$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft File: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft (raw, json) Hash identifier: 6pGegnyUGmKuuWTxuqAvu1q9OA2AMJV34vSJFtG/+UA= Subject key identifier: 54:FF:32:03:C5:AF:2D:3D:64:6D:01:3B:17:BD:59:D1:C6:A2:88:F7 Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC Certificate issuer: /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Certificate serial: 3EB0B21548E178FE9CC44CFBD7AF2C83D4A6F796 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft Manifest number: 0198 Signing time: Thu 28 May 2026 20:28:15 +0000 Manifest this update: Thu 28 May 2026 20:23:15 +0000 Manifest next update: Tue 02 Jun 2026 01:53:15 +0000 Files and hashes: 1: 3137392e35312e3230382e302f32322d3234203d3e20323731373831.roa (hash: hc6r1hl0iwcrvIcfBOIBrU3a+mmBYeDPpzIhXn6f78g=) 2: 323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (hash: OIjhAvWP0w1Z9Bnw8BzvStQhYN82FtnyTJr6KHLWNyg=) 3: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl (hash: E4hFxgZN6pjHjCJCKQctUalLlAxptxFzGL2sxMlDf5I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jun 2026 01:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b0:b2:15:48:e1:78:fe:9c:c4:4c:fb:d7:af:2c:83:d4:a6:f7:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Validity Not Before: May 28 20:23:15 2026 GMT Not After : Jun 2 01:53:15 2026 GMT Subject: CN=54FF3203C5AF2D3D646D013B17BD59D1C6A288F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:4d:1e:04:2e:74:1d:a2:42:51:97:80:45: b8:bc:0e:6e:f8:4f:0d:3a:79:c7:f3:3f:9f:64:02: 43:a0:cf:a2:9f:d8:82:ab:a7:25:0b:01:0f:80:9c: 85:0d:ee:d5:88:da:97:25:05:0d:2a:e4:2e:1a:46: d5:19:e2:6f:2c:8b:a4:77:9f:04:f8:9a:1a:1f:d8: ab:1d:1b:7f:61:f8:f7:7f:bf:ed:45:ad:49:f9:f1: b2:31:04:ff:96:35:f0:23:ea:64:95:48:6d:96:81: fa:f4:47:9b:0d:89:9e:97:e3:8e:bb:23:84:5e:90: 7c:49:6f:df:93:5f:5f:cc:a1:ac:3b:dc:b9:99:b1: e3:5b:7b:5a:d0:70:5e:0c:7d:52:ed:9d:1e:44:fd: c0:64:76:30:8d:57:d3:bc:3e:7e:c1:05:20:32:54: 41:50:0c:9d:cc:51:84:07:35:aa:42:15:66:84:f3: 83:35:46:fa:39:52:d4:4e:30:30:a1:5c:c0:f7:8c: ad:e6:83:11:3c:e4:26:e3:ad:8d:5b:0c:38:5a:c5: f3:09:a1:00:1c:80:58:b1:84:f2:32:8a:34:7f:f2: ec:9b:8f:ab:cb:c3:79:dc:f6:c4:e9:c9:7f:45:6c: 91:a1:3b:55:61:02:33:ef:40:d4:f3:ca:e1:4b:b1: 9a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FF:32:03:C5:AF:2D:3D:64:6D:01:3B:17:BD:59:D1:C6:A2:88:F7 X509v3 Authority Key Identifier: keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e0:ab:47:dd:c4:0f:1e:82:90:c5:5c:dc:d6:17:9f:67:0b: 