$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft File: 20FD70DC301FF93D288ED851C3A69B22D7B04220.mft (raw, json) Hash identifier: SNJ9G3BXYGvBIEfWntTsUDevE5f1FY2uldob1kRpG7c= Subject key identifier: 82:99:E4:4B:8A:E0:04:09:01:FE:D8:70:66:10:76:8A:F4:5E:88:4A Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 Certificate issuer: /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Certificate serial: 0F26A84527FB79DCF217DED29B2CA0D3C0053FE7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft Manifest number: 0130 Signing time: Wed 05 Nov 2025 02:32:13 +0000 Manifest this update: Wed 05 Nov 2025 02:27:13 +0000 Manifest next update: Mon 10 Nov 2025 20:47:13 +0000 Files and hashes: 1: 20FD70DC301FF93D288ED851C3A69B22D7B04220.crl (hash: DlnAkJKaiR/3iZ/njCFZkWMVaVYbfox5FBy8FU4PNfQ=) 2: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (hash: hiq3f5SQVXyvVqAHJFD41H8GmsplFaT7zWIIcFR5Zms=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:26:a8:45:27:fb:79:dc:f2:17:de:d2:9b:2c:a0:d3:c0:05:3f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Validity Not Before: Nov 5 02:27:13 2025 GMT Not After : Nov 10 20:47:13 2025 GMT Subject: CN=8299E44B8AE0040901FED8706610768AF45E884A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:a2:26:00:b7:7f:17:f1:12:19:21:5d:f0: 44:ab:b4:25:c3:7a:ad:ce:ef:ad:67:76:86:32:5a: d8:01:6d:32:a0:1e:f7:3f:c5:87:9e:86:06:5a:e6: 38:7a:7f:70:c8:f2:70:d6:4c:03:28:df:5b:79:8b: 9d:f3:13:5a:37:53:3a:3b:37:ac:52:27:a6:9f:f4: 7a:ed:e8:d7:34:f7:7a:8c:8f:90:38:36:91:8c:c6: a6:28:c6:d0:b0:46:22:15:5f:6d:46:65:3b:ef:15: 0d:1e:26:a2:9f:43:64:cf:1f:b7:a4:68:6e:f4:b6: 59:c2:86:cf:a1:52:6d:1a:a1:17:9b:db:7c:a6:05: 9b:fd:34:6f:d3:48:ae:e8:7c:8b:64:4a:be:a1:9e: 13:48:08:63:48:52:7f:2d:92:8a:0c:7b:92:d3:ca: 1c:33:f0:eb:5d:fa:0e:fa:d1:12:56:ce:06:06:e7: ce:f5:c8:9c:99:1b:4f:3d:13:53:25:16:6b:d5:44: d7:75:1f:22:9d:f3:67:81:fe:3d:48:91:84:72:e1: fa:c3:23:8d:fb:e9:8b:b6:af:dd:85:f3:86:27:e4: 11:10:57:56:2c:b1:08:4e:0d:0c:d9:2f:ba:63:f0: 96:39:2e:39:78:5b:96:6a:2c:f2:8e:50:e3:63:ae: 70:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:99:E4:4B:8A:E0:04:09:01:FE:D8:70:66:10:76:8A:F4:5E:88:4A X509v3 Authority Key Identifier: keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b5:3b:eb:4b:f3:cd:57:d0:ac:93:0b:8a:bc:66:a1:f3:2a: 28:7a:f3:81:67:80:1f:72:e5:62:cd:a2:84:72:13:ea:6f:6d: ff:e3:ad:e6:66:8f:71:fd:49:97:05:fa:00:74:70:d9:9c:16: 