$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft File: BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft (raw, json) Hash identifier: kkKrhZkRcqLZmhH+fjg5Osh6tu6VRSaN2poHTSq1joA= Subject key identifier: 17:76:45:70:D4:92:66:0E:74:8C:3C:0E:17:B4:C0:1A:BB:A5:9B:76 Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 Certificate issuer: /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Certificate serial: 66A8F00AD7269D4A0C2F5444BB47CC8FBFDDA6DF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft Manifest number: 0100 Signing time: Fri 22 Aug 2025 01:55:04 +0000 Manifest this update: Fri 22 Aug 2025 01:50:04 +0000 Manifest next update: Wed 27 Aug 2025 15:56:04 +0000 Files and hashes: 1: 34352e3232392e3139312e302f32342d3234203d3e20323636373036.roa (hash: sz3S0CVsq3kkBNYyjWtCUza1fFwzCmkYBidmyMc7Aak=) 2: 323830333a626432303a3a2f33322d3332203d3e20323636373036.roa (hash: TDo9I8HOIXVWiAwuFd8E4AxQPm1JNcpGri/yELkIs+A=) 3: 34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa (hash: qDZpwSvgwr35B4Q5Ep3KsiY0eTX8KljaiVEi2IaGUfw=) 4: 34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa (hash: nPvm3kzjbUmYOtzUojc17lqgCTEOSCYg7LLW7Gc1DQs=) 5: 34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa (hash: 7y3IFM3NwuLfRDKqbCtjdZ5YY02akKWgfUvsoylFEKE=) 6: BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl (hash: OBxrVSU0v/FGGKCX5hHpl17F67bfXF99oNJonFTXKt0=) 7: 34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa (hash: +gp+nVFgHvlbQDwBw8l90JcbDYFqIVwQN8Q6fIVq9g4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a8:f0:0a:d7:26:9d:4a:0c:2f:54:44:bb:47:cc:8f:bf:dd:a6:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Validity Not Before: Aug 22 01:50:04 2025 GMT Not After : Aug 27 15:56:04 2025 GMT Subject: CN=17764570D492660E748C3C0E17B4C01ABBA59B76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:74:32:8f:46:80:58:41:df:1a:46:5f:59: 0f:14:7b:44:91:e9:64:1f:9c:25:6d:25:e7:cf:df: 71:e1:27:d3:91:c1:7e:9e:da:c4:ef:be:79:58:40: 5e:d1:ed:ae:15:57:ab:4c:94:47:21:ee:b0:51:b3: 25:82:f2:c3:7d:6e:67:ae:d9:02:46:bd:43:6e:a1: 16:f6:f8:ed:26:d8:af:fd:f1:0d:31:6c:6e:18:c5: a1:17:2b:7e:ae:c7:b3:e8:9a:27:8f:40:02:8d:45: db:92:36:a1:b0:ff:a2:18:b9:b7:a2:75:e1:28:9b: a1:c2:02:70:e5:be:a2:93:62:39:84:db:16:f7:9c: 57:3f:9b:9a:bc:91:63:28:f5:5b:25:fb:94:fd:e9: c8:44:34:cf:ab:cd:b4:a7:d2:c7:ae:8b:d5:74:b2: a9:6b:2f:cf:8a:ca:94:ce:2f:24:53:12:03:90:d1: 21:81:1c:2f:9d:da:1c:10:ce:35:10:e7:96:2c:fc: 54:4e:32:91:91:09:ce:22:e4:e2:e3:c3:97:80:37: 29:1d:12:06:c6:a6:96:29:34:a8:a2:1a:2b:53:db: db:b7:1b:a7:d2:12:bc:87:33:b1:4d:fe:0e:e2:c8: aa:d0:42:dd:fb:bc:45:fc:a6:e8:68:c5:88:ad:2d: 52:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:76:45:70:D4:92:66:0E:74:8C:3C:0E:17:B4:C0:1A:BB:A5:9B:76 