$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft File: BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft (raw, json) Hash identifier: IrM4E//LAT+49Dg+IMnRf0WWCcFhEzKa2IRowltpaPg= Subject key identifier: 50:6E:AF:DE:01:32:87:4B:F5:E8:FB:18:AA:3C:E4:A2:EE:1A:B8:80 Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 Certificate issuer: /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Certificate serial: 1830979291850E8C687AFD5AA53E96E8CA88A2C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft Manifest number: 016A Signing time: Wed 25 Mar 2026 20:09:18 +0000 Manifest this update: Wed 25 Mar 2026 20:04:18 +0000 Manifest next update: Tue 31 Mar 2026 12:56:18 +0000 Files and hashes: 1: 34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa (hash: Wc6QZnIEsEvKOcH1eRt+OYJlvL/DMrEN27Kg3GB7A2k=) 2: 34352e3232392e3139312e302f32342d3234203d3e20323636373036.roa (hash: EMbSOHh+beYshnN0zsEaJZcg/AJ4W2Dpfqwa1BvYEFM=) 3: 34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa (hash: gkzinJ0xbHkh29po9hOY1oe/UJUwDf1i+ETyrKy++vI=) 4: 34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa (hash: QU0G0JEy2ysZ/0kzoIL4B8Mfpnbo6GEW6yMKbdITVQU=) 5: 34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa (hash: gbOdkpiAR2Z3r9HcBmFRW3IoR96UR3+NGq90ZsMBAQM=) 6: BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl (hash: DvQm2K1kh3zqeyWwSbnL1XKCah7wFySP7Qsryz27PfM=) 7: 323830333a626432303a3a2f33322d3332203d3e20323636373036.roa (hash: jLQbUiDDQyd/CIC+Gw7Ydr9UDFtQsN7ilymgqh2pHMY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:30:97:92:91:85:0e:8c:68:7a:fd:5a:a5:3e:96:e8:ca:88:a2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Validity Not Before: Mar 25 20:04:18 2026 GMT Not After : Mar 31 12:56:18 2026 GMT Subject: CN=506EAFDE0132874BF5E8FB18AA3CE4A2EE1AB880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:07:b6:ac:44:37:50:28:6c:5e:1a:5b:3d:aa: 98:af:25:f1:02:90:fa:b6:36:5b:01:8a:07:dc:c1: cb:ab:b9:5f:a7:17:cb:fa:08:c7:db:b9:ca:f2:0c: 92:13:a6:48:5e:b5:c4:e4:af:5c:1e:1c:d2:13:9d: 3b:fc:26:8c:87:09:60:f1:d8:ae:7b:ae:42:a4:81: 4b:2a:9f:31:30:79:e0:d9:61:02:bb:dc:27:f5:9d: ed:24:3f:d9:09:51:57:39:a6:43:46:a4:53:5b:8d: 0e:3b:35:65:d4:e3:48:90:50:7d:69:a9:af:6e:c8: ae:71:b3:f4:dc:9d:c6:7c:b0:49:f9:db:d1:d1:23: 59:b5:f4:da:c8:c6:d5:88:4b:95:13:4e:d9:55:2f: ce:e1:4c:44:b5:7d:f0:f5:40:f3:54:cf:4f:44:31: 15:e9:f8:c1:75:49:d0:68:dc:47:65:99:de:32:15: 21:f9:04:6c:12:38:89:98:20:44:91:52:14:be:87: cb:8f:e0:c5:1b:7e:b8:85:50:6b:35:cf:3b:d5:0d: 55:9f:b3:53:27:12:3e:8b:6e:7c:f1:66:24:74:a0: ff:7d:f4:45:0d:5d:c7:ea:c8:f4:c4:b3:15:b3:ce: 7a:b3:4f:23:7f:98:cb:91:96:bb:41:d4:12:ef:47: 19:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6E:AF:DE:01:32:87:4B:F5:E8:FB:18:AA:3C:E4:A2:EE:1A:B8:80 