$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft File: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft (raw, json) Hash identifier: xIPEWqfARMTm3fK8LMBOfxVn3LjAem7BYz1WcN42UMI= Subject key identifier: 42:D9:01:3C:66:CE:CE:92:6D:A9:60:5C:C8:DE:57:85:18:D9:13:2B Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 Certificate issuer: /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Certificate serial: 5A1690C4087C2D0EA15D92D2CE061F3EDADA34A1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft Manifest number: 011A Signing time: Wed 17 Sep 2025 05:49:18 +0000 Manifest this update: Wed 17 Sep 2025 05:44:18 +0000 Manifest next update: Mon 22 Sep 2025 15:35:18 +0000 Files and hashes: 1: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl (hash: hnH+nKQomRgkfT104G9uKh2/Tv9/Mtcpe/1ik3ZuPws=) 2: 323830333a3332303a3a2f33322d3332203d3e20323636373130.roa (hash: lHM7TXuZJiuk5ar5OftYzmGGnYQusx4CcGk57kh5X5g=) 3: 34352e3233302e382e302f32322d3234203d3e20323636373130.roa (hash: mLPmwLCgJH7/6VKEK4Pcz7wxnHkCNUH5wI8HmFmJB1E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:16:90:c4:08:7c:2d:0e:a1:5d:92:d2:ce:06:1f:3e:da:da:34:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Validity Not Before: Sep 17 05:44:18 2025 GMT Not After : Sep 22 15:35:18 2025 GMT Subject: CN=42D9013C66CECE926DA9605CC8DE578518D9132B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:ff:75:01:31:59:db:dc:d7:37:a7:16:5d: 46:ed:06:57:fc:8e:7a:2f:c6:c0:46:38:eb:fd:94: 46:63:0f:78:87:b6:94:bf:5e:05:67:99:65:1f:59: 8a:9e:58:e6:63:b3:ab:91:c2:59:7c:7c:4b:b1:8a: 1b:e3:93:5c:09:28:08:d1:55:42:b4:60:b8:96:97: e7:61:69:88:ff:be:04:0e:71:f7:c1:15:86:66:bb: fe:9c:58:5b:5a:57:4c:1f:ec:4d:b6:ac:12:df:49: 53:ba:04:04:73:3b:70:19:44:6a:7b:97:ca:63:39: 16:2d:ef:f8:30:9d:e4:94:b2:12:76:21:e6:57:9c: 1b:46:67:23:a1:4c:25:88:b1:e9:49:47:d3:f3:f7: 86:3d:12:2f:c7:02:ba:c8:fc:f6:18:52:c6:34:56: 32:b8:e7:fc:3f:c3:d3:3e:7c:86:12:52:a0:6c:ac: 92:67:37:50:81:c0:32:08:b3:40:e8:f7:a8:4d:86: 45:71:84:1d:57:04:38:4e:54:bf:bf:6a:c3:62:40: 2b:a9:a0:43:55:43:30:62:08:7c:57:d4:ac:cc:ad: 31:93:fb:fc:b1:5d:0b:74:da:ab:db:26:40:be:fc: e8:72:9f:b5:ac:47:4b:b9:13:1d:a9:67:d5:43:a3: 98:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D9:01:3C:66:CE:CE:92:6D:A9:60:5C:C8:DE:57:85:18:D9:13:2B X509v3 Authority Key Identifier: keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:03:0d:24:e4:1a:48:90:f5:a9:1d:c8:e9:ba:ab:ea:c6:2a: 34:dc:77:64:8a:3b:76:55:b3:69:df:42:f1:43:b2:69:c4:89: 