$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft File: BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft (raw, json) Hash identifier: Ur3iVEVUfPiONZqbPG2CjnOkumCLQ/eg7tlv4OKz5HI= Subject key identifier: FC:3C:09:BD:8D:2F:5E:FB:A1:C9:F5:65:6C:77:4D:C3:28:B3:CA:B1 Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B Certificate issuer: /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B Certificate serial: 0AC05B0336295EC9678C3B3F6C125CB9D0209113 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft Manifest number: 012E Signing time: Sun 19 Oct 2025 08:31:16 +0000 Manifest this update: Sun 19 Oct 2025 08:26:16 +0000 Manifest next update: Sat 25 Oct 2025 05:01:16 +0000 Files and hashes: 1: 3230302e37342e3235352e302f32342d3234203d3e203238303530.roa (hash: SXF+iCOaXxohlu09DbmzNtLAo1poH9lkJGXGcaHFcJA=) 2: 3230302e37342e3234392e302f32342d3234203d3e203238303530.roa (hash: k/un8zqpTMglunOD4EcoItdRqA0WoCxs4fArTst6BKI=) 3: 323830333a323034303a3a2f33322d3332203d3e203238303530.roa (hash: OmlbRyhT/ZJTfY7NLG2Wk/eDNN2JwiK/qbRcXt2tEDQ=) 4: 3230302e37342e3234382e302f32342d3234203d3e203238303530.roa (hash: dOHLOsSAt9dMYyx6gsP/D/1zl2CueJEIiBzHqVQNr+I=) 5: 3230302e37342e3235342e302f32342d3234203d3e203238303530.roa (hash: JY8I2y8DKYtW0y3ksx0VtUBjarL88aRVe3sizrByqR0=) 6: 3230302e37342e3235302e302f32342d3234203d3e203238303530.roa (hash: dbtl+9uX7PdG2FA9REeBw158WIFvABX3kOPXdLJyE/Q=) 7: BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl (hash: V1Fll1C3yFpM2Vrkz22v3lZY/Lp4sZTbZDHicLWkymU=) 8: 3230302e37342e3235322e302f32342d3234203d3e203238303530.roa (hash: 93aGNsNifP3OVF+eeUqRj4VzNi6ml4CEBm9NizKGCk8=) 9: 3230302e37342e3235312e302f32342d3234203d3e203238303530.roa (hash: 2qSj8DllafoL0YTwuGanzeUVSWm1vD7YvLZMrGi6fuA=) 10: 3230302e37342e3235332e302f32342d3234203d3e203238303530.roa (hash: DYDiyM1Ja+2morMZBb13l0i1f+QjktuVzIfm4h0iEsM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c0:5b:03:36:29:5e:c9:67:8c:3b:3f:6c:12:5c:b9:d0:20:91:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B Validity Not Before: Oct 19 08:26:16 2025 GMT Not After : Oct 25 05:01:16 2025 GMT Subject: CN=FC3C09BD8D2F5EFBA1C9F5656C774DC328B3CAB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e6:f6:fd:55:69:98:45:25:c5:2e:7f:0a:28: 73:86:42:dd:a9:eb:af:d7:ac:23:00:e1:72:6f:5d: c9:fb:12:aa:0a:66:85:a1:ec:96:04:61:fa:bf:b6: 59:86:02:44:ef:21:ad:0f:a0:94:8c:7a:76:a7:26: 23:88:c7:a7:a0:38:05:87:b4:24:bb:38:90:a0:1d: ed:d3:74:11:fc:32:e7:bf:6e:a7:d2:be:41:cf:ac: eb:b2:98:68:d9:30:c8:b1:e7:83:ed:cf:92:b2:09: 2a:12:06:b8:92:49:0a:19:28:48:60:ca:e6:bc:42: a2:28:58:5b:84:f0:67:f0:a9:f8:c1:ab:32:4e:a7: d8:ce:0f:f5:bc:3c:eb:d4:d3:02:f2:a3:e1:ab:c1: 64:35:1e:d0:85:bd:f3:aa:30:11:97:7f:b5:20:47: 5a:cb:d7:fd:d6:25:e9:cf:cd:bd:7e:e0:73:dc:fa: 08:c0:15:db:2b:b1:cb:c0:1c:d4:21:7b:ed:42:93: ba:d0:a8:39:d2:b8:3c:27:34:f3:93:13:ee:49:bb: 90:b8:5a:e6:b1:7c:9f:a4:9d:10:62:db:9c:9e:a0: b7:bb:17:40:f4:65:03:f4:f3:03:ae:df:b2:88:d8: 33:40:bf:df:8e:e7:b8:51:fb:c3:0f:a9:e7:2f:06: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3C:09:BD:8D:2F:5E:FB:A1:C9:F5:65:6C:77:4D:C3:28:B3:CA:B1 X509v3 Authority Key Identifier: keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c2:33:90:b0:52:2b:11:cb:60:92:6d:9d:89:aa:cc:f1:f3: a2:92:57:e4:03:f4:60:f7:f4:11:c6:e8:3d:46:a6:01:48:89: 0e:1c:d4:ee:d8:c7:80:78:e8:7d:8a:06:12:86:4e:5f:b4:44: 66:e3:8c:38:75:21:6c:99:ca:a5:8d:e6:ae:50:95:40:6b:89: 80:52:f5:7c:b9:8d:9c:e6:41:94:ef:29:b0:99:3d:08:2c:6e: 5f:cd:ca:7e:0b:25:39:9c:7c:92:33:0f:4f:c3:60:dd:85:f9: 97:7e:43:a9:20:63:4c:54:1d:0d:ba:99:44:55:9a:ca:e1:1c: 0e:83:00:6a:75:b1:d8:39:99:6b:73:d2:6d:cd:48:fd:03:67: 4c:34:3b:eb:7b:a5:8c:c1:de:7e:11:66:0d:48:59:02:73:33: 54:ef:ee:98:52:c1:76:2f:d6:51:c3:75:e2:2c:ea:dd:b4:12: 23:df:93:ed:86:08:65:4f:0e:f9:ac:32:7c:0a:b5:15:39:e9: 61:78:17:ce:73:f8:46:2d:4b:ab:ee:cf:6e:ab:33:fd:5f:f4: 33:c7:2d:81:89:71:e1:b1:4c:cf:8d:45:0a:c6:ea:69:a9:b7: b2:af:b0:bb:77:d7:65:f9:03:f1:a4:52:a2:1c:c6:9d:17:2b: 2a:fe:d0:1b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCsBbAzYpXslnjDs/bBJcudAgkRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1QzhCM0I5RjVBRDFFMTIyNTkwQjNBOEM4NDlCNjdD RTA5QjUwQjAeFw0yNTEwMTkwODI2MTZaFw0yNTEwMjUwNTAxMTZaMDMxMTAvBgNV BAMTKEZDM0MwOUJEOEQyRjVFRkJBMUM5RjU2NTZDNzc0REMzMjhCM0NBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5vb9VWmYRSXFLn8KKHOGQt2p 66/XrCMA4XJvXcn7EqoKZoWh7JYEYfq/tlmGAkTvIa0PoJSMenanJiOIx6egOAWH tCS7OJCgHe3TdBH8Mue/bqfSvkHPrOuymGjZMMix54Ptz5KyCSoSBriSSQoZKEhg yua8QqIoWFuE8GfwqfjBqzJOp9jOD/W8POvU0wLyo+GrwWQ1HtCFvfOqMBGXf7Ug R1rL1/3WJenPzb1+4HPc+gjAFdsrscvAHNQhe+1Ck7rQqDnSuDwnNPOTE+5Ju5C4 WuaxfJ+knRBi25yeoLe7F0D0ZQP08wOu37KI2DNAv9+O57hR+8MPqecvBkkJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/DwJvY0vXvuhyfVlbHdNwyizyrEwHwYDVR0j BBgwFoAUvVyLO59a0eEiWQs6jISbZ84JtQswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RjM5QTg5Qjg5RjlCMzM0MTczMzg3QjIxMzk2Q0RBQ0JG NDM4NDcxNzFEQjMyMTkxQkFFOTQxODU0OUI1OUY0LzAvQkQ1QzhCM0I5RjVBRDFF MTIyNTkwQjNBOEM4NDlCNjdDRTA5QjUwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDVDOEIzQjlGNUFEMUUxMjI1 OTBCM0E4Qzg0OUI2N0NFMDlCNTBCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEYzOUE4OUI4OUY5QjMzNDE3MzM4N0IyMTM5NkNEQUNCRjQzODQ3MTcx REIzMjE5MUJBRTk0MTg1NDlCNTlGNC8wL0JENUM4QjNCOUY1QUQxRTEyMjU5MEIz QThDODQ5QjY3Q0UwOUI1MEIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPwjOQsFIrEctgkm2diarM8fOi klfkA/Rg9/QRxug9RqYBSIkOHNTu2MeAeOh9igYShk5ftERm44w4dSFsmcqljeau UJVAa4mAUvV8uY2c5kGU7ymwmT0ILG5fzcp+CyU5nHySMw9Pw2DdhfmXfkOpIGNM VB0NuplEVZrK4RwOgwBqdbHYOZlrc9JtzUj9A2dMNDvre6WMwd5+EWYNSFkCczNU 7+6YUsF2L9ZRw3XiLOrdtBIj35PthghlTw75rDJ8CrUVOelheBfOc/hGLUur7s9u qzP9X/Qzxy2BiXHhsUzPjUUKxuppqbeyr7C7d9dl+QPxpFKiHMadFysq/tAb -----END CERTIFICATE-----Generated at Mon Oct 20 05:42:25 2025 by rpki-client