$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft File: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft (raw, json) Hash identifier: /TFOWHJsKOgna4QaHkAVDGPta+d2iGsLswRAPCtUuLs= Subject key identifier: FE:42:5F:8A:39:CC:BB:8B:33:23:4F:A8:77:1A:99:A0:E4:74:E7:FF Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45 Certificate issuer: /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45 Certificate serial: 23E0E123B81BFC99D32A3250CE4190AD6E4457DC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft Manifest number: 01DF Signing time: Wed 28 Oct 2026 08:20:55 +0000 Manifest this update: Wed 28 Oct 2026 08:15:55 +0000 Manifest next update: Mon 02 Nov 2026 06:50:55 +0000 Files and hashes: 1: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl (hash: AbgO/KEzho+5YxqYSkz8EAQY4HL6mZcXAxb/0rh5kOI=) 2: 3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa (hash: /inl45FgHMmimgaoHswEbZwqHUN5h6utXgHufK7wkDk=) 3: 3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa (hash: PBLaMVSKpAeS+l0vIKmtM2omSi0up4GGuP3iwTFSVNY=) 4: 34352e3138392e3233352e302f32342d3234203d3e20323733303036.roa (hash: l6Px/cfx17p77guA4BogJ/Eyp53nnxwxjHHvSY7vDUM=) 5: 3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa (hash: 9LJetJ8G5qWqyqJMt7HfccEJLqmf8O70FC7AvkBWuRA=) 6: 323830333a383465303a3a2f33322d3332203d3e20323733303036.roa (hash: Mb2m0k7C4vb1eifoEedb1d+l1x7QSKnJ6BRI9UyKuAw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 15:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e0:e1:23:b8:1b:fc:99:d3:2a:32:50:ce:41:90:ad:6e:44:57:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45 Validity Not Before: Oct 28 08:15:55 2026 GMT Not After : Nov 2 06:50:55 2026 GMT Subject: CN=FE425F8A39CCBB8B33234FA8771A99A0E474E7FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a7:46:28:76:1f:dc:6b:f2:5d:ad:3a:78:52: f4:fa:b2:4f:fa:de:0a:da:04:83:f5:bd:13:d5:0b: d4:96:0c:63:93:12:d4:57:30:89:8e:a9:40:9c:00: 70:bc:ab:fc:47:6e:94:fa:3c:22:db:7f:ad:05:c7: 41:e2:d6:e2:2f:09:77:d0:59:55:cb:32:9f:31:72: 50:fd:53:43:c9:14:d4:7c:34:8c:0f:b9:31:da:12: f3:24:49:9b:b3:57:c8:db:46:fa:f6:d7:4a:ae:9d: 8e:d8:84:e2:01:8d:fa:9e:88:30:98:52:56:a0:0e: 35:d9:7c:17:d8:38:88:ff:35:44:1a:02:eb:a1:02: 49:77:ad:0a:4c:ba:26:7b:ed:b8:94:b6:f2:83:2e: ee:7c:84:98:4e:25:6a:59:35:c9:c3:39:c8:c1:99: 4b:b5:bc:9c:1d:83:e3:de:2a:ef:26:8e:05:fa:96: af:28:f8:59:77:27:59:fe:3f:ad:bf:92:e5:8b:02: fa:32:ee:58:66:48:d9:93:e0:18:7b:63:a7:f6:09: 02:34:ca:ed:12:28:17:6e:d9:74:cc:40:ef:2d:c2: 67:eb:80:05:e3:5b:cd:4a:d3:b6:91:26:77:40:be: 9d:b5:33:fe:7e:a5:46:1c:86:10:7f:33:56:c3:d1: 81:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:42:5F:8A:39:CC:BB:8B:33:23:4F:A8:77:1A:99:A0:E4:74:E7:FF