$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft File: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft (raw, json) Hash identifier: K6YuoN/a3TILthNPHVvjHJrO+acTcYTl+BYqh7z1xZg= Subject key identifier: B1:FE:25:9B:BF:14:36:3A:E9:52:44:D6:02:20:D0:21:7D:EA:53:7F Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC Certificate issuer: /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Certificate serial: 64A385ADC46F4D0487CA4421854C2F354EAE1611 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft Manifest number: 0112 Signing time: Fri 05 Sep 2025 00:34:03 +0000 Manifest this update: Fri 05 Sep 2025 00:29:03 +0000 Manifest next update: Wed 10 Sep 2025 09:10:03 +0000 Files and hashes: 1: 323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (hash: qXLUa1DFAZMrZIlzarnZaCXNOtAwLQ/Wi2JutVkZxnE=) 2: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl (hash: K4s7VnsLi8b0sf7lOwgBCDnOkJYgl7gxYIic2+uvWHU=) 3: 3137392e35312e3230382e302f32322d3234203d3e20323731373831.roa (hash: qefcdKBbQ8rTrMpgo/t4zhuWfrSW4R/8kvtNUQX7kms=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Sep 2025 09:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a3:85:ad:c4:6f:4d:04:87:ca:44:21:85:4c:2f:35:4e:ae:16:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Validity Not Before: Sep 5 00:29:03 2025 GMT Not After : Sep 10 09:10:03 2025 GMT Subject: CN=B1FE259BBF14363AE95244D60220D0217DEA537F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:05:ef:c3:f3:4a:7c:71:52:61:95:5d:8b: 5c:24:25:cf:50:2f:b9:00:61:9b:0f:8b:5a:da:fa: eb:5e:51:5e:99:2f:85:2e:b9:f1:6f:d3:46:bd:67: 6f:a5:a2:0e:ae:55:28:40:61:a7:df:65:0c:8a:ac: f5:cb:85:50:f2:80:7a:68:c9:4f:3d:c8:22:fe:40: c2:50:5e:60:00:15:5a:82:f7:0a:4c:28:56:94:54: 87:3c:7e:1b:07:0d:e6:20:54:bd:8e:54:21:72:44: 02:da:db:9a:df:9f:19:7c:bb:77:8b:de:98:93:c0: 85:21:c9:78:e4:0e:cd:db:12:52:43:91:db:15:a2: a8:66:ff:62:ab:30:1a:29:e6:85:00:3b:0a:9d:45: 34:22:81:f1:51:8c:cc:74:79:90:4d:8a:fe:e5:eb: 20:4b:7a:07:e4:0d:76:63:04:03:2a:47:d8:5c:81: 76:b5:30:36:1d:76:40:39:e4:3a:e2:71:61:ca:65: 9a:98:37:ca:b8:06:a9:2e:1d:e9:08:9a:fa:5a:6e: 7b:ba:5e:48:64:72:89:00:76:7f:42:7a:0c:bf:8c: a2:c8:14:1d:8b:2f:1c:50:ef:2d:75:7c:d0:27:4c: 60:e5:ef:3e:aa:a5:d7:38:0f:25:36:82:a8:9a:2a: 3e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FE:25:9B:BF:14:36:3A:E9:52:44:D6:02:20:D0:21:7D:EA:53:7F X509v3 Authority Key Identifier: keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:99:13:7c:77:1d:4a:24:2e:91:31:a2:d1:75:5d:d0:83:0e: 