$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft File: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft (raw, json) Hash identifier: 6y+1HUlox4AE96WqqKGsWt0FZLsyT+AFZuPv4J1CSnY= Subject key identifier: F8:F5:A8:3B:F3:89:19:91:55:2B:CD:AB:A9:98:AA:0B:CE:F0:11:33 Authority key identifier: BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7 Certificate issuer: /CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7 Certificate serial: 59FCE8E1BDC9434AF35A5F625DE851D5A4781513 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft Manifest number: 012D Signing time: Mon 20 Oct 2025 12:39:53 +0000 Manifest this update: Mon 20 Oct 2025 12:34:53 +0000 Manifest next update: Sat 25 Oct 2025 11:00:53 +0000 Files and hashes: 1: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl (hash: 08cy8koXbeycZ7jLC2Y0j66TJruSlwLWZQMYvjP0iTA=) 2: 323830333a663539303a3a2f33322d3438203d3e20323732393836.roa (hash: TnOVedbp+yogJRQK4jz8NHuHBn2RuKd+k8b7N8MvRe4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:fc:e8:e1:bd:c9:43:4a:f3:5a:5f:62:5d:e8:51:d5:a4:78:15:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7 Validity Not Before: Oct 20 12:34:53 2025 GMT Not After : Oct 25 11:00:53 2025 GMT Subject: CN=F8F5A83BF3891991552BCDABA998AA0BCEF01133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:51:45:c8:3a:ca:fb:a3:b9:50:c8:62:68: b1:01:62:f9:18:d7:5f:e1:7e:a6:6c:f1:c6:26:8e: cc:e3:a9:f1:92:1f:24:ff:2c:ca:83:42:3e:c9:2a: 6c:1c:a6:97:66:6a:7b:a4:c1:19:6e:d3:43:f6:69: 74:66:a9:66:95:76:23:14:d1:88:f4:13:8c:ad:7a: c6:5a:b3:37:57:7a:80:35:3e:eb:75:39:ea:c9:2a: 4c:bb:1a:b7:30:07:88:6b:a5:76:6a:a6:40:51:cc: b0:4e:a3:96:49:53:80:ec:58:85:e0:99:a8:7e:76: cd:67:11:29:89:f2:f8:50:4d:5a:e1:a5:1d:b3:74: ee:8c:af:da:2d:55:95:a9:96:22:fe:50:05:a8:85: 37:3b:c8:03:2a:de:f8:b2:09:e6:18:5b:84:c8:70: a7:57:ea:26:79:d1:81:96:4f:47:eb:45:0d:e3:cc: df:da:27:27:15:69:02:d9:6e:8b:8e:88:c0:c0:df: 78:2e:7b:b3:46:c5:e4:e0:99:f7:c6:54:95:ba:43: cd:8e:ac:e1:5e:01:76:43:09:c9:10:42:8e:9f:77: bb:38:2c:47:09:a7:36:bd:ae:78:14:e6:93:ba:ab: 47:64:9e:ed:f7:14:70:89:d6:cc:24:ab:02:7b:69: 94:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F5:A8:3B:F3:89:19:91:55:2B:CD:AB:A9:98:AA:0B:CE:F0:11:33 X509v3 Authority Key Identifier: keyid:BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:67:ba:9a:b7:a9:2e:ca:30:07:85:f5:65:f2:21:84:ee:fa: 09:38:5f:9a:5c:79:c1:fc:db:c8:60:6d:e5:f4:ce:b9:35:7c: bb:d3:c2:16:33:62:d5:69:f5:7a:89:f2:90:eb:a5:39:53:c8: 