75:f3:41:42:3a:c5:66:60:93:46:5e:34:94:c5:36:f8:31:0f: ff:b3:b5:6e:ef:21:e3:ed:0f:0b:d8:48:ff:c6:b3:a5:09:73: f9:c5:91:91:3b:6b:12:09:db:81:63:6e:f5:ce:45:2d:22:a6: df:ad:48:2b:35:4f:f8:6f:bd:5f:48:e9:e6:e5:bf:9e:87:c5: a2:1c:67:19:ba:c4:a9:3b:86:24:31:af:f9:64:0b:16:b0:22: 4f:46:0c:0c:0f:36:6f:31:75:dc:40:9a:c9:fd:7a:7b:d9:06: e4:a3:3c:84:15:c0:6d:ab:ba:fc:36:46:fe:46:e8:d2:ef:53: 0a:01:d4:da:0a:95:90:fc:cd:f6:f6:13:60:96:45:4a:c9:ac: 09:5c:5d:80:66:83:c7:9b:e0:f9:fc:68:7d:68:6b:89:33:dc: cf:f1:da:75:45:4c:e9:eb:ef:58:96:68:88:76:2c:26:2b:ac: b8:86:bb:c4:26:3e:45:df:91:29:5e:fa:4f:a3:57:fc:e7:92: 75:d6:80:ec -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDyaoRSf7edzyF97Smyyg08AFP+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDcwREMzMDFGRjkzRDI4OEVEODUxQzNBNjlCMjJE N0IwNDIyMDAeFw0yNTExMDUwMjI3MTNaFw0yNTExMTAyMDQ3MTNaMDMxMTAvBgNV BAMTKDgyOTlFNDRCOEFFMDA0MDkwMUZFRDg3MDY2MTA3NjhBRjQ1RTg4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGqImALd/F/ESGSFd8ESrtCXD eq3O761ndoYyWtgBbTKgHvc/xYeehgZa5jh6f3DI8nDWTAMo31t5i53zE1o3Uzo7 N6xSJ6af9Hrt6Nc093qMj5A4NpGMxqYoxtCwRiIVX21GZTvvFQ0eJqKfQ2TPH7ek aG70tlnChs+hUm0aoReb23ymBZv9NG/TSK7ofItkSr6hnhNICGNIUn8tkooMe5LT yhwz8Otd+g760RJWzgYG5871yJyZG089E1MlFmvVRNd1HyKd82eB/j1IkYRy4frD I4376Yu2r92F84Yn5BEQV1YssQhODQzZL7pj8JY5Ljl4W5ZqLPKOUONjrnBhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUgpnkS4rgBAkB/thwZhB2ivReiEowHwYDVR0j BBgwFoAUIP1w3DAf+T0ojthRw6abItewQiAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTIwRjM3RTFCRDYyQTUxQTk5REVENkI0QTEzOEIwNzBD RTFCOUQzQjNCQUU2M0Y1NTVCMDU3OTAwNUYyMzAwLzAvMjBGRDcwREMzMDFGRjkz RDI4OEVEODUxQzNBNjlCMjJEN0IwNDIyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEZENzBEQzMwMUZGOTNEMjg4 RUQ4NTFDM0E2OUIyMkQ3QjA0MjIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkEyMEYzN0UxQkQ2MkE1MUE5OURFRDZCNEExMzhCMDcwQ0UxQjlEM0Iz QkFFNjNGNTU1QjA1NzkwMDVGMjMwMC8wLzIwRkQ3MERDMzAxRkY5M0QyODhFRDg1 MUMzQTY5QjIyRDdCMDQyMjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAatTvrS/PNV9CskwuKvGah8yoo evOBZ4AfcuVizaKEchPqb23/463mZo9x/UmXBfoAdHDZnBZ180FCOsVmYJNGXjSU xTb4MQ//s7Vu7yHj7Q8L2Ej/xrOlCXP5xZGRO2sSCduBY271zkUtIqbfrUgrNU/4 b71fSOnm5b+eh8WiHGcZusSpO4YkMa/5ZAsWsCJPRgwMDzZvMXXcQJrJ/Xp72Qbk ozyEFcBtq7r8Nkb+RujS71MKAdTaCpWQ/M329hNglkVKyawJXF2AZoPHm+D5/Gh9 aGuJM9zP8dp1RUzp6+9YlmiIdiwmK6y4hrvEJj5F35EpXvpPo1f855J11oDs -----END CERTIFICATE-----Generated at Wed Nov 5 13:51:04 2025 by rpki-client