$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.mft File: BED423F8BF886A1F701D384EDB158128EF927F3E.mft (raw, json) Hash identifier: NvfMxrPHwfqQ7Er7iPatFA9rSKDwAUb7FazqYsx3104= Subject key identifier: DE:11:1F:E7:FD:C7:D0:3F:5D:94:AE:48:6D:61:D8:5A:1A:E2:DC:6F Authority key identifier: BE:D4:23:F8:BF:88:6A:1F:70:1D:38:4E:DB:15:81:28:EF:92:7F:3E Certificate issuer: /CN=BED423F8BF886A1F701D384EDB158128EF927F3E Certificate serial: 130199218E149042452FCBA7C9F9B9171A1A13B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BED423F8BF886A1F701D384EDB158128EF927F3E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.mft Manifest number: 3E Signing time: Tue 29 Jul 2025 12:23:42 +0000 Manifest this update: Tue 29 Jul 2025 12:18:42 +0000 Manifest next update: Mon 04 Aug 2025 02:09:42 +0000 Files and hashes: 1: 323830333a343264303a3a2f33322d3438203d3e20323733323231.roa (hash: xEYh12ltsnJQgh79hu5q9RWJKGs0vsfmm3EzCu5mGWA=) 2: BED423F8BF886A1F701D384EDB158128EF927F3E.crl (hash: uvf9ISwqQB60ntcL8PS+wKqRmQ2I7Tq0Q/ObRp3UrVg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.crl rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BED423F8BF886A1F701D384EDB158128EF927F3E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 18:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:01:99:21:8e:14:90:42:45:2f:cb:a7:c9:f9:b9:17:1a:1a:13:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED423F8BF886A1F701D384EDB158128EF927F3E Validity Not Before: Jul 29 12:18:42 2025 GMT Not After : Aug 4 02:09:42 2025 GMT Subject: CN=DE111FE7FDC7D03F5D94AE486D61D85A1AE2DC6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:c7:3e:03:5f:d6:5d:8c:e3:31:36:6c:b5: 4e:ff:fa:3e:68:60:56:30:c7:c9:52:74:09:30:67: 83:6d:01:1b:31:b0:0f:8d:ad:9f:5f:d6:43:90:4a: de:9b:76:a5:7a:bc:4b:f8:04:27:6f:95:d7:23:33: c9:83:6d:ea:e8:86:6f:ab:bd:98:74:c2:51:9f:d6: 89:ed:0b:28:8f:fb:b7:d9:4c:4e:e1:c8:a1:4e:fa: 9d:60:12:4e:a4:33:b1:7c:55:2c:5a:8a:b5:34:53: f2:3a:65:4d:11:2a:83:b5:89:3b:e1:f9:1b:4f:18: 63:a2:52:4e:19:d2:57:bd:d2:ca:3e:ca:3a:d2:f5: 14:66:c1:69:cf:53:4f:08:03:ad:48:ba:79:1f:80: 49:60:44:b7:8b:51:42:51:cb:68:66:86:36:55:91: e5:ba:44:82:53:a4:70:81:8c:57:7d:21:0b:b8:d4: 49:3c:0c:dc:88:a7:ff:b3:9b:79:01:1e:e9:aa:14: 5d:c4:2d:07:c6:9a:89:6c:5f:1e:29:3b:9b:3f:a1: 32:f8:26:19:68:e2:0f:d0:64:6e:f8:88:39:33:e9: fd:3d:83:cc:76:1f:91:f6:09:d3:1a:f5:23:7f:52: f9:ec:5a:0e:32:21:5b:6c:91:9e:c9:5c:b5:43:19: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:11:1F:E7:FD:C7:D0:3F:5D:94:AE:48:6D:61:D8:5A:1A:E2:DC:6F X509v3 Authority Key Identifier: keyid:BE:D4:23:F8:BF:88:6A:1F:70:1D:38:4E:DB:15:81:28:EF:92:7F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BED423F8BF886A1F701D384EDB158128EF927F3E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:09:4d:4c:60:3d:ab:9c:e1:76:44:59:7b:b2:74:9e:7f:a3: ad:46:43:92:f4:3c:aa:7b:d3:af:fc:da:3c:7f:05:cd:2a:fd: 39:00:98:2f:1b:4a:5f:33:3a:40:58:94:d3:33:c2:b7:75:fa: 8b:28:a1:4f:c6:c5:83:3f:04:5e:5b:a6:e6:14:48:35:79:34: 3e:56:6e:96:8c:ce:4b:47:fb:24:d2:db:59:bf:75:5d:2d:cc: d0:03:59:17:f7:a3:73:a4:da:c3:5f:08:1b:1d:f0:4c:9d:74: 21:d3:c0:1d:97:fe:cd:c7:b9:c7:a0:e7:6e:da:16:be:a5:db: 72:a7:81:b9:c3:58:03:86:f6:2f:e7:27:1a:06:d8:fe:b5:af: e7:8b:99:18:2d:76:3a:f0:4a:d8:6b:a0:3f:c3:9d:79:e8:7b: 89:86:73:18:4f:07:5a:ae:d3:43:03:35:ca:fb:17:a4:91:b4: 60:c3:f9:4b:66:08:3d:ba:6f:df:32:fd:19:dc:1a:96:3b:f8: 53:1a:a4:42:77:04:e5:ad:e3:86:ca:cc:4b:73:5d:02:d1:1f: b2:3e:3d:d1:eb:9d:22:be:95:13:bb:9b:67:21:7f:4b:db:4b: 12:5b:5a:27:70:b5:12:b1:60:b3:5a:fe:20:c8:2c:c5:51:06: ef:e8:39:4e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEwGZIY4UkEJFL8unyfm5FxoaE7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVENDIzRjhCRjg4NkExRjcwMUQzODRFREIxNTgxMjhF RjkyN0YzRTAeFw0yNTA3MjkxMjE4NDJaFw0yNTA4MDQwMjA5NDJaMDMxMTAvBgNV BAMTKERFMTExRkU3RkRDN0QwM0Y1RDk0QUU0ODZENjFEODVBMUFFMkRDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYisc+A1/WXYzjMTZstU7/+j5o YFYwx8lSdAkwZ4NtARsxsA+NrZ9f1kOQSt6bdqV6vEv4BCdvldcjM8mDberohm+r vZh0wlGf1ontCyiP+7fZTE7hyKFO+p1gEk6kM7F8VSxairU0U/I6ZU0RKoO1iTvh +RtPGGOiUk4Z0le90so+yjrS9RRmwWnPU08IA61IunkfgElgRLeLUUJRy2hmhjZV keW6RIJTpHCBjFd9IQu41Ek8DNyIp/+zm3kBHumqFF3ELQfGmolsXx4pO5s/oTL4 Jhlo4g/QZG74iDkz6f09g8x2H5H2CdMa9SN/UvnsWg4yIVtskZ7JXLVDGWDtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3hEf5/3H0D9dlK5IbWHYWhri3G8wHwYDVR0j BBgwFoAUvtQj+L+Iah9wHThO2xWBKO+Sfz4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84OUYzMzc2MzgxNUI0M0E4OEVFMUI4NDYxREMyQkE3NkY3 QkQ5NjY1NDU4RUVCNzY5MkM2NTQwM0ExRDUyOUNDLzAvQkVENDIzRjhCRjg4NkEx RjcwMUQzODRFREIxNTgxMjhFRjkyN0YzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRUQ0MjNGOEJGODg2QTFGNzAx RDM4NEVEQjE1ODEyOEVGOTI3RjNFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODlGMzM3NjM4MTVCNDNBODhFRTFCODQ2MURDMkJBNzZGN0JEOTY2NTQ1 OEVFQjc2OTJDNjU0MDNBMUQ1MjlDQy8wL0JFRDQyM0Y4QkY4ODZBMUY3MDFEMzg0 RURCMTU4MTI4RUY5MjdGM0UubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4CU1MYD2rnOF2RFl7snSef6Ot RkOS9Dyqe9Ov/No8fwXNKv05AJgvG0pfMzpAWJTTM8K3dfqLKKFPxsWDPwReW6bm FEg1eTQ+Vm6WjM5LR/sk0ttZv3VdLczQA1kX96NzpNrDXwgbHfBMnXQh08Adl/7N x7nHoOdu2ha+pdtyp4G5w1gDhvYv5ycaBtj+ta/ni5kYLXY68ErYa6A/w5156HuJ hnMYTwdartNDAzXK+xekkbRgw/lLZgg9um/fMv0Z3BqWO/hTGqRCdwTlreOGysxL c10C0R+yPj3R650ivpUTu5tnIX9L20sSW1oncLUSsWCzWv4gyCzFUQbv6DlO -----END CERTIFICATE-----Generated at Thu Jul 31 10:17:50 2025 by rpki-client