$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft File: BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft (raw, json) Hash identifier: G2y3cTkOUJ445KO8Cs4tBBIAjtHIGNTc2+vfNXYfhLQ= Subject key identifier: E2:CB:2C:AC:9C:D6:24:61:1F:E8:60:15:7B:7D:05:E2:0F:3C:F4:2D Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 Certificate issuer: /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Certificate serial: 20A4E16A05BDAC058A043EEECEDE74802CFC390A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft Manifest number: 01A5 Signing time: Thu 23 Jul 2026 13:48:57 +0000 Manifest this update: Thu 23 Jul 2026 13:43:57 +0000 Manifest next update: Tue 28 Jul 2026 16:12:57 +0000 Files and hashes: 1: 34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa (hash: gkzinJ0xbHkh29po9hOY1oe/UJUwDf1i+ETyrKy++vI=) 2: 34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa (hash: gbOdkpiAR2Z3r9HcBmFRW3IoR96UR3+NGq90ZsMBAQM=) 3: 323830333a626432303a3a2f33322d3332203d3e20323636373036.roa (hash: jLQbUiDDQyd/CIC+Gw7Ydr9UDFtQsN7ilymgqh2pHMY=) 4: 34352e3232392e3139312e302f32342d3234203d3e20323636373036.roa (hash: EMbSOHh+beYshnN0zsEaJZcg/AJ4W2Dpfqwa1BvYEFM=) 5: 34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa (hash: QU0G0JEy2ysZ/0kzoIL4B8Mfpnbo6GEW6yMKbdITVQU=) 6: 34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa (hash: Wc6QZnIEsEvKOcH1eRt+OYJlvL/DMrEN27Kg3GB7A2k=) 7: BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl (hash: iv/9FgK42xJ+r8kL063Z6CuiM+YrOnANRZs3hlR0WSw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a4:e1:6a:05:bd:ac:05:8a:04:3e:ee:ce:de:74:80:2c:fc:39:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Validity Not Before: Jul 23 13:43:57 2026 GMT Not After : Jul 28 16:12:57 2026 GMT Subject: CN=E2CB2CAC9CD624611FE860157B7D05E20F3CF42D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:f2:2e:fc:d9:5b:8c:88:ac:15:9c:ab:a0: 87:73:26:07:29:00:cb:96:9e:2a:83:3c:f2:1d:14: 40:9b:48:e3:37:8f:b8:30:fe:46:9e:ea:e6:6c:e4: 50:45:20:d1:96:39:4e:53:f3:5a:43:be:1d:b8:00: 54:fc:90:e7:58:b2:57:0e:1d:66:19:31:a4:55:06: 91:9f:ca:83:fd:4f:05:7b:7e:82:ad:3a:33:d5:39: 7b:e0:f5:cd:de:8c:eb:ad:11:54:a9:83:98:e7:f5: ad:b2:46:d6:37:77:7a:15:15:a2:10:f8:17:35:3f: 83:7a:9f:95:85:de:a1:d5:14:e6:d1:8e:9a:c1:bf: a1:39:e4:80:50:5a:5f:02:ef:5b:06:8d:d9:4b:e9: 67:c3:32:91:da:26:9e:78:46:a5:f5:1b:61:4c:0c: 7c:03:48:d9:fb:10:b8:b1:11:ea:65:de:17:1a:ea: 7d:ed:de:1b:30:be:a3:dd:e5:3f:26:8b:70:50:bc: c8:6b:f9:e5:15:a3:cc:62:c6:c3:47:96:ea:54:d7: ee:40:84:64:f5:18:57:6a:5c:79:94:43:9f:4d:f0: 77:70:32:9f:b0:38:9a:b2:9e:69:a0:cc:e0:e6:8e: 75:ad:33:e3:99:e4:7d:2b:19:a2:c8:86:ee:a6:0f: 0b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CB:2C:AC:9C:D6:24:61:1F:E8:60:15:7B:7D:05:E2:0F:3C:F4:2D