$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft File: BFA364CC05C34700B6C32AC37512D94D292D301C.mft (raw, json) Hash identifier: LSX2ofLLthOFP6VkCxVsnzwf8+K8Vgn+Y64L1omV1zI= Subject key identifier: 3C:39:5D:D7:24:BD:46:80:D2:11:4C:02:F5:D1:BB:30:B5:E9:F0:07 Authority key identifier: BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C Certificate issuer: /CN=BFA364CC05C34700B6C32AC37512D94D292D301C Certificate serial: 61CDCA53AC0C658863632CFC964C7FD7025124F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft Manifest number: 011A Signing time: Thu 18 Sep 2025 04:00:01 +0000 Manifest this update: Thu 18 Sep 2025 03:55:01 +0000 Manifest next update: Tue 23 Sep 2025 05:22:01 +0000 Files and hashes: 1: 3136382e3230352e3131362e302f32322d3234203d3e20323634363738.roa (hash: qh20qy6Ymdl5qlEhD3KReiSomRmiX+A5r7eOSAVfocY=) 2: BFA364CC05C34700B6C32AC37512D94D292D301C.crl (hash: 2+1cXd3Tlj5KmC8tc/C1KE+WITuTwNvun4LjMOwcfF0=) 3: 323830333a646434303a3a2f33322d3438203d3e20323634363738.roa (hash: /b1eDm9Y7oRs94nAbEpcwT2yuvjJ7z2cgJyZkJI4aOM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Sep 2025 23:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cd:ca:53:ac:0c:65:88:63:63:2c:fc:96:4c:7f:d7:02:51:24:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFA364CC05C34700B6C32AC37512D94D292D301C Validity Not Before: Sep 18 03:55:01 2025 GMT Not After : Sep 23 05:22:01 2025 GMT Subject: CN=3C395DD724BD4680D2114C02F5D1BB30B5E9F007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:fe:e0:8f:50:20:63:b5:e2:e4:7c:9d:cd: 1f:25:fd:5b:45:c4:54:30:79:59:7c:bc:65:ec:f9: de:d1:6b:c4:7d:b1:db:ac:65:e0:8c:05:ce:4e:5a: 3c:8c:12:16:5f:55:b8:f8:4c:14:68:00:fa:e3:a7: 0d:4c:0a:3e:55:e2:22:ea:a0:6c:09:cb:34:d5:9b: 19:82:ad:72:fe:e5:cf:9a:90:12:a7:01:b1:94:70: 45:f2:bb:34:e5:4c:46:20:9f:9b:bb:ee:0e:52:3e: 4a:bd:03:d0:88:5e:8e:27:c7:52:6b:18:07:c3:5b: e2:71:fa:1f:92:84:7f:45:c3:ff:e0:f3:30:6a:3d: 59:4d:fa:26:5b:0d:41:a6:7d:95:42:b9:fe:1a:ea: af:ce:22:00:b4:18:45:07:e3:9c:7b:c5:79:59:74: 64:6a:b2:0e:69:c9:40:d0:37:b8:83:08:fb:8e:5a: 6c:0a:92:60:db:ec:eb:d7:c5:36:f9:dc:6c:9e:9a: 68:5f:52:15:89:0b:68:99:1e:0c:e4:ad:e4:a5:4c: 74:78:e1:6c:eb:c7:e2:26:a1:0f:c6:78:30:e0:e1: d2:8c:26:27:ec:07:b9:07:95:76:d7:71:d2:30:86: 75:45:f9:f8:57:bb:dd:27:be:49:a1:7f:60:ea:fd: da:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:39:5D:D7:24:BD:46:80:D2:11:4C:02:F5:D1:BB:30:B5:E9:F0:07 X509v3 Authority Key Identifier: keyid:BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:cc:98:0d:01:e2:76:a2:46:63:ed:84:21:0b:ad:44:e6:71: 