$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft File: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft (raw, json) Hash identifier: FFDoNf+KHZbnIfnH7WtHF34yCvpLEOmOeFNsvHnrbOM= Subject key identifier: E8:1C:42:03:AA:DE:37:F4:40:BB:4E:99:45:60:8C:55:69:36:64:74 Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45 Certificate issuer: /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45 Certificate serial: 171E915FA43817C4F394B4DBFC294191AA4E8271 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft Manifest number: 012C Signing time: Sat 01 Nov 2025 01:01:47 +0000 Manifest this update: Sat 01 Nov 2025 00:56:47 +0000 Manifest next update: Wed 05 Nov 2025 12:42:47 +0000 Files and hashes: 1: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl (hash: 9PZ8gBWjrdBUm2NY9fwtSpf3Fb8PuN+kg5JSmQx1X4g=) 2: 3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa (hash: D4Wuw579mtmQk3148E/t7+wdylw1tUvsSFL+d95cbeo=) 3: 3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa (hash: Y3oZHoznCaUCBQoRIIqHUk1GE9kbKfIIaQ4fpU0PJjw=) 4: 3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa (hash: UxWVsSHgc7sCdCdtXfz5xPAdpgKquF6TGclmGWtYyus=) 5: 323830333a383465303a3a2f33322d3332203d3e20323733303036.roa (hash: IhrcR9v71SHVWTPWhhNNwFVAgzsaGowtRREEzljdA5Q=) 6: 34352e3138392e3233352e302f32342d3234203d3e20323733303036.roa (hash: tHCd2o3Ws3sRzLZIPTJtx1XUzBWF561xvUTQHUix3mg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:1e:91:5f:a4:38:17:c4:f3:94:b4:db:fc:29:41:91:aa:4e:82:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45 Validity Not Before: Nov 1 00:56:47 2025 GMT Not After : Nov 5 12:42:47 2025 GMT Subject: CN=E81C4203AADE37F440BB4E9945608C5569366474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:40:a6:1d:0e:7c:b2:ce:42:6d:e8:26:5d: 40:4f:fc:02:42:1b:6f:46:8a:4b:2b:93:db:14:1a: 08:2a:b7:ba:36:42:7e:9e:41:c5:59:c4:6d:48:ce: c7:fd:3c:c2:65:35:76:b1:40:4d:fc:13:2d:3b:4d: f5:ac:0b:8d:e9:b3:e5:40:b8:c9:0c:d0:ea:c1:ce: 0a:d4:11:11:09:69:34:84:16:13:fa:69:65:39:fe: 24:40:f7:25:88:69:d0:6d:3c:94:ff:58:ce:30:22: 1e:c4:eb:3e:07:48:fa:ba:6e:7d:0f:e5:85:d2:7e: f6:2b:1b:a5:c9:12:99:be:6b:22:31:f8:f4:69:2f: 55:00:a4:5e:03:5f:74:9a:5f:33:da:5e:c5:6a:d1: 21:56:97:44:83:42:fe:c9:4b:a9:dd:67:f9:84:e4: 52:64:e4:82:2c:0c:44:67:8f:06:67:53:05:c7:72: 68:35:a1:19:4b:5c:62:f5:d6:72:48:d0:d4:6e:6b: 87:f8:b9:79:29:b9:73:90:f8:87:83:b7:c8:56:82: de:2f:33:81:47:bf:b2:4b:94:de:8e:af:8c:f0:36: 9b:8d:2e:12:c1:56:a5:2e:66:e2:6b:e5:93:4d:e8: f0:a7:42:fd:74:cd:11:19:f9:be:8c:89:66:4b:b6: 0d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1C:42:03:AA:DE:37:F4:40:BB:4E:99:45:60:8C:55:69:36:64:74 X509v3 Authority