$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft File: BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft (raw, json) Hash identifier: 3lxXuPIXI9kTMNMuXcafNzK2VmewqtcJam4t5hypI7A= Subject key identifier: 63:6D:96:BE:5A:19:17:20:62:41:8A:67:5A:6D:BC:6D:93:7B:83:51 Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31 Certificate issuer: /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131 Certificate serial: 2CD923D00A1BCBABEE065993F03F03428492BDB9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft Manifest number: 011A Signing time: Fri 05 Sep 2025 06:12:49 +0000 Manifest this update: Fri 05 Sep 2025 06:07:49 +0000 Manifest next update: Wed 10 Sep 2025 04:52:49 +0000 Files and hashes: 1: 323830313a3161393a313a3a2f34382d3438203d3e203133343839.roa (hash: PDG1rxd0xSpA7YJfDLKobi7Tz7Q2e5GwLEKlvtcynNc=) 2: 323830313a3161393a323a3a2f34382d3438203d3e20323732393039.roa (hash: NLmHZcdbPUfzGQF5ph8LKk3OdDi2P2fZcoNM/8+cYbc=) 3: 323830313a3161393a323a3a2f34382d3438203d3e203133343839.roa (hash: 4pqXtyNR1cdBXvl8jwrUrWGiszl1G1HyLjHhjjvJYUg=) 4: 323830313a3161393a313a3a2f34382d3438203d3e20323732393039.roa (hash: MHwjKnPfFiWifCAARHkgAqmkoQtUP4/3oCj9tT/fC9I=) 5: 323830313a3161393a3a2f34342d3434203d3e20323732393039.roa (hash: n/IU6ZeFHkr/FBQwZ+yzODeAvAeeU92wWP6veG3yiKY=) 6: BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl (hash: SNuxku2nVAuG8NzRIOxZBTj5pJXN4/Dw/4bEcJ5J1C8=) 7: 323830313a3161393a313a3a2f34382d3438203d3e203237393531.roa (hash: haQKWGzAtczsGATj/yhluLoYQ339sYxmKpuh2HnsIxQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Sep 2025 04:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d9:23:d0:0a:1b:cb:ab:ee:06:59:93:f0:3f:03:42:84:92:bd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131 Validity Not Before: Sep 5 06:07:49 2025 GMT Not After : Sep 10 04:52:49 2025 GMT Subject: CN=636D96BE5A19172062418A675A6DBC6D937B8351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:2d:ff:17:f0:f9:34:8d:98:a5:48:91:46: fb:a2:e3:ee:aa:7d:ff:80:3e:2d:d3:69:8e:fa:7e: 77:88:2d:45:2d:d6:e7:3f:1b:65:ec:53:dd:a1:35: 60:18:61:6d:ae:23:b0:4e:3c:0c:94:37:26:90:72: 31:6e:e3:da:fa:e7:0c:3d:60:19:fb:c4:46:2e:c4: 7a:92:af:b1:ef:e1:43:ca:51:c9:8d:d0:df:14:07: a0:a6:95:d0:b0:c5:b0:39:31:16:71:76:fb:eb:d9: 52:66:cf:fa:ec:37:b7:0a:2d:35:4d:bb:3e:5d:5a: 36:70:55:de:28:da:a6:8d:e3:4f:43:7c:27:3b:5a: 59:7d:cb:6c:84:e2:e3:37:b1:a5:22:83:e3:d2:ae: 4b:b8:98:af:9d:54:8c:04:1d:51:9f:7c:b6:6a:28: 51:8e:ed:ad:a3:7d:18:bc:26:bf:83:ee:dc:9d:15: dc:d0:6b:13:48:bd:59:89:21:12:1b:3d:c4:c8:42: db:d5:57:48:f2:9d:fc:77:35:d2:25:f4:65:6e:de: 10:6d:db:d9:71:df:eb:6f:28:08:0f:f0:24:7b:11: 93:7d:02:9f:24:ba:14:a2:ea:06:a9:31:a2:f5:a9: bb:e5:81:e2:61:c5:8c:4d:1b:81:30:33:1a:99:c6: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6D:96:BE:5A:19:17:20:62:41:8A:67:5A:6D:BC:6D:93:7B:83:51 