X509v3 Authority Key Identifier: keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c6:4a:12:e2:dc:02:c9:8e:4d:d5:ba:5d:d3:8e:26:04:db: b7:c6:d5:90:a0:c0:ef:28:0e:73:ab:c8:96:b4:94:2c:4f:a9: c2:85:4e:b9:7d:ad:7d:03:a3:e2:1f:c0:a6:8e:61:00:11:e9: c3:22:30:d9:1e:fc:72:d5:01:ee:e5:04:24:72:b9:e0:34:b6: 7c:3b:80:4d:84:cf:72:64:03:df:e0:c0:a9:0a:15:63:84:ff: ad:41:48:d3:03:c7:f6:ed:88:34:c7:c1:96:82:c8:4d:02:fc: e7:ea:0f:9c:a4:86:94:ea:66:fc:ea:9b:50:02:73:1c:fa:e9: 42:a9:a9:a9:cf:0a:12:fe:75:5a:93:7d:76:03:06:41:1c:41: f8:1a:c0:11:f4:ed:74:e8:2e:90:f6:39:18:3a:5a:4b:33:c4: 06:4b:a4:a1:d5:ba:05:cb:55:05:62:23:9f:6f:79:76:90:ef: ec:d5:0b:7e:8b:c9:0d:2a:92:00:48:54:89:27:c1:3d:7f:2e: ed:ef:22:b8:74:88:05:af:76:17:38:95:60:8d:aa:63:a5:6d: c7:aa:30:56:4b:53:4b:d2:21:38:50:97:62:a5:8f:54:18:3c: 33:34:e3:06:14:d8:bc:4a:ec:7d:76:0f:4a:df:4b:35:52:ef: 3f:18:6c:67 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZqjwCtcmnUoML1REu0fMj7/dpt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZGMTI4MDRBRDdBNkI2N0RCMzNDQTUwNEJDQzJCQUMz NEE4NTBEODAeFw0yNTA4MjIwMTUwMDRaFw0yNTA4MjcxNTU2MDRaMDMxMTAvBgNV BAMTKDE3NzY0NTcwRDQ5MjY2MEU3NDhDM0MwRTE3QjRDMDFBQkJBNTlCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCerHQyj0aAWEHfGkZfWQ8Ue0SR 6WQfnCVtJefP33HhJ9ORwX6e2sTvvnlYQF7R7a4VV6tMlEch7rBRsyWC8sN9bmeu 2QJGvUNuoRb2+O0m2K/98Q0xbG4YxaEXK36ux7PomiePQAKNRduSNqGw/6IYubei deEom6HCAnDlvqKTYjmE2xb3nFc/m5q8kWMo9Vsl+5T96chENM+rzbSn0seui9V0 sqlrL8+KypTOLyRTEgOQ0SGBHC+d2hwQzjUQ55Ys/FROMpGRCc4i5OLjw5eANykd EgbGppYpNKiiGitT29u3G6fSEryHM7FN/g7iyKrQQt37vEX8puhoxYitLVLbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUF3ZFcNSSZg50jDwOF7TAGrulm3YwHwYDVR0j BBgwFoAUv/EoBK16a2fbM8pQS8wrrDSoUNgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NzMzNUY4RkRGMTcxNDAyMEY5RTFBRTY5RDc2NzA1NUMz OEZBNzg3N0ExRDJENjUyN0VDODRBRUI0RDM1NEEyLzAvQkZGMTI4MDRBRDdBNkI2 N0RCMzNDQTUwNEJDQzJCQUMzNEE4NTBEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkYxMjgwNEFEN0E2QjY3REIz M0NBNTA0QkNDMkJBQzM0QTg1MEQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTczMzVGOEZERjE3MTQwMjBGOUUxQUU2OUQ3NjcwNTVDMzhGQTc4NzdB MUQyRDY1MjdFQzg0QUVCNEQzNTRBMi8wL0JGRjEyODA0QUQ3QTZCNjdEQjMzQ0E1 MDRCQ0MyQkFDMzRBODUwRDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4xkoS4twCyY5N1bpd044mBNu3 xtWQoMDvKA5zq8iWtJQsT6nChU65fa19A6PiH8CmjmEAEenDIjDZHvxy1QHu5QQk crngNLZ8O4BNhM9yZAPf4MCpChVjhP+tQUjTA8f27Yg0x8GWgshNAvzn6g+cpIaU 6mb86ptQAnMc+ulCqampzwoS/nVak312AwZBHEH4GsAR9O106C6Q9jkYOlpLM8QG S6Sh1boFy1UFYiOfb3l2kO/s1Qt+i8kNKpIASFSJJ8E9fy7t7yK4dIgFr3YXOJVg japjpW3HqjBWS1NL0iE4UJdipY9UGDwzNOMGFNi8Sux9dg9K30s1Uu8/GGxn -----END CERTIFICATE-----Generated at Sat Aug 23 10:58:57 2025 by rpki-client