Key Identifier: keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:df:26:1c:b5:bf:62:20:46:df:29:d7:6a:c4:6a:4c:56:3b: 08:fa:ad:b4:71:cc:97:3d:81:38:b8:1b:78:1f:9e:28:07:3e: 06:4e:73:d9:93:da:e7:bd:f5:9e:b4:9e:f0:31:05:e5:e1:29: b1:63:80:e9:d9:e7:74:2f:a1:b5:96:6c:6e:c3:c6:e7:de:d8: 89:67:3b:66:fe:72:8b:62:d8:a4:e1:e1:3a:82:80:c2:fc:79: b1:b6:a6:99:4e:b3:ad:8b:f9:aa:31:45:18:00:1a:11:f9:e5: f1:39:5e:ec:7f:ce:53:65:0e:51:1f:99:2d:56:cd:d4:8a:94: 94:9e:7d:1d:d9:75:65:a7:16:24:4b:3d:a0:0e:a7:7d:d8:df: 8c:a0:3d:e1:94:9c:5c:7e:59:e2:01:5c:86:67:fe:b2:13:4b: 01:66:3b:ac:2c:b1:8a:46:f5:2e:80:6d:30:ba:cb:d2:ab:40: c9:de:91:0b:ae:0c:85:6e:17:c1:50:4b:fb:78:1e:3e:17:2e: 8c:f6:f1:81:84:08:9f:eb:7e:1d:2d:92:4a:77:c8:c7:c4:ee: 2a:36:78:d6:77:65:75:44:d9:87:41:a3:30:86:7a:a5:ba:be: 64:3a:e7:f0:4c:42:a8:41:35:a3:13:8f:c2:26:b7:be:20:b2: 12:52:aa:9f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFx6RX6Q4F8TzlLTb/ClBkapOgnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBRjFGRkE4MTVDNkUzRjNCOTA2OEFERDNEM0FGQjEx MERBN0Q0NTAeFw0yNTExMDEwMDU2NDdaFw0yNTExMDUxMjQyNDdaMDMxMTAvBgNV BAMTKEU4MUM0MjAzQUFERTM3RjQ0MEJCNEU5OTQ1NjA4QzU1NjkzNjY0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnkCmHQ58ss5CbegmXUBP/AJC G29Giksrk9sUGggqt7o2Qn6eQcVZxG1Izsf9PMJlNXaxQE38Ey07TfWsC43ps+VA uMkM0OrBzgrUEREJaTSEFhP6aWU5/iRA9yWIadBtPJT/WM4wIh7E6z4HSPq6bn0P 5YXSfvYrG6XJEpm+ayIx+PRpL1UApF4DX3SaXzPaXsVq0SFWl0SDQv7JS6ndZ/mE 5FJk5IIsDERnjwZnUwXHcmg1oRlLXGL11nJI0NRua4f4uXkpuXOQ+IeDt8hWgt4v M4FHv7JLlN6Or4zwNpuNLhLBVqUuZuJr5ZNN6PCnQv10zREZ+b6MiWZLtg27AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6BxCA6reN/RAu06ZRWCMVWk2ZHQwHwYDVR0j BBgwFoAUIK8f+oFcbj87kGit09OvsRDafUUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRUIzQjM3NTU2QThEQTJFNzA2QTRBNzMzN0Y3REJCQzQ3 QUJCQUNENzEzMjI5QjU0Q0FDRDY3MEVCQzA1RTUxLzAvMjBBRjFGRkE4MTVDNkUz RjNCOTA2OEFERDNEM0FGQjExMERBN0Q0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEFGMUZGQTgxNUM2RTNGM0I5 MDY4QUREM0QzQUZCMTEwREE3RDQ1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUVCM0IzNzU1NkE4REEyRTcwNkE0QTczMzdGN0RCQkM0N0FCQkFDRDcx MzIyOUI1NENBQ0Q2NzBFQkMwNUU1MS8wLzIwQUYxRkZBODE1QzZFM0YzQjkwNjhB REQzRDNBRkIxMTBEQTdENDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDT3yYctb9iIEbfKddqxGpMVjsI +q20ccyXPYE4uBt4H54oBz4GTnPZk9rnvfWetJ7wMQXl4SmxY4Dp2ed0L6G1lmxu w8bn3tiJZztm/nKLYtik4eE6goDC/HmxtqaZTrOti/mqMUUYABoR+eXxOV7sf85T ZQ5RH5ktVs3UipSUnn0d2XVlpxYkSz2gDqd92N+MoD3hlJxcflniAVyGZ/6yE0sB ZjusLLGKRvUugG0wusvSq0DJ3pELrgyFbhfBUEv7eB4+Fy6M9vGBhAif634dLZJK d8jHxO4qNnjWd2V1RNmHQaMwhnqlur5kOufwTEKoQTWjE4/CJre+ILISUqqf -----END CERTIFICATE-----Generated at Sun Nov 2 10:20:10 2025 by rpki-client