$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft File: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft (raw, json) Hash identifier: 0iBHcOKcE7q11+8WSKdaa7jzr3RZkjADoIIjr6KQT9w= Subject key identifier: CE:91:32:01:6F:53:1D:24:01:80:04:CD:40:8F:81:46:8B:24:D3:29 Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 Certificate issuer: /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Certificate serial: 026F317AC75A9C1DA1515CF9648DC2453BA9E8DF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft Manifest number: 0131 Signing time: Mon 03 Nov 2025 02:39:52 +0000 Manifest this update: Mon 03 Nov 2025 02:34:52 +0000 Manifest next update: Sat 08 Nov 2025 16:13:52 +0000 Files and hashes: 1: 34352e3233302e382e302f32322d3234203d3e20323636373130.roa (hash: mLPmwLCgJH7/6VKEK4Pcz7wxnHkCNUH5wI8HmFmJB1E=) 2: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl (hash: +PFI+33GbkCT/fAKsPbVLweuBnFOgXENMziMpexhjBY=) 3: 323830333a3332303a3a2f33322d3332203d3e20323636373130.roa (hash: lHM7TXuZJiuk5ar5OftYzmGGnYQusx4CcGk57kh5X5g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 16:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6f:31:7a:c7:5a:9c:1d:a1:51:5c:f9:64:8d:c2:45:3b:a9:e8:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Validity Not Before: Nov 3 02:34:52 2025 GMT Not After : Nov 8 16:13:52 2025 GMT Subject: CN=CE9132016F531D24018004CD408F81468B24D329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:e8:32:bd:9d:60:45:0a:73:b8:93:d5:0d: 33:46:dd:0e:ef:8f:78:b4:64:85:ee:b8:74:71:1f: 31:ac:01:12:e4:2b:a0:1c:f2:c6:06:1d:ef:5e:bc: cd:2e:88:26:80:bc:47:74:d9:15:eb:83:a9:a9:a9: 89:60:12:52:12:e6:c6:db:1a:ab:53:96:52:86:42: 87:bf:7a:89:bf:56:42:04:71:c8:af:2a:69:04:f5: 5b:b2:d5:10:f7:2c:25:31:de:03:c4:a6:b0:4b:97: dd:a4:14:9b:e2:ee:78:e5:77:10:07:df:86:e5:4e: 00:4d:8a:60:2f:f7:9d:5c:e1:8d:02:b6:37:f1:11: 39:89:2c:f6:94:64:0f:01:be:65:1e:e1:7b:96:ed: ba:82:24:55:4c:30:1e:11:f1:83:29:27:5a:08:e8: cd:7a:22:06:e5:cd:4b:69:41:54:a5:ea:86:27:11: 2d:1c:4a:d9:53:12:39:5a:9a:dd:00:b0:e4:83:48: b0:ef:f7:69:93:77:7a:50:7f:79:ff:3a:c7:fc:c9: a1:0a:eb:37:17:e4:6d:e5:a8:70:ae:30:ad:27:84: 34:40:17:7a:ce:59:06:8a:8a:52:df:75:5c:35:34: 58:ec:42:ec:29:dc:b9:73:d2:3f:c4:71:92:80:93: 0b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:91:32:01:6F:53:1D:24:01:80:04:CD:40:8F:81:46:8B:24:D3:29 X509v3 Authority Key Identifier: keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3b:40:4f:b0:f9:62:27:c2:c3:9b:3c:da:bd:d8:20:06:41: c8:bd:03:1c:aa:0d:48:6a:72:cc:ee:e6:c3:f6:94:f3:47:4d: 8b:45:2c:5c:f5:da:bd:49:41:63:f1:97:a4:51:cf:4c:f0:6d: fc:79:db:14:e6:17:b1:da:fe:ed:c3:6a:ef:a5:1d:6a:f6:14: a3:db:3d:a9:16:6e:28:50:3d:41:28:28:a8:42:8e:42:5b:e6: c8:b0:85:5f:6e:69:7a:b5:3a:46:66:7c:51:e2:71:85:21:ca: b4:0f:b1:3d:0d:fc:79:c1:f6:05:dc:b4:58:f4:4e:dc:d8:22: 75:5b:84:f3:fd:e2:b4:8d:8c:64:ff:53:ff:0f:3f:90:73:63: be:df:83:15:71:57:78:68:2e:17:fc:37:6b:8c:30:cb:b6:22: a7:e5:9d:ba:67:ed:e7:a7:2f:6e:e8:29:5e:07:f5:b0:22:df: 70:47:94:f4:6f:02:ef:0a:b9:71:83:9c:17:af:47:f2:2a:64: cf:3f:3b:b7:a7:f4:9e:43:72:ac:90:40:68:6d:6d:11:95:dd: f5:66:0b:a6:18:a6:d1:52:4f:c3:fe:8e:a5:a1:6d:52:b3:4a: 4f:13:09:6f:8b:4b:64:76:6f:72:69:a3:96:d2:3a:fc:08:cb: 10:af:66:56 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAm8xesdanB2hUVz5ZI3CRTup6N8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEQzMwNjhBOUFFNzgzODRFNUE0RjRGNTI0NEJBRTQw ODgwNTlFNTAeFw0yNTExMDMwMjM0NTJaFw0yNTExMDgxNjEzNTJaMDMxMTAvBgNV BAMTKENFOTEzMjAxNkY1MzFEMjQwMTgwMDRDRDQwOEY4MTQ2OEIyNEQzMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMsOgyvZ1gRQpzuJPVDTNG3Q7v j3i0ZIXuuHRxHzGsARLkK6Ac8sYGHe9evM0uiCaAvEd02RXrg6mpqYlgElIS5sbb GqtTllKGQoe/eom/VkIEccivKmkE9Vuy1RD3LCUx3gPEprBLl92kFJvi7njldxAH 34blTgBNimAv951c4Y0CtjfxETmJLPaUZA8BvmUe4XuW7bqCJFVMMB4R8YMpJ1oI 6M16IgblzUtpQVSl6oYnES0cStlTEjlamt0AsOSDSLDv92mTd3pQf3n/Osf8yaEK 6zcX5G3lqHCuMK0nhDRAF3rOWQaKilLfdVw1NFjsQuwp3Llz0j/EcZKAkwtfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzpEyAW9THSQBgATNQI+BRosk0ykwHwYDVR0j BBgwFoAUu9wwaKmueDhOWk9PUkS65AiAWeUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NDIzMzIwQzgwNUQ4QkVFRkM0MjQyQzU2NzFEODQ0NTY3 NjNBRERGQURFRTA0RTQyQTFBMUQ0NERDRkJEMkEzLzAvQkJEQzMwNjhBOUFFNzgz ODRFNUE0RjRGNTI0NEJBRTQwODgwNTlFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkRDMzA2OEE5QUU3ODM4NEU1 QTRGNEY1MjQ0QkFFNDA4ODA1OUU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDQyMzMyMEM4MDVEOEJFRUZDNDI0MkM1NjcxRDg0NDU2NzYzQURERkFE RUUwNEU0MkExQTFENDREQ0ZCRDJBMy8wL0JCREMzMDY4QTlBRTc4Mzg0RTVBNEY0 RjUyNDRCQUU0MDg4MDU5RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbO0BPsPliJ8LDmzzavdggBkHI vQMcqg1IanLM7ubD9pTzR02LRSxc9dq9SUFj8ZekUc9M8G38edsU5hex2v7tw2rv pR1q9hSj2z2pFm4oUD1BKCioQo5CW+bIsIVfbml6tTpGZnxR4nGFIcq0D7E9Dfx5 wfYF3LRY9E7c2CJ1W4Tz/eK0jYxk/1P/Dz+Qc2O+34MVcVd4aC4X/DdrjDDLtiKn 5Z26Z+3npy9u6CleB/WwIt9wR5T0bwLvCrlxg5wXr0fyKmTPPzu3p/SeQ3KskEBo bW0Rld31ZgumGKbRUk/D/o6loW1Ss0pPEwlvi0tkdm9yaaOW0jr8CMsQr2ZW -----END CERTIFICATE-----Generated at Wed Nov 5 05:31:59 2025 by rpki-client