$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft File: BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft (raw, json) Hash identifier: nYRgvIE6QDuIZ8K067vOaJ4G5z/BHpF9GeEtu1+HwXM= Subject key identifier: 6A:FF:56:8E:C1:CB:29:6B:FF:7C:2B:0A:B2:45:DE:48:9E:47:06:21 Authority key identifier: BF:BF:EA:F4:9C:CC:A7:EA:7E:94:46:49:17:85:35:78:7F:34:F0:D7 Certificate issuer: /CN=BFBFEAF49CCCA7EA7E944649178535787F34F0D7 Certificate serial: 3DB9E2D929AE1CA5EA8D6B8F7BA102DD6BAD429F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft Manifest number: FE Signing time: Tue 29 Jul 2025 06:15:09 +0000 Manifest this update: Tue 29 Jul 2025 06:10:09 +0000 Manifest next update: Mon 04 Aug 2025 03:46:09 +0000 Files and hashes: 1: 3138312e3232342e3139392e302f32342d3234203d3e20323732303638.roa (hash: y8RjqaR1+jlD/CLpe7yUilcrJe6OadhXzrRNJKQDmFs=) 2: BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl (hash: Nl/UOyokP3z0U1VWkvR4fbwoMmORoEUYtQsEecZy6yg=) 3: 323830333a643331303a3a2f33322d3438203d3e20323732303638.roa (hash: FSoCslfLPaxH187OItbFpX2Ja19w27sZFd6D46Nj6IE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 18:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b9:e2:d9:29:ae:1c:a5:ea:8d:6b:8f:7b:a1:02:dd:6b:ad:42:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFBFEAF49CCCA7EA7E944649178535787F34F0D7 Validity Not Before: Jul 29 06:10:09 2025 GMT Not After : Aug 4 03:46:09 2025 GMT Subject: CN=6AFF568EC1CB296BFF7C2B0AB245DE489E470621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:c6:bf:dc:ff:23:be:42:00:d4:92:8a:72: 66:cb:9e:c4:f7:ec:25:91:7a:25:63:91:b3:84:21: 81:3b:54:1a:64:6a:7c:ec:ab:1b:78:71:48:5e:e7: 9f:17:93:84:09:9d:6e:83:ef:e8:01:71:0b:01:8f: 57:64:d6:ea:d3:9d:59:23:3c:f2:27:f9:3f:6d:67: c2:b8:95:06:82:c7:5a:71:34:4b:0d:b2:ef:5b:00: 1c:cc:10:2f:79:ed:a0:8a:12:64:5e:2b:d9:d4:13: 8b:7b:ca:ab:4c:cd:87:84:6c:53:13:bd:93:93:3c: d5:d9:52:a2:e1:e9:4e:5e:77:4a:3e:e4:cd:f3:3d: 9b:45:95:49:ae:ea:4a:8e:2a:03:84:80:6e:a5:09: aa:50:f6:de:b2:c2:49:6c:a6:8a:7b:77:1c:05:b5: 79:0a:bd:47:a4:02:e8:b7:62:51:40:ad:4a:c1:41: ef:ad:61:fc:fb:de:03:cd:7a:6b:45:0c:25:c8:6d: 05:42:73:56:fe:1e:29:bf:00:9e:d9:c8:2e:94:53: 4e:17:25:43:09:db:72:a2:80:bb:5e:0e:e7:ef:3c: 48:af:0d:dd:84:83:78:61:e5:24:75:55:3c:ac:66: 87:2c:e0:f4:fe:99:35:a4:48:b5:36:4d:46:19:9d: ce:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FF:56:8E:C1:CB:29:6B:FF:7C:2B:0A:B2:45:DE:48:9E:47:06:21 X509v3 Authority Key Identifier: keyid:BF:BF:EA:F4:9C:CC:A7:EA:7E:94:46:49:17:85:35:78:7F:34:F0:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b3:3e:c9:b6:bd:e5:27:78:41:c8:aa:20:01:94:9a:69:80: 