$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft File: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft (raw, json) Hash identifier: MNbYJjHLMtjbvwIc00RGidOkPxq0zoDpBvr73owabMo= Subject key identifier: A7:31:B7:85:BA:0D:6C:89:80:04:CE:25:89:C5:19:D5:2E:1F:3D:BE Authority key identifier: BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7 Certificate issuer: /CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7 Certificate serial: 2AD1F0491E74AFAB2E3A1659D07D409E2C9573CA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft Manifest number: 0137 Signing time: Thu 06 Nov 2025 07:33:29 +0000 Manifest this update: Thu 06 Nov 2025 07:28:29 +0000 Manifest next update: Mon 10 Nov 2025 23:23:29 +0000 Files and hashes: 1: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl (hash: qEeqZaTxYzoVnTmPlENPbwwqUx4MU3Xkf05N+Gaxcyw=) 2: 323830333a663539303a3a2f33322d3438203d3e20323732393836.roa (hash: TnOVedbp+yogJRQK4jz8NHuHBn2RuKd+k8b7N8MvRe4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 10 Nov 2025 18:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d1:f0:49:1e:74:af:ab:2e:3a:16:59:d0:7d:40:9e:2c:95:73:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7 Validity Not Before: Nov 6 07:28:29 2025 GMT Not After : Nov 10 23:23:29 2025 GMT Subject: CN=A731B785BA0D6C898004CE2589C519D52E1F3DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:fd:97:26:23:da:61:a5:0f:9c:87:87:af: f5:2c:8b:23:93:fe:59:c3:b5:35:ba:fd:7f:57:0a: 2e:b7:a8:a0:e9:b9:09:83:b6:9a:27:88:7d:b7:ac: bc:ae:41:7f:0d:b2:b0:37:da:46:a7:ac:37:f1:0a: aa:ab:29:f2:b6:d4:db:58:e4:18:f7:47:e6:82:51: bb:8c:5b:28:29:14:8f:14:ff:8a:e6:33:40:7b:56: 4f:c0:87:31:fd:d9:0f:ba:b8:aa:2e:6e:dd:3f:07: 49:0f:87:70:e6:ed:a6:03:8b:d3:e8:de:d6:fb:6a: 75:3f:b1:43:85:d8:c5:cf:96:6e:ba:ea:06:7c:a6: fb:04:f3:3a:27:98:23:32:39:96:3c:f8:68:49:09: 25:cb:fa:b2:7e:03:2a:7c:ae:98:bb:ff:6a:5f:68: 0e:54:58:10:40:c9:0f:03:c4:82:1c:32:54:c5:34: 38:20:0d:f3:8b:61:37:e6:dc:3c:fc:6d:c7:16:69: 8a:64:af:2d:fd:d0:f6:58:03:93:21:33:ac:72:2d: 9b:e0:63:ae:73:e7:3b:de:26:4b:06:73:9a:5c:f2: a8:e2:9a:a0:e0:f9:92:bf:6e:8a:60:8c:a9:7f:b1: 32:ec:f0:49:18:88:62:8c:03:ac:08:a1:10:37:70: 3c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:31:B7:85:BA:0D:6C:89:80:04:CE:25:89:C5:19:D5:2E:1F:3D:BE X509v3 Authority Key Identifier: keyid:BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:17:3f:3e:2b:8c:db:32:b9:5e:53:6d:13:1f:af:f3:12:8e: d4:03:c9:bf:4b:db:ab:13:d7:59:b3:1a:da:80:ff:ca:09:2d: df:29:0b:57:d6:08:82:48:37:31:50:8a:82:4b:f6:9f:9d:e4: 32:a6:19:72:fe:1d:d2:14:a7:fb:8c:a7:81:b0:4d:b1:55:46: 9d:b6:63:62:52:8b:7a:ca:5b:9e:df:59:13:2d:7e:e9:ae:cd: b0:10:79:77:dc:f2:e9:68:44:a6:52:0c:46:e8:cb:4f:a7:d9: f3:f4:21:21:7a:d4:87:93:d1:3e:0d:0a:5f:a3:49:15:d2:db: 3f:55:3c:3a:f5:f4:1d:e8:13:27:63:80:0a:19:dd:ea:09:4a: b8:1b:f3:16:7e:52:30:6f:36:c6:4f:79:5e:ff:c5:38:57:77: 30:52:1d:9e:24:2c:f2:b6:f2:64:66:d0:cd:73:56:75:5c:d3: 1a:bf:1b:65:8e:a8:00:d1:a0:28:66:4e:87:60:44:c2:8c:a2: f8:4d:b8:f3:3e:c7:f0:c9:94:20:95:89:d9:56:9a:5f:8c:00: 29:72:21:56:40:f6:4c:43:9f:8a:91:d1:a9:a2:5b:1c:c6:fa: 23:1b:64:63:cc:56:84:a2:af:c3:35:6e:1c:53:c5:aa:0f:dc: a9:35:ba:dc -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKtHwSR50r6suOhZZ0H1AniyVc8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDM5OEJBQ0UzOTBDMjZBMzJDRDRDNzc1OEFBMUZB OUUzN0NDNzAeFw0yNTExMDYwNzI4MjlaFw0yNTExMTAyMzIzMjlaMDMxMTAvBgNV BAMTKEE3MzFCNzg1QkEwRDZDODk4MDA0Q0UyNTg5QzUxOUQ1MkUxRjNEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChDv2XJiPaYaUPnIeHr/UsiyOT /lnDtTW6/X9XCi63qKDpuQmDtponiH23rLyuQX8NsrA32kanrDfxCqqrKfK21NtY 5Bj3R+aCUbuMWygpFI8U/4rmM0B7Vk/AhzH92Q+6uKoubt0/B0kPh3Dm7aYDi9Po 3tb7anU/sUOF2MXPlm666gZ8pvsE8zonmCMyOZY8+GhJCSXL+rJ+Ayp8rpi7/2pf aA5UWBBAyQ8DxIIcMlTFNDggDfOLYTfm3Dz8bccWaYpkry390PZYA5MhM6xyLZvg Y65z5zveJksGc5pc8qjimqDg+ZK/bopgjKl/sTLs8EkYiGKMA6wIoRA3cDxxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUpzG3hboNbImABM4licUZ1S4fPb4wHwYDVR0j BBgwFoAUvZ05i6zjkMJqMs1Md1iqH6njfMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzdFQUQ3NjcyQzJCMUE1RTNEM0Y2OURGQ0I5NjRDODY2 RUQ0Q0E3QzlCMkZGN0RCMTMxRjc2RDY4QzRCQzA0LzAvQkQ5RDM5OEJBQ0UzOTBD MjZBMzJDRDRDNzc1OEFBMUZBOUUzN0NDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDlEMzk4QkFDRTM5MEMyNkEz MkNENEM3NzU4QUExRkE5RTM3Q0M3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjc3RUFENzY3MkMyQjFBNUUzRDNGNjlERkNCOTY0Qzg2NkVENENBN0M5 QjJGRjdEQjEzMUY3NkQ2OEM0QkMwNC8wL0JEOUQzOThCQUNFMzkwQzI2QTMyQ0Q0 Qzc3NThBQTFGQTlFMzdDQzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3Fz8+K4zbMrleU20TH6/zEo7U A8m/S9urE9dZsxragP/KCS3fKQtX1giCSDcxUIqCS/afneQyphly/h3SFKf7jKeB sE2xVUadtmNiUot6ylue31kTLX7prs2wEHl33PLpaESmUgxG6MtPp9nz9CEhetSH k9E+DQpfo0kV0ts/VTw69fQd6BMnY4AKGd3qCUq4G/MWflIwbzbGT3le/8U4V3cw Uh2eJCzytvJkZtDNc1Z1XNMavxtljqgA0aAoZk6HYETCjKL4TbjzPsfwyZQglYnZ VppfjAApciFWQPZMQ5+KkdGpolscxvojG2RjzFaEoq/DNW4cU8WqD9ypNbrc -----END CERTIFICATE-----Generated at Thu Nov 6 10:52:42 2025 by rpki-client