$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft File: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft (raw, json) Hash identifier: hWHFzOAHj13pVvGjXar88Z3QaXG04RcHeStO0CLWG8g= Subject key identifier: DE:8E:81:7D:13:56:6C:BC:43:63:07:D6:81:95:0B:BA:BB:D1:8B:65 Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC Certificate issuer: /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Certificate serial: 55F16105427390719647353385045ECD8B3B8316 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft Manifest number: 0127 Signing time: Sun 19 Oct 2025 12:44:19 +0000 Manifest this update: Sun 19 Oct 2025 12:39:19 +0000 Manifest next update: Thu 23 Oct 2025 22:24:19 +0000 Files and hashes: 1: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl (hash: C6qPQWH+QfUV/qoWsKtOLzPgmD+dvAJUEsooJD0Bczg=) 2: 323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (hash: qXLUa1DFAZMrZIlzarnZaCXNOtAwLQ/Wi2JutVkZxnE=) 3: 3137392e35312e3230382e302f32322d3234203d3e20323731373831.roa (hash: qefcdKBbQ8rTrMpgo/t4zhuWfrSW4R/8kvtNUQX7kms=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 22:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f1:61:05:42:73:90:71:96:47:35:33:85:04:5e:cd:8b:3b:83:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Validity Not Before: Oct 19 12:39:19 2025 GMT Not After : Oct 23 22:24:19 2025 GMT Subject: CN=DE8E817D13566CBC436307D681950BBABBD18B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:4d:67:64:bf:a9:9f:c2:0b:60:18:2b:35: 04:4e:c2:dd:e0:a9:7f:66:6d:b5:63:d9:0b:e4:13: 6d:89:bc:0f:00:5d:85:3f:33:62:37:50:09:e3:cb: c1:c8:1c:13:d8:4f:28:7a:24:cd:e1:fd:b4:d4:ad: d4:24:2d:ce:59:91:14:a4:8c:f6:99:92:22:f1:24: 31:85:50:14:f1:b8:e2:b6:22:ee:ea:c7:d8:3f:fe: 45:88:4f:64:4f:98:16:0a:0d:99:43:1a:7c:4f:a8: 70:fa:8e:60:b1:dd:6c:5a:d1:ac:fc:ab:6f:ff:32: dd:f9:22:9d:4b:b2:39:90:ea:fc:4d:5d:bd:7e:66: f7:eb:27:2d:45:b5:97:dd:d5:4c:ca:15:14:e8:26: c4:8d:2d:62:d4:c0:d8:61:12:89:45:d5:08:c8:28: dc:95:c3:77:4e:54:1d:ae:0e:60:99:96:d9:9d:ca: 23:00:b7:90:ca:28:e3:bd:dd:f2:c5:6e:86:5d:44: be:4b:3e:35:76:d3:5a:50:4a:74:e4:ba:45:c1:32: ff:46:49:72:81:de:1e:f2:33:2b:23:db:0d:fc:f2: 28:e2:c6:d0:ef:ba:e2:48:6f:bf:dc:50:59:7e:b2: 9c:6d:25:73:b1:9f:24:ca:49:42:e8:78:f7:8a:f3: 5c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8E:81:7D:13:56:6C:BC:43:63:07:D6:81:95:0B:BA:BB:D1:8B:65 X509v3 Authority Key Identifier: keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ca:e9:b9:31:60:bf:c1:73:29:8b:ba:df:db:01:95:57:75: 