$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft File: BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft (raw, json) Hash identifier: nhxVnT9vngvWbCWfTNVHK7+u/Pxn4t27EgfivUr2Omw= Subject key identifier: 9B:1D:A2:A9:40:E0:30:C5:43:4F:73:A9:BB:D2:82:3F:69:EE:2C:FE Authority key identifier: BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6 Certificate issuer: /CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6 Certificate serial: 23E2BDEAE0C0C64968448510D59D38B959069A6E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft Manifest number: A4 Signing time: Fri 22 Aug 2025 11:31:12 +0000 Manifest this update: Fri 22 Aug 2025 11:26:12 +0000 Manifest next update: Thu 28 Aug 2025 05:41:12 +0000 Files and hashes: 1: 323830333a633335303a3a2f33322d3332203d3e20323733383834.roa (hash: Tc3tFTIEJ89kYE9BA23ocufs+zVOZptI7CF4mn5WvUM=) 2: BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl (hash: GYe+ziZMORPmpBRl92cinysP0cejroXBineE0ujvIbA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e2:bd:ea:e0:c0:c6:49:68:44:85:10:d5:9d:38:b9:59:06:9a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6 Validity Not Before: Aug 22 11:26:12 2025 GMT Not After : Aug 28 05:41:12 2025 GMT Subject: CN=9B1DA2A940E030C5434F73A9BBD2823F69EE2CFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:12:f2:ef:a5:48:70:96:17:77:c9:e7:0c: b8:e6:5a:c5:d0:d6:57:47:be:5b:f7:03:4a:37:d2: c9:8f:5a:6b:64:5b:63:0f:94:93:ab:89:9c:95:c4: bf:c8:c8:a0:46:c8:eb:20:b5:be:71:93:8e:80:3c: d6:da:af:f8:bf:54:9c:f5:19:14:54:56:ee:30:c8: 29:d3:67:77:4b:e2:4d:49:13:ab:c9:25:c9:ea:9d: 91:aa:e3:31:03:e5:58:ad:4c:d2:8d:90:79:09:1d: 91:92:84:d3:c6:f8:89:79:df:29:60:fe:85:29:89: da:6c:10:e6:73:c1:f4:2f:3a:19:a3:71:0a:38:ce: 39:98:17:e0:9f:b0:75:0d:8e:18:e6:aa:3d:e1:33: 3c:d8:9b:e1:69:c9:fb:d4:c9:1c:e7:19:ee:29:56: 5e:f9:4f:61:c8:75:96:4a:0d:d8:50:e1:46:c2:7d: d4:d5:1e:36:4e:cc:6f:d7:36:92:a0:77:08:7a:26: 9e:0f:6f:f8:2b:d6:7d:cf:8c:10:f4:1d:21:b3:3b: ee:f2:4c:2a:b0:41:47:84:91:e5:58:64:3b:66:3c: 6b:0c:86:d0:b2:cd:cb:32:3c:e6:8c:7d:f1:9e:c7: 0c:2b:75:af:ce:7b:e6:55:1d:3a:8f:49:56:ee:e9: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1D:A2:A9:40:E0:30:C5:43:4F:73:A9:BB:D2:82:3F:69:EE:2C:FE X509v3 Authority Key Identifier: keyid:BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:06:bd:fe:31:50:98:e9:59:64:60:ef:74:b9:91:b4:53:d5: 2f:35:a3:15:02:45:bc:35:c7:55:3e:d9:0a:ee:04:5b:c7:c2: 81:b6:6a:6a:31:3b:6d:ed:05:18:40:b0:29:71:43:fe:32:8b: c0:83:a2:d5:f1:05:5a:eb:3f:fc:38:04:b7:f8:d2:ee:53:f8: b6:1e:1c:c7:99:4b:f8:bb:65:32:c5:48:bc:7a:b0:9a:4a:fb: e6:f6:bf:f7:16:0d:91:b8:30:8f:b0:89:1e:de:ad:d8:7c:4a: 7e:1e:9c:25:f6:66:96:65:50:69:65:15:7c:90:2b:d2:b5:7a: 78:e0:3b:99:41:c5:12:65:99:f9:2c:dd:c1:fb:a9:96:b9:c2: 08:f0:00:80:c2:90:9b:ee:7b:39:64:ef:f2:c5:07:1f:5b:1d: 06:fd:7b:51:e2:c8:29:54:f8:49:fa:c1:b3:bf:d6:e3:5b:99: ec:17:b1:b6:5d:14:08:ef:2a:82:58:43:4a:fb:d5:ce:c1:67: fb:5e:cb:a7:f3:3c:9f:05:95:49:34:f7:5f:c9:c9:7b:4b:3a: d1:2f:3d:0e:e8:ca:32:55:b7:5c:ae:68:2f:de:d4:1f:33:0e: 74:7f:19:e3:00:e9:8a:9b:99:d1:81:04:9b:12:2c:fa:31:e4: 42:4b:9e:e0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUI+K96uDAxkloRIUQ1Z04uVkGmm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFNEFGMUU5MkVDOUFFQTlCMzk1MDIxMURDRTg0MDFD NDgzMzNBNjAeFw0yNTA4MjIxMTI2MTJaFw0yNTA4MjgwNTQxMTJaMDMxMTAvBgNV BAMTKDlCMURBMkE5NDBFMDMwQzU0MzRGNzNBOUJCRDI4MjNGNjlFRTJDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3URLy76VIcJYXd8nnDLjmWsXQ 1ldHvlv3A0o30smPWmtkW2MPlJOriZyVxL/IyKBGyOsgtb5xk46APNbar/i/VJz1 GRRUVu4wyCnTZ3dL4k1JE6vJJcnqnZGq4zED5VitTNKNkHkJHZGShNPG+Il53ylg /oUpidpsEOZzwfQvOhmjcQo4zjmYF+CfsHUNjhjmqj3hMzzYm+FpyfvUyRznGe4p Vl75T2HIdZZKDdhQ4UbCfdTVHjZOzG/XNpKgdwh6Jp4Pb/gr1n3PjBD0HSGzO+7y TCqwQUeEkeVYZDtmPGsMhtCyzcsyPOaMffGexwwrda/Oe+ZVHTqPSVbu6WonAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUmx2iqUDgMMVDT3Opu9KCP2nuLP4wHwYDVR0j BBgwFoAUv+SvHpLsmuqbOVAhHc6EAcSDM6YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRkQ0Q0QwNTE2RDA3QTc3RTY2M0ExMjdEQTA1RjgwRDEz OUFENzZGMEExQTUzNkEyNkUzMUMzODM3MEE4NzQyLzAvQkZFNEFGMUU5MkVDOUFF QTlCMzk1MDIxMURDRTg0MDFDNDgzMzNBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkU0QUYxRTkyRUM5QUVBOUIz OTUwMjExRENFODQwMUM0ODMzM0E2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkZENENEMDUxNkQwN0E3N0U2NjNBMTI3REEwNUY4MEQxMzlBRDc2RjBB MUE1MzZBMjZFMzFDMzgzNzBBODc0Mi8wL0JGRTRBRjFFOTJFQzlBRUE5QjM5NTAy MTFEQ0U4NDAxQzQ4MzMzQTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACBr3+MVCY6VlkYO90uZG0U9Uv NaMVAkW8NcdVPtkK7gRbx8KBtmpqMTtt7QUYQLApcUP+MovAg6LV8QVa6z/8OAS3 +NLuU/i2HhzHmUv4u2UyxUi8erCaSvvm9r/3Fg2RuDCPsIke3q3YfEp+Hpwl9maW ZVBpZRV8kCvStXp44DuZQcUSZZn5LN3B+6mWucII8ACAwpCb7ns5ZO/yxQcfWx0G /XtR4sgpVPhJ+sGzv9bjW5nsF7G2XRQI7yqCWENK+9XOwWf7Xsun8zyfBZVJNPdf ycl7SzrRLz0O6MoyVbdcrmgv3tQfMw50fxnjAOmKm5nRgQSbEiz6MeRCS57g -----END CERTIFICATE-----Generated at Sat Aug 23 11:04:07 2025 by rpki-client