$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft File: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft (raw, json) Hash identifier: 9uVFne3EUNXsZZT25xyKRu9+fjDY99tNQ0LRvvKLyhE= Subject key identifier: F0:F9:DB:EC:ED:A9:7C:A2:51:45:86:CF:B4:3E:0D:EE:45:A4:8C:AA Authority key identifier: 20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5 Certificate issuer: /CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5 Certificate serial: 8E89FE08FCCEEAB27017F0DE33763FBD7613DA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft Manifest number: 0124 Signing time: Sat 18 Oct 2025 00:50:30 +0000 Manifest this update: Sat 18 Oct 2025 00:45:30 +0000 Manifest next update: Thu 23 Oct 2025 20:55:30 +0000 Files and hashes: 1: 323830333a653532303a3a2f33322d3438203d3e20323636363837.roa (hash: RFp/7paxrjEnmz7NX5siL1qxhM8AW6ttH3PE4IdU9z0=) 2: 34352e3232392e34342e302f32322d3234203d3e20323636363837.roa (hash: NXCrnc5k/R7cRXtnojYKX0tyR9Gzw9zx/b4X8zIv+Lk=) 3: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl (hash: 48E60BNMqH1hgRk/R5tM9fxG3TZckK8gQePOg4NQEFE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 20:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8e:89:fe:08:fc:ce:ea:b2:70:17:f0:de:33:76:3f:bd:76:13:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5 Validity Not Before: Oct 18 00:45:30 2025 GMT Not After : Oct 23 20:55:30 2025 GMT Subject: CN=F0F9DBECEDA97CA2514586CFB43E0DEE45A48CAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:89:c5:5a:b6:aa:12:92:78:07:16:6f:2c:33: 5e:2c:61:db:6f:a9:7b:ad:55:b4:b4:21:0b:a5:01: 57:27:42:1e:e0:77:a0:1c:a0:d4:56:06:97:1d:ae: 7a:28:d6:7a:a9:f4:8d:7c:8d:63:59:40:86:6a:09: 89:94:5b:d3:31:ab:3b:a7:95:0a:98:d9:ec:72:84: db:90:cd:68:e1:84:1e:e6:7f:e0:0d:45:a2:db:ea: 18:d4:2b:b9:8e:01:3d:61:d7:8e:f5:79:e1:42:bb: 10:97:78:ef:8b:de:e4:d2:6d:31:fa:80:85:57:e0: c5:44:63:98:41:de:9d:cb:c8:63:00:6b:b6:da:5d: c6:63:16:ce:ae:22:a0:eb:e3:10:9b:52:52:ea:8d: 0a:9c:91:96:75:98:02:30:07:93:ee:2b:30:c6:7b: 19:2a:d9:8b:d9:e9:a8:bc:83:de:c8:14:7f:76:5b: 15:fe:a6:05:92:79:73:a8:f2:31:ee:b2:e1:31:6d: 5c:51:d2:95:d5:96:30:35:89:aa:f7:ea:aa:64:3a: f0:a4:d5:39:06:b8:80:ac:a2:0e:93:9a:12:f2:2d: 9f:3d:d1:a2:92:27:68:5d:05:9d:16:2e:c9:6b:fd: 06:dd:86:f4:15:d5:6c:2c:bf:b5:5e:80:db:b5:7a: 74:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F9:DB:EC:ED:A9:7C:A2:51:45:86:CF:B4:3E:0D:EE:45:A4:8C:AA X509v3 Authority Key Identifier: keyid:20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2e:69:1f:5f:19:95:9a:2e:50:05:18:6f:f2:70:c6:eb:38: 