$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft File: 20FD70DC301FF93D288ED851C3A69B22D7B04220.mft (raw, json) Hash identifier: z6SWLJRr3bUMuEAvhioCRyc6mnPoQH8YK9hi3z0N2ug= Subject key identifier: A1:0E:70:CF:A4:6D:D6:14:C2:1E:C5:36:3D:D5:68:A4:F0:35:A6:67 Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 Certificate issuer: /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Certificate serial: 2BB8F6B0D96D3E6DA0AB61CC9EE128783E17CA80 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft Manifest number: 0188 Signing time: Tue 28 Apr 2026 04:46:10 +0000 Manifest this update: Tue 28 Apr 2026 04:41:10 +0000 Manifest next update: Sun 03 May 2026 21:58:10 +0000 Files and hashes: 1: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (hash: g8hHWzP4kDSiOiSHBMQM7MYWGMPCqeG59pSNv4PvdWU=) 2: 20FD70DC301FF93D288ED851C3A69B22D7B04220.crl (hash: 5YheZJtr4sRhib0hAkazKRQNAzAVbwV7TDsiPL1eXcU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 May 2026 21:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b8:f6:b0:d9:6d:3e:6d:a0:ab:61:cc:9e:e1:28:78:3e:17:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Validity Not Before: Apr 28 04:41:10 2026 GMT Not After : May 3 21:58:10 2026 GMT Subject: CN=A10E70CFA46DD614C21EC5363DD568A4F035A667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:60:15:ea:8a:39:5a:96:92:63:03:99:95: 8f:54:ca:ed:68:a4:0b:43:e3:72:76:16:01:11:31: ff:b1:6e:bf:dc:f0:e6:13:80:e4:9f:ae:8c:10:1b: 34:f7:66:52:c1:3a:d2:86:63:45:1e:25:97:1e:6e: d3:6c:81:3a:39:85:61:e6:3f:47:f6:1d:15:42:9e: 0a:bf:7b:3f:8a:60:19:31:4b:27:5d:a5:90:80:42: 7c:b4:da:ec:5e:b0:7d:d9:c0:6b:b9:3b:96:b0:f2: b9:6c:a9:03:32:fc:13:b1:9a:60:7c:d0:60:10:98: 23:e7:48:95:79:60:48:9d:a8:b4:ef:b8:77:49:46: 27:4d:90:46:30:fe:9d:9b:fb:e7:7e:f4:f1:68:da: 22:af:e8:e0:e8:c7:19:0c:7d:4a:93:0f:f9:7f:7d: 8a:a7:09:bd:36:6f:ca:14:af:4f:df:ce:33:fa:6a: 7c:b0:e3:77:c0:22:57:ef:ca:9c:9a:11:11:74:71: 6a:88:3c:0d:cb:4f:35:83:8f:79:95:3e:97:63:d6: 46:30:06:6a:a8:ff:1e:0e:10:63:50:b4:fd:95:61: 6a:17:16:04:1e:58:7d:25:89:74:a8:c2:7f:5b:ba: bf:db:77:92:6a:3c:3f:98:1a:fa:bc:0b:ed:d1:28: 9d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0E:70:CF:A4:6D:D6:14:C2:1E:C5:36:3D:D5:68:A4:F0:35:A6:67 X509v3 Authority Key Identifier: keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8f:f2:3e:1b:19:8c:13:42:78:6c:e7:c1:89:4e:14:24:02: bc:dd:71:a5:3d:78:a5:38:77:87:57:98:b3:6d:f2:da:d8:81: 2b:f1:bd:ae:c8:0e:b2:32:5c:00:c0:01:5c:d6:f1:5f:6a:34: 