$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft File: 20FD70DC301FF93D288ED851C3A69B22D7B04220.mft (raw, json) Hash identifier: aRtCYedZfFVkaeK20O52czSqFHeFfkok05AjHY6F2Y4= Subject key identifier: F0:4B:52:A4:D9:F5:31:43:F2:C4:C2:C9:8E:6F:7B:3E:84:17:46:01 Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 Certificate issuer: /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Certificate serial: 657645386DD0AE3DF696454D34960297A61358A8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft Manifest number: 01E7 Signing time: Wed 28 Oct 2026 19:05:46 +0000 Manifest this update: Wed 28 Oct 2026 19:00:46 +0000 Manifest next update: Tue 03 Nov 2026 10:20:46 +0000 Files and hashes: 1: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (hash: g8hHWzP4kDSiOiSHBMQM7MYWGMPCqeG59pSNv4PvdWU=) 2: 20FD70DC301FF93D288ED851C3A69B22D7B04220.crl (hash: 8IQantkFBnb2AUkhhm4sDDwUtZDmMQt48ntsVrxKVPw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 10:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:76:45:38:6d:d0:ae:3d:f6:96:45:4d:34:96:02:97:a6:13:58:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Validity Not Before: Oct 28 19:00:46 2026 GMT Not After : Nov 3 10:20:46 2026 GMT Subject: CN=F04B52A4D9F53143F2C4C2C98E6F7B3E84174601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:32:23:17:93:d7:a0:24:4c:0c:fe:07:48: b0:48:3f:f6:20:dd:50:fd:aa:4b:e4:2f:cc:da:76: 71:0e:0d:97:1d:fb:5a:ae:40:e4:cc:16:3b:f3:44: af:c8:4b:e1:f1:3c:94:b1:a4:ae:86:7a:a4:57:31: 78:9b:0f:3b:96:23:e4:e1:0f:cf:44:5d:7c:99:48: 1a:b7:3c:60:99:98:0d:8e:7f:22:7e:d6:48:e1:42: 05:57:48:f7:9b:3f:5c:08:77:83:69:1f:1c:4c:bc: d0:3f:a5:c2:68:40:f1:ab:90:41:ca:f7:36:31:eb: e5:3d:e2:ea:ba:9b:5f:67:ba:12:9f:97:f0:c1:b4: ce:e7:57:28:04:91:76:bf:2a:11:18:49:b8:2e:de: 3c:49:87:9e:82:2f:68:37:6f:2e:73:69:80:4a:ee: f2:a6:62:87:7b:05:97:6c:5b:ae:d8:a5:ef:77:ac: 1d:0f:c7:f8:97:73:a5:71:89:14:82:ad:16:ce:f9: 2c:d2:02:66:93:a6:c2:2d:96:ee:74:37:59:40:dd: d8:f2:39:71:fa:70:fe:34:9f:ad:92:70:bc:bb:8e: 21:db:7c:c3:01:8b:20:c2:e2:31:a6:79:c9:28:46: 8b:67:3d:3d:b5:2b:4b:65:73:9b:d2:d7:88:ac:56: 83:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4B:52:A4:D9:F5:31:43:F2:C4:C2:C9:8E:6F:7B:3E:84:17:46:01 X509v3 Authority Key Identifier: keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:9b:e4:6b:65:35:10:b4:8e:87:70:0b:55:ec:0e:8c:db:b4: 47:5f:08:18:af:93:8c:b2:45:df:df:20:ff:bb:cc:05:4b:bb: 5a:43:64:35:00:07:2f:e4:ee:ef:f8:cc:53:35:58:a9:20:c8: 