35:5a:5e:28:37:a8:a5:67:3a:54:ab:ae:04:30:f0:09:73:ed: b6:0c:0c:a1:08:3c:81:bd:68:75:c5:1b:df:e7:d5:10:dc:76: 27:4e:3c:19:8f:88:b7:04:89:8b:1e:92:5a:56:e8:30:44:3a: 91:ce:19:b2:1f:f5:e7:15:dd:38:83:af:1e:11:27:b5:a4:d4: eb:48:7f:72:2b:16:29:bb:05:85:cc:69:f9:a2:cf:f4:02:d4: 15:40:46:f6:31:7a:f8:67:f1:11:22:99:39:ee:f6:bc:de:5e: 02:11:59:89:20:69:d7:02:b0:9b:11:8a:80:74:a6:84:e2:f1: 87:ac:8a:e2:52:0b:7d:2c:9d:c7:0d:f5:e1:8e:d0:5e:19:4e: d7:9b:b8:ee:16:71:20:9d:c4:2f:ed:c0:5c:8d:b3:cc:4d:06: ab:27:30:fd:c8:f8:d1:c8:fd:2e:ab:51:00:cf:b2:33:ba:43: 70:99:f9:fd:15:92:e9:a7:12:3d:6f:9f:4d:1a:33:c2:a6:b8: 04:57:8e:23:30:d6:27:32:18:75:a0:46:99:01:e0:42:01:7c: 39:74:6f:23 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWhaQxAh8LQ6hXZLSzgYfPtraNKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEQzMwNjhBOUFFNzgzODRFNUE0RjRGNTI0NEJBRTQw ODgwNTlFNTAeFw0yNTA5MTcwNTQ0MThaFw0yNTA5MjIxNTM1MThaMDMxMTAvBgNV BAMTKDQyRDkwMTNDNjZDRUNFOTI2REE5NjA1Q0M4REU1Nzg1MThEOTEzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPK/91ATFZ29zXN6cWXUbtBlf8 jnovxsBGOOv9lEZjD3iHtpS/XgVnmWUfWYqeWOZjs6uRwll8fEuxihvjk1wJKAjR VUK0YLiWl+dhaYj/vgQOcffBFYZmu/6cWFtaV0wf7E22rBLfSVO6BARzO3AZRGp7 l8pjORYt7/gwneSUshJ2IeZXnBtGZyOhTCWIselJR9Pz94Y9Ei/HArrI/PYYUsY0 VjK45/w/w9M+fIYSUqBsrJJnN1CBwDIIs0Do96hNhkVxhB1XBDhOVL+/asNiQCup oENVQzBiCHxX1KzMrTGT+/yxXQt02qvbJkC+/Ohyn7WsR0u5Ex2pZ9VDo5jJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQtkBPGbOzpJtqWBcyN5XhRjZEyswHwYDVR0j BBgwFoAUu9wwaKmueDhOWk9PUkS65AiAWeUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NDIzMzIwQzgwNUQ4QkVFRkM0MjQyQzU2NzFEODQ0NTY3 NjNBRERGQURFRTA0RTQyQTFBMUQ0NERDRkJEMkEzLzAvQkJEQzMwNjhBOUFFNzgz ODRFNUE0RjRGNTI0NEJBRTQwODgwNTlFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkRDMzA2OEE5QUU3ODM4NEU1 QTRGNEY1MjQ0QkFFNDA4ODA1OUU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDQyMzMyMEM4MDVEOEJFRUZDNDI0MkM1NjcxRDg0NDU2NzYzQURERkFE RUUwNEU0MkExQTFENDREQ0ZCRDJBMy8wL0JCREMzMDY4QTlBRTc4Mzg0RTVBNEY0 RjUyNDRCQUU0MDg4MDU5RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzAw0k5BpIkPWpHcjpuqvqxio0 3Hdkijt2VbNp30LxQ7JpxIk1Wl4oN6ilZzpUq64EMPAJc+22DAyhCDyBvWh1xRvf 59UQ3HYnTjwZj4i3BImLHpJaVugwRDqRzhmyH/XnFd04g68eESe1pNTrSH9yKxYp uwWFzGn5os/0AtQVQEb2MXr4Z/ERIpk57va83l4CEVmJIGnXArCbEYqAdKaE4vGH rIriUgt9LJ3HDfXhjtBeGU7Xm7juFnEgncQv7cBcjbPMTQarJzD9yPjRyP0uq1EA z7IzukNwmfn9FZLppxI9b59NGjPCprgEV44jMNYnMhh1oEaZAeBCAXw5dG8j -----END CERTIFICATE-----Generated at Thu Sep 18 15:35:05 2025 by rpki-client