08:15:0a:38:b7:b9:ac:d7:ce:8a:3d:a8:49:a6:14:38:f2:3e: 27:14:3e:23:8e:36:08:3a:30:52:fc:dc:8d:54:b1:0b:73:21: c9:b8:1c:48:6e:dc:60:7f:ef:8f:94:0f:88:f9:d3:bc:24:d8: 47:bd:f8:80:bc:4e:c0:b4:94:93:73:8e:52:7c:84:65:8d:c9: de:ad:d6:6c:e7:7e:46:ef:2e:8a:5f:d4:55:ef:24:a6:fc:ee: 8e:2c:8d:68:08:be:8a:d7:cc:42:a5:d4:a9:7d:9a:48:46:a7: 50:c6:15:2c:bb:d6:54:96:4f:ff:a2:ae:0f:f5:f2:6b:9a:65: 18:79:c9:3e:34:1f:1e:8d:e5:15:ed:a0:99:ae:c2:08:3f:52: 89:18:54:1e:53:24:9a:0a:1d:40:a8:07:3b:97:f6:53:c5:8e: 2a:73:eb:02:41:dd:ac:52:ac:5b:4f:f4:dc:26:55:28:c9:bf: 38:44:bb:8b:b0:30:65:48:eb:bc:8a:98:cd:66:e8:ce:44:19: ff:94:55:a5:d4:ee:4b:70:b6:be:e4:c2:0d:13:c1:11:3c:d4: 41:4b:5e:4c:f1:7a:fc:77:06:1e:01:43:45:8a:cf:a4:1b:ff: b3:13:7c:65 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVfFhBUJzkHGWRzUzhQRezYs7gxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5MUZFMEI3MTIwRkVDMUIwMkUyMEY0RUI4OEE0RERG QTFCN0ZGQzAeFw0yNTEwMTkxMjM5MTlaFw0yNTEwMjMyMjI0MTlaMDMxMTAvBgNV BAMTKERFOEU4MTdEMTM1NjZDQkM0MzYzMDdENjgxOTUwQkJBQkJEMThCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/D01nZL+pn8ILYBgrNQROwt3g qX9mbbVj2QvkE22JvA8AXYU/M2I3UAnjy8HIHBPYTyh6JM3h/bTUrdQkLc5ZkRSk jPaZkiLxJDGFUBTxuOK2Iu7qx9g//kWIT2RPmBYKDZlDGnxPqHD6jmCx3Wxa0az8 q2//Mt35Ip1LsjmQ6vxNXb1+ZvfrJy1FtZfd1UzKFRToJsSNLWLUwNhhEolF1QjI KNyVw3dOVB2uDmCZltmdyiMAt5DKKOO93fLFboZdRL5LPjV201pQSnTkukXBMv9G SXKB3h7yMysj2w388ijixtDvuuJIb7/cUFl+spxtJXOxnyTKSULoePeK81ztAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3o6BfRNWbLxDYwfWgZULurvRi2UwHwYDVR0j BBgwFoAUv5H+C3Eg/sGwLiD064ik3fobf/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMjhBQzU0OTMwM0I3NEExQzQ5Q0EwNzZCOTc0RjA2MzZC MDNCNzlGOUUwMzM1QjZGREJCRkQ2MEVBOTE4MzQ4LzAvQkY5MUZFMEI3MTIwRkVD MUIwMkUyMEY0RUI4OEE0RERGQTFCN0ZGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjkxRkUwQjcxMjBGRUMxQjAy RTIwRjRFQjg4QTREREZBMUI3RkZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjI4QUM1NDkzMDNCNzRBMUM0OUNBMDc2Qjk3NEYwNjM2QjAzQjc5RjlF MDMzNUI2RkRCQkZENjBFQTkxODM0OC8wL0JGOTFGRTBCNzEyMEZFQzFCMDJFMjBG NEVCODhBNERERkExQjdGRkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKyum5MWC/wXMpi7rf2wGVV3UI FQo4t7ms186KPahJphQ48j4nFD4jjjYIOjBS/NyNVLELcyHJuBxIbtxgf++PlA+I +dO8JNhHvfiAvE7AtJSTc45SfIRljcnerdZs535G7y6KX9RV7ySm/O6OLI1oCL6K 18xCpdSpfZpIRqdQxhUsu9ZUlk//oq4P9fJrmmUYeck+NB8ejeUV7aCZrsIIP1KJ GFQeUySaCh1AqAc7l/ZTxY4qc+sCQd2sUqxbT/TcJlUoyb84RLuLsDBlSOu8ipjN ZujORBn/lFWl1O5LcLa+5MINE8ERPNRBS15M8Xr8dwYeAUNFis+kG/+zE3xl -----END CERTIFICATE-----Generated at Mon Oct 20 16:34:12 2025 by rpki-client