60:52:d3:04:38:34:15:04:3a:4a:14:e3:a1:77:56:4e:6a:71: ab:72:bf:bd:f9:fc:a0:c7:22:f9:c9:0c:57:49:2b:0a:73:fd: b8:a0:c6:4a:44:a4:c0:39:97:f6:d7:c6:7f:f1:54:fc:9b:e3: 2f:57:55:7f:a6:eb:3d:db:71:0e:4b:ce:c4:a7:14:74:0f:27: 09:25:7a:f9:0a:1a:36:10:65:5d:b8:65:68:24:19:27:9e:42: 9b:16:39:35:75:20:1b:b0:19:2f:16:7c:f0:93:93:3e:ca:dd: a4:1d:fe:d9:cb:0c:ef:d1:cd:7e:40:38:06:84:82:3d:21:15: 21:03:9b:05:ac:8f:0d:20:0d:41:3b:b5:86:d1:8c:f5:a9:e9: d5:0a:74:91:f1:f8:98:6a:e9:3a:c1:75:d2:fc:7c:56:f0:8b: 36:cb:02:39:c0:e1:7c:db:76:0a:1b:8e:05:db:eb:5f:65:fe: 47:ca:ae:ce:f0:ca:ca:9c:69:14:80:83:64:45:f1:79:7b:0d: 67:e8:fd:d1:f1:7d:95:c3:bf:fe:9d:b8:b8:dd:ff:b9:d1:24: f3:0a:03:ba:ae:7e:f2:85:4b:32:19:9e:f9:2c:7e:be:65:89: d3:06:91:9f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZKOFrcRvTQSHykQhhUwvNU6uFhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5MUZFMEI3MTIwRkVDMUIwMkUyMEY0RUI4OEE0RERG QTFCN0ZGQzAeFw0yNTA5MDUwMDI5MDNaFw0yNTA5MTAwOTEwMDNaMDMxMTAvBgNV BAMTKEIxRkUyNTlCQkYxNDM2M0FFOTUyNDRENjAyMjBEMDIxN0RFQTUzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cgXvw/NKfHFSYZVdi1wkJc9Q L7kAYZsPi1ra+uteUV6ZL4UuufFv00a9Z2+log6uVShAYaffZQyKrPXLhVDygHpo yU89yCL+QMJQXmAAFVqC9wpMKFaUVIc8fhsHDeYgVL2OVCFyRALa25rfnxl8u3eL 3piTwIUhyXjkDs3bElJDkdsVoqhm/2KrMBop5oUAOwqdRTQigfFRjMx0eZBNiv7l 6yBLegfkDXZjBAMqR9hcgXa1MDYddkA55DricWHKZZqYN8q4BqkuHekImvpabnu6 XkhkcokAdn9Cegy/jKLIFB2LLxxQ7y11fNAnTGDl7z6qpdc4DyU2gqiaKj6XAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUsf4lm78UNjrpUkTWAiDQIX3qU38wHwYDVR0j BBgwFoAUv5H+C3Eg/sGwLiD064ik3fobf/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMjhBQzU0OTMwM0I3NEExQzQ5Q0EwNzZCOTc0RjA2MzZC MDNCNzlGOUUwMzM1QjZGREJCRkQ2MEVBOTE4MzQ4LzAvQkY5MUZFMEI3MTIwRkVD MUIwMkUyMEY0RUI4OEE0RERGQTFCN0ZGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjkxRkUwQjcxMjBGRUMxQjAy RTIwRjRFQjg4QTREREZBMUI3RkZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjI4QUM1NDkzMDNCNzRBMUM0OUNBMDc2Qjk3NEYwNjM2QjAzQjc5RjlF MDMzNUI2RkRCQkZENjBFQTkxODM0OC8wL0JGOTFGRTBCNzEyMEZFQzFCMDJFMjBG NEVCODhBNERERkExQjdGRkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDImRN8dx1KJC6RMaLRdV3Qgw5g UtMEODQVBDpKFOOhd1ZOanGrcr+9+fygxyL5yQxXSSsKc/24oMZKRKTAOZf218Z/ 8VT8m+MvV1V/pus923EOS87EpxR0DycJJXr5Cho2EGVduGVoJBknnkKbFjk1dSAb sBkvFnzwk5M+yt2kHf7Zywzv0c1+QDgGhII9IRUhA5sFrI8NIA1BO7WG0Yz1qenV CnSR8fiYauk6wXXS/HxW8Is2ywI5wOF823YKG44F2+tfZf5Hyq7O8MrKnGkUgINk RfF5ew1n6P3R8X2Vw7/+nbi43f+50STzCgO6rn7yhUsyGZ75LH6+ZYnTBpGf -----END CERTIFICATE-----Generated at Sat Sep 6 16:53:38 2025 by rpki-client