$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.mft File: BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.mft (raw, json) Hash identifier: /mbTFVU8tkkWkQcZwz0aZr2aNIi432p/YXs39hzz5f8= Subject key identifier: AA:4B:30:4D:26:9A:06:09:DD:FE:46:30:6C:C4:90:ED:36:DE:BE:1E Authority key identifier: BF:A2:FD:BF:95:BF:4F:A6:96:32:47:02:9E:E0:F0:D7:50:CA:7F:DF Certificate issuer: /CN=BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF Certificate serial: 669E55D85FDE0B93A2D8C75EDC5089184045149F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.mft Manifest number: 1C Signing time: Sat 22 Aug 2026 16:19:00 +0000 Manifest this update: Sat 22 Aug 2026 16:14:00 +0000 Manifest next update: Thu 27 Aug 2026 20:05:00 +0000 Files and hashes: 1: BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.crl (hash: N0YkFGEmpgnKzGO/E/PwGoWi/iIsLBAPUEVjUibgD5M=) 2: 323830333a6135303a3a2f33322d3438203d3e20323733313734.roa (hash: jJELMioa/Khst+8DF7W0JJYlj6GndQ9CN8vDKek3aGg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.crl rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Aug 2026 11:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9e:55:d8:5f:de:0b:93:a2:d8:c7:5e:dc:50:89:18:40:45:14:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF Validity Not Before: Aug 22 16:14:00 2026 GMT Not After : Aug 27 20:05:00 2026 GMT Subject: CN=AA4B304D269A0609DDFE46306CC490ED36DEBE1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0c:d3:18:9b:d0:85:2d:fd:df:f9:50:5f:97: a3:5b:06:1f:ab:8f:b5:f3:c1:b9:7e:87:75:a5:c6: b6:be:60:0d:ae:9e:11:5a:05:a7:75:d5:f4:2a:92: 08:2a:3c:2b:a9:79:1c:06:a8:8b:93:20:64:30:1a: 8e:06:9c:be:ac:40:c9:c2:f4:aa:5c:9a:ec:0a:b2: e5:ff:15:8c:4a:64:88:28:14:6b:57:33:76:ba:5c: c8:50:6e:3c:9c:3a:66:87:a4:2e:f6:91:b2:35:56: 28:eb:a9:9c:96:af:02:bd:91:fa:42:74:a7:92:e9: e5:ff:86:3f:07:19:1e:15:d9:ca:f1:be:da:c0:49: 2d:ec:bc:a3:62:f4:49:33:50:33:70:f3:b5:f6:3d: 9b:aa:89:a5:3a:73:75:53:8e:0f:33:d6:79:9f:51: 22:8c:f3:70:95:12:7a:69:37:86:da:c8:58:b0:7b: 5d:40:4c:be:23:10:47:4b:5e:0f:db:99:ff:fa:0b: 9b:60:9f:dc:75:61:f7:a6:ca:6a:62:23:77:1b:97: 5c:a0:53:8c:41:55:a1:d6:d8:79:59:98:2c:84:03: e7:e4:e3:b0:7b:33:cd:8f:25:8c:56:46:86:33:e2: a6:f9:e9:fd:23:b4:d7:94:58:99:05:56:af:fa:62: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4B:30:4D:26:9A:06:09:DD:FE:46:30:6C:C4:90:ED:36:DE:BE:1E X509v3 Authority Key Identifier: keyid:BF:A2:FD:BF:95:BF:4F:A6:96:32:47:02:9E:E0:F0:D7:50:CA:7F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:09:e5:05:c3:95:33:43:d4:6f:aa:80:6d:92:25:ab:8d:77: 