH0iZMtOaNwSPu4BiftlPyZrjBVY1No= Subject key identifier: D9:3F:AB:42:9B:00:36:4A:33:4E:22:D2:A6:09:1C:BE:BA:A5:07:FD Authority key identifier: AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00 Certificate issuer: /CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400 Certificate serial: 19EF98DD72739CB59A7229E1C0834F9BAC55B57D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft Manifest number: 0136 Signing time: Mon 03 Nov 2025 12:56:35 +0000 Manifest this update: Mon 03 Nov 2025 12:51:35 +0000 Manifest next update: Sun 09 Nov 2025 04:58:35 +0000 Files and hashes: 1: 34352e3232342e3230322e302f32342d3234203d3e203238313130.roa (hash: fiF8iAvzt7/5ZjIH+Nbn9/8/RVso6h9kelz14B9xZug=) 2: 34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa (hash: jT1E1QQ2DLRUAXUiMSpmHQQCj1+7qTNhhKnmVO0M050=) 3: AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl (hash: HAkeDh3GMBj8I7q7ACBZpicV507Eh7nJPBfvltkkAc0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ef:98:dd:72:73:9c:b5:9a:72:29:e1:c0:83:4f:9b:ac:55:b5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400 Validity Not Before: Nov 3 12:51:35 2025 GMT Not After : Nov 9 04:58:35 2025 GMT Subject: CN=D93FAB429B00364A334E22D2A6091CBEBAA507FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:1e:0f:5c:d3:da:33:f5:a4:cb:33:12:7c: f7:0c:aa:fc:34:0e:70:47:92:c9:1b:51:9a:4b:64: 86:4d:b7:fc:52:20:2c:91:1f:f0:38:7f:b2:25:44: d7:23:73:5a:4c:52:97:61:da:48:53:95:f5:05:35: de:cf:36:f8:7c:a5:1a:1e:a4:02:47:00:44:ae:70: 8e:8b:75:cd:1a:5a:f0:7d:48:47:0f:23:58:32:00: 19:41:fb:07:a3:30:25:21:f3:f0:25:b8:ec:71:8e: 55:5c:e5:fc:51:6c:28:a2:99:1f:3c:f2:bd:5c:95: a4:40:c5:17:fc:de:f6:fd:d8:52:f3:73:4a:5b:91: 57:1c:6f:11:1e:2e:71:57:27:ef:1e:61:8e:2e:d5: c6:5d:14:c4:4c:33:d7:40:09:bf:67:cc:a4:e9:3e: c7:80:b9:95:41:4e:24:54:95:3b:58:68:c4:ac:3a: c1:a3:96:da:66:4e:8a:63:6c:0d:7c:d0:22:e4:01: 4d:b8:7f:8e:5a:ef:f8:0a:fa:d1:fc:59:2b:0b:40: b7:91:d5:dc:c2:f3:22:f8:0b:21:b9:c8:84:2d:36: a4:78:f9:9e:af:33:38:dd:f2:ce:17:9c:a3:29:8b: b9:2a:d5:4c:50:54:6e:18:da:5d:03:e6:49:f8:f6: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3F:AB:42:9B:00:36:4A:33:4E:22:D2:A6:09:1C:BE:BA:A5:07:FD X509v3 Authority Key Identifier: keyid:AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:de:b3:77:1c:05:fd:65:17:2e:c8:f0:c9:de:db:63:fb:85: ec:41:52:a4:97:97:25:08:09:d3:49:f1:6b:6f:6f:6f:04:95: ce:9d:48:ad:b7:b2:53:8d:ca:61:5b:29:43:1b:61:d7:d4:bd: 