$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft File: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft (raw, json) Hash identifier: L1P+mec3yiqpLz6k06cdcyKQM5n9rNjGGL8zb/nrxak= Subject key identifier: 95:9C:8D:ED:58:84:20:60:CB:72:4C:26:B9:7F:88:B4:62:1E:DC:A0 Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 Certificate issuer: /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Certificate serial: 5EE607B87E958163AFB9280D976B55B3909A48B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft Manifest number: 0102 Signing time: Wed 30 Jul 2025 09:57:05 +0000 Manifest this update: Wed 30 Jul 2025 09:52:05 +0000 Manifest next update: Sun 03 Aug 2025 14:18:05 +0000 Files and hashes: 1: 34352e3233302e382e302f32322d3234203d3e20323636373130.roa (hash: mLPmwLCgJH7/6VKEK4Pcz7wxnHkCNUH5wI8HmFmJB1E=) 2: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl (hash: bbAJIGZrP9d4rApThg4c2WlGRL178szW585T0lB2yGs=) 3: 323830333a3332303a3a2f33322d3332203d3e20323636373130.roa (hash: lHM7TXuZJiuk5ar5OftYzmGGnYQusx4CcGk57kh5X5g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 14:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e6:07:b8:7e:95:81:63:af:b9:28:0d:97:6b:55:b3:90:9a:48:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Validity Not Before: Jul 30 09:52:05 2025 GMT Not After : Aug 3 14:18:05 2025 GMT Subject: CN=959C8DED58842060CB724C26B97F88B4621EDCA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:61:bb:6e:c2:d5:7f:db:c8:fd:30:80:6b: a7:6b:01:61:10:09:e8:4f:f6:29:c9:2b:86:3b:48: e4:c5:11:54:43:ff:cd:a0:3e:e5:3e:3b:59:37:c3: c7:97:96:cc:2a:c1:82:10:30:5f:b6:e6:83:ce:3d: a9:6a:dc:08:15:71:1d:a0:53:84:1f:55:e5:ea:50: 65:74:22:8c:03:7c:cd:1d:31:56:44:61:04:db:de: 23:3f:2c:ef:d0:7e:40:48:90:74:d1:33:2a:6b:d4: fc:26:c8:71:4a:ab:76:fd:ee:4b:2d:dc:de:89:c6: 00:71:87:37:a1:0c:89:0a:6d:5a:e1:ea:44:e8:87: 24:0d:fc:28:ce:c0:de:74:e3:f7:ed:59:9c:9b:7a: 20:a8:07:22:6d:3e:67:5b:03:37:83:77:98:66:2c: c6:34:08:77:01:1f:3c:c3:4c:a7:50:19:75:47:6b: 60:f8:3c:2c:fe:18:a0:0c:70:20:d0:30:8b:e4:2b: 7d:22:f6:d4:4e:4e:26:f3:52:39:c6:73:54:ec:dc: c9:2f:31:b6:01:43:17:1c:63:a2:ed:c1:1f:e7:10: c1:ac:57:4b:64:59:ce:46:dc:1d:0b:74:66:4f:ec: 61:69:5d:e9:04:51:81:e7:ac:ba:74:d6:44:bf:bf: 67:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9C:8D:ED:58:84:20:60:CB:72:4C:26:B9:7F:88:B4:62:1E:DC:A0 X509v3 Authority Key Identifier: keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:2f:a4:4a:5b:49:19:f0:00:da:3a:0b:d9:28:ee:45:ed:1b: 