67:da:ba:a0:97:18:3e:d9:16:71:bf:c8:fe:79:ef:21:ff:5c: 8a:b4:0b:44:d1:19:50:83:0b:5f:85:01:1e:c9:10:1d:1e:f9: 0a:05:77:f4:e4:22:a0:ba:44:12:7f:f4:da:dc:5b:27:16:bc: a5:2d:27:a1:f3:99:65:98:27:d5:bf:20:2f:cc:79:cb:ec:49: e5:5a:8b:a5:19:7b:6b:ec:ee:79:b2:3e:10:eb:f4:3a:a7:c4: b9:6f:51:74:62:36:3a:cf:00:69:84:f1:33:17:11:6d:42:f8: ed:2a:09:77:ca:86:31:91:96:5c:12:34:3d:b9:a6:c5:d6:20: 55:9d:6f:de:71:99:ef:96:96:2e:ef:cc:cc:1f:2b:c8:8e:0b: 74:f0:1f:3e:16:2c:3f:99:f9:eb:1e:8c:80:a3:20:01:84:a1: 19:19:fe:c5:d4:b8:ff:b3:53:38:15:5e:c1:ad:8c:ec:b6:9e: 3f:c3:9d:54:ad:d6:6c:df:3f:cb:65:27:ce:b2:4f:f6:75:d5: e3:78:3a:8f:0c:f1:09:f4:0a:f3:ad:68:b8:05:e8:6e:bf:80: 9d:ff:9a:90:ca:08:a2:24:71:e4:50:68:c0:4c:82:bc:55:00: c1:a6:1a:66 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAI6J/gj8zuqycBfw3jN2P712E9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFNUZFNDU4OUMxQ0U0NzJEMzlDOUZGMTBFRTFBNkU0 RDVDQkZDNTAeFw0yNTEwMTgwMDQ1MzBaFw0yNTEwMjMyMDU1MzBaMDMxMTAvBgNV BAMTKEYwRjlEQkVDRURBOTdDQTI1MTQ1ODZDRkI0M0UwREVFNDVBNDhDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpicVatqoSkngHFm8sM14sYdtv qXutVbS0IQulAVcnQh7gd6AcoNRWBpcdrnoo1nqp9I18jWNZQIZqCYmUW9Mxqzun lQqY2exyhNuQzWjhhB7mf+ANRaLb6hjUK7mOAT1h1471eeFCuxCXeO+L3uTSbTH6 gIVX4MVEY5hB3p3LyGMAa7baXcZjFs6uIqDr4xCbUlLqjQqckZZ1mAIwB5PuKzDG exkq2YvZ6ai8g97IFH92WxX+pgWSeXOo8jHusuExbVxR0pXVljA1iar36qpkOvCk 1TkGuICsog6TmhLyLZ890aKSJ2hdBZ0WLslr/QbdhvQV1Wwsv7VegNu1enSDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8Pnb7O2pfKJRRYbPtD4N7kWkjKowHwYDVR0j BBgwFoAUIOX+RYnBzkctOcn/EO4abk1cv8UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82N0EwRUQzNjJFNjhGRjQyRTE4OEExMDU4Q0JERjc0N0E3 REQ5M0EzNThFQTE3M0I3QTVFQkEzMjdCMzY1QTUyLzAvMjBFNUZFNDU4OUMxQ0U0 NzJEMzlDOUZGMTBFRTFBNkU0RDVDQkZDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEU1RkU0NTg5QzFDRTQ3MkQz OUM5RkYxMEVFMUE2RTRENUNCRkM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjdBMEVEMzYyRTY4RkY0MkUxODhBMTA1OENCREY3NDdBN0REOTNBMzU4 RUExNzNCN0E1RUJBMzI3QjM2NUE1Mi8wLzIwRTVGRTQ1ODlDMUNFNDcyRDM5QzlG RjEwRUUxQTZFNEQ1Q0JGQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPLmkfXxmVmi5QBRhv8nDG6zhn 2rqglxg+2RZxv8j+ee8h/1yKtAtE0RlQgwtfhQEeyRAdHvkKBXf05CKgukQSf/Ta 3FsnFrylLSeh85llmCfVvyAvzHnL7EnlWoulGXtr7O55sj4Q6/Q6p8S5b1F0YjY6 zwBphPEzFxFtQvjtKgl3yoYxkZZcEjQ9uabF1iBVnW/ecZnvlpYu78zMHyvIjgt0 8B8+Fiw/mfnrHoyAoyABhKEZGf7F1Lj/s1M4FV7BrYzstp4/w51UrdZs3z/LZSfO sk/2ddXjeDqPDPEJ9ArzrWi4Behuv4Cd/5qQygiiJHHkUGjATIK8VQDBphpm -----END CERTIFICATE-----Generated at Mon Oct 20 16:34:19 2025 by rpki-client