$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft File: BCDD50591AFBE01DD1E89006B709D14B69D79567.mft (raw, json) Hash identifier: UzA7zvmQ5sHsfrlPzavdAhQsTmDhrDAdlR9WzYxS0Zk= Subject key identifier: F3:12:87:C7:C0:88:D9:2F:CB:BD:A2:48:43:F8:59:C1:FF:E3:4E:27 Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67 Certificate issuer: /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567 Certificate serial: 0FAE6202BB9EF68006489EB8878AC34A0AF241FE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft Manifest number: 0132 Signing time: Mon 20 Oct 2025 23:42:00 +0000 Manifest this update: Mon 20 Oct 2025 23:37:00 +0000 Manifest next update: Sat 25 Oct 2025 07:21:00 +0000 Files and hashes: 1: BCDD50591AFBE01DD1E89006B709D14B69D79567.crl (hash: BNDCUhlwqPVpO0rNzYgiRg2GWUS8KLMW2I4dUsDGLH4=) 2: 323830303a6362303a3a2f33322d3438203d3e20323633323434.roa (hash: HG79+FZ1IJmtzxISYDc5++PcOk2TMTwJhOCfg+BwQeE=) 3: 3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa (hash: r3mpym8MNwnvHxIuYSgXnngQZcrxT6L1+B3uUPWi9dY=) 4: 3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa (hash: xopTA6jKSIsdkIE6jBzhXIFqdR5+llPDfkKoskVciXA=) 5: 3138362e302e3138302e302f32322d3234203d3e20323633323434.roa (hash: 0DlXsm98HlB5uDzTYzIjyDBNM1DJ5k3QRekEzRjOxzQ=) 6: 3133312e37322e3133322e302f32322d3234203d3e20323633323434.roa (hash: 9BHe64mInmx7D9r4r9/CtM7RjflnHnNO52klk8Xfo/4=) 7: 3139302e3130362e33322e302f32312d3234203d3e20323633323434.roa (hash: IKpYtNnPqJi7A2I065akkFAJXM/1P20XrCW6mLLJ8DY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Oct 2025 07:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ae:62:02:bb:9e:f6:80:06:48:9e:b8:87:8a:c3:4a:0a:f2:41:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567 Validity Not Before: Oct 20 23:37:00 2025 GMT Not After : Oct 25 07:21:00 2025 GMT Subject: CN=F31287C7C088D92FCBBDA24843F859C1FFE34E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:af:86:07:51:b1:e8:12:e0:a8:27:8a:66:ba: 08:22:ef:ab:ae:0d:ec:4a:cf:ee:a6:d6:07:f7:66: 75:08:fc:48:14:6c:9d:7a:d4:b3:55:45:fb:b8:64: af:ad:53:4e:95:17:80:d3:ca:96:51:e8:33:b0:4c: 5c:4e:84:d5:0f:72:c6:09:aa:e0:22:9d:78:e6:49: 91:73:2f:7c:7c:19:d3:e0:b8:c4:b9:7f:c7:53:ac: c2:66:45:6f:be:7f:61:2c:0f:88:b4:16:96:67:67: 99:f4:3a:dd:47:8d:98:f1:8f:cc:d0:24:f7:cb:8c: 47:ed:d8:6a:ea:74:08:bb:b4:8b:4b:c9:8a:d4:85: d4:b5:83:e3:9e:f2:5e:4c:c8:04:32:d7:18:d9:f8: 8c:3b:0a:9c:d7:83:14:bd:02:ec:80:c4:af:21:15: 76:a2:1f:f7:df:1e:37:15:bb:1c:e1:d5:eb:f4:c6: a4:d4:50:9f:e6:1e:54:ba:d3:69:58:20:60:f5:1b: fd:86:b6:1f:be:c5:99:0a:e0:23:2b:6f:2c:d6:05: ba:24:eb:24:15:19:81:26:66:cc:db:ad:a3:ee:58: 1d:d9:4f:1f:41:0d:fd:51:9e:15:59:5e:53:18:9e: 41:db:7f:9f:32:9a:42:2b:7d:20:87:64:45:8a:3d: e1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:12:87:C7:C0:88:D9:2F:CB:BD:A2:48:43:F8:59:C1:FF:E3:4E:27 X509v3 Authority Key Identifier: keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b3:ef:30:60:90:3b:c4:4e:9a:cb:2d:91:06:ed:04:32:26: 44:80:2a:d3:ab:1e:9d:cf:34:04:46:f0:ad:41:01:5a:8d:78: 0c:93:b0:9d:c7:cc:f6:9c:53:81:34:f8:a2:a4:ff:a5:a1:65: be:7a:b0:bf:36:f9:66:68:a9:5a:82:a5:74:ff:e5:e8:26:0c: db:c2:ee:db:f3:21:c0:9f:87:2c:2e:c6:d0:a0:2a:ae:5d:48: aa:36:dc:57:54:04:0d:c2:ae:2d:1e:f2:6e:da:a8:b7:51:5a: f0:64:59:7b:f9:6b:4f:fb:40:33:82:e8:03:a1:71:bc:83:9a: ec:2b:f1:07:40:48:32:39:64:e9:ea:41:e6:31:5a:6a:75:dc: 01:9e:7e:b1:f7:4a:37:f4:58:4e:63:fd:42:ce:fe:a7:99:59: 33:6b:35:98:8d:af:37:7d:d8:b1:a7:27:d2:00:9a:19:df:e5: d0:be:2d:7a:9e:5d:e9:eb:5a:18:88:00:4b:f5:e6:ab:2f:66: 91:49:96:3c:64:65:37:78:8d:28:5a:3e:24:21:1d:21:45:b9: 52:e9:7e:07:be:0c:10:5f:99:b5:72:a6:97:ba:e2:a4:17:ab: 0d:ae:6e:e7:c2:c4:1a:0b:bd:01:71:19:1a:e8:e3:da:7d:08: b2:0c:f2:87 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUD65iArue9oAGSJ64h4rDSgryQf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNERDUwNTkxQUZCRTAxREQxRTg5MDA2QjcwOUQxNEI2 OUQ3OTU2NzAeFw0yNTEwMjAyMzM3MDBaFw0yNTEwMjUwNzIxMDBaMDMxMTAvBgNV BAMTKEYzMTI4N0M3QzA4OEQ5MkZDQkJEQTI0ODQzRjg1OUMxRkZFMzRFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYr4YHUbHoEuCoJ4pmuggi76uu DexKz+6m1gf3ZnUI/EgUbJ161LNVRfu4ZK+tU06VF4DTypZR6DOwTFxOhNUPcsYJ quAinXjmSZFzL3x8GdPguMS5f8dTrMJmRW++f2EsD4i0FpZnZ5n0Ot1HjZjxj8zQ JPfLjEft2GrqdAi7tItLyYrUhdS1g+Oe8l5MyAQy1xjZ+Iw7CpzXgxS9AuyAxK8h FXaiH/ffHjcVuxzh1ev0xqTUUJ/mHlS602lYIGD1G/2Gth++xZkK4CMrbyzWBbok 6yQVGYEmZszbraPuWB3ZTx9BDf1RnhVZXlMYnkHbf58ymkIrfSCHZEWKPeFXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8xKHx8CI2S/LvaJIQ/hZwf/jTicwHwYDVR0j BBgwFoAUvN1QWRr74B3R6JAGtwnRS2nXlWcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wQjU0MkU4QzUwM0U3NDQzMUZEMjE3RjVBMjk4QTJFNTMz NDY4MzBDRTU1NTkxNzlFOTg3Mjk4NEZEOTlEQUYzLzAvQkNERDUwNTkxQUZCRTAx REQxRTg5MDA2QjcwOUQxNEI2OUQ3OTU2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQ0RENTA1OTFBRkJFMDFERDFF ODkwMDZCNzA5RDE0QjY5RDc5NTY3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEI1NDJFOEM1MDNFNzQ0MzFGRDIxN0Y1QTI5OEEyRTUzMzQ2ODMwQ0U1 NTU5MTc5RTk4NzI5ODRGRDk5REFGMy8wL0JDREQ1MDU5MUFGQkUwMUREMUU4OTAw NkI3MDlEMTRCNjlENzk1NjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBes+8wYJA7xE6ayy2RBu0EMiZE gCrTqx6dzzQERvCtQQFajXgMk7Cdx8z2nFOBNPiipP+loWW+erC/NvlmaKlagqV0 /+XoJgzbwu7b8yHAn4csLsbQoCquXUiqNtxXVAQNwq4tHvJu2qi3UVrwZFl7+WtP +0AzgugDoXG8g5rsK/EHQEgyOWTp6kHmMVpqddwBnn6x90o39FhOY/1Czv6nmVkz azWYja83fdixpyfSAJoZ3+XQvi16nl3p61oYiABL9earL2aRSZY8ZGU3eI0oWj4k IR0hRblS6X4HvgwQX5m1cqaXuuKkF6sNrm7nwsQaC70BcRka6OPafQiyDPKH -----END CERTIFICATE-----Generated at Tue Oct 21 20:21:38 2025 by rpki-client