$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft File: C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft (raw, json) Hash identifier: WH6jz3jDmxO+XuXnsJUYwhBW3GDQkC0Uxe184ZySibU= Subject key identifier: DF:6E:EA:23:06:D0:74:3C:07:FA:2D:1F:70:F5:40:4C:19:06:7E:25 Authority key identifier: C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1 Certificate issuer: /CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1 Certificate serial: 4F68BF9DE74C3F80A575FE9E0D37F517C68FFF70 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft Manifest number: 0133 Signing time: Tue 04 Nov 2025 17:02:12 +0000 Manifest this update: Tue 04 Nov 2025 16:57:12 +0000 Manifest next update: Sun 09 Nov 2025 01:31:12 +0000 Files and hashes: 1: C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl (hash: L9ZmnIzgqjj+BWVj99x0wRsNTmhCVtOvbBQgrtzDSXg=) 2: 3139302e3130382e36342e302f32312d3234203d3e203237373430.roa (hash: +6Lrcn9wtCAKhPmaJpwAkFs3/f2FaKDHkeUsatILNHQ=) 3: 323830303a6233303a3a2f33312d3334203d3e203237373430.roa (hash: VWLDTQjqwqVtOiNDU+XUFJBqTy+RY03ZbYqxdMrvh0A=) 4: 3139302e31312e3234302e302f32302d3234203d3e203237373430.roa (hash: TXQ6kOxW37TAzLDJKo7bgWMqNu+TeYMqAgzeYDBmxSg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:68:bf:9d:e7:4c:3f:80:a5:75:fe:9e:0d:37:f5:17:c6:8f:ff:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1 Validity Not Before: Nov 4 16:57:12 2025 GMT Not After : Nov 9 01:31:12 2025 GMT Subject: CN=DF6EEA2306D0743C07FA2D1F70F5404C19067E25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:59:70:98:d4:cf:af:5a:38:b3:c9:9b:89: f9:c7:6c:49:e6:fe:a5:94:93:73:53:e5:80:e7:1b: 15:0f:9c:57:43:25:f1:92:65:35:d0:1c:bd:93:d2: a3:55:ae:6e:da:71:2e:56:03:17:27:bd:d2:61:5d: eb:f6:15:59:e7:fe:4d:ff:97:e1:fc:ec:5b:f7:6b: 92:13:b9:91:b8:00:ea:b6:7c:6c:f5:90:04:50:17: 5f:cb:c2:ef:87:49:41:2f:25:33:45:de:af:0e:8e: 0f:2c:f5:a3:02:19:cc:e3:c5:6b:90:ee:7f:5f:8e: 24:83:47:c3:1c:38:35:d9:81:d0:d6:6c:a4:90:f1: a6:6e:6a:20:f5:25:e9:38:74:ad:c8:c9:b3:12:d2: 06:e1:0c:92:28:38:15:e5:dd:e2:78:aa:7f:d2:be: 3c:33:a6:d4:95:1f:d9:41:c9:74:05:3f:25:ba:cd: ed:51:b5:ba:de:fa:b5:77:ae:d1:48:bf:ac:d5:88: eb:3d:a0:b7:e8:41:40:5d:6b:6f:64:f3:a8:29:6d: 2c:4a:2e:05:31:fe:41:e9:ea:e8:c8:f8:7d:cd:2d: 63:2f:bc:5d:05:1f:1f:eb:8e:85:9a:f4:ad:ed:61: d6:e4:9a:3e:2b:13:7d:6a:e6:59:0f:fd:40:26:63: 7e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6E:EA:23:06:D0:74:3C:07:FA:2D:1F:70:F5:40:4C:19:06:7E:25 X509v3 Authority Key Identifier: keyid:C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:61:4d:1e:4e:4f:b7:17:0d:ed:b4:95:fd:0e:9f:9c:13:60: 