$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft File: BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft (raw, json) Hash identifier: BBKPfcaHXq3xVV0QqRDsyf7nNx4Nw+Z9Q7wuRJMeOY4= Subject key identifier: CD:E0:C1:76:5E:1B:74:A6:DE:CA:47:59:BB:7C:83:1A:32:2C:F4:4A Authority key identifier: BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6 Certificate issuer: /CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6 Certificate serial: 1087DD42E4C5DBFC96C1F6A8A0AB0790D86B0749 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft Manifest number: 0111 Signing time: Wed 25 Mar 2026 14:15:56 +0000 Manifest this update: Wed 25 Mar 2026 14:10:56 +0000 Manifest next update: Sun 29 Mar 2026 23:35:56 +0000 Files and hashes: 1: 323830333a633335303a3a2f33322d3332203d3e20323733383834.roa (hash: QyUtb/5gl6krDSKK04fIDtKnAQYQqWsdxxEP9vtOfXU=) 2: BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl (hash: 3swLqQWIKVVtxgOO5e03TTTSmC1e7XxigJ44yZUsRcE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 23:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:87:dd:42:e4:c5:db:fc:96:c1:f6:a8:a0:ab:07:90:d8:6b:07:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6 Validity Not Before: Mar 25 14:10:56 2026 GMT Not After : Mar 29 23:35:56 2026 GMT Subject: CN=CDE0C1765E1B74A6DECA4759BB7C831A322CF44A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:5a:f2:b2:ed:44:43:d9:f7:71:cb:af:50: 64:da:b6:44:64:30:65:b5:6e:a1:fc:96:60:4b:6c: d3:4f:2e:2b:85:3e:3a:25:d0:f6:00:53:21:1e:29: 35:6e:ea:b1:8b:43:ad:5d:6e:e2:c9:9e:d4:c1:09: f3:16:74:8a:25:2e:cf:e1:a5:d7:3e:3a:c2:8b:1b: 1d:fc:b7:1c:5a:bf:58:b1:c8:af:23:9a:df:86:70: 21:fa:a7:b7:40:81:2b:53:8b:3b:a2:39:90:5f:63: 2d:47:37:62:c9:c1:bc:8c:69:1b:18:fd:2f:56:33: 06:70:bd:82:b9:3a:ef:fd:25:ff:2c:2e:66:8a:e5: e7:a2:bf:13:80:e1:6c:13:22:74:9d:75:b1:50:9e: fb:e3:f7:a5:5f:b7:cb:be:5e:6c:23:c1:b9:ff:6b: f4:4d:6c:2c:22:80:37:50:11:5f:54:69:76:be:93: d5:c3:27:9a:70:63:d1:70:59:59:0d:de:73:55:a8: 27:46:db:f7:89:81:68:8c:d4:9c:a9:41:47:0d:6e: ff:c3:da:b7:d2:1c:a2:fa:4e:08:22:97:3e:00:65: da:4e:fc:d1:54:f5:c3:7c:36:4a:30:32:b0:73:b6: e5:f4:d3:44:96:20:ad:6f:cf:fa:e2:ca:a5:09:6f: d5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E0:C1:76:5E:1B:74:A6:DE:CA:47:59:BB:7C:83:1A:32:2C:F4:4A X509v3 Authority Key Identifier: keyid:BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e3:a8:c9:6e:19:60:20:f1:45:3a:a0:1e:78:57:fe:9c:e0: 2a:ea:af:1f:75:b9:c2:aa:d2:fd:8c:68:7c:05:92:57:84:dd: a5:4a:82:36:0e:74:de:2c:56:a3:7a:82:55:da:8b:b1:29:85: ce:73:a0:71:bc:82:78:a4:d2:71:d9:6d:b4:cc:5b:3a:1e:82: 1e:a5:40:4a:9e:1d:fd:68:2b:79:f7:63:02:14:0a:ba:97:7d: 55:c4:0b:5f:43:42:cc:e3:ec:73:82:8d:5e:0d:c6:76:63:62: b7:ce:e7:f9:db:8f:20:36:1a:64:3b:54:83:44:85:52:26:d5: e0:19:1b:b6:15:77:fb:5e:26:90:1f:c6:13:a7:7d:b4:ce:3e: 0f:75:36:42:cc:76:2e:17:eb:79:4b:4d:bb:a5:08:9c:34:d0: 1c:f7:a6:3d:ac:21:37:42:33:1d:01:df:83:7f:f5:4b:75:bb: 8f:2f:08:28:2e:81:e2:a4:31:6f:18:36:63:8d:e2:41:5e:76: 29:53:27:66:b8:8e:7a:85:54:c6:1e:0f:c9:d3:fe:13:0c:d3: 53:55:b9:9b:48:39:a9:2f:6a:3d:3e:3e:32:f7:6c:28:9e:da: a3:29:0d:7d:46:f5:e3:81:88:c2:02:f4:eb:0e:5f:9e:32:bb: 05:ef:55:4b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEIfdQuTF2/yWwfaooKsHkNhrB0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFNEFGMUU5MkVDOUFFQTlCMzk1MDIxMURDRTg0MDFD NDgzMzNBNjAeFw0yNjAzMjUxNDEwNTZaFw0yNjAzMjkyMzM1NTZaMDMxMTAvBgNV BAMTKENERTBDMTc2NUUxQjc0QTZERUNBNDc1OUJCN0M4MzFBMzIyQ0Y0NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Dlrysu1EQ9n3ccuvUGTatkRk MGW1bqH8lmBLbNNPLiuFPjol0PYAUyEeKTVu6rGLQ61dbuLJntTBCfMWdIolLs/h pdc+OsKLGx38txxav1ixyK8jmt+GcCH6p7dAgStTizuiOZBfYy1HN2LJwbyMaRsY /S9WMwZwvYK5Ou/9Jf8sLmaK5eeivxOA4WwTInSddbFQnvvj96Vft8u+Xmwjwbn/ a/RNbCwigDdQEV9UaXa+k9XDJ5pwY9FwWVkN3nNVqCdG2/eJgWiM1JypQUcNbv/D 2rfSHKL6Tggilz4AZdpO/NFU9cN8NkowMrBztuX000SWIK1vz/riyqUJb9WpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzeDBdl4bdKbeykdZu3yDGjIs9EowHwYDVR0j BBgwFoAUv+SvHpLsmuqbOVAhHc6EAcSDM6YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRkQ0Q0QwNTE2RDA3QTc3RTY2M0ExMjdEQTA1RjgwRDEz OUFENzZGMEExQTUzNkEyNkUzMUMzODM3MEE4NzQyLzAvQkZFNEFGMUU5MkVDOUFF QTlCMzk1MDIxMURDRTg0MDFDNDgzMzNBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkU0QUYxRTkyRUM5QUVBOUIz OTUwMjExRENFODQwMUM0ODMzM0E2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkZENENEMDUxNkQwN0E3N0U2NjNBMTI3REEwNUY4MEQxMzlBRDc2RjBB MUE1MzZBMjZFMzFDMzgzNzBBODc0Mi8wL0JGRTRBRjFFOTJFQzlBRUE5QjM5NTAy MTFEQ0U4NDAxQzQ4MzMzQTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAE46jJbhlgIPFFOqAeeFf+nOAq 6q8fdbnCqtL9jGh8BZJXhN2lSoI2DnTeLFajeoJV2ouxKYXOc6BxvIJ4pNJx2W20 zFs6HoIepUBKnh39aCt592MCFAq6l31VxAtfQ0LM4+xzgo1eDcZ2Y2K3zuf5248g NhpkO1SDRIVSJtXgGRu2FXf7XiaQH8YTp320zj4PdTZCzHYuF+t5S027pQicNNAc 96Y9rCE3QjMdAd+Df/VLdbuPLwgoLoHipDFvGDZjjeJBXnYpUydmuI56hVTGHg/J 0/4TDNNTVbmbSDmpL2o9Pj4y92wontqjKQ19RvXjgYjCAvTrDl+eMrsF71VL -----END CERTIFICATE-----Generated at Thu Mar 26 19:52:52 2026 by rpki-client