
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft
File: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft (raw, json)
Hash identifier: O1I35CzvtWAjwJy+nN8mLQArn8C3Mft785HGF7GA+n0=
Subject key identifier: 77:E3:CE:3E:5A:7F:9A:74:E7:AE:98:E7:32:D4:88:91:FC:03:91:70
Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC
Certificate issuer: /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC
Certificate serial: 3C2105406F0432C275A2466C46E1AB0F3816F6B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft
Manifest number: 012A
Signing time: Sat 25 Oct 2025 09:56:49 +0000
Manifest this update: Sat 25 Oct 2025 09:51:49 +0000
Manifest next update: Thu 30 Oct 2025 00:06:49 +0000
Files and hashes: 1: 3137392e35312e3230382e302f32322d3234203d3e20323731373831.roa (hash: qefcdKBbQ8rTrMpgo/t4zhuWfrSW4R/8kvtNUQX7kms=)
2: 323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (hash: qXLUa1DFAZMrZIlzarnZaCXNOtAwLQ/Wi2JutVkZxnE=)
3: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl (hash: +n+fCBkq6NBPqzZ6uUF62mFhpcfUO0SKufkRCBr+yhM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl
rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:21:05:40:6f:04:32:c2:75:a2:46:6c:46:e1:ab:0f:38:16:f6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC
Validity
Not Before: Oct 25 09:51:49 2025 GMT
Not After : Oct 30 00:06:49 2025 GMT
Subject: CN=77E3CE3E5A7F9A74E7AE98E732D48891FC039170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:6a:9a:6a:55:86:72:8d:cd:ff:76:14:54:
06:f6:27:27:ff:b6:ee:91:50:87:f0:84:0e:a2:87:
f9:70:27:80:03:11:ff:82:d2:57:85:5f:b0:66:5d:
3c:fd:72:9f:dc:4f:c5:0b:2c:e8:08:bd:08:9a:ef:
89:17:5d:d4:c1:ad:7e:42:14:cd:56:53:4c:38:2c:
16:4e:44:f6:b4:59:0b:04:38:47:c1:92:d9:99:41:
26:09:f4:53:48:bb:9a:cd:14:df:09:96:d4:87:c5:
fc:7d:60:5a:25:ce:5f:c4:14:40:7d:b1:fa:7d:12:
de:6f:2c:16:bd:73:93:ac:cc:6b:93:9c:30:9d:73:
20:fd:15:5f:34:f8:5d:83:aa:51:c8:a7:d6:6f:76:
d8:d8:03:7a:26:7e:e0:9f:e7:81:73:1a:d0:13:c1:
f8:e5:c3:59:87:7e:d4:91:7d:15:73:67:8f:24:31:
30:87:df:6f:ba:f3:8f:ce:75:13:e4:f9:dd:19:90:
84:52:87:36:5a:34:b3:ef:90:ad:f2:54:ae:e9:fa:
72:27:86:7f:bc:9c:1d:93:77:9a:8f:a2:b4:00:7a:
a8:0d:12:09:48:13:96:ad:bd:fa:e3:a9:3c:66:07:
9d:b9:24:ae:ae:9e:7a:49:34:ac:e4:36:48:9d:80:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:CE:3E:5A:7F:9A:74:E7:AE:98:E7:32:D4:88:91:FC:03:91:70
X509v3 Authority Key Identifier:
keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:04:93:ef:91:43:de:c5:dd:f2:36:e9:be:73:4a:16:97:a8:
e8:7b:bb:c8:0a:99:d4:cb:4f:d2:8f:76:ce:ae:e7:8d:ed:78:
fb:13:c0:44:58:b3:f8:30:b5:7e:24:fe:49:d5:41:55:f9:1b:
27:5e:de:80:02:d1:0d:e4:f0:53:a7:cc:b7:0e:f2:76:b7:48:
d4:47:1a:b6:b2:df:73:de:8b:a1:9b:9f:8e:80:74:20:8f:86:
04:20:dc:28:3e:93:65:55:c4:28:7a:62:7f:ca:3f:c1:77:f8:
35:fc:c3:02:a7:21:c7:fc:64:e4:79:e7:6f:a2:60:96:ff:ef:
5d:01:5c:bd:5d:a7:92:31:d0:2b:ac:39:16:9a:cf:0f:86:c6:
f2:1a:65:35:57:4c:44:dc:01:40:2e:08:59:ec:f1:f6:84:c7:
b5:be:b2:97:f8:b7:35:7f:ae:1a:bd:12:87:17:73:97:2f:ee:
38:2e:52:97:cd:cf:a8:f1:15:1c:93:1b:86:db:29:83:de:32:
51:18:65:e7:4c:0d:df:87:ee:0e:3a:da:8c:6f:be:05:60:11:
18:6e:bb:81:31:5c:15:0a:e3:e1:87:61:08:43:a2:00:e6:06:
db:df:d7:c7:4f:7c:9b:1c:b3:ca:8f:c8:2f:72:27:0b:5c:6c:
2e:4b:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:34:19 2025 by rpki-client