$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft File: 20FD70DC301FF93D288ED851C3A69B22D7B04220.mft (raw, json) Hash identifier: vsXqdaB4VvmNqhFk3RFvEcyoMc/IaXmpVIz8I/Ugqq4= Subject key identifier: CA:EB:D1:04:D7:D2:9C:C2:76:DF:A3:19:53:0E:D8:9F:3C:E0:41:D8 Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 Certificate issuer: /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Certificate serial: 4D7E7F25B202419D5795461CE64C8EDBAD93E9DF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft Manifest number: FD Signing time: Mon 21 Jul 2025 01:03:33 +0000 Manifest this update: Mon 21 Jul 2025 00:58:33 +0000 Manifest next update: Sat 26 Jul 2025 10:12:33 +0000 Files and hashes: 1: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (hash: hiq3f5SQVXyvVqAHJFD41H8GmsplFaT7zWIIcFR5Zms=) 2: 20FD70DC301FF93D288ED851C3A69B22D7B04220.crl (hash: HxA3O2CIfPPg+FsCrHmHjk4QvxrRgb713qjyw3jySoo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7e:7f:25:b2:02:41:9d:57:95:46:1c:e6:4c:8e:db:ad:93:e9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Validity Not Before: Jul 21 00:58:33 2025 GMT Not After : Jul 26 10:12:33 2025 GMT Subject: CN=CAEBD104D7D29CC276DFA319530ED89F3CE041D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:2f:43:ca:d7:b0:2a:ee:aa:94:81:d2:87: e0:ea:17:14:dd:e4:78:d3:a7:7e:3a:6f:25:ae:d1: e3:56:f9:b6:7e:e3:ed:f7:1e:77:ad:25:8b:d2:cf: eb:67:68:6a:ca:0e:f6:50:a1:3f:27:3b:34:04:09: 9d:d3:76:b8:07:12:4b:e7:5c:0c:ba:84:9f:d0:7d: 1c:54:84:9a:ac:f5:17:4f:f3:84:33:e9:15:ce:f3: ec:5c:76:36:dc:25:c7:bf:c5:a7:54:f7:fd:00:57: 49:d3:48:d0:8c:39:2a:05:95:c3:b3:37:7a:8c:7a: cb:73:70:ed:e5:31:63:3d:7f:c0:c8:af:b8:0c:ef: c5:16:6d:2d:1b:3e:2d:78:3f:ab:43:db:7c:1c:ac: a6:4a:03:20:1a:37:f4:54:be:eb:0d:38:3d:01:5c: 01:e5:04:b4:ce:24:9c:f5:16:89:1d:92:18:cb:8d: fe:a3:76:1e:84:2b:51:7a:15:30:96:b1:3a:7b:29: 8a:f6:60:c1:52:26:2f:26:82:64:3f:f6:34:e1:51: ad:fd:1b:da:bb:b8:40:21:58:a6:90:81:b4:61:6b: 1c:80:f3:26:cc:bd:89:14:2d:60:ea:a0:37:a5:1c: f1:62:92:0c:2d:01:f5:ab:e9:4b:9b:6c:d4:21:21: d1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EB:D1:04:D7:D2:9C:C2:76:DF:A3:19:53:0E:D8:9F:3C:E0:41:D8 X509v3 Authority Key Identifier: keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5f:ff:d9:27:3a:2e:6d:d1:f9:d7:4b:65:0f:96:29:74:5e: 46:0a:e2:fa:b3:d6:7f:de:a4:3f:77:fa:8a:6a:19:7d:2b:59: 4c:e9:c0:7a:c4:8d:35:90:11:2b:89:86:8c:81:92:55:23:3e: 