$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft File: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft (raw, json) Hash identifier: UOeYcjXmD6dxfHexasgFv+qVsUzab4MwroxNmbs6nfg= Subject key identifier: 5D:72:1D:A3:D8:19:1D:B1:6C:2E:6D:A9:B9:4F:C2:0F:AA:C4:82:4B Authority key identifier: 20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5 Certificate issuer: /CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5 Certificate serial: 6FD11C7DC567AC0D502A094F6580477FC739D972 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft Manifest number: 0107 Signing time: Fri 22 Aug 2025 22:13:06 +0000 Manifest this update: Fri 22 Aug 2025 22:08:06 +0000 Manifest next update: Tue 26 Aug 2025 22:56:06 +0000 Files and hashes: 1: 323830333a653532303a3a2f33322d3438203d3e20323636363837.roa (hash: RFp/7paxrjEnmz7NX5siL1qxhM8AW6ttH3PE4IdU9z0=) 2: 34352e3232392e34342e302f32322d3234203d3e20323636363837.roa (hash: NXCrnc5k/R7cRXtnojYKX0tyR9Gzw9zx/b4X8zIv+Lk=) 3: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl (hash: WJduQxjz+pkuCmKOieiCllJVpEM0EK9meSiisX8ZIs0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 22:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d1:1c:7d:c5:67:ac:0d:50:2a:09:4f:65:80:47:7f:c7:39:d9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5 Validity Not Before: Aug 22 22:08:06 2025 GMT Not After : Aug 26 22:56:06 2025 GMT Subject: CN=5D721DA3D8191DB16C2E6DA9B94FC20FAAC4824B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:54:a7:1d:d9:1a:95:33:28:03:52:33:4e: ff:40:b0:56:88:e6:76:33:bc:7a:f6:7c:90:ef:3c: bb:d3:e9:32:37:43:e3:e8:9a:c8:95:9f:89:8e:2f: 13:91:d7:1b:30:6d:67:1c:55:43:2f:59:ca:1c:39: 67:38:94:a7:7a:87:d5:38:5c:78:91:ca:cf:9d:e2: d4:13:dc:3b:2a:e5:03:8a:fe:bb:d5:28:b0:be:aa: 0c:3c:e3:2e:c9:72:20:34:c5:15:07:34:21:90:28: 9c:d2:c7:a6:c5:e6:b2:d6:64:c5:cd:c8:44:2e:da: 15:fa:c7:77:bc:33:71:ff:aa:b8:c7:92:cd:d4:eb: 86:3d:e4:a4:45:4e:fa:40:ca:f0:d4:a8:02:1b:f4: a8:b5:ed:6d:0a:a3:f6:28:5c:87:8d:2d:0d:49:77: 77:c6:2c:f6:ee:38:be:0a:cc:8a:2c:b1:bc:03:7c: 21:6c:4d:10:b5:ae:64:00:43:ff:cc:7d:05:7d:64: 50:e2:cc:88:db:ac:e1:c3:e4:13:1c:b2:0a:61:96: 51:1e:ac:cf:af:1c:b4:80:e9:a2:50:8f:1a:01:fa: 25:a0:36:7f:e7:cf:78:f0:43:94:ed:b6:51:99:12: d3:f4:e1:4c:3b:00:14:9b:17:4e:d0:0c:7b:4e:ed: b5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:72:1D:A3:D8:19:1D:B1:6C:2E:6D:A9:B9:4F:C2:0F:AA:C4:82:4B X509v3 Authority Key Identifier: keyid:20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:6a:2d:f5:43:d8:38:c7:3f:41:e5:27:79:77:51:06:96:1c: 