16:aa:b0:0c:49:24:a8:ed:30:f7:68:5b:85:f2:ae:bd:db:9c: f9:57:22:f8:0f:e9:8b:2a:cc:92:16:12:8e:cf:b1:97:60:f0: 54:75:7f:a1:06:c2:25:9c:65:e7:a8:64:54:05:d3:c0:50:b5: a5:1a:5f:04:f0:7f:6f:81:9b:e1:64:d5:33:29:71:58:80:68: c3:2e:98:c7:a3:f6:2d:f1:3c:39:d0:3d:6c:e4:50:3c:6c:a9: 91:1c:9d:17:c6:70:70:f4:7e:ae:fd:79:92:e5:99:01:98:c1: 05:30:3f:33:56:56:7f:90:8b:d6:d2:19:34:1f:dd:0b:c3:f1: 85:cb:44:a7:49:e6:3c:90:dd:c5:0e:b4:76:b6:9d:b7:c5:8b: 3c:86:dd:d3:07:77:0a:75:e0:41:bf:3f:34:14:af:cb:02:e0: 0b:5e:f2:e2:c4:f3:ac:dc:c4:a9:b9:71:3e:41:88:38:b0:ec: ae:ae:5b:59:82:e4:30:94:b3:92:fd:93:02:25:5c:7e:34:eb: 64:37:ad:2f:73:36:50:6a:0b:c4:04:0e:8f:33:56:a9:9f:e9: bc:49:91:3e:9e:b3:84:9e:7a:20:da:1c:9b:eb:dd:7c:39:e5: 54:2a:39:19 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPbni2SmuHKXqjWuPe6EC3WutQp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZCRkVBRjQ5Q0NDQTdFQTdFOTQ0NjQ5MTc4NTM1Nzg3 RjM0RjBENzAeFw0yNTA3MjkwNjEwMDlaFw0yNTA4MDQwMzQ2MDlaMDMxMTAvBgNV BAMTKDZBRkY1NjhFQzFDQjI5NkJGRjdDMkIwQUIyNDVERTQ4OUU0NzA2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMe8a/3P8jvkIA1JKKcmbLnsT3 7CWReiVjkbOEIYE7VBpkanzsqxt4cUhe558Xk4QJnW6D7+gBcQsBj1dk1urTnVkj PPIn+T9tZ8K4lQaCx1pxNEsNsu9bABzMEC957aCKEmReK9nUE4t7yqtMzYeEbFMT vZOTPNXZUqLh6U5ed0o+5M3zPZtFlUmu6kqOKgOEgG6lCapQ9t6ywklspop7dxwF tXkKvUekAui3YlFArUrBQe+tYfz73gPNemtFDCXIbQVCc1b+Him/AJ7ZyC6UU04X JUMJ23KigLteDufvPEivDd2Eg3hh5SR1VTysZocs4PT+mTWkSLU2TUYZnc7bAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUav9WjsHLKWv/fCsKskXeSJ5HBiEwHwYDVR0j BBgwFoAUv7/q9JzMp+p+lEZJF4U1eH808NcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MTUxQ0RCRDdGNTc4MkY1Q0RFNjc3QkExQTNERUI0RkYx MDk5QjZCQzg4RTFDRDNBNDBEOUU4Mjk3RjFCRkExLzAvQkZCRkVBRjQ5Q0NDQTdF QTdFOTQ0NjQ5MTc4NTM1Nzg3RjM0RjBENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkJGRUFGNDlDQ0NBN0VBN0U5 NDQ2NDkxNzg1MzU3ODdGMzRGMEQ3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzE1MUNEQkQ3RjU3ODJGNUNERTY3N0JBMUEzREVCNEZGMTA5OUI2QkM4 OEUxQ0QzQTQwRDlFODI5N0YxQkZBMS8wL0JGQkZFQUY0OUNDQ0E3RUE3RTk0NDY0 OTE3ODUzNTc4N0YzNEYwRDcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0sz7Jtr3lJ3hByKogAZSaaYAW qrAMSSSo7TD3aFuF8q6925z5VyL4D+mLKsySFhKOz7GXYPBUdX+hBsIlnGXnqGRU BdPAULWlGl8E8H9vgZvhZNUzKXFYgGjDLpjHo/Yt8Tw50D1s5FA8bKmRHJ0XxnBw 9H6u/XmS5ZkBmMEFMD8zVlZ/kIvW0hk0H90Lw/GFy0SnSeY8kN3FDrR2tp23xYs8 ht3TB3cKdeBBvz80FK/LAuALXvLixPOs3MSpuXE+QYg4sOyurltZguQwlLOS/ZMC JVx+NOtkN60vczZQagvEBA6PM1apn+m8SZE+nrOEnnog2hyb6918OeVUKjkZ -----END CERTIFICATE-----Generated at Thu Jul 31 10:22:25 2025 by rpki-client