$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft File: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft (raw, json) Hash identifier: R/2eA4IBngNssFEzBgBqfdktKqfAkUAs05dKz6Rdsdg= Subject key identifier: 2A:EE:C8:BC:89:85:EB:3F:12:00:39:E1:2F:59:A7:E4:36:70:31:0A Authority key identifier: 20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5 Certificate issuer: /CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5 Certificate serial: 7CA47EFC133BAD331AFF63E7E0F6F036E26FC215 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft Manifest number: F7 Signing time: Sat 19 Jul 2025 21:18:40 +0000 Manifest this update: Sat 19 Jul 2025 21:13:40 +0000 Manifest next update: Fri 25 Jul 2025 20:56:40 +0000 Files and hashes: 1: 323830333a653532303a3a2f33322d3438203d3e20323636363837.roa (hash: RFp/7paxrjEnmz7NX5siL1qxhM8AW6ttH3PE4IdU9z0=) 2: 34352e3232392e34342e302f32322d3234203d3e20323636363837.roa (hash: NXCrnc5k/R7cRXtnojYKX0tyR9Gzw9zx/b4X8zIv+Lk=) 3: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl (hash: YNWKQBLJJEaQy6VVDWbya/HYcdKF9269XHRd38wWvv4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a4:7e:fc:13:3b:ad:33:1a:ff:63:e7:e0:f6:f0:36:e2:6f:c2:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5 Validity Not Before: Jul 19 21:13:40 2025 GMT Not After : Jul 25 20:56:40 2025 GMT Subject: CN=2AEEC8BC8985EB3F120039E12F59A7E43670310A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6b:f9:43:3e:90:54:a9:65:23:d4:23:81:c6: 27:26:92:46:f2:ec:d4:0e:12:19:1a:e8:8f:2b:6c: fe:32:f9:75:15:aa:82:89:cd:65:5e:6f:5d:59:df: aa:69:8b:a6:8a:d5:87:05:bf:0e:af:dd:70:b3:df: 80:59:5c:11:e8:16:61:8c:25:5d:9d:a2:24:1f:33: dd:4d:fd:30:a0:dc:87:12:eb:fb:5c:d7:4e:19:9b: 0e:a3:f5:99:21:a7:b6:66:88:36:f9:83:be:b8:30: 94:a2:03:20:db:ec:37:1b:a5:6b:af:26:ad:37:6c: 95:f1:75:43:9a:20:22:5e:4a:67:16:e7:aa:10:ca: f4:39:a1:01:36:04:96:33:24:7b:38:61:69:b6:bf: 1d:61:2c:e3:22:53:f5:b8:3a:ff:cf:28:69:c3:78: 52:0d:fa:6b:97:78:11:ab:02:30:9d:85:0f:ef:b6: 21:3f:81:0c:ea:5b:63:e7:84:a6:4f:ee:07:e6:c0: a2:42:73:7b:3b:b7:13:f7:8f:b6:64:88:8b:5e:95: d8:5c:c1:c7:12:4f:1d:7b:1b:4d:0a:d2:8d:d9:65: 23:cf:01:93:0c:57:92:3f:1c:a6:31:c5:5f:4f:ed: 91:36:e4:a8:5d:b5:7a:06:ce:34:07:20:a1:b8:b4: b8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EE:C8:BC:89:85:EB:3F:12:00:39:E1:2F:59:A7:E4:36:70:31:0A X509v3 Authority Key Identifier: keyid:20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:2d:87:94:4b:00:56:8b:40:0a:47:18:84:3a:f1:ac:66:78: 6b:e4:75:16:8d:94:30:a2:b7:44:d4:e0:2b:98:2c:71:b9:ec: f0:96:11:6a:e6:7a:0e:c7:cb:6f:6b:dc:34:34:0d:a4:48:f0: 69:12:5d:f5:31:bd:03:72:f0:80:ab:40:7e:73:ff:88:89:4e: f0:4d:ff:6b:43:5b:26:05:4a:e9:c9:b1:7c:64:4a:02:f3:e5: 4c:7d:7c:fa:47:ad:64:42:25:18:b0:32:17:48:90:2d:2e:ea: e8:af:aa:23:54:1e:8f:cf:7f:12:b9:d5:d6:1d:32:3c:ee:73: 16:fc:e5:7c:60:7e:ab:47:90:ef:b0:42:40:a0:1b:47:51:0b: 26:82:5c:66:c4:48:67:ee:01:d0:06:e9:d3:c4:9d:ca:41:1e: fb:ce:dd:09:bb:75:c9:16:99:68:a5:c1:e5:1e:35:73:32:5d: e7:16:61:3c:ea:4f:a3:18:26:61:48:8d:40:92:f2:99:a5:5e: 74:03:96:95:e0:be:f9:6c:44:42:0b:fc:73:1a:41:6d:46:e6: 6f:ef:2a:af:46:ad:c2:42:11:33:3a:f8:09:ea:a3:f9:80:07: 15:ea:4f:4d:7d:c7:0e:d2:85:81:3f:cf:28:c8:be:51:ac:de: ff:0c:6c:ea -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfKR+/BM7rTMa/2Pn4PbwNuJvwhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFNUZFNDU4OUMxQ0U0NzJEMzlDOUZGMTBFRTFBNkU0 RDVDQkZDNTAeFw0yNTA3MTkyMTEzNDBaFw0yNTA3MjUyMDU2NDBaMDMxMTAvBgNV BAMTKDJBRUVDOEJDODk4NUVCM0YxMjAwMzlFMTJGNTlBN0U0MzY3MDMxMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMa/lDPpBUqWUj1COBxicmkkby 7NQOEhka6I8rbP4y+XUVqoKJzWVeb11Z36ppi6aK1YcFvw6v3XCz34BZXBHoFmGM JV2doiQfM91N/TCg3IcS6/tc104Zmw6j9Zkhp7ZmiDb5g764MJSiAyDb7DcbpWuv Jq03bJXxdUOaICJeSmcW56oQyvQ5oQE2BJYzJHs4YWm2vx1hLOMiU/W4Ov/PKGnD eFIN+muXeBGrAjCdhQ/vtiE/gQzqW2PnhKZP7gfmwKJCc3s7txP3j7ZkiIteldhc wccSTx17G00K0o3ZZSPPAZMMV5I/HKYxxV9P7ZE25KhdtXoGzjQHIKG4tLjBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKu7IvImF6z8SADnhL1mn5DZwMQowHwYDVR0j BBgwFoAUIOX+RYnBzkctOcn/EO4abk1cv8UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82N0EwRUQzNjJFNjhGRjQyRTE4OEExMDU4Q0JERjc0N0E3 REQ5M0EzNThFQTE3M0I3QTVFQkEzMjdCMzY1QTUyLzAvMjBFNUZFNDU4OUMxQ0U0 NzJEMzlDOUZGMTBFRTFBNkU0RDVDQkZDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEU1RkU0NTg5QzFDRTQ3MkQz OUM5RkYxMEVFMUE2RTRENUNCRkM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjdBMEVEMzYyRTY4RkY0MkUxODhBMTA1OENCREY3NDdBN0REOTNBMzU4 RUExNzNCN0E1RUJBMzI3QjM2NUE1Mi8wLzIwRTVGRTQ1ODlDMUNFNDcyRDM5QzlG RjEwRUUxQTZFNEQ1Q0JGQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyLYeUSwBWi0AKRxiEOvGsZnhr 5HUWjZQwordE1OArmCxxuezwlhFq5noOx8tva9w0NA2kSPBpEl31Mb0DcvCAq0B+ c/+IiU7wTf9rQ1smBUrpybF8ZEoC8+VMfXz6R61kQiUYsDIXSJAtLuror6ojVB6P z38SudXWHTI87nMW/OV8YH6rR5DvsEJAoBtHUQsmglxmxEhn7gHQBunTxJ3KQR77 zt0Ju3XJFplopcHlHjVzMl3nFmE86k+jGCZhSI1AkvKZpV50A5aV4L75bERCC/xz GkFtRuZv7yqvRq3CQhEzOvgJ6qP5gAcV6k9NfccO0oWBP88oyL5RrN7/DGzq -----END CERTIFICATE-----Generated at Mon Jul 21 13:25:41 2025 by rpki-client