$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft File: BFA364CC05C34700B6C32AC37512D94D292D301C.mft (raw, json) Hash identifier: Pn7jdwYCE+LHj2Qb4uXCMoyOweQ9DQaLSoR6I+Vi6+M= Subject key identifier: 37:87:9A:53:B8:22:E6:47:2D:41:BA:9D:95:93:E9:C7:4D:A6:33:D8 Authority key identifier: BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C Certificate issuer: /CN=BFA364CC05C34700B6C32AC37512D94D292D301C Certificate serial: 0DC2711A01940454BE969373D518ACEFFB0C104A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft Manifest number: 0132 Signing time: Tue 04 Nov 2025 16:01:37 +0000 Manifest this update: Tue 04 Nov 2025 15:56:37 +0000 Manifest next update: Sun 09 Nov 2025 20:52:37 +0000 Files and hashes: 1: 3136382e3230352e3131362e302f32322d3234203d3e20323634363738.roa (hash: qh20qy6Ymdl5qlEhD3KReiSomRmiX+A5r7eOSAVfocY=) 2: 323830333a646434303a3a2f33322d3438203d3e20323634363738.roa (hash: /b1eDm9Y7oRs94nAbEpcwT2yuvjJ7z2cgJyZkJI4aOM=) 3: BFA364CC05C34700B6C32AC37512D94D292D301C.crl (hash: AoxaHrYih6Tg7YpQDtZDSj7LOK+b4XQ+N5mNtPwJusU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c2:71:1a:01:94:04:54:be:96:93:73:d5:18:ac:ef:fb:0c:10:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFA364CC05C34700B6C32AC37512D94D292D301C Validity Not Before: Nov 4 15:56:37 2025 GMT Not After : Nov 9 20:52:37 2025 GMT Subject: CN=37879A53B822E6472D41BA9D9593E9C74DA633D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:eb:61:f6:65:94:91:12:c8:83:9d:aa:70:ec: 6a:6e:ab:78:44:5d:97:6e:6c:06:1e:59:db:8b:d7: 3d:b9:f5:77:0b:66:73:54:8c:6a:a2:9f:5c:10:67: ef:2b:b7:ee:85:0c:f8:e5:de:9c:2c:3c:8f:0a:45: d6:c7:6d:4c:07:a0:4b:b2:6c:de:65:17:d2:d2:c7: 94:90:fe:c4:46:18:2f:4f:86:1b:7f:10:f6:8f:74: 65:33:64:47:22:2c:84:6a:75:b7:1e:30:41:24:b4: 0f:d3:85:6a:30:43:3a:6c:bb:29:37:d8:03:11:e5: 44:29:5a:4a:57:43:bd:14:8b:c4:4b:3e:a9:ac:24: af:7b:e4:19:c2:9f:b6:26:20:02:14:11:b6:cf:db: ea:0f:a6:43:b4:47:a5:4b:b3:99:a1:ec:ef:19:21: 45:ed:71:d2:1a:e3:e1:91:f8:5c:29:ee:d0:bb:f2: 36:19:37:14:e0:34:ea:7f:05:40:c2:ec:4d:bf:61: 3b:ec:5a:0a:08:d3:e8:86:e4:5d:c2:ef:1f:73:be: e4:8e:9d:50:22:67:c9:c9:c1:84:23:91:ee:f3:73: 7a:41:e0:20:16:af:79:65:5f:5a:b0:25:6a:69:78: e6:33:70:a0:8b:45:60:d3:6e:a9:35:b2:47:fa:65: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:87:9A:53:B8:22:E6:47:2D:41:BA:9D:95:93:E9:C7:4D:A6:33:D8 X509v3 Authority Key Identifier: keyid:BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1e:07:78:a0:4b:e1:11:31:d5:9a:19:df:fe:ad:d0:1a:3e: 