$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft File: 57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft (raw, json) Hash identifier: oiB8AHuLtt7IOwrOZoUvw60KPoIUS6vZBiaWHeITpjw= Subject key identifier: 5F:68:58:4C:9B:7A:C9:FD:00:20:A5:A1:58:C0:29:B7:CD:2B:27:EF Authority key identifier: 57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41 Certificate issuer: /CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41 Certificate serial: 1F2A473A3AECD32625B298577CD196B2C0AA7B22 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft Manifest number: 012A Signing time: Mon 20 Oct 2025 11:13:58 +0000 Manifest this update: Mon 20 Oct 2025 11:08:58 +0000 Manifest next update: Sun 26 Oct 2025 00:48:58 +0000 Files and hashes: 1: 323830363a3332633a3a2f33322d3332203d3e20323635353334.roa (hash: IUgTQ1jt+m23YE3hZFpP8mesUFWH4CullPoLv94DQI4=) 2: 34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa (hash: y82JpCiQWiwHdhkL+cYveCa/G6ofUko8YcVgxzajMP4=) 3: 57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl (hash: lILCLea2aisTVjcu/DxjCUbT0u0gY0pooJlIEsQHQ0o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2a:47:3a:3a:ec:d3:26:25:b2:98:57:7c:d1:96:b2:c0:aa:7b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41 Validity Not Before: Oct 20 11:08:58 2025 GMT Not After : Oct 26 00:48:58 2025 GMT Subject: CN=5F68584C9B7AC9FD0020A5A158C029B7CD2B27EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:10:51:01:ce:c3:c8:b8:19:d3:35:5e:11:7e: 06:5f:c6:78:2f:34:d5:2f:ed:3e:f7:1a:33:55:dd: 7f:4b:cc:ba:79:78:66:49:f4:30:8b:36:c8:c5:01: 1f:f3:05:fa:c5:8b:d5:96:de:3e:44:dc:8e:67:5d: 49:ee:11:9a:04:49:14:aa:c6:9d:27:3d:65:f2:00: 40:69:44:2c:b5:40:e9:00:a4:90:40:78:30:54:a1: 3a:18:ef:dd:d3:ae:f3:c4:71:39:9f:d4:df:51:29: 84:16:96:13:a1:e9:1f:9c:ef:b8:b8:d3:5f:30:3c: 26:a4:6b:4e:e7:48:d1:75:7e:cd:66:ac:67:98:55: 72:4f:27:02:59:7e:c6:1f:59:5c:ee:31:30:37:eb: fb:83:33:5a:34:45:51:b5:59:fb:35:4f:e9:92:52: 2e:5e:f4:dd:bc:c6:83:83:f7:25:24:f7:f3:14:5d: ec:b9:a5:4a:c6:06:73:ec:3b:73:68:a5:9c:1b:1f: 06:da:e1:b5:8e:d5:fe:52:90:12:9e:46:a0:0e:c6: 3b:b3:e2:a3:10:fc:ea:c5:49:bf:87:08:99:ad:e6: 62:f5:40:76:4e:50:80:e7:20:f4:82:cc:25:14:8d: 58:55:9d:3c:cc:6f:05:40:06:a8:9b:f3:43:d8:a5: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:68:58:4C:9B:7A:C9:FD:00:20:A5:A1:58:C0:29:B7:CD:2B:27:EF X509v3 Authority Key Identifier: keyid:57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4c:2e:a4:b7:7e:43:fa:aa:ef:c6:96:1b:7b:84:44:8d:2e: ef:50:07:31:e7:a9:2f:a6:db:79:0a:83:15:eb:aa:cb:49:42: 