
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
File: 20FD70DC301FF93D288ED851C3A69B22D7B04220.mft (raw, json)
Hash identifier: T6/xODU7hsvbHCra4M/kM3KIOmSvqBZT1oPiVxd7y6c=
Subject key identifier: EA:19:1C:1B:1B:59:84:50:34:34:90:42:0E:EC:D8:33:20:6D:E7:CA
Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20
Certificate issuer: /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220
Certificate serial: 57E684E0B384F6C0B2ACFF50874FDFEE63F578C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
Manifest number: 01DF
Signing time: Thu 15 Oct 2026 06:09:36 +0000
Manifest this update: Thu 15 Oct 2026 06:04:36 +0000
Manifest next update: Mon 19 Oct 2026 11:19:36 +0000
Files and hashes: 1: 20FD70DC301FF93D288ED851C3A69B22D7B04220.crl (hash: QWzfv8SbDnjNOzaKedlOd44mf6zO5G0mBgVbipF7hCk=)
2: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (hash: g8hHWzP4kDSiOiSHBMQM7MYWGMPCqeG59pSNv4PvdWU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl
rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 19 Oct 2026 11:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e6:84:e0:b3:84:f6:c0:b2:ac:ff:50:87:4f:df:ee:63:f5:78:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220
Validity
Not Before: Oct 15 06:04:36 2026 GMT
Not After : Oct 19 11:19:36 2026 GMT
Subject: CN=EA191C1B1B598450343490420EECD833206DE7CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:26:19:14:b9:77:cd:d7:73:f9:dc:01:be:
1e:a7:bb:d9:d1:d0:c8:08:7d:7e:33:09:96:33:80:
4c:c0:5f:27:bd:f6:3b:31:53:80:c4:78:e7:66:da:
d1:01:19:19:43:61:a8:d0:ab:79:b4:ea:8e:91:60:
35:af:9b:64:f3:18:60:cd:31:2f:ef:f7:2b:07:c7:
72:8b:ee:78:59:85:ba:fa:43:f6:cc:2f:a9:00:b0:
fd:8b:a2:92:9a:a3:59:c1:ac:a4:9b:99:1b:51:00:
29:a6:a8:aa:c1:7f:59:5b:73:e5:c6:0e:c5:35:7e:
30:71:bc:8b:e6:bc:aa:0c:c0:a7:40:4d:1b:73:56:
a3:9e:3c:6f:3e:eb:9c:c0:05:db:f2:aa:09:ab:c7:
6c:68:2e:de:6e:e3:6e:e8:d8:f1:22:8e:dd:0a:49:
d8:15:d3:80:f5:a1:c2:2e:55:c1:3d:b9:8c:57:3c:
c2:91:82:fc:66:32:c3:c1:6a:c3:21:18:23:98:16:
c8:98:00:0e:0e:8a:e0:c4:ce:f7:2e:55:91:f1:c0:
08:b9:b8:71:8d:eb:ea:d5:90:27:c2:03:51:e5:da:
91:ce:a7:61:37:64:bb:c6:65:ff:9f:a3:14:74:fb:
bf:4e:5d:7a:3e:4a:30:fb:8f:5d:5b:1a:16:e0:71:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:19:1C:1B:1B:59:84:50:34:34:90:42:0E:EC:D8:33:20:6D:E7:CA
X509v3 Authority Key Identifier:
keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a5:47:58:c7:28:fd:2c:9b:cb:96:0d:1f:84:45:07:87:28:
2f:a5:11:b1:7f:37:b1:26:9b:58:fb:03:2d:a5:c6:a1:c1:f4:
5f:c1:e3:62:a2:cd:9d:74:50:64:5e:e7:68:26:5f:30:8d:9b:
68:e8:e2:53:5e:07:4d:43:0c:d4:d5:b6:65:24:1e:cd:b9:fd:
d5:d5:3e:6e:b1:4d:5e:07:f8:57:9d:a4:ac:87:49:ae:a1:47:
f5:20:d8:f4:d0:c3:fb:57:b9:1b:59:bd:0b:5e:78:9a:0c:bf:
84:c1:ea:64:bd:01:98:4c:79:ba:f1:6b:49:b3:fa:cd:bc:7c:
90:06:c3:f7:ed:cf:8d:d7:a4:84:93:92:7b:a7:b5:73:e3:dc:
64:33:99:a4:32:52:cd:b8:04:24:6b:9d:7b:98:f5:a9:c7:3c:
09:af:8a:1d:48:c5:38:19:85:f8:1d:83:36:3f:b6:c3:d0:97:
a7:08:2a:e5:8c:b7:c5:b5:ca:be:a4:00:e8:30:d0:a7:68:00:
62:e5:21:00:e6:20:d4:1a:09:e4:83:f3:0c:13:04:bd:60:80:
ad:d4:d5:55:8f:58:2d:58:b5:b7:e5:be:7d:91:56:cd:3a:93:
e4:9c:fa:c5:19:f6:be:ca:28:38:95:77:20:10:ac:9c:80:1a:
f4:ab:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:02:22 2026 by rpki-client