$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft File: BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft (raw, json) Hash identifier: Sy59QhSPOza0iFtLFZG1EgkzLnHjw/IxIoHjc7UhwtE= Subject key identifier: 47:C0:12:2B:90:4F:8F:F2:8B:28:E8:25:69:59:49:00:1E:72:96:5E Authority key identifier: BF:BF:EA:F4:9C:CC:A7:EA:7E:94:46:49:17:85:35:78:7F:34:F0:D7 Certificate issuer: /CN=BFBFEAF49CCCA7EA7E944649178535787F34F0D7 Certificate serial: 2D264D7D9E99CF0D27F6B2871A88EC57F530FC3E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft Manifest number: 0128 Signing time: Sun 19 Oct 2025 04:28:28 +0000 Manifest this update: Sun 19 Oct 2025 04:23:28 +0000 Manifest next update: Fri 24 Oct 2025 06:51:28 +0000 Files and hashes: 1: 3138312e3232342e3139392e302f32342d3234203d3e20323732303638.roa (hash: y8RjqaR1+jlD/CLpe7yUilcrJe6OadhXzrRNJKQDmFs=) 2: BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl (hash: 9Es9VBVabGAPW3aCMVMhrpt8zd1lXR6S8VFy2qHQJa0=) 3: 323830333a643331303a3a2f33322d3438203d3e20323732303638.roa (hash: FSoCslfLPaxH187OItbFpX2Ja19w27sZFd6D46Nj6IE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:26:4d:7d:9e:99:cf:0d:27:f6:b2:87:1a:88:ec:57:f5:30:fc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFBFEAF49CCCA7EA7E944649178535787F34F0D7 Validity Not Before: Oct 19 04:23:28 2025 GMT Not After : Oct 24 06:51:28 2025 GMT Subject: CN=47C0122B904F8FF28B28E825695949001E72965E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6d:8a:86:5b:aa:32:56:e1:0d:ae:a4:1c:be: 86:4a:f1:4d:44:01:0a:41:c9:52:55:6d:a4:65:99: 6b:fc:94:8f:ad:1d:5e:67:be:79:a3:81:9f:8c:06: 52:6c:3a:90:bc:3b:00:c8:cd:35:b5:c6:25:0c:23: 3c:11:26:90:e7:f8:62:fd:4e:4c:21:80:6b:f8:65: 94:98:df:4c:71:93:4c:32:96:8a:36:3a:50:77:2b: a9:74:c7:d7:9f:15:b0:9e:3d:de:e4:e8:8f:34:6b: 92:c5:cf:fd:86:84:e4:16:29:69:54:41:7d:23:71: 4b:99:2e:be:36:99:72:4b:c5:6d:e4:0c:49:a5:02: dd:8a:dc:17:b1:fc:8c:07:05:26:1d:9d:6f:93:e9: 3d:de:14:20:c7:61:e1:72:6c:b2:4b:60:93:98:82: b7:b6:cb:01:33:fd:ef:fb:0e:3c:62:24:44:a6:bc: 8c:c7:2b:8d:b3:0a:ec:86:31:3d:28:c6:d2:26:c9: 95:c1:11:39:a8:3d:12:0c:24:e3:0d:67:68:6d:5b: 77:09:c8:09:e7:83:33:ec:d1:48:3e:2c:e4:86:60: 39:87:cc:b0:43:cb:ae:f1:9b:f4:65:b4:52:b4:0a: c1:c0:a9:b5:18:98:1a:e9:bb:33:45:4c:80:fe:18: 1b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C0:12:2B:90:4F:8F:F2:8B:28:E8:25:69:59:49:00:1E:72:96:5E X509v3 Authority Key Identifier: keyid:BF:BF:EA:F4:9C:CC:A7:EA:7E:94:46:49:17:85:35:78:7F:34:F0:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:31:90:58:d1:00:12:0a:f4:00:04:08:66:3b:aa:f3:36:8d: 