X509v3 Authority Key Identifier: keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0b:6f:b7:dd:4f:7a:34:97:7b:74:41:6c:7a:48:11:82:37: 40:94:4d:8b:86:23:e6:f7:89:59:a5:8d:83:d0:66:9b:33:33: 11:70:82:c0:3d:46:ef:b5:ef:2a:e3:39:8c:57:c3:8b:50:38: 10:7b:31:6c:10:da:41:42:49:65:ac:e2:ab:b9:1e:fb:7e:69: c8:96:44:15:4b:c6:de:47:7e:e5:0f:0a:d3:3c:03:da:88:ab: 4d:45:ec:8f:79:a3:02:97:5f:e6:09:59:ca:d0:93:08:96:96: c2:0b:ee:ea:0f:ca:2d:0e:8a:72:6d:a4:2f:c6:19:1a:48:e2: 3f:18:0f:48:66:15:fe:e7:3e:27:92:51:67:4d:f5:a1:e0:5d: 75:bd:49:e3:81:cd:6d:72:16:85:72:7f:49:b3:c1:18:a0:61: b8:09:82:fe:c9:fe:ec:14:4e:1e:b4:f4:f5:db:29:20:83:c8: 36:c2:7c:96:6a:b8:bc:a5:49:64:6c:16:a1:bc:02:ba:0e:9a: 8c:04:eb:7d:28:d8:b4:e2:93:96:ab:dc:e3:cf:6a:e5:d2:f0: ea:6b:49:e7:45:7c:08:cf:ce:5c:d2:4a:5c:30:2b:52:93:7f: 70:ee:0b:f9:18:ca:aa:41:f4:68:30:ce:c9:3b:5d:0e:d6:99: 8d:9e:22:ea -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULNkj0Aoby6vuBlmT8D8DQoSSvbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkREQzNCRjdGQ0EzQjA4NkE3RTMyNzYwQTEyRDZENjAw MzZDQzEzMTAeFw0yNTA5MDUwNjA3NDlaFw0yNTA5MTAwNDUyNDlaMDMxMTAvBgNV BAMTKDYzNkQ5NkJFNUExOTE3MjA2MjQxOEE2NzVBNkRCQzZEOTM3QjgzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2xy3/F/D5NI2YpUiRRvui4+6q ff+APi3TaY76fneILUUt1uc/G2XsU92hNWAYYW2uI7BOPAyUNyaQcjFu49r65ww9 YBn7xEYuxHqSr7Hv4UPKUcmN0N8UB6CmldCwxbA5MRZxdvvr2VJmz/rsN7cKLTVN uz5dWjZwVd4o2qaN409DfCc7Wll9y2yE4uM3saUig+PSrku4mK+dVIwEHVGffLZq KFGO7a2jfRi8Jr+D7tydFdzQaxNIvVmJIRIbPcTIQtvVV0jynfx3NdIl9GVu3hBt 29lx3+tvKAgP8CR7EZN9Ap8kuhSi6gapMaL1qbvlgeJhxYxNG4EwMxqZxvtnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUY22WvloZFyBiQYpnWm28bZN7g1EwHwYDVR0j BBgwFoAUvdw79/yjsIan4ydgoS1tYANswTEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80REYzNzk5RTlGQzQ5MURCM0FGRTcwQjVFQzZBQzcyMkVG MzQxNzY5NDM4RDA0QUQ1ODBFRkNENzZBOEQwM0YyLzAvQkREQzNCRjdGQ0EzQjA4 NkE3RTMyNzYwQTEyRDZENjAwMzZDQzEzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRERDM0JGN0ZDQTNCMDg2QTdF MzI3NjBBMTJENkQ2MDAzNkNDMTMxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNERGMzc5OUU5RkM0OTFEQjNBRkU3MEI1RUM2QUM3MjJFRjM0MTc2OTQz OEQwNEFENTgwRUZDRDc2QThEMDNGMi8wL0JEREMzQkY3RkNBM0IwODZBN0UzMjc2 MEExMkQ2RDYwMDM2Q0MxMzEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGC2+33U96NJd7dEFsekgRgjdA lE2LhiPm94lZpY2D0GabMzMRcILAPUbvte8q4zmMV8OLUDgQezFsENpBQkllrOKr uR77fmnIlkQVS8beR37lDwrTPAPaiKtNReyPeaMCl1/mCVnK0JMIlpbCC+7qD8ot DopybaQvxhkaSOI/GA9IZhX+5z4nklFnTfWh4F11vUnjgc1tchaFcn9Js8EYoGG4 CYL+yf7sFE4etPT12ykgg8g2wnyWari8pUlkbBahvAK6DpqMBOt9KNi04pOWq9zj z2rl0vDqa0nnRXwIz85c0kpcMCtSk39w7gv5GMqqQfRoMM7JO10O1pmNniLq -----END CERTIFICATE-----Generated at Sat Sep 6 13:48:22 2025 by rpki-client