$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft File: BF32AEE1B63DB0DF1296575D56FA963E24476012.mft (raw, json) Hash identifier: SEvje4SIE0GdINN1pbm8YwE3w4eUWiLJnYswbVjXWAE= Subject key identifier: 71:DF:72:6D:1D:59:9A:CB:FD:00:FD:1F:B7:78:49:46:9D:73:E9:FC Authority key identifier: BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12 Certificate issuer: /CN=BF32AEE1B63DB0DF1296575D56FA963E24476012 Certificate serial: 235D6BC21C733EDC70E99E02691CE8F8429C891B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft Manifest number: 73 Signing time: Fri 17 Oct 2025 17:30:45 +0000 Manifest this update: Fri 17 Oct 2025 17:25:45 +0000 Manifest next update: Thu 23 Oct 2025 10:59:45 +0000 Files and hashes: 1: BF32AEE1B63DB0DF1296575D56FA963E24476012.crl (hash: VpYFSuYHWxEhGBAr1smlhxmpjIdchI8XCTKSINnYq/4=) 2: 323830333a323264303a3a2f33322d3334203d3e20323734303438.roa (hash: 4aH4uYkWGE+cc9ahkSEXCeY+Hh6RB/BBL4FOK1r2QC0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 10:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5d:6b:c2:1c:73:3e:dc:70:e9:9e:02:69:1c:e8:f8:42:9c:89:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF32AEE1B63DB0DF1296575D56FA963E24476012 Validity Not Before: Oct 17 17:25:45 2025 GMT Not After : Oct 23 10:59:45 2025 GMT Subject: CN=71DF726D1D599ACBFD00FD1FB77849469D73E9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:ff:af:da:a4:7d:44:10:63:83:ee:9e:15: b3:6d:f2:8e:a8:3d:14:66:33:3b:38:d1:52:40:5e: 3d:fd:e2:bd:51:e2:00:53:7d:b7:51:d1:7e:bc:51: 8d:0f:c7:27:e9:a3:6a:fe:da:7d:96:8d:6e:02:84: 19:ea:e3:2e:c7:d6:fe:69:cd:75:c3:e3:28:67:7b: 4b:d5:46:c8:80:24:ef:d1:9d:e6:9d:ea:a1:5f:5e: 79:c9:03:90:4b:de:70:19:4f:d8:7d:80:82:4c:de: 10:0c:30:67:28:c0:54:bb:ce:4d:1c:3b:a0:60:0c: b9:37:62:d4:12:63:e4:98:e7:f0:3b:14:ac:d6:2a: e4:ee:c4:4a:da:17:47:ee:39:33:b8:79:79:a5:bb: ff:47:0e:ca:fc:24:24:39:83:a8:24:bc:02:c8:41: 8d:55:d9:e3:2d:c0:ed:0b:d0:8f:4e:4d:21:5c:51: e8:7b:00:6a:07:c0:87:34:42:32:62:b4:d6:1a:73: d4:41:a9:a3:46:77:7f:b7:67:1e:e5:77:88:0f:17: fc:93:51:30:8d:72:b2:7e:3c:70:43:0d:a0:73:7d: aa:50:fb:43:f1:d4:06:ce:cd:3f:8b:ee:74:1b:9b: c2:ef:8e:9f:a0:ce:aa:6f:45:40:14:5b:c1:1b:a4: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DF:72:6D:1D:59:9A:CB:FD:00:FD:1F:B7:78:49:46:9D:73:E9:FC X509v3 Authority Key Identifier: keyid:BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:39:87:03:c9:15:55:88:02:3f:37:b1:c2:68:9c:dd:35:35: 43:11:e1:7b:ee:52:75:e5:a8:07:a8:23:9c:01:f8:93:9f:92: ec:c1:bf:7d:9f:ee:72:96:46:a9:c8:aa:da:6a:f5:68:1e:fb: c6:00:5b:d2:8b:e2:d2:6b:99:48:9d:74:03:cb:ae:1f:4e:2f: 51:82:d8:0f:2e:43:a7:38:e0:cf:88:1a:89:fb:a2:4c:22:0d: 28:c6:72:6b:f9:12:b5:7c:53:cf:8f:6b:a3:06:2a:a7:26:b1: f6:c4:3d:87:10:22:bc:8f:1d:7b:bc:0e:3b:b5:c0:d3:58:20: 35:70:e8:3a:0f:62:45:75:72:78:7c:07:0c:9e:82:e1:d0:bd: 6c:be:03:d0:fe:b5:ae:da:6a:f4:12:88:8f:ab:25:f6:e4:d7: 32:5a:f2:4f:7f:d1:ab:e5:36:c1:71:bf:13:61:55:65:72:df: 73:ca:75:5b:c4:56:15:21:74:1c:46:ba:b8:ea:6e:17:e6:ab: 25:89:8a:76:dc:b2:e6:a5:98:99:f9:7f:20:ba:ce:e0:bd:88: ce:36:7a:3d:38:43:16:d7:ef:ed:15:8c:77:ee:76:36:6e:78: 7b:f7:36:01:67:2f:ff:19:12:ed:27:8c:ba:c0:f0:ed:f2:09: c0:8d:49:5f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUI11rwhxzPtxw6Z4CaRzo+EKciRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzMkFFRTFCNjNEQjBERjEyOTY1NzVENTZGQTk2M0Uy NDQ3NjAxMjAeFw0yNTEwMTcxNzI1NDVaFw0yNTEwMjMxMDU5NDVaMDMxMTAvBgNV BAMTKDcxREY3MjZEMUQ1OTlBQ0JGRDAwRkQxRkI3Nzg0OTQ2OUQ3M0U5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkf+v2qR9RBBjg+6eFbNt8o6o PRRmMzs40VJAXj394r1R4gBTfbdR0X68UY0Pxyfpo2r+2n2WjW4ChBnq4y7H1v5p zXXD4yhne0vVRsiAJO/Rnead6qFfXnnJA5BL3nAZT9h9gIJM3hAMMGcowFS7zk0c O6BgDLk3YtQSY+SY5/A7FKzWKuTuxEraF0fuOTO4eXmlu/9HDsr8JCQ5g6gkvALI QY1V2eMtwO0L0I9OTSFcUeh7AGoHwIc0QjJitNYac9RBqaNGd3+3Zx7ld4gPF/yT UTCNcrJ+PHBDDaBzfapQ+0Px1AbOzT+L7nQbm8Lvjp+gzqpvRUAUW8EbpOQ/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcd9ybR1Zmsv9AP0ft3hJRp1z6fwwHwYDVR0j BBgwFoAUvzKu4bY9sN8SllddVvqWPiRHYBIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERTlFRjNEMEE3OTcwQ0FFRkU1RENBNzVBN0M2QjE0OUFB MkM0RkRGNUExNzIyRjQ2OThCQzdGNzIyQTIyRkRCLzAvQkYzMkFFRTFCNjNEQjBE RjEyOTY1NzVENTZGQTk2M0UyNDQ3NjAxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjMyQUVFMUI2M0RCMERGMTI5 NjU3NUQ1NkZBOTYzRTI0NDc2MDEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREU5RUYzRDBBNzk3MENBRUZFNURDQTc1QTdDNkIxNDlBQTJDNEZERjVB MTcyMkY0Njk4QkM3RjcyMkEyMkZEQi8wL0JGMzJBRUUxQjYzREIwREYxMjk2NTc1 RDU2RkE5NjNFMjQ0NzYwMTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC3OYcDyRVViAI/N7HCaJzdNTVD EeF77lJ15agHqCOcAfiTn5Lswb99n+5ylkapyKraavVoHvvGAFvSi+LSa5lInXQD y64fTi9RgtgPLkOnOODPiBqJ+6JMIg0oxnJr+RK1fFPPj2ujBiqnJrH2xD2HECK8 jx17vA47tcDTWCA1cOg6D2JFdXJ4fAcMnoLh0L1svgPQ/rWu2mr0EoiPqyX25Ncy WvJPf9Gr5TbBcb8TYVVlct9zynVbxFYVIXQcRrq46m4X5qsliYp23LLmpZiZ+X8g us7gvYjONno9OEMW1+/tFYx37nY2bnh79zYBZy//GRLtJ4y6wPDt8gnAjUlf -----END CERTIFICATE-----Generated at Mon Oct 20 00:23:56 2025 by rpki-client