$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft File: BF32AEE1B63DB0DF1296575D56FA963E24476012.mft (raw, json) Hash identifier: Lsf1l8ydnfR3LteMfb56dsLdQ9+2Q1VkpuXyzC8u0YY= Subject key identifier: F9:08:25:F1:91:1D:1D:5D:92:1F:5F:EB:43:AB:0A:4C:9D:47:E0:D2 Authority key identifier: BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12 Certificate issuer: /CN=BF32AEE1B63DB0DF1296575D56FA963E24476012 Certificate serial: 7A658BF407C9B31BC8F1A7062E5772FE71559AD9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft Manifest number: 65 Signing time: Thu 18 Sep 2025 08:28:15 +0000 Manifest this update: Thu 18 Sep 2025 08:23:15 +0000 Manifest next update: Tue 23 Sep 2025 21:28:15 +0000 Files and hashes: 1: 323830333a323264303a3a2f33322d3334203d3e20323734303438.roa (hash: 4aH4uYkWGE+cc9ahkSEXCeY+Hh6RB/BBL4FOK1r2QC0=) 2: BF32AEE1B63DB0DF1296575D56FA963E24476012.crl (hash: JdazIEvgIb3hu9Y24kzgyxQY3LRxntacRpk1gu9x/Qw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:65:8b:f4:07:c9:b3:1b:c8:f1:a7:06:2e:57:72:fe:71:55:9a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF32AEE1B63DB0DF1296575D56FA963E24476012 Validity Not Before: Sep 18 08:23:15 2025 GMT Not After : Sep 23 21:28:15 2025 GMT Subject: CN=F90825F1911D1D5D921F5FEB43AB0A4C9D47E0D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:c9:71:d7:1e:f9:d1:dd:f9:63:98:ea:05: 37:b4:31:b3:5e:eb:52:b5:76:d9:1b:1c:6e:4e:f8: 98:4f:73:98:70:3e:2d:e1:ff:bd:f4:ce:dd:83:b4: 94:f3:d0:92:0e:c9:96:94:34:1f:8b:1d:53:da:bf: 40:7e:59:b0:20:76:48:2d:cd:12:3e:ca:ed:10:cb: d3:41:48:84:a3:ca:2a:5b:03:74:41:ce:b6:b3:9e: f1:5b:8f:df:8e:40:46:fb:25:c7:7e:5d:74:a9:81: 31:67:4b:e3:e6:d1:47:d1:01:89:54:3f:ac:bb:84: d3:08:f9:85:1e:2f:c3:94:5c:2b:82:93:53:69:77: 04:cc:dc:f4:0c:31:e6:9b:34:10:d3:bc:b6:dc:81: 08:bc:6e:5b:02:a2:e7:d7:e6:3b:1a:aa:5c:0d:de: cc:4e:e4:d2:50:e4:c7:36:a6:c0:7f:6d:03:50:6d: 59:e8:65:b7:be:83:a5:eb:1b:08:31:ec:00:b9:97: 0f:26:f3:6a:ff:77:a0:a0:6b:a0:62:61:8d:86:2b: 2f:5b:6b:e8:0e:90:64:0d:8e:80:cd:ee:c4:b6:e7: 2e:bb:6f:21:6e:e7:11:7f:97:f9:c2:31:e6:7e:ec: 31:49:85:f9:b3:38:ca:94:26:47:cf:29:27:7d:17: 8d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:08:25:F1:91:1D:1D:5D:92:1F:5F:EB:43:AB:0A:4C:9D:47:E0:D2 X509v3 Authority Key Identifier: keyid:BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:38:0d:8a:07:3a:04:61:df:a5:ce:a9:1a:2d:88:19:01:d2: 15:dd:f2:97:3d:f6:3c:95:64:ef:0e:d5:8a:c1:df:ec:23:98: cb:ab:16:ec:18:57:fa:74:9f:ab:27:95:bb:b3:78:99:99:f2: 