$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft File: BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft (raw, json) Hash identifier: ajTml/kL4uUd2mGHzbP9U7wrLglD+71wIc3y70z2WxE= Subject key identifier: 32:6D:49:10:6F:53:84:A3:5C:45:5B:93:EF:28:B9:B0:C1:D9:D3:78 Authority key identifier: BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2 Certificate issuer: /CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2 Certificate serial: 70D5DC596DDA8A9716D4F85BE6AF13C23630A264 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft Manifest number: 0118 Signing time: Fri 22 Aug 2025 02:25:25 +0000 Manifest this update: Fri 22 Aug 2025 02:20:25 +0000 Manifest next update: Wed 27 Aug 2025 17:24:25 +0000 Files and hashes: 1: 34352e3233372e3137322e302f32322d3234203d3e20323636383233.roa (hash: L7d+0WJdqSqYpoD3RVzURmtrFSo7UM8rtKV9FP3JhE8=) 2: BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl (hash: XjEZxSs8fT9DgIHRnx21Kvf8ldfiGcjt9GQENck8Rvg=) 3: 323830333a323461303a3a2f33322d3438203d3e20323636383233.roa (hash: 0UF7lN3yk5hABu8yrop4hVb6wwkKlgl5x53aQUyw6vI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d5:dc:59:6d:da:8a:97:16:d4:f8:5b:e6:af:13:c2:36:30:a2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2 Validity Not Before: Aug 22 02:20:25 2025 GMT Not After : Aug 27 17:24:25 2025 GMT Subject: CN=326D49106F5384A35C455B93EF28B9B0C1D9D378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:d4:40:61:1a:fd:c1:f5:ea:a6:d0:ea:4d: e3:fe:53:0b:07:57:65:42:01:0c:ac:96:39:10:8b: ca:e7:9b:f9:38:b0:f8:5e:22:bf:b1:52:db:23:db: 23:7b:68:f8:a1:01:bd:6b:29:44:ef:ba:9c:4c:9e: 80:9a:03:74:c4:59:23:b9:0a:d2:ae:c6:c5:af:be: 98:e5:54:5c:6e:1c:98:68:7c:15:4f:ef:3b:e1:9c: dc:31:9c:35:ba:72:60:f6:92:0c:f9:10:b2:c8:f0: 9a:4c:ac:44:28:45:0e:b2:e0:f7:41:c9:e8:ea:10: 77:c2:44:0d:e8:5e:a3:79:42:95:de:b0:1c:d6:b3: 18:69:e6:d3:e0:20:38:6f:f2:16:d3:e5:f9:cd:74: 93:85:a0:18:44:29:e9:a1:bc:c5:bc:84:6c:b4:0e: 51:05:75:24:02:3c:c1:a6:fd:dc:ab:6b:b5:75:39: bc:29:f1:d2:5c:71:1a:f6:ca:5c:2f:5c:df:52:fb: 9d:86:c0:43:28:94:7d:94:80:b8:66:cd:60:eb:28: f8:29:64:68:70:ac:93:39:62:0e:45:09:0e:63:d2: 8a:17:1b:0c:d0:82:8b:3d:3e:a9:d8:b5:e6:6f:cb: ab:b9:ae:51:8f:b0:e6:47:e2:95:28:1b:9c:f2:9c: 2b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6D:49:10:6F:53:84:A3:5C:45:5B:93:EF:28:B9:B0:C1:D9:D3:78 X509v3 Authority Key Identifier: keyid:BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f3:89:18:01:ba:a7:45:a7:b2:75:69:f4:d0:3b:e1:fb:24: 8b:1f:b2:c5:58:f2:18:16:b3:dd:cd:ba:95:f7:b2:51:52:a9: fe:4e:33:5f:92:77:5d:dd:02:39:2b:29:0a:66:35:2a:57:7b: 1a:20:d4:8c:82:c7:d9:bb:7b:31:e7:84:d9:bf:7a:b6:63:74: 1a:ce:df:38:b0:f7:89:42:d1:51:cf:03:31:b8:b4:fd:5f:bd: 65:97:b6:9b:50:42:90:23:98:6d:66:74:b7:94:6f:34:cf:0d: 5a:01:46:b7:3d:da:05:45:af:4b:d0:37:cf:ac:f1:09:77:d0: 3c:50:43:81:ee:87:51:e3:ac:25:92:dd:d5:32:e8:70:36:02: 9b:2a:0a:d1:fe:32:1d:65:8a:e7:9d:67:ac:49:0e:6b:dc:14: 18:ef:b7:cd:6f:cd:53:ef:d9:60:a3:f2:46:80:27:d5:8a:b3: 5d:01:ff:89:03:4a:76:10:8b:4d:b9:c4:cc:3c:1e:57:dd:24: 43:a8:98:14:36:ab:83:15:c0:2c:9f:21:13:34:65:18:8a:b2: be:7a:41:ee:09:67:28:2a:93:43:2b:d9:02:cb:8d:9a:e1:ae: 4b:80:ec:f5:9d:72:3d:08:05:86:7d:f8:96:ea:5d:eb:bf:34: 5d:af:0c:3c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcNXcWW3aipcW1Phb5q8TwjYwomQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1NjRDM0I1REEyRjdFQ0VCODVDQkM1NzBEMTY1MUJG MUJENjJBMjAeFw0yNTA4MjIwMjIwMjVaFw0yNTA4MjcxNzI0MjVaMDMxMTAvBgNV BAMTKDMyNkQ0OTEwNkY1Mzg0QTM1QzQ1NUI5M0VGMjhCOUIwQzFEOUQzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChgdRAYRr9wfXqptDqTeP+UwsH V2VCAQysljkQi8rnm/k4sPheIr+xUtsj2yN7aPihAb1rKUTvupxMnoCaA3TEWSO5 CtKuxsWvvpjlVFxuHJhofBVP7zvhnNwxnDW6cmD2kgz5ELLI8JpMrEQoRQ6y4PdB yejqEHfCRA3oXqN5QpXesBzWsxhp5tPgIDhv8hbT5fnNdJOFoBhEKemhvMW8hGy0 DlEFdSQCPMGm/dyra7V1Obwp8dJccRr2ylwvXN9S+52GwEMolH2UgLhmzWDrKPgp ZGhwrJM5Yg5FCQ5j0ooXGwzQgos9PqnYteZvy6u5rlGPsOZH4pUoG5zynCvXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMm1JEG9ThKNcRVuT7yi5sMHZ03gwHwYDVR0j BBgwFoAUvVZMO12i9+zrhcvFcNFlG/G9YqIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85ODczMTU1QjA1MkFCREY3OUU1RkZCREI5NzM1ODU5NzA4 MUM5MTIyQzFBMkY1MUEwNTRFNEZFMkNGMENENTgyLzAvQkQ1NjRDM0I1REEyRjdF Q0VCODVDQkM1NzBEMTY1MUJGMUJENjJBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDU2NEMzQjVEQTJGN0VDRUI4 NUNCQzU3MEQxNjUxQkYxQkQ2MkEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTg3MzE1NUIwNTJBQkRGNzlFNUZGQkRCOTczNTg1OTcwODFDOTEyMkMx QTJGNTFBMDU0RTRGRTJDRjBDRDU4Mi8wL0JENTY0QzNCNURBMkY3RUNFQjg1Q0JD NTcwRDE2NTFCRjFCRDYyQTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBD84kYAbqnRaeydWn00Dvh+ySL H7LFWPIYFrPdzbqV97JRUqn+TjNfkndd3QI5KykKZjUqV3saINSMgsfZu3sx54TZ v3q2Y3Qazt84sPeJQtFRzwMxuLT9X71ll7abUEKQI5htZnS3lG80zw1aAUa3PdoF Ra9L0DfPrPEJd9A8UEOB7odR46wlkt3VMuhwNgKbKgrR/jIdZYrnnWesSQ5r3BQY 77fNb81T79lgo/JGgCfVirNdAf+JA0p2EItNucTMPB5X3SRDqJgUNquDFcAsnyET NGUYirK+ekHuCWcoKpNDK9kCy42a4a5LgOz1nXI9CAWGffiW6l3rvzRdrww8 -----END CERTIFICATE-----Generated at Sat Aug 23 11:00:55 2025 by rpki-client