70:88:9f:47:33:0a:01:75:48:14:72:0a:fe:45:8f:84:f1:93: f1:93:17:0b:45:9f:24:67:6f:02:58:5d:9f:05:27:51:a6:dc: fa:7e:b1:61:1a:54:5b:9d:c6:aa:19:bc:29:00:9b:f4:50:a5: 7a:95:4c:8d:f5:b9:b4:b4:46:1c:84:0f:42:c6:3d:46:ad:69: 22:c0:3d:f7:48:fe:49:83:92:b5:95:6c:a3:d3:c8:df:84:8c: c7:1e:f2:8e:c4:39:7c:66:e0:f9:7e:14:b9:bd:31:48:66:01: c2:f0:f8:97:9f:aa:6a:3f:74:34:42:8f:30:0b:3e:49:d5:37: e3:ee:93:8c:0f:bb:78:92:47:1c:ed:9d:01:8d:9e:f1:46:f2: 62:5e:5e:0a:bb:f3:d3:eb:58:c0:1f:f7:b8:76:d0:84:b3:30: d9:14:22:8e:5d:fa:0c:8e:8d:d3:59:a5:09:c2:97:ff:d7:fd: 84:30:4e:0f:a9:76:bf:a9:bf:5d:c2:62:b0:d0:c0:43:c4:82: 0e:d2:36:6b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWfzo4b3JQ0rzWl9iXehR1aR4FRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDM5OEJBQ0UzOTBDMjZBMzJDRDRDNzc1OEFBMUZB OUUzN0NDNzAeFw0yNTEwMjAxMjM0NTNaFw0yNTEwMjUxMTAwNTNaMDMxMTAvBgNV BAMTKEY4RjVBODNCRjM4OTE5OTE1NTJCQ0RBQkE5OThBQTBCQ0VGMDExMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5FFFyDrK+6O5UMhiaLEBYvkY 11/hfqZs8cYmjszjqfGSHyT/LMqDQj7JKmwcppdmanukwRlu00P2aXRmqWaVdiMU 0Yj0E4ytesZaszdXeoA1Put1OerJKky7GrcwB4hrpXZqpkBRzLBOo5ZJU4DsWIXg mah+ds1nESmJ8vhQTVrhpR2zdO6Mr9otVZWpliL+UAWohTc7yAMq3viyCeYYW4TI cKdX6iZ50YGWT0frRQ3jzN/aJycVaQLZbouOiMDA33gue7NGxeTgmffGVJW6Q82O rOFeAXZDCckQQo6fd7s4LEcJpza9rngU5pO6q0dknu33FHCJ1swkqwJ7aZTvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU+PWoO/OJGZFVK82rqZiqC87wETMwHwYDVR0j BBgwFoAUvZ05i6zjkMJqMs1Md1iqH6njfMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzdFQUQ3NjcyQzJCMUE1RTNEM0Y2OURGQ0I5NjRDODY2 RUQ0Q0E3QzlCMkZGN0RCMTMxRjc2RDY4QzRCQzA0LzAvQkQ5RDM5OEJBQ0UzOTBD MjZBMzJDRDRDNzc1OEFBMUZBOUUzN0NDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDlEMzk4QkFDRTM5MEMyNkEz MkNENEM3NzU4QUExRkE5RTM3Q0M3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjc3RUFENzY3MkMyQjFBNUUzRDNGNjlERkNCOTY0Qzg2NkVENENBN0M5 QjJGRjdEQjEzMUY3NkQ2OEM0QkMwNC8wL0JEOUQzOThCQUNFMzkwQzI2QTMyQ0Q0 Qzc3NThBQTFGQTlFMzdDQzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTZ7qat6kuyjAHhfVl8iGE7voJ OF+aXHnB/NvIYG3l9M65NXy708IWM2LVafV6ifKQ66U5U8hwiJ9HMwoBdUgUcgr+ RY+E8ZPxkxcLRZ8kZ28CWF2fBSdRptz6frFhGlRbncaqGbwpAJv0UKV6lUyN9bm0 tEYchA9Cxj1GrWkiwD33SP5Jg5K1lWyj08jfhIzHHvKOxDl8ZuD5fhS5vTFIZgHC 8PiXn6pqP3Q0Qo8wCz5J1Tfj7pOMD7t4kkcc7Z0BjZ7xRvJiXl4Ku/PT61jAH/e4 dtCEszDZFCKOXfoMjo3TWaUJwpf/1/2EME4PqXa/qb9dwmKw0MBDxIIO0jZr -----END CERTIFICATE-----Generated at Tue Oct 21 04:53:27 2025 by rpki-client