$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft File: 20FD70DC301FF93D288ED851C3A69B22D7B04220.mft (raw, json) Hash identifier: +9xwYsD/R3cb4tlBT6w3ZUvWsAkqxSWSINNjO43aZiU= Subject key identifier: 65:0C:84:22:87:19:FC:B7:80:36:E0:21:59:83:C7:85:6A:68:EE:3D Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 Certificate issuer: /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Certificate serial: 1712283A6B491189AF5FDBF4DC514C7B4F27FBCB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft Manifest number: 0177 Signing time: Wed 25 Mar 2026 19:18:49 +0000 Manifest this update: Wed 25 Mar 2026 19:13:49 +0000 Manifest next update: Mon 30 Mar 2026 09:44:49 +0000 Files and hashes: 1: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (hash: g8hHWzP4kDSiOiSHBMQM7MYWGMPCqeG59pSNv4PvdWU=) 2: 20FD70DC301FF93D288ED851C3A69B22D7B04220.crl (hash: fnVpBjX9S2+VGigsI7h1CZjA+2jpJ5KrZcjx7DhF7Rs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 09:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:12:28:3a:6b:49:11:89:af:5f:db:f4:dc:51:4c:7b:4f:27:fb:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Validity Not Before: Mar 25 19:13:49 2026 GMT Not After : Mar 30 09:44:49 2026 GMT Subject: CN=650C84228719FCB78036E0215983C7856A68EE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:50:1d:6c:fb:08:da:e2:a3:11:75:e6:ce: 3c:39:71:8c:47:71:38:4a:be:80:1c:46:d2:7b:4a: f7:ee:99:cd:01:7d:79:4a:ea:72:38:bc:9d:58:8d: 2d:ce:58:69:3f:85:a8:36:7c:42:c6:4e:8c:62:f8: a7:d1:c3:68:84:da:55:6c:fa:cc:b2:7a:45:c6:9d: 7f:92:db:44:e6:de:f7:d5:ee:cf:3f:37:9e:ff:5c: 97:81:d6:a6:77:b5:f4:73:c2:f6:2b:99:0c:95:1a: bb:56:10:71:fb:31:c7:98:ea:b3:70:66:01:73:57: ca:29:5b:51:8d:d9:02:c1:54:75:63:34:16:82:3e: 41:58:ab:a5:f5:93:45:73:b1:8d:33:16:40:de:31: 5d:73:de:ad:8c:f3:45:f3:2b:15:27:43:7f:ae:5d: 41:6f:b2:51:7e:13:67:df:c3:13:c8:f6:4d:02:c8: a9:e8:d1:71:52:20:f1:04:cd:5f:9a:79:1f:22:1d: b6:af:20:25:9c:6d:1a:6b:ac:cc:d3:9f:93:e0:69: 80:56:45:a1:4f:2b:d4:07:f5:00:e1:6f:b3:af:e7: 79:f8:61:6a:29:cb:09:cb:9e:42:3a:8a:fe:e0:e1: 3d:c1:18:dc:98:c9:aa:aa:6a:93:12:03:08:d4:c6: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0C:84:22:87:19:FC:B7:80:36:E0:21:59:83:C7:85:6A:68:EE:3D X509v3 Authority Key Identifier: keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5a:b6:d8:62:7c:ea:70:c5:49:e4:49:f0:1c:71:d0:89:46: 4c:6d:a1:79:ac:c2:b5:5d:29:a1:38:72:02:16:47:67:23:c7: f8:fe:ba:c1:e7:96:1b:52:a6:9a:77:eb:52:61:e8:ff:9f:be: 