X509v3 Authority Key Identifier: keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c0:a9:19:e2:9c:27:e3:85:24:7e:3a:40:b6:bd:8b:0d:92: 4d:3f:f4:2c:14:5f:94:d1:26:e6:57:5b:28:f5:69:a3:56:ae: da:ed:4d:af:71:d1:28:bc:b7:7c:16:46:a5:c8:9a:21:e4:e8: 63:68:e8:93:e6:ec:40:54:0d:4d:22:2d:43:0f:b1:42:c6:54: 86:18:43:9b:96:42:6a:6a:45:e5:c4:55:9a:7c:17:1f:dd:60: f7:05:9e:3c:07:59:6a:f7:e5:ce:78:76:44:1f:34:1d:b7:67: ef:09:25:ee:e2:4c:14:29:fd:ad:3e:e3:62:c7:77:f8:5f:ce: da:cd:3c:16:d6:dc:c5:fb:eb:83:a3:ce:02:99:c3:c9:2f:74: d3:42:60:ac:ce:75:d4:70:f3:82:91:55:f0:56:50:41:b0:5c: 69:11:ad:f3:3b:45:72:c2:d5:14:24:28:d6:85:44:6e:07:21: 62:f3:78:34:aa:18:8d:2e:b4:81:83:e4:b5:a1:44:8c:9a:ed: 1f:e2:f0:21:e1:16:e7:69:bd:c7:ed:c6:11:cc:a4:aa:3c:77: 47:52:2d:f7:4b:db:28:bd:d5:19:fb:2c:55:36:a0:8a:94:8d: c7:08:4c:f1:88:2c:37:b2:5b:b6:d4:df:ed:2f:a6:f4:be:70: 3d:3b:19:77 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGDCXkpGFDoxoev1apT6W6MqIoscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZGMTI4MDRBRDdBNkI2N0RCMzNDQTUwNEJDQzJCQUMz NEE4NTBEODAeFw0yNjAzMjUyMDA0MThaFw0yNjAzMzExMjU2MThaMDMxMTAvBgNV BAMTKDUwNkVBRkRFMDEzMjg3NEJGNUU4RkIxOEFBM0NFNEEyRUUxQUI4ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRB7asRDdQKGxeGls9qpivJfEC kPq2NlsBigfcwcuruV+nF8v6CMfbucryDJITpkhetcTkr1weHNITnTv8JoyHCWDx 2K57rkKkgUsqnzEweeDZYQK73Cf1ne0kP9kJUVc5pkNGpFNbjQ47NWXU40iQUH1p qa9uyK5xs/TcncZ8sEn529HRI1m19NrIxtWIS5UTTtlVL87hTES1ffD1QPNUz09E MRXp+MF1SdBo3Edlmd4yFSH5BGwSOImYIESRUhS+h8uP4MUbfriFUGs1zzvVDVWf s1MnEj6LbnzxZiR0oP999EUNXcfqyPTEsxWzznqzTyN/mMuRlrtB1BLvRxmbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUUG6v3gEyh0v16PsYqjzkou4auIAwHwYDVR0j BBgwFoAUv/EoBK16a2fbM8pQS8wrrDSoUNgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NzMzNUY4RkRGMTcxNDAyMEY5RTFBRTY5RDc2NzA1NUMz OEZBNzg3N0ExRDJENjUyN0VDODRBRUI0RDM1NEEyLzAvQkZGMTI4MDRBRDdBNkI2 N0RCMzNDQTUwNEJDQzJCQUMzNEE4NTBEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkYxMjgwNEFEN0E2QjY3REIz M0NBNTA0QkNDMkJBQzM0QTg1MEQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTczMzVGOEZERjE3MTQwMjBGOUUxQUU2OUQ3NjcwNTVDMzhGQTc4NzdB MUQyRDY1MjdFQzg0QUVCNEQzNTRBMi8wL0JGRjEyODA0QUQ3QTZCNjdEQjMzQ0E1 MDRCQ0MyQkFDMzRBODUwRDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHwKkZ4pwn44UkfjpAtr2LDZJN P/QsFF+U0SbmV1so9WmjVq7a7U2vcdEovLd8FkalyJoh5OhjaOiT5uxAVA1NIi1D D7FCxlSGGEOblkJqakXlxFWafBcf3WD3BZ48B1lq9+XOeHZEHzQdt2fvCSXu4kwU Kf2tPuNix3f4X87azTwW1tzF++uDo84CmcPJL3TTQmCsznXUcPOCkVXwVlBBsFxp Ea3zO0VywtUUJCjWhURuByFi83g0qhiNLrSBg+S1oUSMmu0f4vAh4Rbnab3H7cYR zKSqPHdHUi33S9sovdUZ+yxVNqCKlI3HCEzxiCw3slu21N/tL6b0vnA9Oxl3 -----END CERTIFICATE-----Generated at Fri Mar 27 02:20:34 2026 by rpki-client