$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft File: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft (raw, json) Hash identifier: vuxMUtuWfhLuoSIsTRJa4v5MDhnOAMVrNFu3QCsxqtY= Subject key identifier: 4E:67:EC:2D:26:8E:6C:40:44:31:50:DC:0B:77:A2:15:AA:1E:46:56 Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC Certificate issuer: /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Certificate serial: 767FD74F940C5C707B3C5EEF88A8BB71C9A2DE4B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft Manifest number: F9 Signing time: Sat 19 Jul 2025 17:16:14 +0000 Manifest this update: Sat 19 Jul 2025 17:11:14 +0000 Manifest next update: Fri 25 Jul 2025 02:07:14 +0000 Files and hashes: 1: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl (hash: K9KGt8a/hT+BH6e1khhjxnCogtyuUURdvlC/AixjF8U=) 2: 3137392e35312e3230382e302f32322d3234203d3e20323731373831.roa (hash: qefcdKBbQ8rTrMpgo/t4zhuWfrSW4R/8kvtNUQX7kms=) 3: 323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (hash: qXLUa1DFAZMrZIlzarnZaCXNOtAwLQ/Wi2JutVkZxnE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Jul 2025 19:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7f:d7:4f:94:0c:5c:70:7b:3c:5e:ef:88:a8:bb:71:c9:a2:de:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Validity Not Before: Jul 19 17:11:14 2025 GMT Not After : Jul 25 02:07:14 2025 GMT Subject: CN=4E67EC2D268E6C40443150DC0B77A215AA1E4656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:6f:28:6b:21:47:96:d7:7d:64:ca:19:c9: db:05:98:f8:88:38:ac:89:f6:7b:14:b9:57:b5:f0: 30:ee:75:96:10:7f:5d:ec:42:2d:1b:9b:e6:d8:ed: 2b:a6:3c:2a:47:84:59:ff:10:16:21:85:5c:18:11: 67:e0:3f:12:e8:86:c3:75:c2:0e:79:d3:c4:fb:0c: 85:3f:b3:60:e6:09:d1:85:11:c9:0b:85:43:e9:76: 88:e5:1a:cc:b8:fd:ff:4d:1a:ed:bd:9d:74:e8:8e: 01:53:96:d0:b1:3c:6e:bb:af:52:aa:3f:07:7d:1c: 5c:d1:77:a9:95:fe:9a:50:a0:09:39:9b:2b:d0:33: 3b:4a:ba:fc:79:31:ee:74:75:b6:5d:ff:d1:76:fe: 7c:6b:52:6d:d9:df:b7:01:fd:eb:e3:fc:d4:3f:5d: 00:a7:72:ce:dc:29:76:15:6b:de:77:07:71:15:7d: 28:4f:a9:c6:e3:41:ec:2f:6d:2b:e7:79:38:2e:0d: 95:f7:93:66:69:e1:c3:2a:5c:f4:5e:6b:e8:d2:ac: 55:54:f4:34:2b:58:39:3a:90:7d:22:cc:ac:09:e3: f1:23:84:17:fa:ef:d9:3b:7b:7e:96:72:68:a6:64: 6a:f5:6b:d4:14:28:cb:3c:89:ae:2c:d2:5c:71:e6: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:67:EC:2D:26:8E:6C:40:44:31:50:DC:0B:77:A2:15:AA:1E:46:56 X509v3 Authority Key Identifier: keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:77:66:a5:ab:9c:f0:91:bc:1a:15:6e:6a:3e:24:c0:4a:78: