$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft File: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft (raw, json) Hash identifier: ijSGYha2/ggabOD3EcqfcTks39ETIVO4pKSSqGIULNU= Subject key identifier: C7:47:B8:8F:16:6C:44:D1:86:76:30:C9:75:E2:C1:B4:AC:C9:C4:CB Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC Certificate issuer: /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Certificate serial: 5A3FB42C784806D1C468C57705CA3340CFC910D1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft Manifest number: E0 Signing time: Tue 03 Jun 2025 08:23:15 +0000 Manifest this update: Tue 03 Jun 2025 08:18:15 +0000 Manifest next update: Sat 07 Jun 2025 18:24:15 +0000 Files and hashes: 1: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl (hash: kY9rNtyY1uP5BQEWhVQzd2WbGZfi8p8RVSAJXsSxw1s=) 2: 323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (hash: qXLUa1DFAZMrZIlzarnZaCXNOtAwLQ/Wi2JutVkZxnE=) 3: 3137392e35312e3230382e302f32322d3234203d3e20323731373831.roa (hash: qefcdKBbQ8rTrMpgo/t4zhuWfrSW4R/8kvtNUQX7kms=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 18:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3f:b4:2c:78:48:06:d1:c4:68:c5:77:05:ca:33:40:cf:c9:10:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Validity Not Before: Jun 3 08:18:15 2025 GMT Not After : Jun 7 18:24:15 2025 GMT Subject: CN=C747B88F166C44D1867630C975E2C1B4ACC9C4CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:5c:51:e2:0b:83:66:4c:43:47:0f:b7:f9: ce:86:98:a0:f5:17:78:66:26:87:db:b8:d8:8e:92: 5d:9c:44:da:b7:2c:8b:e9:58:8e:7b:87:76:49:df: 4c:6a:99:d6:db:d1:49:4d:3c:0e:5c:a4:d8:27:2b: ea:1e:6c:67:b5:23:39:73:0d:20:cf:52:14:bd:9c: 66:68:80:b5:14:82:01:c9:b8:1a:5d:63:92:24:0a: 12:4e:2b:1f:c8:ad:76:ba:cd:26:53:01:e0:f1:b4: a6:d0:61:ef:e3:20:87:0a:ab:52:b7:8f:77:da:a8: a1:65:b0:f6:d9:02:f6:8a:12:c0:ae:80:22:b2:8b: 20:c5:34:17:3c:3c:03:23:24:3e:5f:46:16:d6:ba: 67:4e:7d:00:c9:35:66:c4:93:06:1d:be:c5:55:e7: 57:f8:7f:a0:2f:15:6f:53:ad:2c:f4:21:89:36:03: 16:d5:e4:74:15:97:a3:b0:4a:7b:ab:c4:17:cf:b2: 9a:0f:32:06:8f:db:52:d5:e6:8b:79:58:b0:f1:f4: 24:e4:bf:66:04:d1:92:6a:b6:cd:16:9f:01:26:b0: 67:9d:b6:0e:77:99:36:ed:46:67:22:c8:05:ee:b1: f0:dc:0b:96:21:25:69:33:de:7d:98:77:71:40:47: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:47:B8:8F:16:6C:44:D1:86:76:30:C9:75:E2:C1:B4:AC:C9:C4:CB X509v3 Authority Key Identifier: keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:82:aa:bc:4f:e5:d7:89:32:1a:f2:3a:79:f6:ad:60:6b:27: dd:58:f5:28:d5:d1:69:f5:02:20:a9:88:27:ad:2e:b3:e7:75: 9f:7b:c0:ab:2c:e8:a3:fc:65:78:fe:82:6c:90:9f:63:77:d6: 6b:2f:2d:26:e8:1a:e3:b8:b1:55:a6:08:ba:3b:15:22:ba:68: f3:84:0e:3e:28:bf:51:6e:97:20:6d:9b:ae:1c:7d:32:be:f1: 40:ad:d5:95:ad:aa:5a:d5:f6:d1:ff:8b:7e:fb:45:0f:08:98: 58:9e:9a:98:40:5e:f2:11:fb:a9:2c:07:cc:13:ab:9d:f5:06: 42:3c:fd:2a:74:70:bf:b8:2b:9b:46:45:f5:fa:4e:5f:2a:0b: b3:f2:81:f9:4a:14:e0:25:ff:37:9a:00:eb:3e:3e:8e:48:4d: 82:ed:72:45:15:06:8d:ee:dc:f4:24:7a:e7:d1:69:98:9a:dc: 30:7e:10:5c:59:31:15:eb:d2:11:49:e6:14:d0:cd:f7:ba:81: b8:6d:17:39:c4:1d:07:05:9c:07:0e:e3:b3:ff:17:98:74:28: 1f:fa:ab:88:76:6a:1a:bd:06:69:8b:1d:ea:01:23:b3:08:71: a5:51:6f:10:cd:6d:50:da:2e:86:00:16:f6:9a:22:be:91:75: b9:2d:71:2c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWj+0LHhIBtHEaMV3BcozQM/JENEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5MUZFMEI3MTIwRkVDMUIwMkUyMEY0RUI4OEE0RERG QTFCN0ZGQzAeFw0yNTA2MDMwODE4MTVaFw0yNTA2MDcxODI0MTVaMDMxMTAvBgNV BAMTKEM3NDdCODhGMTY2QzQ0RDE4Njc2MzBDOTc1RTJDMUI0QUNDOUM0Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZlxR4guDZkxDRw+3+c6GmKD1 F3hmJofbuNiOkl2cRNq3LIvpWI57h3ZJ30xqmdbb0UlNPA5cpNgnK+oebGe1Izlz DSDPUhS9nGZogLUUggHJuBpdY5IkChJOKx/IrXa6zSZTAeDxtKbQYe/jIIcKq1K3 j3faqKFlsPbZAvaKEsCugCKyiyDFNBc8PAMjJD5fRhbWumdOfQDJNWbEkwYdvsVV 51f4f6AvFW9TrSz0IYk2AxbV5HQVl6OwSnurxBfPspoPMgaP21LV5ot5WLDx9CTk v2YE0ZJqts0WnwEmsGedtg53mTbtRmciyAXusfDcC5YhJWkz3n2Yd3FAR2whAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUx0e4jxZsRNGGdjDJdeLBtKzJxMswHwYDVR0j BBgwFoAUv5H+C3Eg/sGwLiD064ik3fobf/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMjhBQzU0OTMwM0I3NEExQzQ5Q0EwNzZCOTc0RjA2MzZC MDNCNzlGOUUwMzM1QjZGREJCRkQ2MEVBOTE4MzQ4LzAvQkY5MUZFMEI3MTIwRkVD MUIwMkUyMEY0RUI4OEE0RERGQTFCN0ZGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjkxRkUwQjcxMjBGRUMxQjAy RTIwRjRFQjg4QTREREZBMUI3RkZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjI4QUM1NDkzMDNCNzRBMUM0OUNBMDc2Qjk3NEYwNjM2QjAzQjc5RjlF MDMzNUI2RkRCQkZENjBFQTkxODM0OC8wL0JGOTFGRTBCNzEyMEZFQzFCMDJFMjBG NEVCODhBNERERkExQjdGRkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwgqq8T+XXiTIa8jp59q1gayfd WPUo1dFp9QIgqYgnrS6z53Wfe8CrLOij/GV4/oJskJ9jd9ZrLy0m6BrjuLFVpgi6 OxUiumjzhA4+KL9RbpcgbZuuHH0yvvFArdWVrapa1fbR/4t++0UPCJhYnpqYQF7y EfupLAfME6ud9QZCPP0qdHC/uCubRkX1+k5fKguz8oH5ShTgJf83mgDrPj6OSE2C 7XJFFQaN7tz0JHrn0WmYmtwwfhBcWTEV69IRSeYU0M33uoG4bRc5xB0HBZwHDuOz /xeYdCgf+quIdmoavQZpix3qASOzCHGlUW8QzW1Q2i6GABb2miK+kXW5LXEs -----END CERTIFICATE-----Generated at Wed Jun 4 12:34:38 2025 by rpki-client