X509v3 Authority Key Identifier: keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e5:e8:ee:f5:20:4d:76:35:67:fc:43:e2:e6:47:3f:af:36: a3:d6:33:0a:b9:10:5b:76:89:79:a6:d7:48:48:18:26:2c:e3: c4:79:1b:3c:4a:4e:5e:9b:5b:da:3e:b0:39:f7:50:ea:28:09: 33:f0:d8:df:5a:d7:03:34:fa:93:4f:54:7c:37:79:a6:96:53: b7:8a:f1:dc:c2:62:8d:34:51:7b:f0:8b:cb:57:e8:ac:f3:f4: 6d:86:3d:44:c4:a2:93:7f:ce:26:bf:76:a7:8e:00:7a:b6:f6: 0f:b5:29:03:a9:1f:d4:cb:e4:3b:fc:80:8e:82:50:49:1c:22: bb:a0:1c:bf:20:65:b6:51:11:8a:1b:d4:bc:58:c1:97:bd:a7: ab:32:ef:1d:0e:7f:fa:a4:2c:cd:e7:85:fc:cc:57:cd:3d:b3: d3:a3:63:fd:87:19:60:c8:b5:75:04:7c:cb:ee:d0:41:8a:8c: 9c:c5:44:c7:e0:f5:d4:80:25:c6:20:cd:67:aa:27:d7:65:5c: 9d:ef:99:68:d4:bb:44:39:57:e2:f1:b5:00:38:33:4b:46:d4: 56:2d:66:96:9f:c7:9f:5e:43:ac:e2:b2:d0:f5:cc:61:d4:84: 4f:ca:cf:ba:a9:a3:86:0b:0a:85:4c:20:72:e3:c1:07:a9:74: d0:5d:25:43 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIKThagW9rAWKBD7uzt50gCz8OQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZGMTI4MDRBRDdBNkI2N0RCMzNDQTUwNEJDQzJCQUMz NEE4NTBEODAeFw0yNjA3MjMxMzQzNTdaFw0yNjA3MjgxNjEyNTdaMDMxMTAvBgNV BAMTKEUyQ0IyQ0FDOUNENjI0NjExRkU4NjAxNTdCN0QwNUUyMEYzQ0Y0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCj/Iu/NlbjIisFZyroIdzJgcp AMuWniqDPPIdFECbSOM3j7gw/kae6uZs5FBFINGWOU5T81pDvh24AFT8kOdYslcO HWYZMaRVBpGfyoP9TwV7foKtOjPVOXvg9c3ejOutEVSpg5jn9a2yRtY3d3oVFaIQ +Bc1P4N6n5WF3qHVFObRjprBv6E55IBQWl8C71sGjdlL6WfDMpHaJp54RqX1G2FM DHwDSNn7ELixEepl3hca6n3t3hswvqPd5T8mi3BQvMhr+eUVo8xixsNHlupU1+5A hGT1GFdqXHmUQ59N8HdwMp+wOJqynmmgzODmjnWtM+OZ5H0rGaLIhu6mDwvvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU4sssrJzWJGEf6GAVe30F4g889C0wHwYDVR0j BBgwFoAUv/EoBK16a2fbM8pQS8wrrDSoUNgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NzMzNUY4RkRGMTcxNDAyMEY5RTFBRTY5RDc2NzA1NUMz OEZBNzg3N0ExRDJENjUyN0VDODRBRUI0RDM1NEEyLzAvQkZGMTI4MDRBRDdBNkI2 N0RCMzNDQTUwNEJDQzJCQUMzNEE4NTBEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkYxMjgwNEFEN0E2QjY3REIz M0NBNTA0QkNDMkJBQzM0QTg1MEQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTczMzVGOEZERjE3MTQwMjBGOUUxQUU2OUQ3NjcwNTVDMzhGQTc4NzdB MUQyRDY1MjdFQzg0QUVCNEQzNTRBMi8wL0JGRjEyODA0QUQ3QTZCNjdEQjMzQ0E1 MDRCQ0MyQkFDMzRBODUwRDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCU5eju9SBNdjVn/EPi5kc/rzaj 1jMKuRBbdol5ptdISBgmLOPEeRs8Sk5em1vaPrA591DqKAkz8NjfWtcDNPqTT1R8 N3mmllO3ivHcwmKNNFF78IvLV+is8/Rthj1ExKKTf84mv3anjgB6tvYPtSkDqR/U y+Q7/ICOglBJHCK7oBy/IGW2URGKG9S8WMGXvaerMu8dDn/6pCzN54X8zFfNPbPT o2P9hxlgyLV1BHzL7tBBioycxUTH4PXUgCXGIM1nqifXZVyd75lo1LtEOVfi8bUA ODNLRtRWLWaWn8efXkOs4rLQ9cxh1IRPys+6qaOGCwqFTCBy48EHqXTQXSVD -----END CERTIFICATE-----Generated at Thu Jul 23 23:38:52 2026 by rpki-client