$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DBD7A6191C35AECE1F5D456856B7EE64632D6147F8FA3304D45BA972B516B78/0/4E20E121862731246A9615D59F0A14EA0EA3DDC6.mft File: 4E20E121862731246A9615D59F0A14EA0EA3DDC6.mft (raw, json) Hash identifier: 2cwIaztd8XhPN5HLyKBWxskHItQadfax88BTEqlzBgA= Subject key identifier: BB:1E:3D:5B:60:AB:9C:9C:3F:7A:67:09:4C:9B:95:17:89:F0:F1:45 Authority key identifier: 4E:20:E1:21:86:27:31:24:6A:96:15:D5:9F:0A:14:EA:0E:A3:DD:C6 Certificate issuer: /CN=4E20E121862731246A9615D59F0A14EA0EA3DDC6 Certificate serial: 587D50C2DD59AA348B84C301482A4D51A1956E6B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E20E121862731246A9615D59F0A14EA0EA3DDC6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1DBD7A6191C35AECE1F5D456856B7EE64632D6147F8FA3304D45BA972B516B78/0/4E20E121862731246A9615D59F0A14EA0EA3DDC6.mft Manifest number: 0128 Signing time: Sun 19 Oct 2025 23:21:01 +0000 Manifest this update: Sun 19 Oct 2025 23:16:01 +0000 Manifest next update: Sat 25 Oct 2025 08:44:01 +0000 Files and hashes: 1: 3137372e32322e3235342e302f32332d3234203d3e20323731383438.roa (hash: Mq/pdY97Qe3+SCm54RBYVgpmNeIbTjPttbh7UOzbkdI=) 2: 4E20E121862731246A9615D59F0A14EA0EA3DDC6.crl (hash: Es2cC1X7l23gBlG2y9R298XCjxAPbDPIJJshCKGQPTY=) 3: 3138372e34392e31302e302f32342d3234203d3e20323731383438.roa (hash: diW75uqRSTZPlURgRzVHKWzJ/L29UviohVLfwedCLMw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1DBD7A6191C35AECE1F5D456856B7EE64632D6147F8FA3304D45BA972B516B78/0/4E20E121862731246A9615D59F0A14EA0EA3DDC6.crl rsync://repository.lacnic.net/rpki/lacnic/1DBD7A6191C35AECE1F5D456856B7EE64632D6147F8FA3304D45BA972B516B78/0/4E20E121862731246A9615D59F0A14EA0EA3DDC6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E20E121862731246A9615D59F0A14EA0EA3DDC6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7d:50:c2:dd:59:aa:34:8b:84:c3:01:48:2a:4d:51:a1:95:6e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E20E121862731246A9615D59F0A14EA0EA3DDC6 Validity Not Before: Oct 19 23:16:01 2025 GMT Not After : Oct 25 08:44:01 2025 GMT Subject: CN=BB1E3D5B60AB9C9C3F7A67094C9B951789F0F145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:c4:16:06:21:04:2c:1b:de:79:78:63:20: 8f:07:d1:44:d3:c9:2a:ee:c7:3c:08:08:93:b7:04: cb:27:5f:7b:0b:af:8d:f2:dd:8f:b1:5d:a8:af:be: 52:85:1a:61:2a:f4:1e:b8:10:05:4f:74:d8:09:62: 58:19:99:0c:53:3a:27:12:04:d2:29:4d:64:fc:c5: 5c:39:fa:d9:7a:1c:95:f9:6d:25:59:40:20:d8:a3: 9b:bf:bf:7c:b2:0e:ec:c0:cb:6d:17:e8:e4:27:36: 2f:ae:b0:20:42:e7:79:86:8f:ff:4b:1a:cc:3d:ab: d1:25:b5:a0:dd:91:2b:99:d8:46:3a:65:11:79:c7: a0:55:91:53:5b:02:3d:c5:65:a0:25:fd:b7:94:75: a6:ea:bc:f9:b5:60:5d:cd:cc:c3:c8:b2:ed:1d:12: 14:b0:fd:a7:a5:31:47:53:3a:a7:76:f4:5a:f0:a2: a5:1c:6f:dd:bf:32:54:06:c2:f2:e5:63:20:9b:c6: f5:b3:1a:5a:99:a5:97:94:ef:9c:f6:4f:3b:08:cb: 10:96:38:1f:12:39:85:3c:a1:f5:17:28:4c:68:99: 64:55:84:67:b1:b8:5f:92:b3:3d:ad:74:57:01:66: ec:70:7d:40:a3:62:2b:82:e0:1b:ea:0a:b4:d3:36: 9b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1E:3D:5B:60:AB:9C:9C:3F:7A:67:09:4C:9B:95:17:89:F0:F1:45 X509v3 Authority Key Identifier: keyid:4E:20:E1:21:86:27:31:24:6A:96:15:D5:9F:0A:14:EA:0E:A3:DD:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1DBD7A6191C35AECE1F5D456856B7EE64632D6147F8FA3304D45BA972B516B78/0/4E20E121862731246A9615D59F0A14EA0EA3DDC6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E20E121862731246A9615D59F0A14EA0EA3DDC6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DBD7A6191C35AECE1F5D456856B7EE64632D6147F8FA3304D45BA972B516B78/0/4E20E121862731246A9615D59F0A14EA0EA3DDC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c4:77:44:c7:1b:3f:70:c9:9d:95:c8:fa:29:75:d1:74:bc: 92:80:73:ab:7e:96:f1:5a:45:9e:2d:b9:d2:4d:78:75:45:7b: 4f:c3:a7:3c:98:a3:a3:d5:07:38:65:58:11:21:cf:9e:83:8e: 12:b0:31:05:da:4c:0b:6a:98:72:fe:f3:83:54:1b:3d:aa:31: 09:c1:e9:4b:d8:01:d0:43:6a:0a:52:4a:fb:cd:4e:77:9d:ee: ed:4b:6d:5c:18:65:71:de:2f:19:cc:94:66:65:b2:ff:5c:5f: 25:18:d8:e7:74:bd:e6:ee:3c:7c:24:cd:1a:2b:1d:e8:52:82: 0f:a3:3d:e7:c3:a2:bd:8f:8f:7a:bf:c2:32:e4:a5:d4:5d:4f: 5a:fc:75:89:a8:53:8a:79:f6:48:ce:cb:23:a3:6b:57:b8:90: 21:c2:b8:87:49:b4:91:51:ec:9e:14:73:2d:fc:4e:9f:0d:fe: 42:88:e6:c7:4b:ed:2d:7c:84:80:96:df:57:b0:b2:42:d1:fd: 92:73:05:09:cc:ef:4f:c8:79:f8:f5:6e:f4:85:9a:6a:65:fc: ca:12:99:3b:10:e1:eb:62:dd:5a:01:42:04:f3:b6:db:92:30: 75:00:23:3d:e4:64:b7:d8:81:7b:6a:f7:a2:b7:d2:7e:ef:15: bd:4b:f2:a5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWH1Qwt1ZqjSLhMMBSCpNUaGVbmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyMEUxMjE4NjI3MzEyNDZBOTYxNUQ1OUYwQTE0RUEw RUEzRERDNjAeFw0yNTEwMTkyMzE2MDFaFw0yNTEwMjUwODQ0MDFaMDMxMTAvBgNV BAMTKEJCMUUzRDVCNjBBQjlDOUMzRjdBNjcwOTRDOUI5NTE3ODlGMEYxNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVJcQWBiEELBveeXhjII8H0UTT ySruxzwICJO3BMsnX3sLr43y3Y+xXaivvlKFGmEq9B64EAVPdNgJYlgZmQxTOicS BNIpTWT8xVw5+tl6HJX5bSVZQCDYo5u/v3yyDuzAy20X6OQnNi+usCBC53mGj/9L Gsw9q9EltaDdkSuZ2EY6ZRF5x6BVkVNbAj3FZaAl/beUdabqvPm1YF3NzMPIsu0d EhSw/aelMUdTOqd29FrwoqUcb92/MlQGwvLlYyCbxvWzGlqZpZeU75z2TzsIyxCW OB8SOYU8ofUXKExomWRVhGexuF+Ssz2tdFcBZuxwfUCjYiuC4BvqCrTTNpslAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUux49W2CrnJw/emcJTJuVF4nw8UUwHwYDVR0j BBgwFoAUTiDhIYYnMSRqlhXVnwoU6g6j3cYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xREJEN0E2MTkxQzM1QUVDRTFGNUQ0NTY4NTZCN0VFNjQ2 MzJENjE0N0Y4RkEzMzA0RDQ1QkE5NzJCNTE2Qjc4LzAvNEUyMEUxMjE4NjI3MzEy NDZBOTYxNUQ1OUYwQTE0RUEwRUEzRERDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RTIwRTEyMTg2MjczMTI0NkE5 NjE1RDU5RjBBMTRFQTBFQTNEREM2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMURCRDdBNjE5MUMzNUFFQ0UxRjVENDU2ODU2QjdFRTY0NjMyRDYxNDdG OEZBMzMwNEQ0NUJBOTcyQjUxNkI3OC8wLzRFMjBFMTIxODYyNzMxMjQ2QTk2MTVE NTlGMEExNEVBMEVBM0REQzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBIxHdExxs/cMmdlcj6KXXRdLyS gHOrfpbxWkWeLbnSTXh1RXtPw6c8mKOj1Qc4ZVgRIc+eg44SsDEF2kwLaphy/vOD VBs9qjEJwelL2AHQQ2oKUkr7zU53ne7tS21cGGVx3i8ZzJRmZbL/XF8lGNjndL3m 7jx8JM0aKx3oUoIPoz3nw6K9j496v8Iy5KXUXU9a/HWJqFOKefZIzssjo2tXuJAh wriHSbSRUeyeFHMt/E6fDf5CiObHS+0tfISAlt9XsLJC0f2ScwUJzO9PyHn49W70 hZpqZfzKEpk7EOHrYt1aAUIE87bbkjB1ACM95GS32IF7aveit9J+7xW9S/Kl -----END CERTIFICATE-----Generated at Mon Oct 20 17:37:57 2025 by rpki-client