89:be:c9:be:8d:1f:88:b0:35:35:72:54:c0:0a:3e:d0:fc:f1: 1c:33:d7:5d:6e:ef:cd:ee:41:0d:01:bb:fa:1a:e0:80:b7:cb: 0f:69:58:55:5c:bd:da:d1:04:aa:4b:7c:f9:f0:14:bd:ee:1d: 7c:b1:8a:50:f7:a0:60:9a:25:86:b3:32:18:ca:a0:42:b1:38: 69:b7:91:fe:cc:c4:68:ba:0a:d5:02:40:be:70:b6:b0:22:91: 35:6d:3c:ab:c2:d1:0d:d8:2b:b1:22:af:aa:7f:47:cf:30:89: 24:1e:a7:d9:80:81:64:bc:1a:3a:c5:ad:89:38:39:55:36:98: 40:36:68:ac:d3:97:e4:64:4f:84:c3:ba:04:96:d6:2a:63:cc: e9:47:a5:fd:2f:22:50:c3:19:e4:d9:e3:45:f7:d0:5c:22:82: 23:dd:b1:07:fd:3f:ff:3f:03:68:6e:26:f4:34:33:a6:6f:8f: f9:f2:c7:0e:c2:5b:0e:73:da:63:e0:93:4c:ac:9b:ee:2c:a1: 64:60:90:7c:7b:5d:df:fe:e2:72:b1:e5:31:04:ee:18:eb:2a: d5:21:8f:ce:5b:eb:1c:23:00:ee:d6:49:4a:ea:d0:d9:c8:fb: f0:34:67:ce -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXuYHuH6VgWOvuSgNl2tVs5CaSLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEQzMwNjhBOUFFNzgzODRFNUE0RjRGNTI0NEJBRTQw ODgwNTlFNTAeFw0yNTA3MzAwOTUyMDVaFw0yNTA4MDMxNDE4MDVaMDMxMTAvBgNV BAMTKDk1OUM4REVENTg4NDIwNjBDQjcyNEMyNkI5N0Y4OEI0NjIxRURDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6i2G7bsLVf9vI/TCAa6drAWEQ CehP9inJK4Y7SOTFEVRD/82gPuU+O1k3w8eXlswqwYIQMF+25oPOPalq3AgVcR2g U4QfVeXqUGV0IowDfM0dMVZEYQTb3iM/LO/QfkBIkHTRMypr1PwmyHFKq3b97kst 3N6JxgBxhzehDIkKbVrh6kTohyQN/CjOwN504/ftWZybeiCoByJtPmdbAzeDd5hm LMY0CHcBHzzDTKdQGXVHa2D4PCz+GKAMcCDQMIvkK30i9tROTibzUjnGc1Ts3Mkv MbYBQxccY6LtwR/nEMGsV0tkWc5G3B0LdGZP7GFpXekEUYHnrLp01kS/v2fJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUlZyN7ViEIGDLckwmuX+ItGIe3KAwHwYDVR0j BBgwFoAUu9wwaKmueDhOWk9PUkS65AiAWeUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NDIzMzIwQzgwNUQ4QkVFRkM0MjQyQzU2NzFEODQ0NTY3 NjNBRERGQURFRTA0RTQyQTFBMUQ0NERDRkJEMkEzLzAvQkJEQzMwNjhBOUFFNzgz ODRFNUE0RjRGNTI0NEJBRTQwODgwNTlFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkRDMzA2OEE5QUU3ODM4NEU1 QTRGNEY1MjQ0QkFFNDA4ODA1OUU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDQyMzMyMEM4MDVEOEJFRUZDNDI0MkM1NjcxRDg0NDU2NzYzQURERkFE RUUwNEU0MkExQTFENDREQ0ZCRDJBMy8wL0JCREMzMDY4QTlBRTc4Mzg0RTVBNEY0 RjUyNDRCQUU0MDg4MDU5RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBFL6RKW0kZ8ADaOgvZKO5F7RuJ vsm+jR+IsDU1clTACj7Q/PEcM9ddbu/N7kENAbv6GuCAt8sPaVhVXL3a0QSqS3z5 8BS97h18sYpQ96BgmiWGszIYyqBCsThpt5H+zMRougrVAkC+cLawIpE1bTyrwtEN 2CuxIq+qf0fPMIkkHqfZgIFkvBo6xa2JODlVNphANmis05fkZE+Ew7oEltYqY8zp R6X9LyJQwxnk2eNF99BcIoIj3bEH/T//PwNobib0NDOmb4/58scOwlsOc9pj4JNM rJvuLKFkYJB8e13f/uJyseUxBO4Y6yrVIY/OW+scIwDu1klK6tDZyPvwNGfO -----END CERTIFICATE-----Generated at Thu Jul 31 10:12:35 2025 by rpki-client