61:1a:41:13:4e:5b:80:84:02:2c:3a:0b:8e:d2:2c:0d:2d:ba: c5:0c:d1:fc:74:9a:69:39:16:65:52:bf:86:79:b3:7c:6c:3a: ef:da:45:4d:45:ae:aa:a2:5e:ce:62:f5:42:2c:16:c8:2e:0a: ad:4f:45:b2:aa:3f:5e:30:46:61:a7:c7:b6:33:72:3c:bb:2a: 05:bb:c1:fe:6f:c5:f8:99:23:b5:d8:3a:3b:71:20:a7:69:7d: 16:a7:56:1b:51:fb:5c:00:44:ca:88:4b:bd:e6:21:78:b0:3e: 0c:e6:a9:2c:f3:d3:5b:7f:0b:0b:c8:01:dc:b9:13:5e:54:fd: e8:47:d3:fa:da:b7:d5:9f:ed:67:77:6f:be:22:71:ea:93:4e: 7b:67:a2:62:31:9f:ff:57:bf:b5:a7:0c:4e:43:f3:60:4f:e6: c9:8f:f8:5f:da:fe:b3:94:bc:80:77:2d:1a:c2:8c:b3:e7:1b: ce:d4:92:54:35:4d:cb:fe:be:ce:dc:38:d0:35:23:40:6e:4c: f3:e4:42:4e:6e:8e:d3:ee:90:1e:2d:9a:41:76:09:69:bc:60: 1a:d2:df:ae:b5:95:38:c3:7d:92:53:f3:e0:09:70:a1:c7:c1: db:6e:01:e5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDcJxGgGUBFS+lpNz1Ris7/sMEEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZBMzY0Q0MwNUMzNDcwMEI2QzMyQUMzNzUxMkQ5NEQy OTJEMzAxQzAeFw0yNTExMDQxNTU2MzdaFw0yNTExMDkyMDUyMzdaMDMxMTAvBgNV BAMTKDM3ODc5QTUzQjgyMkU2NDcyRDQxQkE5RDk1OTNFOUM3NERBNjMzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU62H2ZZSREsiDnapw7Gpuq3hE XZdubAYeWduL1z259XcLZnNUjGqin1wQZ+8rt+6FDPjl3pwsPI8KRdbHbUwHoEuy bN5lF9LSx5SQ/sRGGC9Phht/EPaPdGUzZEciLIRqdbceMEEktA/ThWowQzpsuyk3 2AMR5UQpWkpXQ70Ui8RLPqmsJK975BnCn7YmIAIUEbbP2+oPpkO0R6VLs5mh7O8Z IUXtcdIa4+GR+Fwp7tC78jYZNxTgNOp/BUDC7E2/YTvsWgoI0+iG5F3C7x9zvuSO nVAiZ8nJwYQjke7zc3pB4CAWr3llX1qwJWppeOYzcKCLRWDTbqk1skf6ZWt9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUN4eaU7gi5kctQbqdlZPpx02mM9gwHwYDVR0j BBgwFoAUv6NkzAXDRwC2wyrDdRLZTSktMBwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yNDFGQ0ZGRjMzMjI2MTVGNUYyQzlCQjI2QUE5ODdGQUNF NjgzRTA4NjhBMDdDQ0E3NjJERTdBNkJBQkVEOTUwLzAvQkZBMzY0Q0MwNUMzNDcw MEI2QzMyQUMzNzUxMkQ5NEQyOTJEMzAxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkEzNjRDQzA1QzM0NzAwQjZD MzJBQzM3NTEyRDk0RDI5MkQzMDFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjQxRkNGRkYzMzIyNjE1RjVGMkM5QkIyNkFBOTg3RkFDRTY4M0UwODY4 QTA3Q0NBNzYyREU3QTZCQUJFRDk1MC8wL0JGQTM2NENDMDVDMzQ3MDBCNkMzMkFD Mzc1MTJEOTREMjkyRDMwMUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNHgd4oEvhETHVmhnf/q3QGj5h GkETTluAhAIsOguO0iwNLbrFDNH8dJppORZlUr+GebN8bDrv2kVNRa6qol7OYvVC LBbILgqtT0Wyqj9eMEZhp8e2M3I8uyoFu8H+b8X4mSO12Do7cSCnaX0Wp1YbUftc AETKiEu95iF4sD4M5qks89NbfwsLyAHcuRNeVP3oR9P62rfVn+1nd2++InHqk057 Z6JiMZ//V7+1pwxOQ/NgT+bJj/hf2v6zlLyAdy0awoyz5xvO1JJUNU3L/r7O3DjQ NSNAbkzz5EJObo7T7pAeLZpBdglpvGAa0t+utZU4w32SU/PgCXChx8HbbgHl -----END CERTIFICATE-----Generated at Wed Nov 5 20:17:20 2025 by rpki-client