49:f6:1c:a0:24:67:e0:da:b6:77:bc:32:2a:be:e9:ae:84:88: d7:45:da:5f:b2:9b:6b:ed:60:37:32:31:4a:d4:4d:24:cb:0f: 92:b7:89:b7:20:c2:3a:2a:eb:96:bf:ed:19:8b:db:3a:71:ac: 28:44:15:0f:a9:73:19:8c:26:ea:83:b8:78:9d:b1:b8:e0:0b: c2:56:41:da:4d:74:ca:4c:5e:9b:e2:84:f3:81:34:8d:d5:80: 99:6e:c8:e3:0b:83:d0:a1:e1:90:8b:ee:b5:cf:42:06:2a:be: e5:ce:ef:63:2a:75:2f:d5:7e:a7:f1:24:51:2d:c7:55:04:31: 09:b0:26:c2:14:96:ae:01:b0:79:fb:ca:67:42:7f:af:45:cf: 2f:3c:33:82:f7:25:63:de:57:b1:f6:db:12:e7:8b:4c:a0:f8: df:1b:05:33:72:0b:e9:b6:8c:1f:b8:cb:eb:11:91:c0:ad:96: cd:99:20:cd:f4:1c:02:d9:99:e6:f8:09:76:8b:24:67:f3:d0: 86:2e:6f:50 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUK7j2sNltPm2gq2HMnuEoeD4XyoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDcwREMzMDFGRjkzRDI4OEVEODUxQzNBNjlCMjJE N0IwNDIyMDAeFw0yNjA0MjgwNDQxMTBaFw0yNjA1MDMyMTU4MTBaMDMxMTAvBgNV BAMTKEExMEU3MENGQTQ2REQ2MTRDMjFFQzUzNjNERDU2OEE0RjAzNUE2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc32AV6oo5WpaSYwOZlY9Uyu1o pAtD43J2FgERMf+xbr/c8OYTgOSfrowQGzT3ZlLBOtKGY0UeJZcebtNsgTo5hWHm P0f2HRVCngq/ez+KYBkxSyddpZCAQny02uxesH3ZwGu5O5aw8rlsqQMy/BOxmmB8 0GAQmCPnSJV5YEidqLTvuHdJRidNkEYw/p2b++d+9PFo2iKv6ODoxxkMfUqTD/l/ fYqnCb02b8oUr0/fzjP6anyw43fAIlfvypyaERF0cWqIPA3LTzWDj3mVPpdj1kYw Bmqo/x4OEGNQtP2VYWoXFgQeWH0liXSown9bur/bd5JqPD+YGvq8C+3RKJ2xAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUoQ5wz6Rt1hTCHsU2PdVopPA1pmcwHwYDVR0j BBgwFoAUIP1w3DAf+T0ojthRw6abItewQiAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTIwRjM3RTFCRDYyQTUxQTk5REVENkI0QTEzOEIwNzBD RTFCOUQzQjNCQUU2M0Y1NTVCMDU3OTAwNUYyMzAwLzAvMjBGRDcwREMzMDFGRjkz RDI4OEVEODUxQzNBNjlCMjJEN0IwNDIyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEZENzBEQzMwMUZGOTNEMjg4 RUQ4NTFDM0E2OUIyMkQ3QjA0MjIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkEyMEYzN0UxQkQ2MkE1MUE5OURFRDZCNEExMzhCMDcwQ0UxQjlEM0Iz QkFFNjNGNTU1QjA1NzkwMDVGMjMwMC8wLzIwRkQ3MERDMzAxRkY5M0QyODhFRDg1 MUMzQTY5QjIyRDdCMDQyMjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpj/I+GxmME0J4bOfBiU4UJAK8 3XGlPXilOHeHV5izbfLa2IEr8b2uyA6yMlwAwAFc1vFfajRJ9hygJGfg2rZ3vDIq vumuhIjXRdpfsptr7WA3MjFK1E0kyw+St4m3IMI6KuuWv+0Zi9s6cawoRBUPqXMZ jCbqg7h4nbG44AvCVkHaTXTKTF6b4oTzgTSN1YCZbsjjC4PQoeGQi+61z0IGKr7l zu9jKnUv1X6n8SRRLcdVBDEJsCbCFJauAbB5+8pnQn+vRc8vPDOC9yVj3lex9tsS 54tMoPjfGwUzcgvptowfuMvrEZHArZbNmSDN9BwC2Znm+Al2iyRn89CGLm9Q -----END CERTIFICATE-----Generated at Thu Apr 30 05:51:44 2026 by rpki-client