39:c7:2a:b0:7d:00:be:57:f7:64:67:bb:0a:e5:b8:a6:78:0b: 25:47:39:11:b6:25:37:f5:d6:ca:8e:79:7c:67:fe:df:54:8d: 10:ec:1c:6f:dd:47:45:d0:8c:9f:09:3e:1c:ed:14:19:13:d1: d7:7d:96:02:5f:ec:78:7b:3a:2e:88:74:ce:a1:d1:3b:8f:43: 77:a8:24:98:70:8f:74:f6:85:c7:68:f4:24:42:a1:df:79:f5: 58:77:35:65:9a:5c:9a:f5:8a:da:12:ae:7c:d5:91:82:99:ef: 7e:4e:85:60:f3:b1:c6:be:dc:fe:30:4c:85:c3:4a:4d:e2:b6: 05:3b:9c:b2:b1:15:8c:41:34:6f:74:e2:a7:6d:57:12:40:57: dd:b5:31:de:c3:83:98:f7:40:e9:aa:e0:e3:1d:eb:18:23:59: 4e:09:fa:46:d5:f9:06:1f:d3:80:05:34:c4:e4:09:68:41:e9: ee:2a:01:68:09:ef:8e:8a:b7:31:31:59:4b:eb:71:fd:44:b1: ba:5a:16:76:23:da:e6:c4:92:d5:71:12:1b:7f:0e:fa:79:c8: f0:1c:c7:d5:2f:39:7b:07:e7:00:11:85:90:99:14:3d:70:0a: 78:6a:e4:0d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUT2i/nedMP4Cldf6eDTf1F8aP/3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwQjFDRTQ2RDI0RjlCNEI0MUFBNkNEREQ5RUI5NkU4 QjIzQzJCMTAeFw0yNTExMDQxNjU3MTJaFw0yNTExMDkwMTMxMTJaMDMxMTAvBgNV BAMTKERGNkVFQTIzMDZEMDc0M0MwN0ZBMkQxRjcwRjU0MDRDMTkwNjdFMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuX1lwmNTPr1o4s8mbifnHbEnm /qWUk3NT5YDnGxUPnFdDJfGSZTXQHL2T0qNVrm7acS5WAxcnvdJhXev2FVnn/k3/ l+H87Fv3a5ITuZG4AOq2fGz1kARQF1/Lwu+HSUEvJTNF3q8Ojg8s9aMCGczjxWuQ 7n9fjiSDR8McODXZgdDWbKSQ8aZuaiD1Jek4dK3IybMS0gbhDJIoOBXl3eJ4qn/S vjwzptSVH9lByXQFPyW6ze1Rtbre+rV3rtFIv6zViOs9oLfoQUBda29k86gpbSxK LgUx/kHp6ujI+H3NLWMvvF0FHx/rjoWa9K3tYdbkmj4rE31q5lkP/UAmY35rAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU327qIwbQdDwH+i0fcPVATBkGfiUwHwYDVR0j BBgwFoAUwgsc5G0k+bS0GqbN3Z65bosjwrEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RkMwQjU4OUY4NTBFNjg0Mzc4QkE2MDE0RDAwQ0UxRjFE NzM5NjQ3NTNFQ0MwMkFDQzNGQjg5OUNFMzY0NUEzLzAvQzIwQjFDRTQ2RDI0RjlC NEI0MUFBNkNEREQ5RUI5NkU4QjIzQzJCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjBCMUNFNDZEMjRGOUI0QjQx QUE2Q0RERDlFQjk2RThCMjNDMkIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEZDMEI1ODlGODUwRTY4NDM3OEJBNjAxNEQwMENFMUYxRDczOTY0NzUz RUNDMDJBQ0MzRkI4OTlDRTM2NDVBMy8wL0MyMEIxQ0U0NkQyNEY5QjRCNDFBQTZD REREOUVCOTZFOEIyM0MyQjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEYU0eTk+3Fw3ttJX9Dp+cE2A5 xyqwfQC+V/dkZ7sK5bimeAslRzkRtiU39dbKjnl8Z/7fVI0Q7Bxv3UdF0IyfCT4c 7RQZE9HXfZYCX+x4ezouiHTOodE7j0N3qCSYcI909oXHaPQkQqHfefVYdzVlmlya 9YraEq581ZGCme9+ToVg87HGvtz+MEyFw0pN4rYFO5yysRWMQTRvdOKnbVcSQFfd tTHew4OY90DpquDjHesYI1lOCfpG1fkGH9OABTTE5AloQenuKgFoCe+OircxMVlL 63H9RLG6WhZ2I9rmxJLVcRIbfw76ecjwHMfVLzl7B+cAEYWQmRQ9cAp4auQN -----END CERTIFICATE-----Generated at Wed Nov 5 20:16:23 2025 by rpki-client