X509v3 Authority Key Identifier: keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b4:e7:54:4f:3e:e2:a1:a5:4c:c1:cf:65:ce:59:ca:48:fe: 66:05:13:2c:16:02:0a:d0:cf:f1:7e:f3:87:7e:1a:bb:16:f3: fa:56:77:70:d7:4d:03:1e:c0:58:78:a0:1b:2e:53:3e:4a:04: 6e:ab:6c:f4:06:df:1a:10:26:28:a0:de:03:2b:81:d6:e0:67: 0b:ed:0e:f8:cb:ef:c0:bd:f1:6a:66:b9:9f:6d:a7:4e:cf:f1: 72:36:bc:5d:7c:05:7c:00:11:b3:0f:96:cc:d2:17:fe:d0:c7: c8:a0:0f:22:31:85:a6:ca:29:75:5e:7b:f2:c4:81:a3:d1:3c: 44:a1:c2:47:be:20:d6:0d:82:45:6f:45:be:43:7f:5a:a7:a1: 56:8c:39:19:fd:4e:a6:40:6a:2b:76:c4:69:74:d0:98:f6:f0: ca:e9:77:1b:2c:70:a5:25:59:e3:c3:e7:49:1d:87:0b:48:7c: 05:cd:5b:1c:64:c5:93:03:a1:95:32:86:d5:a1:42:e2:67:e3: 85:e1:81:a1:73:25:66:a0:7b:92:bc:ed:d0:98:10:05:3f:ef: 8a:9e:0d:f2:9a:00:de:cb:f9:a1:0f:95:09:7b:65:2a:db:60: b7:a9:c9:5f:3d:1c:9a:ab:e4:a0:ee:13:e3:eb:a7:40:e3:6f: 0b:1a:c9:cb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUI+DhI7gb/JnTKjJQzkGQrW5EV9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBRjFGRkE4MTVDNkUzRjNCOTA2OEFERDNEM0FGQjEx MERBN0Q0NTAeFw0yNjEwMjgwODE1NTVaFw0yNjExMDIwNjUwNTVaMDMxMTAvBgNV BAMTKEZFNDI1RjhBMzlDQ0JCOEIzMzIzNEZBODc3MUE5OUEwRTQ3NEU3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMp0Yodh/ca/JdrTp4UvT6sk/6 3graBIP1vRPVC9SWDGOTEtRXMImOqUCcAHC8q/xHbpT6PCLbf60Fx0Hi1uIvCXfQ WVXLMp8xclD9U0PJFNR8NIwPuTHaEvMkSZuzV8jbRvr210qunY7YhOIBjfqeiDCY UlagDjXZfBfYOIj/NUQaAuuhAkl3rQpMuiZ77biUtvKDLu58hJhOJWpZNcnDOcjB mUu1vJwdg+PeKu8mjgX6lq8o+Fl3J1n+P62/kuWLAvoy7lhmSNmT4Bh7Y6f2CQI0 yu0SKBdu2XTMQO8twmfrgAXjW81K07aRJndAvp21M/5+pUYchhB/M1bD0YE/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/kJfijnMu4szI0+odxqZoOR05/8wHwYDVR0j BBgwFoAUIK8f+oFcbj87kGit09OvsRDafUUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRUIzQjM3NTU2QThEQTJFNzA2QTRBNzMzN0Y3REJCQzQ3 QUJCQUNENzEzMjI5QjU0Q0FDRDY3MEVCQzA1RTUxLzAvMjBBRjFGRkE4MTVDNkUz RjNCOTA2OEFERDNEM0FGQjExMERBN0Q0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEFGMUZGQTgxNUM2RTNGM0I5 MDY4QUREM0QzQUZCMTEwREE3RDQ1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUVCM0IzNzU1NkE4REEyRTcwNkE0QTczMzdGN0RCQkM0N0FCQkFDRDcx MzIyOUI1NENBQ0Q2NzBFQkMwNUU1MS8wLzIwQUYxRkZBODE1QzZFM0YzQjkwNjhB REQzRDNBRkIxMTBEQTdENDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDtOdUTz7ioaVMwc9lzlnKSP5m BRMsFgIK0M/xfvOHfhq7FvP6Vndw100DHsBYeKAbLlM+SgRuq2z0Bt8aECYooN4D K4HW4GcL7Q74y+/AvfFqZrmfbadOz/FyNrxdfAV8ABGzD5bM0hf+0MfIoA8iMYWm yil1XnvyxIGj0TxEocJHviDWDYJFb0W+Q39ap6FWjDkZ/U6mQGordsRpdNCY9vDK 6XcbLHClJVnjw+dJHYcLSHwFzVscZMWTA6GVMobVoULiZ+OF4YGhcyVmoHuSvO3Q mBAFP++Kng3ymgDey/mhD5UJe2Uq22C3qclfPRyaq+Sg7hPj66dA428LGsnL -----END CERTIFICATE-----Generated at Wed Oct 28 19:29:48 2026 by rpki-client