$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft File: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft (raw, json) Hash identifier: X0StgoSzdPuYSIgXr9HzjBJWMqspwvN7TE8nHWanm/0= Subject key identifier: 61:BB:EC:9A:E3:FC:B0:EF:B2:3B:90:19:DA:98:C6:A6:E6:FA:2D:4B Authority key identifier: 20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5 Certificate issuer: /CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5 Certificate serial: 2E6C8DE3543ED60B6416DB5389840CA45BC84367 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft Manifest number: 012C Signing time: Wed 05 Nov 2025 02:27:07 +0000 Manifest this update: Wed 05 Nov 2025 02:22:07 +0000 Manifest next update: Mon 10 Nov 2025 17:50:07 +0000 Files and hashes: 1: 323830333a653532303a3a2f33322d3438203d3e20323636363837.roa (hash: RFp/7paxrjEnmz7NX5siL1qxhM8AW6ttH3PE4IdU9z0=) 2: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl (hash: 9H2x6QpY/TgNDhj+PsLxjpX+vwBIbKOEYE9KsDaofg4=) 3: 34352e3232392e34342e302f32322d3234203d3e20323636363837.roa (hash: NXCrnc5k/R7cRXtnojYKX0tyR9Gzw9zx/b4X8zIv+Lk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6c:8d:e3:54:3e:d6:0b:64:16:db:53:89:84:0c:a4:5b:c8:43:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5 Validity Not Before: Nov 5 02:22:07 2025 GMT Not After : Nov 10 17:50:07 2025 GMT Subject: CN=61BBEC9AE3FCB0EFB23B9019DA98C6A6E6FA2D4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:b4:2a:3b:e1:6f:2d:47:c0:60:6c:41:82: 78:1d:54:48:23:60:28:b0:ec:51:e9:76:fc:67:79: 0b:60:9f:00:ec:7c:16:49:f8:41:e0:25:40:b8:d6: be:78:9d:3e:fe:a6:d0:5a:c4:e6:e6:4c:96:94:d5: 5c:45:7b:e5:7b:3b:9e:59:99:14:a8:79:ce:25:66: ed:6a:16:89:22:8a:a1:58:63:9b:d5:f5:65:c5:02: e3:98:c5:2a:44:f5:f7:32:67:ab:f2:fd:d4:e7:18: 9b:8d:8e:e5:d9:34:10:24:9b:81:e7:50:cd:bc:a5: 04:0f:a1:53:1b:2b:d7:69:0e:71:fd:c9:dd:3a:79: 02:0b:27:af:14:d9:3c:d2:33:3f:28:5e:f3:be:8d: 56:04:96:e6:bc:8d:88:53:ec:f2:11:96:36:4a:3d: f1:f8:0c:84:25:6c:b1:20:65:37:97:b2:7b:c7:71: 16:5d:c1:f2:9e:6a:81:07:37:5f:c8:26:45:52:ec: b1:67:c9:05:db:eb:65:be:14:b7:8c:80:80:08:c8: 9b:75:62:46:e2:a5:0c:c0:ce:af:4d:68:dd:2d:21: 10:8e:e6:52:40:c3:d7:17:59:67:bd:de:f7:3d:74: bd:3d:60:db:ba:7b:80:ec:2c:b1:9d:89:14:a1:d9: 1e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BB:EC:9A:E3:FC:B0:EF:B2:3B:90:19:DA:98:C6:A6:E6:FA:2D:4B X509v3 Authority Key Identifier: keyid:20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7a:f5:80:a5:49:ea:b2:36:d9:a7:54:ae:ec:25:cb:e0:b2: c2:8b:f4:3f:bf:e0:04:d8:51:49:2d:26:90:c5:bc:47:f0:3f: 