$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft File: 20FD70DC301FF93D288ED851C3A69B22D7B04220.mft (raw, json) Hash identifier: rJonyDrrmDf81twKK6zoNWE0rnnrrrz3I3MdKHXhS6I= Subject key identifier: 4F:10:17:FD:19:A1:FA:E3:69:67:1A:F1:6D:D5:C3:B9:62:40:21:F8 Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 Certificate issuer: /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Certificate serial: 37022C7BECD47AE1F331899F66631C0F876E0620 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft Manifest number: 0128 Signing time: Sun 19 Oct 2025 13:24:46 +0000 Manifest this update: Sun 19 Oct 2025 13:19:46 +0000 Manifest next update: Fri 24 Oct 2025 10:26:46 +0000 Files and hashes: 1: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (hash: hiq3f5SQVXyvVqAHJFD41H8GmsplFaT7zWIIcFR5Zms=) 2: 20FD70DC301FF93D288ED851C3A69B22D7B04220.crl (hash: j8FARTuUcVKR4pJZ9XHhxfgQ5bqKuBMG4Z8hqPZhQqI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:02:2c:7b:ec:d4:7a:e1:f3:31:89:9f:66:63:1c:0f:87:6e:06:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Validity Not Before: Oct 19 13:19:46 2025 GMT Not After : Oct 24 10:26:46 2025 GMT Subject: CN=4F1017FD19A1FAE369671AF16DD5C3B9624021F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:09:22:6a:b1:06:7d:48:13:2f:3b:04:41: 0a:18:63:15:26:57:cd:2e:c6:3f:bd:a0:ef:f4:18: 25:87:64:d1:1a:6c:c1:0f:24:4b:f4:1d:67:05:4f: 8d:99:55:41:d4:3d:8e:6e:5d:8d:37:0b:38:3a:bf: f0:9b:78:a0:cb:1d:53:42:2c:f7:78:12:30:33:a7: 35:33:95:83:f9:28:8f:56:f6:de:4f:cb:06:64:91: 94:0a:81:5a:6f:35:6e:fb:aa:be:ac:f3:ef:d2:ec: 85:d8:2b:d3:a8:4d:bf:33:a6:12:6d:c2:50:8b:94: 84:0c:a1:ed:ce:60:a6:3e:dc:8e:56:95:ff:ee:44: ca:93:ad:f2:5e:76:73:27:cb:98:fc:39:10:21:7a: d3:c0:f9:9f:f5:c8:ae:67:0f:f8:51:63:36:d8:85: e5:89:ac:11:22:c6:bb:51:d5:22:eb:43:e7:25:e0: 48:10:a4:98:b0:25:87:a9:e8:6c:e6:23:56:99:d7: 50:b7:cd:fb:d1:0a:1b:91:54:ac:ed:cb:52:4d:36: e1:c9:9c:ee:65:8b:7f:27:90:d7:20:11:87:12:3e: 56:59:b2:31:9e:a6:fa:b0:f1:63:cf:28:9b:04:ee: af:16:ae:9b:12:e8:77:15:0c:b7:32:87:ab:90:71: 47:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:10:17:FD:19:A1:FA:E3:69:67:1A:F1:6D:D5:C3:B9:62:40:21:F8 X509v3 Authority Key Identifier: keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:5b:7f:5e:f4:79:4b:59:6d:b8:17:4d:8e:d0:99:d9:e4:09: 85:4c:b5:32:dc:c3:24:65:05:30:30:7b:b9:d3:c7:40:8f:17: 02:bc:4d:2a:09:ac:1f:f3:03:a7:44:b4:bf:eb:57:e8:42:9c: c8:e3:ac:e6:c7:f0:ed:6a:df:a5:e2:27:47:a0:8b:be:a0:f5: 8a:eb:a4:f0:fd:42:57:d4:8b:14:6c:c9:2f:17:1e:19:b0:c6: 70:23:97:9e:e7:e7:ee:94:2f:14:ed:79:f4:07:37:27:f4:b6: 11:39:be:6f:6b:bb:38:7d:9b:3f:90:80:07:5c:bc:3d:03:05: cb:1e:12:e5:77:fa:e2:2c:ad:42:53:6e:b5:24:e7:36:51:e4: 6b:0f:23:d3:3d:68:5c:60:28:b2:2b:67:63:20:81:bb:ef:d4: 55:53:5d:c6:ee:dc:ca:b9:8b:64:aa:e8:d8:0d:bb:92:dd:24: 76:51:97:34:fa:2f:93:13:dc:52:8d:94:3a:ff:0f:b1:6e:54: a5:fb:42:db:a3:92:7d:2e:83:44:15:b2:6d:0a:78:f1:9d:05: e6:46:42:3f:af:1d:38:cc:af:a8:2e:a3:72:3b:07:42:0b:94: 85:73:7d:ec:83:28:2b:29:4e:c4:91:22:89:4a:51:18:c5:d1: 2d:cc:94:a4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNwIse+zUeuHzMYmfZmMcD4duBiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDcwREMzMDFGRjkzRDI4OEVEODUxQzNBNjlCMjJE N0IwNDIyMDAeFw0yNTEwMTkxMzE5NDZaFw0yNTEwMjQxMDI2NDZaMDMxMTAvBgNV BAMTKDRGMTAxN0ZEMTlBMUZBRTM2OTY3MUFGMTZERDVDM0I5NjI0MDIxRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSgkiarEGfUgTLzsEQQoYYxUm V80uxj+9oO/0GCWHZNEabMEPJEv0HWcFT42ZVUHUPY5uXY03Czg6v/CbeKDLHVNC LPd4EjAzpzUzlYP5KI9W9t5PywZkkZQKgVpvNW77qr6s8+/S7IXYK9OoTb8zphJt wlCLlIQMoe3OYKY+3I5Wlf/uRMqTrfJednMny5j8ORAhetPA+Z/1yK5nD/hRYzbY heWJrBEixrtR1SLrQ+cl4EgQpJiwJYep6GzmI1aZ11C3zfvRChuRVKzty1JNNuHJ nO5li38nkNcgEYcSPlZZsjGepvqw8WPPKJsE7q8WrpsS6HcVDLcyh6uQcUc9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTxAX/Rmh+uNpZxrxbdXDuWJAIfgwHwYDVR0j BBgwFoAUIP1w3DAf+T0ojthRw6abItewQiAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTIwRjM3RTFCRDYyQTUxQTk5REVENkI0QTEzOEIwNzBD RTFCOUQzQjNCQUU2M0Y1NTVCMDU3OTAwNUYyMzAwLzAvMjBGRDcwREMzMDFGRjkz RDI4OEVEODUxQzNBNjlCMjJEN0IwNDIyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEZENzBEQzMwMUZGOTNEMjg4 RUQ4NTFDM0E2OUIyMkQ3QjA0MjIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkEyMEYzN0UxQkQ2MkE1MUE5OURFRDZCNEExMzhCMDcwQ0UxQjlEM0Iz QkFFNjNGNTU1QjA1NzkwMDVGMjMwMC8wLzIwRkQ3MERDMzAxRkY5M0QyODhFRDg1 MUMzQTY5QjIyRDdCMDQyMjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5W39e9HlLWW24F02O0JnZ5AmF TLUy3MMkZQUwMHu508dAjxcCvE0qCawf8wOnRLS/61foQpzI46zmx/Dtat+l4idH oIu+oPWK66Tw/UJX1IsUbMkvFx4ZsMZwI5ee5+fulC8U7Xn0Bzcn9LYROb5va7s4 fZs/kIAHXLw9AwXLHhLld/riLK1CU261JOc2UeRrDyPTPWhcYCiyK2djIIG779RV U13G7tzKuYtkqujYDbuS3SR2UZc0+i+TE9xSjZQ6/w+xblSl+0Lbo5J9LoNEFbJt CnjxnQXmRkI/rx04zK+oLqNyOwdCC5SFc33sgygrKU7EkSKJSlEYxdEtzJSk -----END CERTIFICATE-----Generated at Mon Oct 20 00:33:44 2025 by rpki-client