$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft File: BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft (raw, json) Hash identifier: tQe5GXb2XCQ715AXGOoC7RTclcxCHeGeR/BK0lutw+Y= Subject key identifier: CC:1D:DE:E5:76:CA:C6:95:D5:0B:BA:06:F0:97:87:FE:B0:74:AC:97 Authority key identifier: BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2 Certificate issuer: /CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2 Certificate serial: 631CDD133EA43A59CD9F0AEFD60CB5DE67DEE245 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft Manifest number: 0124 Signing time: Wed 17 Sep 2025 09:26:32 +0000 Manifest this update: Wed 17 Sep 2025 09:21:32 +0000 Manifest next update: Tue 23 Sep 2025 04:22:32 +0000 Files and hashes: 1: BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl (hash: KvyQLdXmTKMNZ46AQPgnuN5eFlFTsOUQs/bzzZg4HCU=) 2: 323830333a323461303a3a2f33322d3438203d3e20323636383233.roa (hash: 0UF7lN3yk5hABu8yrop4hVb6wwkKlgl5x53aQUyw6vI=) 3: 34352e3233372e3137322e302f32322d3234203d3e20323636383233.roa (hash: L7d+0WJdqSqYpoD3RVzURmtrFSo7UM8rtKV9FP3JhE8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1c:dd:13:3e:a4:3a:59:cd:9f:0a:ef:d6:0c:b5:de:67:de:e2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2 Validity Not Before: Sep 17 09:21:32 2025 GMT Not After : Sep 23 04:22:32 2025 GMT Subject: CN=CC1DDEE576CAC695D50BBA06F09787FEB074AC97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8e:91:8c:92:3c:0d:e6:a3:eb:27:6c:66:2d: ab:98:09:c8:28:12:34:0a:e9:d7:f9:e7:c5:83:dc: a4:86:1e:4f:d8:23:3a:67:a8:27:b1:8b:3b:52:91: 95:28:cd:29:9a:34:ca:53:74:d8:2a:aa:f2:a6:bb: 1b:7c:d7:09:31:72:69:9f:25:19:48:cd:c0:14:14: 41:83:25:84:30:23:4f:18:e1:16:12:ac:2b:65:77: 3b:88:07:7a:f1:12:3a:58:42:a3:d5:a0:70:d9:91: 57:9b:71:6b:29:a8:1b:a5:ae:b9:56:a8:28:3b:3f: 86:f6:c1:11:3f:c9:bb:d8:94:35:39:70:a9:23:00: f4:a7:4c:43:4f:e0:cb:72:a0:7b:7f:cf:6e:1b:4a: 35:c8:c3:ef:15:6f:33:dc:ff:b4:cf:40:0f:6d:a0: 43:88:4a:c1:ba:2b:52:62:70:e5:f8:de:ce:40:f2: 4a:99:d8:3d:3b:88:d2:a6:f1:f1:18:ad:f1:09:b5: 25:47:82:71:bb:66:4b:f8:e9:aa:0f:42:ca:c4:aa: d2:01:cc:2e:12:9e:de:2f:cb:e7:87:0f:cc:64:12: 6a:8e:02:3d:37:e3:fd:2b:a5:f1:1c:c8:ae:46:5b: f3:86:32:29:36:ec:b4:ee:d5:62:92:d3:5a:8c:00: 38:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1D:DE:E5:76:CA:C6:95:D5:0B:BA:06:F0:97:87:FE:B0:74:AC:97 X509v3 Authority Key Identifier: keyid:BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:15:66:1e:c7:70:8a:54:61:cd:39:7d:c4:8f:b7:e3:d9:1f: d5:30:48:fa:30:06:db:2d:54:df:a8:a2:a4:a7:47:48:a5:02: 06:16:ff:7e:e4:95:c5:32:05:c1:24:67:4b:18:98:11:86:ae: 7f:73:91:79:33:6d:f9:19:30:e4:5f:cf:0f:1b:49:4e:83:8f: bb:08:e6:43:9a:06:ab:1e:a4:b4:fd:7d:59:24:04:7c:2f:42: 93:8e:2e:4b:aa:d9:80:a5:d0:fd:86:5b:1b:67:64:35:59:c7: a0:03:58:13:f3:0a:17:a4:9f:6a:fd:54:8a:12:ef:e0:1d:64: f1:09:29:8f:27:54:42:1b:0a:1c:aa:f1:ec:29:f7:c2:9e:60: 80:04:4b:ad:f8:91:d3:54:4b:fe:90:9a:b3:bb:15:77:2c:52: ef:a4:51:cf:0e:ec:29:58:9f:49:de:00:de:65:d9:6d:22:ec: f6:e6:44:23:24:4d:ba:de:a9:20:46:76:4c:5e:58:2b:d3:8f: 5e:92:7f:cb:b2:a9:39:c4:3c:7d:95:75:4d:f3:f0:c9:bb:dc: 86:e0:ef:c3:b4:be:b5:7f:4a:bd:23:b3:f5:59:55:e0:6f:dd: b5:d0:b9:0f:c1:66:d1:85:14:4a:91:90:c8:11:e5:06:ff:55: fe:b2:60:c9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYxzdEz6kOlnNnwrv1gy13mfe4kUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1NjRDM0I1REEyRjdFQ0VCODVDQkM1NzBEMTY1MUJG MUJENjJBMjAeFw0yNTA5MTcwOTIxMzJaFw0yNTA5MjMwNDIyMzJaMDMxMTAvBgNV BAMTKENDMURERUU1NzZDQUM2OTVENTBCQkEwNkYwOTc4N0ZFQjA3NEFDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkjpGMkjwN5qPrJ2xmLauYCcgo EjQK6df558WD3KSGHk/YIzpnqCexiztSkZUozSmaNMpTdNgqqvKmuxt81wkxcmmf JRlIzcAUFEGDJYQwI08Y4RYSrCtldzuIB3rxEjpYQqPVoHDZkVebcWspqBulrrlW qCg7P4b2wRE/ybvYlDU5cKkjAPSnTENP4MtyoHt/z24bSjXIw+8VbzPc/7TPQA9t oEOISsG6K1JicOX43s5A8kqZ2D07iNKm8fEYrfEJtSVHgnG7Zkv46aoPQsrEqtIB zC4Snt4vy+eHD8xkEmqOAj034/0rpfEcyK5GW/OGMik27LTu1WKS01qMADhdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzB3e5XbKxpXVC7oG8JeH/rB0rJcwHwYDVR0j BBgwFoAUvVZMO12i9+zrhcvFcNFlG/G9YqIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85ODczMTU1QjA1MkFCREY3OUU1RkZCREI5NzM1ODU5NzA4 MUM5MTIyQzFBMkY1MUEwNTRFNEZFMkNGMENENTgyLzAvQkQ1NjRDM0I1REEyRjdF Q0VCODVDQkM1NzBEMTY1MUJGMUJENjJBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDU2NEMzQjVEQTJGN0VDRUI4 NUNCQzU3MEQxNjUxQkYxQkQ2MkEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTg3MzE1NUIwNTJBQkRGNzlFNUZGQkRCOTczNTg1OTcwODFDOTEyMkMx QTJGNTFBMDU0RTRGRTJDRjBDRDU4Mi8wL0JENTY0QzNCNURBMkY3RUNFQjg1Q0JD NTcwRDE2NTFCRjFCRDYyQTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuFWYex3CKVGHNOX3Ej7fj2R/V MEj6MAbbLVTfqKKkp0dIpQIGFv9+5JXFMgXBJGdLGJgRhq5/c5F5M235GTDkX88P G0lOg4+7COZDmgarHqS0/X1ZJAR8L0KTji5LqtmApdD9hlsbZ2Q1WcegA1gT8woX pJ9q/VSKEu/gHWTxCSmPJ1RCGwocqvHsKffCnmCABEut+JHTVEv+kJqzuxV3LFLv pFHPDuwpWJ9J3gDeZdltIuz25kQjJE263qkgRnZMXlgr049ekn/Lsqk5xDx9lXVN 8/DJu9yG4O/DtL61f0q9I7P1WVXgb9210LkPwWbRhRRKkZDIEeUG/1X+smDJ -----END CERTIFICATE-----Generated at Thu Sep 18 11:01:27 2025 by rpki-client