85:8a:35:a1:21:cb:d6:f2:f0:65:e9:b2:1f:7c:a6:9b:76:e4: f5:aa:bd:56:a0:85:ce:cd:0a:98:fd:81:2e:1d:33:53:6c:8a: 0a:03:cb:93:5c:b6:cc:22:ed:f0:3b:54:00:d0:32:bb:51:28: a7:d7:e3:23:13:ea:9a:0e:aa:d0:34:46:25:a2:17:ff:dd:91: 0b:70:7d:07:71:de:f6:99:2d:69:54:21:56:ad:bd:43:9a:b1: dc:81:b3:eb:ac:96:4c:6b:de:c7:75:1a:c3:bd:42:f0:48:5a: b7:cc:b7:d0:27:cb:e0:06:38:41:da:1c:94:c5:43:dd:23:33: 73:b7:2d:2d:10:24:2d:09:9c:b9:c7:f4:07:f2:29:12:98:78: ee:98:b5:4d:37:fa:ca:fd:5d:37:84:94:ce:8d:f6:23:1b:7f: 9b:70:a8:c0:cf:17:3a:0c:b5:de:e0:72:a9:8f:e9:ad:2e:5f: 93:52:f7:7a:3a:df:91:de:80:da:df:0f:a2:87:3d:4a:ae:37: c5:3d:8b:91 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUemWL9AfJsxvI8acGLldy/nFVmtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzMkFFRTFCNjNEQjBERjEyOTY1NzVENTZGQTk2M0Uy NDQ3NjAxMjAeFw0yNTA5MTgwODIzMTVaFw0yNTA5MjMyMTI4MTVaMDMxMTAvBgNV BAMTKEY5MDgyNUYxOTExRDFENUQ5MjFGNUZFQjQzQUIwQTRDOUQ0N0UwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6clx1x750d35Y5jqBTe0MbNe 61K1dtkbHG5O+JhPc5hwPi3h/730zt2DtJTz0JIOyZaUNB+LHVPav0B+WbAgdkgt zRI+yu0Qy9NBSISjyipbA3RBzraznvFbj9+OQEb7Jcd+XXSpgTFnS+Pm0UfRAYlU P6y7hNMI+YUeL8OUXCuCk1NpdwTM3PQMMeabNBDTvLbcgQi8blsCoufX5jsaqlwN 3sxO5NJQ5Mc2psB/bQNQbVnoZbe+g6XrGwgx7AC5lw8m82r/d6Cga6BiYY2GKy9b a+gOkGQNjoDN7sS25y67byFu5xF/l/nCMeZ+7DFJhfmzOMqUJkfPKSd9F41JAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU+Qgl8ZEdHV2SH1/rQ6sKTJ1H4NIwHwYDVR0j BBgwFoAUvzKu4bY9sN8SllddVvqWPiRHYBIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERTlFRjNEMEE3OTcwQ0FFRkU1RENBNzVBN0M2QjE0OUFB MkM0RkRGNUExNzIyRjQ2OThCQzdGNzIyQTIyRkRCLzAvQkYzMkFFRTFCNjNEQjBE RjEyOTY1NzVENTZGQTk2M0UyNDQ3NjAxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjMyQUVFMUI2M0RCMERGMTI5 NjU3NUQ1NkZBOTYzRTI0NDc2MDEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREU5RUYzRDBBNzk3MENBRUZFNURDQTc1QTdDNkIxNDlBQTJDNEZERjVB MTcyMkY0Njk4QkM3RjcyMkEyMkZEQi8wL0JGMzJBRUUxQjYzREIwREYxMjk2NTc1 RDU2RkE5NjNFMjQ0NzYwMTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAaOA2KBzoEYd+lzqkaLYgZAdIV 3fKXPfY8lWTvDtWKwd/sI5jLqxbsGFf6dJ+rJ5W7s3iZmfKFijWhIcvW8vBl6bIf fKabduT1qr1WoIXOzQqY/YEuHTNTbIoKA8uTXLbMIu3wO1QA0DK7USin1+MjE+qa DqrQNEYlohf/3ZELcH0Hcd72mS1pVCFWrb1DmrHcgbPrrJZMa97HdRrDvULwSFq3 zLfQJ8vgBjhB2hyUxUPdIzNzty0tECQtCZy5x/QH8ikSmHjumLVNN/rK/V03hJTO jfYjG3+bcKjAzxc6DLXe4HKpj+mtLl+TUvd6Ot+R3oDa3w+ihz1KrjfFPYuR -----END CERTIFICATE-----Generated at Thu Sep 18 17:05:06 2025 by rpki-client