$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft File: BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft (raw, json) Hash identifier: waLlsJ3FkuieZA/4mPaOxMchR0xd/Rmwxgw0ST7xt2s= Subject key identifier: A9:0E:D6:9F:2C:AA:AF:93:FC:90:C7:FE:8D:5A:1B:81:79:42:F1:D1 Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31 Certificate issuer: /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131 Certificate serial: 283F57CC856F6F77ECD88F1E72722B3CC3F42205 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft Manifest number: 0137 Signing time: Mon 03 Nov 2025 03:05:13 +0000 Manifest this update: Mon 03 Nov 2025 03:00:13 +0000 Manifest next update: Sat 08 Nov 2025 23:01:13 +0000 Files and hashes: 1: 323830313a3161393a313a3a2f34382d3438203d3e203133343839.roa (hash: PDG1rxd0xSpA7YJfDLKobi7Tz7Q2e5GwLEKlvtcynNc=) 2: 323830313a3161393a3a2f34342d3434203d3e20323732393039.roa (hash: n/IU6ZeFHkr/FBQwZ+yzODeAvAeeU92wWP6veG3yiKY=) 3: BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl (hash: tey+pzvAgUEERO1JFnjOhTNH6q6t88iJ6LFbmD4cxPQ=) 4: 323830313a3161393a313a3a2f34382d3438203d3e203237393531.roa (hash: haQKWGzAtczsGATj/yhluLoYQ339sYxmKpuh2HnsIxQ=) 5: 323830313a3161393a323a3a2f34382d3438203d3e20323732393039.roa (hash: NLmHZcdbPUfzGQF5ph8LKk3OdDi2P2fZcoNM/8+cYbc=) 6: 323830313a3161393a313a3a2f34382d3438203d3e20323732393039.roa (hash: MHwjKnPfFiWifCAARHkgAqmkoQtUP4/3oCj9tT/fC9I=) 7: 323830313a3161393a323a3a2f34382d3438203d3e203133343839.roa (hash: 4pqXtyNR1cdBXvl8jwrUrWGiszl1G1HyLjHhjjvJYUg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3f:57:cc:85:6f:6f:77:ec:d8:8f:1e:72:72:2b:3c:c3:f4:22:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131 Validity Not Before: Nov 3 03:00:13 2025 GMT Not After : Nov 8 23:01:13 2025 GMT Subject: CN=A90ED69F2CAAAF93FC90C7FE8D5A1B817942F1D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:f4:d1:fb:e7:9d:4c:63:80:a6:08:99:7c: a7:44:6b:da:5d:ca:3a:b7:f3:63:84:7d:e5:66:73: d9:94:57:5d:c4:ba:c7:7f:1b:e8:a9:74:13:19:ff: 98:81:b0:de:a1:1d:46:fe:a9:27:e2:f4:88:f1:c3: 73:5d:37:f6:8e:5b:73:65:91:5c:f4:4f:19:04:e2: 72:28:2c:b9:db:6a:00:1c:1b:b9:a6:53:10:1d:4a: 1c:f3:a0:e5:41:85:3f:6a:52:38:eb:d5:f5:8e:bf: 2f:6c:bb:30:8a:66:a3:c8:d3:0a:eb:15:22:56:4a: ac:2b:50:b9:56:b2:1e:a8:df:63:76:53:4b:91:ca: c5:45:92:2e:34:2f:93:f1:bb:55:65:72:74:c7:9c: 1e:3b:f7:de:b9:2f:82:3b:42:dd:8e:08:bf:0c:bd: 04:94:ec:8b:9d:18:ae:88:ae:14:7b:a6:f7:53:6d: d3:75:85:78:e4:ba:fc:b6:ed:e6:05:da:14:97:a2: 92:81:0b:80:61:43:aa:fe:8c:53:d7:3b:2a:4f:2d: ba:47:28:f5:f2:4b:b6:05:cb:40:fa:9f:24:86:a1: df:eb:40:28:fa:33:9a:d8:f7:07:5a:09:dd:48:f5: 82:4f:25:ec:c1:c5:a2:45:86:97:58:21:16:1b:c4: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0E:D6:9F:2C:AA:AF:93:FC:90:C7:FE:8D:5A:1B:81:79:42:F1:D1 