5e:04:3e:a2:6d:1e:a6:2d:bb:11:04:f5:2d:40:68:7f:88:58: e7:94:91:b9:87:36:e9:97:bf:76:57:b9:a7:23:28:3a:bc:ec: 29:89:04:fe:17:78:b1:76:49:f9:59:2e:3f:a3:c1:ae:d9:95: 1e:3d:72:46:12:97:7d:4e:83:e6:62:10:e1:83:5a:d2:e2:f1: 97:f3:06:32:7e:f7:23:1f:cf:0c:e0:dd:1d:a9:3b:bf:64:aa: 0f:ee:8b:43:39:04:18:47:58:2b:25:88:0b:73:f7:71:22:9f: f7:fb:24:c8:34:4d:fb:a6:e9:cf:b4:fa:77:c4:58:56:5d:52: b6:48:b5:b5:f1:cd:69:e2:9b:52:c0:bd:ef:50:b3:b7:4e:fd: 7b:d4:49:6a:42:87:27:c7:17:47:9d:f8:9f:db:c4:e9:17:90: 59:37:c1:7b:d8:f3:a9:cb:02:50:5c:80:18:de:70:53:3b:a0: f6:79:f4:90:85:79:96:4c:2f:65:b1:05:d6:0f:ba:aa:37:d2: 06:63:9f:55:b1:54:fc:f4:64:a8:5d:3b:b2:e2:b4:d7:4d:64: 45:49:e7:5f:32:0e:5f:74:4c:64:31:10:1e:c9:0e:da:9b:b5: fe:7a:a9:fd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPrCyFUjheP6cxEz7168sg9Sm95YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5MUZFMEI3MTIwRkVDMUIwMkUyMEY0RUI4OEE0RERG QTFCN0ZGQzAeFw0yNjA1MjgyMDIzMTVaFw0yNjA2MDIwMTUzMTVaMDMxMTAvBgNV BAMTKDU0RkYzMjAzQzVBRjJEM0Q2NDZEMDEzQjE3QkQ1OUQxQzZBMjg4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaU0eBC50HaJCUZeARbi8Dm74 Tw06ecfzP59kAkOgz6Kf2IKrpyULAQ+AnIUN7tWI2pclBQ0q5C4aRtUZ4m8si6R3 nwT4mhof2KsdG39h+Pd/v+1FrUn58bIxBP+WNfAj6mSVSG2Wgfr0R5sNiZ6X4467 I4RekHxJb9+TX1/Moaw73LmZseNbe1rQcF4MfVLtnR5E/cBkdjCNV9O8Pn7BBSAy VEFQDJ3MUYQHNapCFWaE84M1Rvo5UtROMDChXMD3jK3mgxE85CbjrY1bDDhaxfMJ oQAcgFixhPIyijR/8uybj6vLw3nc9sTpyX9FbJGhO1VhAjPvQNTzyuFLsZrdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUVP8yA8WvLT1kbQE7F71Z0caiiPcwHwYDVR0j BBgwFoAUv5H+C3Eg/sGwLiD064ik3fobf/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMjhBQzU0OTMwM0I3NEExQzQ5Q0EwNzZCOTc0RjA2MzZC MDNCNzlGOUUwMzM1QjZGREJCRkQ2MEVBOTE4MzQ4LzAvQkY5MUZFMEI3MTIwRkVD MUIwMkUyMEY0RUI4OEE0RERGQTFCN0ZGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjkxRkUwQjcxMjBGRUMxQjAy RTIwRjRFQjg4QTREREZBMUI3RkZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjI4QUM1NDkzMDNCNzRBMUM0OUNBMDc2Qjk3NEYwNjM2QjAzQjc5RjlF MDMzNUI2RkRCQkZENjBFQTkxODM0OC8wL0JGOTFGRTBCNzEyMEZFQzFCMDJFMjBG NEVCODhBNERERkExQjdGRkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBM4KtH3cQPHoKQxVzc1hefZwte BD6ibR6mLbsRBPUtQGh/iFjnlJG5hzbpl792V7mnIyg6vOwpiQT+F3ixdkn5WS4/ o8Gu2ZUePXJGEpd9ToPmYhDhg1rS4vGX8wYyfvcjH88M4N0dqTu/ZKoP7otDOQQY R1grJYgLc/dxIp/3+yTINE37punPtPp3xFhWXVK2SLW18c1p4ptSwL3vULO3Tv17 1ElqQocnxxdHnfif28TpF5BZN8F72POpywJQXIAY3nBTO6D2efSQhXmWTC9lsQXW D7qqN9IGY59VsVT89GSoXTuy4rTXTWRFSedfMg5fdExkMRAeyQ7am7X+eqn9 -----END CERTIFICATE-----Generated at Sat May 30 01:05:04 2026 by rpki-client