95:6c:66:61:87:b7:3a:eb:13:7e:dc:94:03:55:42:c0:48:78: f1:39:35:52:cc:bb:03:19:17:50:43:12:06:db:3b:55:25:3c: 11:19:4e:9f:32:2b:b6:45:50:3e:d4:68:7f:4f:94:87:86:3f: 3e:76:49:33:70:73:a5:1e:ce:a7:64:22:04:74:d5:47:31:7a: eb:66:df:32:4d:77:79:95:3a:ae:20:7e:af:49:a4:22:5c:0f: dc:48:a2:93:e6:b6:5a:25:48:39:d3:9f:d1:ce:f2:0a:1c:36: d0:37:36:b6:94:e8:d0:e0:1c:dc:58:9c:46:9e:e8:fc:87:ae: 33:c3:a2:b0:ed:8a:1a:5f:19:f3:32:79:c8:fa:b6:3f:cd:92: 87:14:5c:2e:cf:e2:98:5f:ed:1c:2d:8e:9a:8b:c2:09:22:d4: 4a:b8:bc:69:8b:04:88:51:e8:d0:fc:b1:89:af:5e:97:35:9c: 12:77:df:5b:0e:25:b4:7c:e9:38:db:5b:35:a8:f3:8b:71:06: e0:a6:96:c5:9e:17:d3:90:b5:ec:61:f0:59:cb:57:45:bc:5b: fe:a4:d5:cf:70:e1:61:d8:b4:a8:4f:db:da:4b:a6:b7:f8:ff: 75:85:5b:62 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYc3KU6wMZYhjYyz8lkx/1wJRJPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZBMzY0Q0MwNUMzNDcwMEI2QzMyQUMzNzUxMkQ5NEQy OTJEMzAxQzAeFw0yNTA5MTgwMzU1MDFaFw0yNTA5MjMwNTIyMDFaMDMxMTAvBgNV BAMTKDNDMzk1REQ3MjRCRDQ2ODBEMjExNEMwMkY1RDFCQjMwQjVFOUYwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9GP7gj1AgY7Xi5HydzR8l/VtF xFQweVl8vGXs+d7Ra8R9sdusZeCMBc5OWjyMEhZfVbj4TBRoAPrjpw1MCj5V4iLq oGwJyzTVmxmCrXL+5c+akBKnAbGUcEXyuzTlTEYgn5u77g5SPkq9A9CIXo4nx1Jr GAfDW+Jx+h+ShH9Fw//g8zBqPVlN+iZbDUGmfZVCuf4a6q/OIgC0GEUH45x7xXlZ dGRqsg5pyUDQN7iDCPuOWmwKkmDb7OvXxTb53GyemmhfUhWJC2iZHgzkreSlTHR4 4Wzrx+ImoQ/GeDDg4dKMJifsB7kHlXbXcdIwhnVF+fhXu90nvkmhf2Dq/doBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPDld1yS9RoDSEUwC9dG7MLXp8AcwHwYDVR0j BBgwFoAUv6NkzAXDRwC2wyrDdRLZTSktMBwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yNDFGQ0ZGRjMzMjI2MTVGNUYyQzlCQjI2QUE5ODdGQUNF NjgzRTA4NjhBMDdDQ0E3NjJERTdBNkJBQkVEOTUwLzAvQkZBMzY0Q0MwNUMzNDcw MEI2QzMyQUMzNzUxMkQ5NEQyOTJEMzAxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkEzNjRDQzA1QzM0NzAwQjZD MzJBQzM3NTEyRDk0RDI5MkQzMDFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjQxRkNGRkYzMzIyNjE1RjVGMkM5QkIyNkFBOTg3RkFDRTY4M0UwODY4 QTA3Q0NBNzYyREU3QTZCQUJFRDk1MC8wL0JGQTM2NENDMDVDMzQ3MDBCNkMzMkFD Mzc1MTJEOTREMjkyRDMwMUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYzJgNAeJ2okZj7YQhC61E5nGV bGZhh7c66xN+3JQDVULASHjxOTVSzLsDGRdQQxIG2ztVJTwRGU6fMiu2RVA+1Gh/ T5SHhj8+dkkzcHOlHs6nZCIEdNVHMXrrZt8yTXd5lTquIH6vSaQiXA/cSKKT5rZa JUg505/RzvIKHDbQNza2lOjQ4BzcWJxGnuj8h64zw6Kw7YoaXxnzMnnI+rY/zZKH FFwuz+KYX+0cLY6ai8IJItRKuLxpiwSIUejQ/LGJr16XNZwSd99bDiW0fOk421s1 qPOLcQbgppbFnhfTkLXsYfBZy1dFvFv+pNXPcOFh2LSoT9vaS6a3+P91hVti -----END CERTIFICATE-----Generated at Thu Sep 18 21:57:25 2025 by rpki-client