75:ab:3f:c9:fa:39:ce:94:79:26:2e:74:e4:26:45:50:c1:30: fe:5b:3b:0d:6b:70:9f:78:e5:48:1d:42:1e:4f:b3:e2:2b:bb: 21:f6:7b:ad:9d:8f:f7:46:0a:c1:e3:5e:9c:8e:3c:b2:ea:e1: 34:00:5e:67:fe:aa:a9:83:c4:9f:19:2c:ce:fc:a2:3d:38:ea: 40:18:d8:70:e7:e3:71:83:3a:bd:74:ae:4e:7f:0c:7b:8b:ab: 1c:58:79:2e:58:e9:79:38:35:4e:bc:bc:cc:a8:ec:bb:39:d4: a1:bb:51:8e:48:25:0a:af:a2:9d:f5:5c:57:f7:4d:15:4e:ca: ca:8b:92:9e:8f:32:a5:94:56:ac:2c:4f:b7:a6:9d:c1:db:1a: 99:fa:b9:68:a9:16:04:ae:d8:e8:f7:be:88:91:ca:ce:47:14: a6:06:aa:3c:39:87:07:69:7f:b3:7f:c0:6c:d4:52:e7:a1:90: 1a:b5:16:a1:c0:c5:d5:88:9a:95:10:2c:cb:b2:dc:39:b0:cf: 36:80:25:02:5d:5b:9a:7b:1b:fe:b1:14:b8:8e:2e:69:06:4d: 56:d6:b6:8a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHypHOjrs0yYlsphXfNGWssCqeyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCMjBEM0VDMjE5NjFBNjUwNURDQTBBRDBCMzNEQzMz QzVDQ0Q0MTAeFw0yNTEwMjAxMTA4NThaFw0yNTEwMjYwMDQ4NThaMDMxMTAvBgNV BAMTKDVGNjg1ODRDOUI3QUM5RkQwMDIwQTVBMTU4QzAyOUI3Q0QyQjI3RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvEFEBzsPIuBnTNV4RfgZfxngv NNUv7T73GjNV3X9LzLp5eGZJ9DCLNsjFAR/zBfrFi9WW3j5E3I5nXUnuEZoESRSq xp0nPWXyAEBpRCy1QOkApJBAeDBUoToY793TrvPEcTmf1N9RKYQWlhOh6R+c77i4 018wPCaka07nSNF1fs1mrGeYVXJPJwJZfsYfWVzuMTA36/uDM1o0RVG1Wfs1T+mS Ui5e9N28xoOD9yUk9/MUXey5pUrGBnPsO3NopZwbHwba4bWO1f5SkBKeRqAOxjuz 4qMQ/OrFSb+HCJmt5mL1QHZOUIDnIPSCzCUUjVhVnTzMbwVABqib80PYpcx1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUX2hYTJt6yf0AIKWhWMApt80rJ+8wHwYDVR0j BBgwFoAUV7INPsIZYaZQXcoK0LM9wzxczUEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMzgyNUE3QUVCQkQ3OEUxMzQ4QzNDMDdCQkJBM0QxREJF MDQwQjE1NDlCMkI3MTEzOUU2QjgxMDhCOUYyMzgyLzAvNTdCMjBEM0VDMjE5NjFB NjUwNURDQTBBRDBCMzNEQzMzQzVDQ0Q0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81N0IyMEQzRUMyMTk2MUE2NTA1 RENBMEFEMEIzM0RDMzNDNUNDRDQxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDM4MjVBN0FFQkJENzhFMTM0OEMzQzA3QkJCQTNEMURCRTA0MEIxNTQ5 QjJCNzExMzlFNkI4MTA4QjlGMjM4Mi8wLzU3QjIwRDNFQzIxOTYxQTY1MDVEQ0Ew QUQwQjMzREMzM0M1Q0NENDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+TC6kt35D+qrvxpYbe4REjS7v UAcx56kvptt5CoMV66rLSUJ1qz/J+jnOlHkmLnTkJkVQwTD+WzsNa3CfeOVIHUIe T7PiK7sh9nutnY/3RgrB416cjjyy6uE0AF5n/qqpg8SfGSzO/KI9OOpAGNhw5+Nx gzq9dK5Ofwx7i6scWHkuWOl5ODVOvLzMqOy7OdShu1GOSCUKr6Kd9VxX900VTsrK i5KejzKllFasLE+3pp3B2xqZ+rloqRYErtjo976IkcrORxSmBqo8OYcHaX+zf8Bs 1FLnoZAatRahwMXViJqVECzLstw5sM82gCUCXVuaexv+sRS4ji5pBk1W1raK -----END CERTIFICATE-----Generated at Mon Oct 20 21:42:23 2025 by rpki-client