72:ed:4d:3f:8b:79:ee:e0:37:20:83:e7:e2:72:68:f4:29:af: 90:95:9b:0d:09:34:34:8b:4a:2a:1e:19:d2:5a:93:ee:7b:ee: 40:46:e8:d1:3c:da:4f:44:9f:87:18:69:85:2f:b2:86:fb:e2: fa:bb:9d:90:cc:93:64:87:63:c2:1c:59:ea:b5:0d:f5:c7:a5: 5f:94:68:6d:e8:e4:c0:df:70:a7:21:3b:a4:78:0b:df:2c:d5: 8f:13:13:98:14:45:af:77:c0:72:c6:2e:32:22:ca:e9:e1:9e: c8:16:b9:0e:c4:53:58:fb:9e:14:6f:a6:e7:55:a0:81:62:59: 44:fe:57:8e:5a:7e:2d:71:d6:43:57:ea:f3:2c:54:ad:8f:67: f5:ce:d6:8d:6e:46:f0:66:a7:c1:bc:25:74:22:9c:d0:e9:0c: bf:c2:d7:f6:e7:cd:30:b9:45:e8:db:68:6f:53:e3:8f:1d:48: b2:c4:3b:7d:35:e3:28:e4:54:64:ef:f0:a2:66:09:54:e3:9a: 5d:bd:27:5e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTX5/JbICQZ1XlUYc5kyO262T6d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDcwREMzMDFGRjkzRDI4OEVEODUxQzNBNjlCMjJE N0IwNDIyMDAeFw0yNTA3MjEwMDU4MzNaFw0yNTA3MjYxMDEyMzNaMDMxMTAvBgNV BAMTKENBRUJEMTA0RDdEMjlDQzI3NkRGQTMxOTUzMEVEODlGM0NFMDQxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Yi9DytewKu6qlIHSh+DqFxTd 5HjTp346byWu0eNW+bZ+4+33HnetJYvSz+tnaGrKDvZQoT8nOzQECZ3TdrgHEkvn XAy6hJ/QfRxUhJqs9RdP84Qz6RXO8+xcdjbcJce/xadU9/0AV0nTSNCMOSoFlcOz N3qMestzcO3lMWM9f8DIr7gM78UWbS0bPi14P6tD23wcrKZKAyAaN/RUvusNOD0B XAHlBLTOJJz1FokdkhjLjf6jdh6EK1F6FTCWsTp7KYr2YMFSJi8mgmQ/9jThUa39 G9q7uEAhWKaQgbRhaxyA8ybMvYkULWDqoDelHPFikgwtAfWr6UubbNQhIdEJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyuvRBNfSnMJ236MZUw7YnzzgQdgwHwYDVR0j BBgwFoAUIP1w3DAf+T0ojthRw6abItewQiAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTIwRjM3RTFCRDYyQTUxQTk5REVENkI0QTEzOEIwNzBD RTFCOUQzQjNCQUU2M0Y1NTVCMDU3OTAwNUYyMzAwLzAvMjBGRDcwREMzMDFGRjkz RDI4OEVEODUxQzNBNjlCMjJEN0IwNDIyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEZENzBEQzMwMUZGOTNEMjg4 RUQ4NTFDM0E2OUIyMkQ3QjA0MjIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkEyMEYzN0UxQkQ2MkE1MUE5OURFRDZCNEExMzhCMDcwQ0UxQjlEM0Iz QkFFNjNGNTU1QjA1NzkwMDVGMjMwMC8wLzIwRkQ3MERDMzAxRkY5M0QyODhFRDg1 MUMzQTY5QjIyRDdCMDQyMjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeX//ZJzoubdH510tlD5YpdF5G CuL6s9Z/3qQ/d/qKahl9K1lM6cB6xI01kBEriYaMgZJVIz5y7U0/i3nu4Dcgg+fi cmj0Ka+QlZsNCTQ0i0oqHhnSWpPue+5ARujRPNpPRJ+HGGmFL7KG++L6u52QzJNk h2PCHFnqtQ31x6VflGht6OTA33CnITukeAvfLNWPExOYFEWvd8Byxi4yIsrp4Z7I FrkOxFNY+54Ub6bnVaCBYllE/leOWn4tcdZDV+rzLFStj2f1ztaNbkbwZqfBvCV0 IpzQ6Qy/wtf2580wuUXo22hvU+OPHUiyxDt9NeMo5FRk7/CiZglU45pdvSde -----END CERTIFICATE-----Generated at Mon Jul 21 08:08:54 2025 by rpki-client