1f:f3:02:46:c2:c6:45:d5:9b:c2:3f:cb:c4:37:d0:ab:ad:65: d8:83:02:d2:fe:01:19:50:77:ce:46:40:c6:f8:af:bf:a5:e5: 6f:9a:45:53:d2:8e:77:68:06:5f:32:19:2c:33:f1:39:70:b1: 25:ff:ca:29:68:35:a4:83:77:d0:8e:16:64:3b:5f:14:b1:b3: 38:53:93:d3:d7:40:b3:32:48:20:f2:9e:15:95:f7:d8:5e:ad: ed:db:17:06:63:c7:60:56:87:3b:6b:70:5d:1d:78:b0:98:fb: 0d:ae:fd:dc:c5:69:51:df:e5:d4:85:2c:ba:f1:27:b9:fc:6b: c6:bf:1f:36:e8:02:8f:09:a5:2f:3b:5b:88:22:2a:a9:75:d9: 5c:9a:56:84:f0:cd:d1:09:dd:93:0b:74:2f:7c:89:96:d2:f0: b8:18:f9:43:e8:72:b6:d3:9f:14:77:1c:55:c6:d3:7d:e1:46: d4:14:90:00:70:9a:2d:57:91:bf:77:22:c8:28:07:a3:f6:1e: d8:13:00:08:fa:e5:89:ed:3b:c6:be:d4:81:bd:67:52:ad:7f: 9a:10:3c:0c:6f:09:e8:6b:b6:81:0b:5d:ff:6f:8d:f7:33:25: 61:46:9a:64 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZp5V2F/eC5Oi2Mde3FCJGEBFFJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZBMkZEQkY5NUJGNEZBNjk2MzI0NzAyOUVFMEYwRDc1 MENBN0ZERjAeFw0yNjA4MjIxNjE0MDBaFw0yNjA4MjcyMDA1MDBaMDMxMTAvBgNV BAMTKEFBNEIzMDREMjY5QTA2MDlEREZFNDYzMDZDQzQ5MEVEMzZERUJFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjDNMYm9CFLf3f+VBfl6NbBh+r j7Xzwbl+h3Wlxra+YA2unhFaBad11fQqkggqPCupeRwGqIuTIGQwGo4GnL6sQMnC 9KpcmuwKsuX/FYxKZIgoFGtXM3a6XMhQbjycOmaHpC72kbI1VijrqZyWrwK9kfpC dKeS6eX/hj8HGR4V2crxvtrASS3svKNi9EkzUDNw87X2PZuqiaU6c3VTjg8z1nmf USKM83CVEnppN4bayFiwe11ATL4jEEdLXg/bmf/6C5tgn9x1YfemympiI3cbl1yg U4xBVaHW2HlZmCyEA+fk47B7M82PJYxWRoYz4qb56f0jtNeUWJkFVq/6YhYfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqkswTSaaBgnd/kYwbMSQ7Tbevh4wHwYDVR0j BBgwFoAUv6L9v5W/T6aWMkcCnuDw11DKf98wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMzc5NDBDOTgyNkQwMDc1QjFEOUExQ0Y2NTRCRDZENTg1 QTQyRjU4NjVEOThGQUQyMzE0OTE5RjkzNEU3MzJFLzAvQkZBMkZEQkY5NUJGNEZB Njk2MzI0NzAyOUVFMEYwRDc1MENBN0ZERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkEyRkRCRjk1QkY0RkE2OTYz MjQ3MDI5RUUwRjBENzUwQ0E3RkRGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzM3OTQwQzk4MjZEMDA3NUIxRDlBMUNGNjU0QkQ2RDU4NUE0MkY1ODY1 RDk4RkFEMjMxNDkxOUY5MzRFNzMyRS8wL0JGQTJGREJGOTVCRjRGQTY5NjMyNDcw MjlFRTBGMEQ3NTBDQTdGREYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC1CeUFw5UzQ9RvqoBtkiWrjXcf 8wJGwsZF1ZvCP8vEN9CrrWXYgwLS/gEZUHfORkDG+K+/peVvmkVT0o53aAZfMhks M/E5cLEl/8opaDWkg3fQjhZkO18UsbM4U5PT10CzMkgg8p4VlffYXq3t2xcGY8dg Voc7a3BdHXiwmPsNrv3cxWlR3+XUhSy68Se5/GvGvx826AKPCaUvO1uIIiqpddlc mlaE8M3RCd2TC3QvfImW0vC4GPlD6HK2058UdxxVxtN94UbUFJAAcJotV5G/dyLI KAej9h7YEwAI+uWJ7TvGvtSBvWdSrX+aEDwMbwnoa7aBC13/b433MyVhRppk -----END CERTIFICATE-----Generated at Mon Aug 24 06:58:16 2026 by rpki-client