a8:51:74:1e:7b:36:84:9b:ee:4e:75:7a:23:86:da:8a:61:0d: 7d:54:55:10:d9:ca:f5:d0:eb:89:16:ea:ad:49:ef:61:a4:b0: e7:c9:3d:d5:02:02:c4:ed:5b:f3:ca:0c:4f:80:e3:11:b2:7d: e5:76:6e:48:10:da:95:0d:c4:4e:bc:84:c7:24:12:cd:d4:dc: 70:c4:a2:0a:79:f2:49:cc:e7:2c:3c:db:92:58:70:33:39:ca: ce:87:84:3f:c6:47:26:5d:4e:2f:bf:ad:a5:f5:49:8f:bb:68: 66:02:56:8c:1e:c0:fe:4d:db:7f:b0:f9:9b:6f:e4:a2:4f:91: 30:ec:4d:7f:e4:c6:62:7a:19:d7:ea:30:96:3c:40:05:c6:03: 0d:83:c0:52:74:d0:1f:c4:b4:30:4c:72:e7:d1:d7:8a:b0:8f: 1c:7a:dd:e2:31:89:a1:93:86:98:73:9b:fc:e9:4c:57:b8:69: 67:8b:f8:93:86:d4:0c:66:0e:c5:b5:0e:e7:00:8a:1d:a0:fa: 90:ea:7e:a4:e5:cf:b4:d5:b7:44:d6:af:a2:b6:3d:d3:d0:c2: 44:7b:44:d6:33:ad:7b:dd:09:34:eb:1a:81:dd:27:db:7b:80: 6a:40:82:78 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdn/XT5QMXHB7PF7viKi7ccmi3kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5MUZFMEI3MTIwRkVDMUIwMkUyMEY0RUI4OEE0RERG QTFCN0ZGQzAeFw0yNTA3MTkxNzExMTRaFw0yNTA3MjUwMjA3MTRaMDMxMTAvBgNV BAMTKDRFNjdFQzJEMjY4RTZDNDA0NDMxNTBEQzBCNzdBMjE1QUExRTQ2NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Um8oayFHltd9ZMoZydsFmPiI OKyJ9nsUuVe18DDudZYQf13sQi0bm+bY7SumPCpHhFn/EBYhhVwYEWfgPxLohsN1 wg5508T7DIU/s2DmCdGFEckLhUPpdojlGsy4/f9NGu29nXTojgFTltCxPG67r1Kq Pwd9HFzRd6mV/ppQoAk5myvQMztKuvx5Me50dbZd/9F2/nxrUm3Z37cB/evj/NQ/ XQCncs7cKXYVa953B3EVfShPqcbjQewvbSvneTguDZX3k2Zp4cMqXPRea+jSrFVU 9DQrWDk6kH0izKwJ4/EjhBf679k7e36WcmimZGr1a9QUKMs8ia4s0lxx5kYHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTmfsLSaObEBEMVDcC3eiFaoeRlYwHwYDVR0j BBgwFoAUv5H+C3Eg/sGwLiD064ik3fobf/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMjhBQzU0OTMwM0I3NEExQzQ5Q0EwNzZCOTc0RjA2MzZC MDNCNzlGOUUwMzM1QjZGREJCRkQ2MEVBOTE4MzQ4LzAvQkY5MUZFMEI3MTIwRkVD MUIwMkUyMEY0RUI4OEE0RERGQTFCN0ZGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjkxRkUwQjcxMjBGRUMxQjAy RTIwRjRFQjg4QTREREZBMUI3RkZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjI4QUM1NDkzMDNCNzRBMUM0OUNBMDc2Qjk3NEYwNjM2QjAzQjc5RjlF MDMzNUI2RkRCQkZENjBFQTkxODM0OC8wL0JGOTFGRTBCNzEyMEZFQzFCMDJFMjBG NEVCODhBNERERkExQjdGRkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDHd2alq5zwkbwaFW5qPiTASnio UXQeezaEm+5OdXojhtqKYQ19VFUQ2cr10OuJFuqtSe9hpLDnyT3VAgLE7VvzygxP gOMRsn3ldm5IENqVDcROvITHJBLN1NxwxKIKefJJzOcsPNuSWHAzOcrOh4Q/xkcm XU4vv62l9UmPu2hmAlaMHsD+Tdt/sPmbb+SiT5Ew7E1/5MZiehnX6jCWPEAFxgMN g8BSdNAfxLQwTHLn0deKsI8cet3iMYmhk4aYc5v86UxXuGlni/iThtQMZg7FtQ7n AIodoPqQ6n6k5c+01bdE1q+itj3T0MJEe0TWM6173Qk06xqB3Sfbe4BqQIJ4 -----END CERTIFICATE-----Generated at Sun Jul 20 19:05:02 2025 by rpki-client