64:5b:38:5d:f8:56:f4:46:25:72:7d:52:58:1c:3f:57:d2:f6: 0f:85:dd:6e:df:74:58:ef:a7:30:01:f3:66:e4:54:ee:ac:a9: a1:50:57:70:65:0e:e0:c8:01:fd:7d:b9:79:65:67:ba:a0:a3: 0c:28:ae:7f:33:c3:db:fc:2d:5c:2b:17:2e:70:94:4a:4d:b2: 54:7d:30:29:ac:67:77:a0:83:9f:0a:45:9a:1b:70:e4:28:bc: 4a:b1:44:a6:21:eb:7e:22:69:91:8e:9f:1f:2e:b0:74:2b:92: de:af:f5:76:3b:d4:d7:fb:60:7d:17:92:eb:27:9d:d7:6c:3a: 95:f5:3a:e8:45:eb:4e:3d:4e:16:44:b0:b5:a1:37:05:fb:1b: 1a:0d:85:02:a2:25:e2:2b:be:c0:5e:ac:b6:b6:6c:f6:ee:1e: 18:e6:9a:45:d6:91:7b:5d:b1:52:bb:5f:fc:d6:ac:c8:8f:81: 7a:35:e7:4a:0c:c6:17:1c:fa:a3:f8:b7:7d:dd:f2:1d:56:35: 81:a1:88:70 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZXZFOG3Qrj32lkVNNJYCl6YTWKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDcwREMzMDFGRjkzRDI4OEVEODUxQzNBNjlCMjJE N0IwNDIyMDAeFw0yNjEwMjgxOTAwNDZaFw0yNjExMDMxMDIwNDZaMDMxMTAvBgNV BAMTKEYwNEI1MkE0RDlGNTMxNDNGMkM0QzJDOThFNkY3QjNFODQxNzQ2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YDIjF5PXoCRMDP4HSLBIP/Yg 3VD9qkvkL8zadnEODZcd+1quQOTMFjvzRK/IS+HxPJSxpK6GeqRXMXibDzuWI+Th D89EXXyZSBq3PGCZmA2OfyJ+1kjhQgVXSPebP1wId4NpHxxMvNA/pcJoQPGrkEHK 9zYx6+U94uq6m19nuhKfl/DBtM7nVygEkXa/KhEYSbgu3jxJh56CL2g3by5zaYBK 7vKmYod7BZdsW67Ype93rB0Px/iXc6VxiRSCrRbO+SzSAmaTpsItlu50N1lA3djy OXH6cP40n62ScLy7jiHbfMMBiyDC4jGmeckoRotnPT21K0tlc5vS14isVoN1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8EtSpNn1MUPyxMLJjm97PoQXRgEwHwYDVR0j BBgwFoAUIP1w3DAf+T0ojthRw6abItewQiAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTIwRjM3RTFCRDYyQTUxQTk5REVENkI0QTEzOEIwNzBD RTFCOUQzQjNCQUU2M0Y1NTVCMDU3OTAwNUYyMzAwLzAvMjBGRDcwREMzMDFGRjkz RDI4OEVEODUxQzNBNjlCMjJEN0IwNDIyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEZENzBEQzMwMUZGOTNEMjg4 RUQ4NTFDM0E2OUIyMkQ3QjA0MjIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkEyMEYzN0UxQkQ2MkE1MUE5OURFRDZCNEExMzhCMDcwQ0UxQjlEM0Iz QkFFNjNGNTU1QjA1NzkwMDVGMjMwMC8wLzIwRkQ3MERDMzAxRkY5M0QyODhFRDg1 MUMzQTY5QjIyRDdCMDQyMjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsm+RrZTUQtI6HcAtV7A6M27RH XwgYr5OMskXf3yD/u8wFS7taQ2Q1AAcv5O7v+MxTNVipIMhkWzhd+Fb0RiVyfVJY HD9X0vYPhd1u33RY76cwAfNm5FTurKmhUFdwZQ7gyAH9fbl5ZWe6oKMMKK5/M8Pb /C1cKxcucJRKTbJUfTAprGd3oIOfCkWaG3DkKLxKsUSmIet+ImmRjp8fLrB0K5Le r/V2O9TX+2B9F5LrJ53XbDqV9TroRetOPU4WRLC1oTcF+xsaDYUCoiXiK77AXqy2 tmz27h4Y5ppF1pF7XbFSu1/81qzIj4F6NedKDMYXHPqj+Ld93fIdVjWBoYhw -----END CERTIFICATE-----Generated at Thu Oct 29 20:08:20 2026 by rpki-client