5a:97:c2:d1:14:bf:38:3f:ce:13:25:e9:26:ed:2f:b4:58:ba: 48:73:b9:2c:57:d5:ce:c1:b4:ff:f1:a9:bc:55:6c:11:5d:83: 80:e2:13:47:a0:3a:62:29:93:24:1a:db:92:64:9e:e6:49:db: 22:13:da:62:04:ea:fa:fa:69:a6:c2:e9:57:80:44:0a:3c:93: 50:a0:6d:e5:7f:d6:11:af:03:28:3e:89:14:74:81:38:5f:a5: e5:cc:74:f5:47:fb:6a:be:f6:e5:82:3d:fa:86:25:be:66:38: ce:1d:1e:64:ea:07:f7:9b:7e:b0:9d:2f:04:0f:a0:88:3d:24: 1c:6f:51:70:62:9e:fa:fe:11:59:3e:6f:4c:86:20:6c:4e:42: e6:b4:4d:2c:d8:e4:01:a4:8f:b3:b3:85:c5:96:8a:40:95:25: 9c:a1:e9:6f:6e:9d:96:6e:02:cc:d3:22:f6:59:fc:fa:47:58: 81:9e:dd:8b:d5:7c:c7:5f:73:bd:79:4c:ae:c0:ce:1c:70:d5: 04:2f:8f:e1:9c:67:03:aa:b8:d5:02:37:f1:b2:03:4b:73:42: 4d:56:bb:c9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULmyN41Q+1gtkFttTiYQMpFvIQ2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFNUZFNDU4OUMxQ0U0NzJEMzlDOUZGMTBFRTFBNkU0 RDVDQkZDNTAeFw0yNTExMDUwMjIyMDdaFw0yNTExMTAxNzUwMDdaMDMxMTAvBgNV BAMTKDYxQkJFQzlBRTNGQ0IwRUZCMjNCOTAxOURBOThDNkE2RTZGQTJENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHbQqO+FvLUfAYGxBgngdVEgj YCiw7FHpdvxneQtgnwDsfBZJ+EHgJUC41r54nT7+ptBaxObmTJaU1VxFe+V7O55Z mRSoec4lZu1qFokiiqFYY5vV9WXFAuOYxSpE9fcyZ6vy/dTnGJuNjuXZNBAkm4Hn UM28pQQPoVMbK9dpDnH9yd06eQILJ68U2TzSMz8oXvO+jVYElua8jYhT7PIRljZK PfH4DIQlbLEgZTeXsnvHcRZdwfKeaoEHN1/IJkVS7LFnyQXb62W+FLeMgIAIyJt1 YkbipQzAzq9NaN0tIRCO5lJAw9cXWWe93vc9dL09YNu6e4DsLLGdiRSh2R67AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYbvsmuP8sO+yO5AZ2pjGpub6LUswHwYDVR0j BBgwFoAUIOX+RYnBzkctOcn/EO4abk1cv8UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82N0EwRUQzNjJFNjhGRjQyRTE4OEExMDU4Q0JERjc0N0E3 REQ5M0EzNThFQTE3M0I3QTVFQkEzMjdCMzY1QTUyLzAvMjBFNUZFNDU4OUMxQ0U0 NzJEMzlDOUZGMTBFRTFBNkU0RDVDQkZDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEU1RkU0NTg5QzFDRTQ3MkQz OUM5RkYxMEVFMUE2RTRENUNCRkM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjdBMEVEMzYyRTY4RkY0MkUxODhBMTA1OENCREY3NDdBN0REOTNBMzU4 RUExNzNCN0E1RUJBMzI3QjM2NUE1Mi8wLzIwRTVGRTQ1ODlDMUNFNDcyRDM5QzlG RjEwRUUxQTZFNEQ1Q0JGQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCievWApUnqsjbZp1Su7CXL4LLC i/Q/v+AE2FFJLSaQxbxH8D9al8LRFL84P84TJekm7S+0WLpIc7ksV9XOwbT/8am8 VWwRXYOA4hNHoDpiKZMkGtuSZJ7mSdsiE9piBOr6+mmmwulXgEQKPJNQoG3lf9YR rwMoPokUdIE4X6XlzHT1R/tqvvblgj36hiW+ZjjOHR5k6gf3m36wnS8ED6CIPSQc b1FwYp76/hFZPm9MhiBsTkLmtE0s2OQBpI+zs4XFlopAlSWcoelvbp2WbgLM0yL2 Wfz6R1iBnt2L1XzHX3O9eUyuwM4ccNUEL4/hnGcDqrjVAjfxsgNLc0JNVrvJ -----END CERTIFICATE-----Generated at Wed Nov 5 17:21:34 2025 by rpki-client