$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft File: BCDD50591AFBE01DD1E89006B709D14B69D79567.mft (raw, json) Hash identifier: LSgHSPTjRWJWk1zgM9ZV7enQRwLtVWvkXJjV6IA9eDs= Subject key identifier: E0:E8:B7:AF:65:B7:D9:3F:C1:0B:93:C4:96:D0:8B:53:DA:A5:5D:98 Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67 Certificate issuer: /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567 Certificate serial: 7C1AB781570D45ECE340FD20998E86D42846BD2D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft Manifest number: 0110 Signing time: Tue 19 Aug 2025 22:52:44 +0000 Manifest this update: Tue 19 Aug 2025 22:47:44 +0000 Manifest next update: Sun 24 Aug 2025 19:27:44 +0000 Files and hashes: 1: 3133312e37322e3133322e302f32322d3234203d3e20323633323434.roa (hash: 9BHe64mInmx7D9r4r9/CtM7RjflnHnNO52klk8Xfo/4=) 2: 3138362e302e3138302e302f32322d3234203d3e20323633323434.roa (hash: 0DlXsm98HlB5uDzTYzIjyDBNM1DJ5k3QRekEzRjOxzQ=) 3: 3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa (hash: xopTA6jKSIsdkIE6jBzhXIFqdR5+llPDfkKoskVciXA=) 4: 323830303a6362303a3a2f33322d3438203d3e20323633323434.roa (hash: HG79+FZ1IJmtzxISYDc5++PcOk2TMTwJhOCfg+BwQeE=) 5: 3139302e3130362e33322e302f32312d3234203d3e20323633323434.roa (hash: IKpYtNnPqJi7A2I065akkFAJXM/1P20XrCW6mLLJ8DY=) 6: BCDD50591AFBE01DD1E89006B709D14B69D79567.crl (hash: neyx4UeJpRS1K8hZ5bE3Xxnpb3sHvs+Kw5E/7sOt560=) 7: 3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa (hash: r3mpym8MNwnvHxIuYSgXnngQZcrxT6L1+B3uUPWi9dY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 19:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1a:b7:81:57:0d:45:ec:e3:40:fd:20:99:8e:86:d4:28:46:bd:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567 Validity Not Before: Aug 19 22:47:44 2025 GMT Not After : Aug 24 19:27:44 2025 GMT Subject: CN=E0E8B7AF65B7D93FC10B93C496D08B53DAA55D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:cf:9e:9c:33:c6:80:44:d6:20:0d:d0:d0: 2c:90:19:62:bb:ff:0d:b7:a2:82:bd:f9:8d:ad:f7: 6a:0a:bd:58:25:6c:20:48:c1:a0:78:01:7d:9c:70: 47:77:c4:bd:c7:1d:17:58:1c:eb:0d:4b:78:c7:a9: e4:4c:70:9b:a4:5e:ea:7b:0c:63:c7:25:8d:43:39: 55:81:b2:bb:46:5c:36:08:94:6a:7d:fc:65:e0:99: 4b:c0:15:1f:11:b1:75:2d:4e:45:f7:aa:a4:39:d5: 24:33:64:41:7c:ee:0d:ad:4f:96:60:fc:ca:7a:07: 67:39:77:e1:46:4e:a7:97:22:bb:67:c0:70:c2:42: ca:46:4e:75:c7:ce:c8:d3:fe:7a:57:2f:cf:57:05: e1:1c:1d:fb:ab:be:62:26:80:4f:f1:37:a5:50:9d: e0:90:1c:ba:54:85:65:e3:d9:15:68:19:96:2e:83: 29:b8:42:f4:79:8f:e3:db:1d:f6:d2:22:40:cc:d4: 25:89:29:b7:93:b2:80:2d:2a:a2:7a:92:6f:d0:08: 0f:38:47:a9:ea:28:e0:3e:bd:6f:10:55:f3:3f:8c: 86:8e:9f:9c:c0:52:46:62:74:f2:a7:2b:89:7c:c6: 9c:8c:0a:02:3b:c8:7a:ed:50:fe:15:56:61:19:b1: 62:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E8:B7:AF:65:B7:D9:3F:C1:0B:93:C4:96:D0:8B:53:DA:A5:5D:98 X509v3 Authority Key Identifier: keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b0:83:e3:d0:cd:93:1d:a7:ae:17:79:2a:7f:ed:08:26:e2: 07:33:06:b1:8c:6d:2f:3f:f5:c7:08:17:fc:e0:0b:5e:e8:fb: 7a:fa:26:cb:85:83:99:72:44:0c:96:24:97:67:f7:88:62:d3: 6d:44:33:b2:9a:ae:8b:4a:6b:37:6a:7f:f4:04:13:98:17:ea: fe:1c:bf:28:2d:bf:76:0c:c4:a0:bf:46:92:a2:fe:75:05:50: 21:4e:e8:e5:cb:1d:c1:3a:33:ef:6d:d7:60:ca:c8:c9:79:93: 05:46:e6:65:2a:e0:dd:72:25:8d:56:79:5a:db:60:c9:17:6c: 4f:98:bd:38:a7:27:24:96:ab:f5:b2:44:77:35:05:10:58:81: 11:b4:af:d7:1a:be:68:1a:f1:bc:ed:2b:ed:68:84:44:72:c4: 13:41:ce:26:60:bf:55:d5:2c:f4:eb:8f:ea:ec:cb:b3:2e:24: 04:d2:11:d2:3c:f2:be:d9:97:69:c8:09:1c:13:87:f3:09:3d: d0:99:cf:9e:a7:58:d3:4d:4f:a8:80:71:1d:9c:03:a4:84:e3: 72:cf:61:bd:b4:f1:5f:fa:49:44:cc:0a:24:e3:f6:55:1b:99: 3a:27:41:b5:2f:e2:f5:a7:9b:ab:ea:16:f0:6c:eb:3b:3c:9f: 8c:4e:22:5c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfBq3gVcNRezjQP0gmY6G1ChGvS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNERDUwNTkxQUZCRTAxREQxRTg5MDA2QjcwOUQxNEI2 OUQ3OTU2NzAeFw0yNTA4MTkyMjQ3NDRaFw0yNTA4MjQxOTI3NDRaMDMxMTAvBgNV BAMTKEUwRThCN0FGNjVCN0Q5M0ZDMTBCOTNDNDk2RDA4QjUzREFBNTVEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCs8+enDPGgETWIA3Q0CyQGWK7 /w23ooK9+Y2t92oKvVglbCBIwaB4AX2ccEd3xL3HHRdYHOsNS3jHqeRMcJukXup7 DGPHJY1DOVWBsrtGXDYIlGp9/GXgmUvAFR8RsXUtTkX3qqQ51SQzZEF87g2tT5Zg /Mp6B2c5d+FGTqeXIrtnwHDCQspGTnXHzsjT/npXL89XBeEcHfurvmImgE/xN6VQ neCQHLpUhWXj2RVoGZYugym4QvR5j+PbHfbSIkDM1CWJKbeTsoAtKqJ6km/QCA84 R6nqKOA+vW8QVfM/jIaOn5zAUkZidPKnK4l8xpyMCgI7yHrtUP4VVmEZsWKjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU4Oi3r2W32T/BC5PEltCLU9qlXZgwHwYDVR0j BBgwFoAUvN1QWRr74B3R6JAGtwnRS2nXlWcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wQjU0MkU4QzUwM0U3NDQzMUZEMjE3RjVBMjk4QTJFNTMz NDY4MzBDRTU1NTkxNzlFOTg3Mjk4NEZEOTlEQUYzLzAvQkNERDUwNTkxQUZCRTAx REQxRTg5MDA2QjcwOUQxNEI2OUQ3OTU2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQ0RENTA1OTFBRkJFMDFERDFF ODkwMDZCNzA5RDE0QjY5RDc5NTY3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEI1NDJFOEM1MDNFNzQ0MzFGRDIxN0Y1QTI5OEEyRTUzMzQ2ODMwQ0U1 NTU5MTc5RTk4NzI5ODRGRDk5REFGMy8wL0JDREQ1MDU5MUFGQkUwMUREMUU4OTAw NkI3MDlEMTRCNjlENzk1NjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3sIPj0M2THaeuF3kqf+0IJuIH MwaxjG0vP/XHCBf84Ate6Pt6+ibLhYOZckQMliSXZ/eIYtNtRDOymq6LSms3an/0 BBOYF+r+HL8oLb92DMSgv0aSov51BVAhTujlyx3BOjPvbddgysjJeZMFRuZlKuDd ciWNVnla22DJF2xPmL04pycklqv1skR3NQUQWIERtK/XGr5oGvG87SvtaIREcsQT Qc4mYL9V1Sz064/q7MuzLiQE0hHSPPK+2ZdpyAkcE4fzCT3Qmc+ep1jTTU+ogHEd nAOkhONyz2G9tPFf+klEzAok4/ZVG5k6J0G1L+L1p5ur6hbwbOs7PJ+MTiJc -----END CERTIFICATE-----Generated at Wed Aug 20 19:43:32 2025 by rpki-client