48:ef:ad:a7:4d:a5:28:06:ca:bc:60:c3:99:5a:90:97:56:60: fa:cc:4b:39:49:93:b0:6e:89:17:56:6d:85:17:4d:ce:af:8e: 40:75:99:47:ac:17:fc:f8:a7:34:34:61:cf:9b:d0:44:48:94: d4:0a:1c:64:00:ee:dc:96:84:a5:c0:7e:86:55:04:86:7e:2c: ab:56:4b:19:40:43:d8:a3:2a:e4:0b:be:8c:52:53:a4:23:eb: 71:7f:90:c9:cc:5a:b6:8c:59:57:00:90:9d:99:4f:3c:60:df: a7:b7:cf:11:ae:c4:87:74:de:ba:3c:79:83:30:da:a1:25:4f: 71:52:8f:90:6e:1f:e4:4c:5a:fd:9f:aa:03:19:e5:70:54:4e: bd:ae:20:2e:d3:a1:09:5f:40:df:d8:a4:29:89:36:9d:22:03: 73:6e:da:ff:53:75:6e:e0:6b:44:c2:74:e6:14:e6:94:cb:1e: 2e:02:1f:fa:89:d4:f2:8b:77:70:76:92:dc:80:72:f4:ac:b2: d4:4a:df:90 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGe+Y3XJznLWacinhwINPm6xVtX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBNUI3MTU5Qjc5RTEwQjUxRTFGQURFREI0QzI1QzY1 MUNFMDQwMDAeFw0yNTExMDMxMjUxMzVaFw0yNTExMDkwNDU4MzVaMDMxMTAvBgNV BAMTKEQ5M0ZBQjQyOUIwMDM2NEEzMzRFMjJEMkE2MDkxQ0JFQkFBNTA3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvtx4PXNPaM/WkyzMSfPcMqvw0 DnBHkskbUZpLZIZNt/xSICyRH/A4f7IlRNcjc1pMUpdh2khTlfUFNd7PNvh8pRoe pAJHAESucI6Ldc0aWvB9SEcPI1gyABlB+wejMCUh8/AluOxxjlVc5fxRbCiimR88 8r1claRAxRf83vb92FLzc0pbkVccbxEeLnFXJ+8eYY4u1cZdFMRMM9dACb9nzKTp PseAuZVBTiRUlTtYaMSsOsGjltpmTopjbA180CLkAU24f45a7/gK+tH8WSsLQLeR 1dzC8yL4CyG5yIQtNqR4+Z6vMzjd8s4XnKMpi7kq1UxQVG4Y2l0D5kn49p93AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2T+rQpsANkozTiLSpgkcvrqlB/0wHwYDVR0j BBgwFoAUr6W3FZt54QtR4fre20wlxlHOBAAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMUVGMjJBMEVBRDI5N0RENTlCRkEwRDlDMzg4NTk2RTY5 ODM0NDZCMTMzQzMxNUJGOTRBMDM4NEY3Qjc2RUI4LzAvQUZBNUI3MTU5Qjc5RTEw QjUxRTFGQURFREI0QzI1QzY1MUNFMDQwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkE1QjcxNTlCNzlFMTBCNTFF MUZBREVEQjRDMjVDNjUxQ0UwNDAwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjFFRjIyQTBFQUQyOTdERDU5QkZBMEQ5QzM4ODU5NkU2OTgzNDQ2QjEz M0MzMTVCRjk0QTAzODRGN0I3NkVCOC8wL0FGQTVCNzE1OUI3OUUxMEI1MUUxRkFE RURCNEMyNUM2NTFDRTA0MDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBA3rN3HAX9ZRcuyPDJ3ttj+4Xs QVKkl5clCAnTSfFrb29vBJXOnUitt7JTjcphWylDG2HX1L1I762nTaUoBsq8YMOZ WpCXVmD6zEs5SZOwbokXVm2FF03Or45AdZlHrBf8+Kc0NGHPm9BESJTUChxkAO7c loSlwH6GVQSGfiyrVksZQEPYoyrkC76MUlOkI+txf5DJzFq2jFlXAJCdmU88YN+n t88RrsSHdN66PHmDMNqhJU9xUo+Qbh/kTFr9n6oDGeVwVE69riAu06EJX0Df2KQp iTadIgNzbtr/U3Vu4GtEwnTmFOaUyx4uAh/6idTyi3dwdpLcgHL0rLLUSt+Q -----END CERTIFICATE-----Generated at Wed Nov 5 22:17:50 2025 by rpki-client