06:d3:07:ce:7b:76:8f:ec:76:67:69:19:25:72:b4:f6:8a:aa: 28:46:aa:41:65:d7:b3:5b:01:5f:fc:ba:eb:83:18:f3:b6:8b: 74:2e:a2:25:30:7b:f9:27:8d:fa:9d:52:c4:c3:97:73:6c:89: 9e:75:33:0f:78:aa:99:04:e6:9a:6d:92:33:58:77:50:1f:c9: e1:bd:ee:d6:33:93:f8:7f:3e:3d:8d:34:00:c5:69:20:16:cb: cf:8d:bb:4c:c3:b0:c3:3b:c8:ad:19:09:99:37:4c:b9:d6:ec: fc:2f:92:b8:92:5c:dd:3b:f7:07:d0:3a:d7:54:f4:e3:66:83: b8:07:94:e4:e5:f8:b1:2a:91:1b:ed:70:12:c3:64:f1:df:ef: 3b:6c:c4:4c:5d:a4:9a:55:15:54:c0:f0:44:87:5b:11:50:f2: a6:97:e8:ff:2b:4e:fe:fe:7a:6b:5e:5b:76:89:c2:df:b0:64: ad:eb:42:b0:96:b8:92:bb:88:98:f3:c3:b9:6e:49:c7:87:8b: b4:66:ab:e1:3d:86:e5:6d:6c:ae:e5:50:c5:3a:5e:c1:e1:fd: 84:14:6e:72:ed:d2:0f:9c:26:a8:80:80:b3:da:5c:dd:c2:68: 25:cb:26:c7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUb9EcfcVnrA1QKglPZYBHf8c52XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFNUZFNDU4OUMxQ0U0NzJEMzlDOUZGMTBFRTFBNkU0 RDVDQkZDNTAeFw0yNTA4MjIyMjA4MDZaFw0yNTA4MjYyMjU2MDZaMDMxMTAvBgNV BAMTKDVENzIxREEzRDgxOTFEQjE2QzJFNkRBOUI5NEZDMjBGQUFDNDgyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCerVSnHdkalTMoA1IzTv9AsFaI 5nYzvHr2fJDvPLvT6TI3Q+PomsiVn4mOLxOR1xswbWccVUMvWcocOWc4lKd6h9U4 XHiRys+d4tQT3Dsq5QOK/rvVKLC+qgw84y7JciA0xRUHNCGQKJzSx6bF5rLWZMXN yEQu2hX6x3e8M3H/qrjHks3U64Y95KRFTvpAyvDUqAIb9Ki17W0Ko/YoXIeNLQ1J d3fGLPbuOL4KzIossbwDfCFsTRC1rmQAQ//MfQV9ZFDizIjbrOHD5BMcsgphllEe rM+vHLSA6aJQjxoB+iWgNn/nz3jwQ5TttlGZEtP04Uw7ABSbF07QDHtO7bXHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXXIdo9gZHbFsLm2puU/CD6rEgkswHwYDVR0j BBgwFoAUIOX+RYnBzkctOcn/EO4abk1cv8UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82N0EwRUQzNjJFNjhGRjQyRTE4OEExMDU4Q0JERjc0N0E3 REQ5M0EzNThFQTE3M0I3QTVFQkEzMjdCMzY1QTUyLzAvMjBFNUZFNDU4OUMxQ0U0 NzJEMzlDOUZGMTBFRTFBNkU0RDVDQkZDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEU1RkU0NTg5QzFDRTQ3MkQz OUM5RkYxMEVFMUE2RTRENUNCRkM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjdBMEVEMzYyRTY4RkY0MkUxODhBMTA1OENCREY3NDdBN0REOTNBMzU4 RUExNzNCN0E1RUJBMzI3QjM2NUE1Mi8wLzIwRTVGRTQ1ODlDMUNFNDcyRDM5QzlG RjEwRUUxQTZFNEQ1Q0JGQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCuai31Q9g4xz9B5Sd5d1EGlhwG 0wfOe3aP7HZnaRklcrT2iqooRqpBZdezWwFf/Lrrgxjztot0LqIlMHv5J436nVLE w5dzbImedTMPeKqZBOaabZIzWHdQH8nhve7WM5P4fz49jTQAxWkgFsvPjbtMw7DD O8itGQmZN0y51uz8L5K4klzdO/cH0DrXVPTjZoO4B5Tk5fixKpEb7XASw2Tx3+87 bMRMXaSaVRVUwPBEh1sRUPKml+j/K07+/nprXlt2icLfsGSt60KwlriSu4iY88O5 bknHh4u0ZqvhPYblbWyu5VDFOl7B4f2EFG5y7dIPnCaogICz2lzdwmglyybH -----END CERTIFICATE-----Generated at Sun Aug 24 00:54:59 2025 by rpki-client