09:b6:8f:bd:3d:be:1d:2b:17:48:46:52:29:fe:ad:73:f5:f7: e2:39:2a:de:81:1c:07:6b:ad:71:a0:a2:7d:94:04:fb:57:c0: 47:86:9b:d2:de:30:1d:bd:ff:21:98:8b:25:30:9c:06:1b:38: c2:17:82:e4:b1:83:eb:6b:ab:df:42:09:6b:fe:ae:29:80:ce: d7:d0:04:92:69:e8:cf:3e:2d:37:95:b7:7a:bc:ba:50:6e:34: a5:dd:e1:ab:6c:1f:e6:ad:76:d2:dc:69:51:d4:0b:17:37:d2: 9a:38:fe:ee:fe:c9:bb:ff:0c:14:17:3a:54:ee:f9:3d:e9:78: 7a:40:a9:b3:cd:72:ca:f0:50:2e:37:6f:f4:92:1d:b9:be:63: a7:ec:d6:2d:c8:0b:20:b7:82:f3:a5:2e:27:97:0c:73:ee:a2: 30:c0:21:f7:1a:72:83:06:11:d9:0e:a4:28:94:02:0a:9d:7b: 77:1f:b4:3e:c8:37:a0:94:14:a6:b5:1d:38:5f:8f:29:6a:4d: 8c:41:b2:bb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFxIoOmtJEYmvX9v03FFMe08n+8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDcwREMzMDFGRjkzRDI4OEVEODUxQzNBNjlCMjJE N0IwNDIyMDAeFw0yNjAzMjUxOTEzNDlaFw0yNjAzMzAwOTQ0NDlaMDMxMTAvBgNV BAMTKDY1MEM4NDIyODcxOUZDQjc4MDM2RTAyMTU5ODNDNzg1NkE2OEVFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq81AdbPsI2uKjEXXmzjw5cYxH cThKvoAcRtJ7Svfumc0BfXlK6nI4vJ1YjS3OWGk/hag2fELGToxi+KfRw2iE2lVs +syyekXGnX+S20Tm3vfV7s8/N57/XJeB1qZ3tfRzwvYrmQyVGrtWEHH7MceY6rNw ZgFzV8opW1GN2QLBVHVjNBaCPkFYq6X1k0VzsY0zFkDeMV1z3q2M80XzKxUnQ3+u XUFvslF+E2ffwxPI9k0CyKno0XFSIPEEzV+aeR8iHbavICWcbRprrMzTn5PgaYBW RaFPK9QH9QDhb7Ov53n4YWopywnLnkI6iv7g4T3BGNyYyaqqapMSAwjUxgM5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZQyEIocZ/LeANuAhWYPHhWpo7j0wHwYDVR0j BBgwFoAUIP1w3DAf+T0ojthRw6abItewQiAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTIwRjM3RTFCRDYyQTUxQTk5REVENkI0QTEzOEIwNzBD RTFCOUQzQjNCQUU2M0Y1NTVCMDU3OTAwNUYyMzAwLzAvMjBGRDcwREMzMDFGRjkz RDI4OEVEODUxQzNBNjlCMjJEN0IwNDIyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEZENzBEQzMwMUZGOTNEMjg4 RUQ4NTFDM0E2OUIyMkQ3QjA0MjIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkEyMEYzN0UxQkQ2MkE1MUE5OURFRDZCNEExMzhCMDcwQ0UxQjlEM0Iz QkFFNjNGNTU1QjA1NzkwMDVGMjMwMC8wLzIwRkQ3MERDMzAxRkY5M0QyODhFRDg1 MUMzQTY5QjIyRDdCMDQyMjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9WrbYYnzqcMVJ5EnwHHHQiUZM baF5rMK1XSmhOHICFkdnI8f4/rrB55YbUqaad+tSYej/n74Jto+9Pb4dKxdIRlIp /q1z9ffiOSregRwHa61xoKJ9lAT7V8BHhpvS3jAdvf8hmIslMJwGGzjCF4LksYPr a6vfQglr/q4pgM7X0ASSaejPPi03lbd6vLpQbjSl3eGrbB/mrXbS3GlR1AsXN9Ka OP7u/sm7/wwUFzpU7vk96Xh6QKmzzXLK8FAuN2/0kh25vmOn7NYtyAsgt4LzpS4n lwxz7qIwwCH3GnKDBhHZDqQolAIKnXt3H7Q+yDeglBSmtR04X48pak2MQbK7 -----END CERTIFICATE-----Generated at Thu Mar 26 19:55:52 2026 by rpki-client