87:d7:bd:b4:ad:d1:7d:7e:01:37:15:97:0d:88:d4:74:fa:db: d1:7f:9f:97:17:8d:b8:17:60:84:f7:89:18:64:cc:f2:be:3b: 4a:4b:1d:04:6a:44:02:49:24:84:c4:44:c3:99:2c:30:cd:bd: af:82:ce:a6:b1:08:91:f6:1a:51:bd:b6:db:b2:a1:7e:cc:07: c6:42:fb:e8:1c:be:06:f6:4e:b5:cb:51:5c:3e:c8:5a:08:4d: 46:83:94:37:dd:73:64:31:e8:6f:6e:dc:d4:5b:7f:28:04:67: 2a:0b:1a:98:14:4e:43:df:4f:24:a9:4f:aa:01:b9:93:0c:b4: 2f:40:b9:53:bd:ce:e0:12:53:24:2d:b1:25:cc:4f:89:2b:d1: dd:7f:24:fc:29:cf:f2:00:08:8f:66:1f:30:17:79:ca:87:bf: 76:ff:4e:58:fb:2a:c4:ca:ff:5e:89:29:60:53:7b:db:c5:22: 22:9f:74:7c:61:63:30:1d:46:6d:ec:c5:e3:ec:17:65:eb:ac: 39:d1:c6:76:1a:f5:c0:9e:dd:bc:1d:b2:bd:28:49:ce:8b:45: b4:f1:6c:14:90:26:1a:0c:8f:d5:88:6f:aa:cb:9e:38:4c:a1: 0b:89:c9:1d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULSZNfZ6Zzw0n9rKHGojsV/Uw/D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZCRkVBRjQ5Q0NDQTdFQTdFOTQ0NjQ5MTc4NTM1Nzg3 RjM0RjBENzAeFw0yNTEwMTkwNDIzMjhaFw0yNTEwMjQwNjUxMjhaMDMxMTAvBgNV BAMTKDQ3QzAxMjJCOTA0RjhGRjI4QjI4RTgyNTY5NTk0OTAwMUU3Mjk2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSbYqGW6oyVuENrqQcvoZK8U1E AQpByVJVbaRlmWv8lI+tHV5nvnmjgZ+MBlJsOpC8OwDIzTW1xiUMIzwRJpDn+GL9 TkwhgGv4ZZSY30xxk0wyloo2OlB3K6l0x9efFbCePd7k6I80a5LFz/2GhOQWKWlU QX0jcUuZLr42mXJLxW3kDEmlAt2K3Bex/IwHBSYdnW+T6T3eFCDHYeFybLJLYJOY gre2ywEz/e/7DjxiJESmvIzHK42zCuyGMT0oxtImyZXBETmoPRIMJOMNZ2htW3cJ yAnngzPs0Ug+LOSGYDmHzLBDy67xm/RltFK0CsHAqbUYmBrpuzNFTID+GBttAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUR8ASK5BPj/KLKOglaVlJAB5yll4wHwYDVR0j BBgwFoAUv7/q9JzMp+p+lEZJF4U1eH808NcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MTUxQ0RCRDdGNTc4MkY1Q0RFNjc3QkExQTNERUI0RkYx MDk5QjZCQzg4RTFDRDNBNDBEOUU4Mjk3RjFCRkExLzAvQkZCRkVBRjQ5Q0NDQTdF QTdFOTQ0NjQ5MTc4NTM1Nzg3RjM0RjBENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkJGRUFGNDlDQ0NBN0VBN0U5 NDQ2NDkxNzg1MzU3ODdGMzRGMEQ3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzE1MUNEQkQ3RjU3ODJGNUNERTY3N0JBMUEzREVCNEZGMTA5OUI2QkM4 OEUxQ0QzQTQwRDlFODI5N0YxQkZBMS8wL0JGQkZFQUY0OUNDQ0E3RUE3RTk0NDY0 OTE3ODUzNTc4N0YzNEYwRDcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1MZBY0QASCvQABAhmO6rzNo2H 1720rdF9fgE3FZcNiNR0+tvRf5+XF424F2CE94kYZMzyvjtKSx0EakQCSSSExETD mSwwzb2vgs6msQiR9hpRvbbbsqF+zAfGQvvoHL4G9k61y1FcPshaCE1Gg5Q33XNk MehvbtzUW38oBGcqCxqYFE5D308kqU+qAbmTDLQvQLlTvc7gElMkLbElzE+JK9Hd fyT8Kc/yAAiPZh8wF3nKh792/05Y+yrEyv9eiSlgU3vbxSIin3R8YWMwHUZt7MXj 7Bdl66w50cZ2GvXAnt28HbK9KEnOi0W08WwUkCYaDI/ViG+qy544TKELickd -----END CERTIFICATE-----Generated at Tue Oct 21 01:39:40 2025 by rpki-client