X509v3 Authority Key Identifier: keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:4b:45:ef:fb:7a:02:11:2d:e6:b0:3a:5b:43:50:42:a2:ad: 18:71:87:20:50:e7:11:67:35:14:a9:6e:6b:b1:3e:78:66:3f: d7:2d:c1:3a:30:54:54:7e:1e:24:d4:d6:b0:a2:01:27:ea:df: 9d:32:88:a4:fd:ad:4a:5c:d7:b4:6d:04:36:18:9e:6d:36:ec: e8:19:0a:fb:22:43:b2:1d:f1:c7:d3:c8:39:98:98:44:f8:41: a9:54:8d:8c:6b:88:ac:55:29:d4:56:86:59:03:ac:d4:1c:83: 8d:f2:15:77:31:e6:61:3d:a2:60:ec:1a:e8:7c:5e:61:61:44: 36:b2:db:0b:4c:30:9c:d4:fb:11:8f:fd:7c:70:70:d9:06:88: 2b:84:82:88:40:e3:9e:99:65:a4:1f:db:28:83:55:5e:9a:53: cb:f0:41:a6:0f:f5:dc:3c:a0:04:62:d3:f5:d9:72:22:59:9d: 05:65:07:30:ae:34:e4:0a:f3:15:d7:6c:a5:a4:a3:9d:a3:08: 33:4b:2d:70:ec:8c:30:16:e1:14:8a:18:72:fc:1c:ce:67:a0: 24:9d:23:b8:f4:33:57:d3:d7:e3:76:85:5d:4d:9f:94:b1:e3: a8:1b:5b:73:54:bb:00:92:35:f5:b4:64:29:0e:58:b0:91:dd: 1b:e3:fb:b7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKD9XzIVvb3fs2I8ecnIrPMP0IgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkREQzNCRjdGQ0EzQjA4NkE3RTMyNzYwQTEyRDZENjAw MzZDQzEzMTAeFw0yNTExMDMwMzAwMTNaFw0yNTExMDgyMzAxMTNaMDMxMTAvBgNV BAMTKEE5MEVENjlGMkNBQUFGOTNGQzkwQzdGRThENUExQjgxNzk0MkYxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0fTR++edTGOApgiZfKdEa9pd yjq382OEfeVmc9mUV13Eusd/G+ipdBMZ/5iBsN6hHUb+qSfi9Ijxw3NdN/aOW3Nl kVz0TxkE4nIoLLnbagAcG7mmUxAdShzzoOVBhT9qUjjr1fWOvy9suzCKZqPI0wrr FSJWSqwrULlWsh6o32N2U0uRysVFki40L5Pxu1VlcnTHnB479965L4I7Qt2OCL8M vQSU7IudGK6IrhR7pvdTbdN1hXjkuvy27eYF2hSXopKBC4BhQ6r+jFPXOypPLbpH KPXyS7YFy0D6nySGod/rQCj6M5rY9wdaCd1I9YJPJezBxaJFhpdYIRYbxLbPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqQ7Wnyyqr5P8kMf+jVobgXlC8dEwHwYDVR0j BBgwFoAUvdw79/yjsIan4ydgoS1tYANswTEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80REYzNzk5RTlGQzQ5MURCM0FGRTcwQjVFQzZBQzcyMkVG MzQxNzY5NDM4RDA0QUQ1ODBFRkNENzZBOEQwM0YyLzAvQkREQzNCRjdGQ0EzQjA4 NkE3RTMyNzYwQTEyRDZENjAwMzZDQzEzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRERDM0JGN0ZDQTNCMDg2QTdF MzI3NjBBMTJENkQ2MDAzNkNDMTMxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNERGMzc5OUU5RkM0OTFEQjNBRkU3MEI1RUM2QUM3MjJFRjM0MTc2OTQz OEQwNEFENTgwRUZDRDc2QThEMDNGMi8wL0JEREMzQkY3RkNBM0IwODZBN0UzMjc2 MEExMkQ2RDYwMDM2Q0MxMzEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTS0Xv+3oCES3msDpbQ1BCoq0Y cYcgUOcRZzUUqW5rsT54Zj/XLcE6MFRUfh4k1NawogEn6t+dMoik/a1KXNe0bQQ2 GJ5tNuzoGQr7IkOyHfHH08g5mJhE+EGpVI2Ma4isVSnUVoZZA6zUHION8hV3MeZh PaJg7BrofF5hYUQ2stsLTDCc1PsRj/18cHDZBogrhIKIQOOemWWkH9sog1VemlPL 8EGmD/XcPKAEYtP12XIiWZ0FZQcwrjTkCvMV12ylpKOdowgzSy1w7IwwFuEUihhy /BzOZ6AknSO49DNX09fjdoVdTZ+UseOoG1tzVLsAkjX1tGQpDliwkd0b4/u3 -----END CERTIFICATE-----Generated at Wed Nov 5 16:28:21 2025 by rpki-client