$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft File: BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft (raw, json) Hash identifier: 14GwEjG4ZAyQAlkqNCtrA0ySdKTl+59ZLw0HAG/86gI= Subject key identifier: 95:9A:6A:BA:24:8C:E4:CB:E2:2D:FF:FF:99:A7:32:17:C7:75:0E:FD Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 Certificate issuer: /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Certificate serial: 4D8DFB919346773D6622B82DBE58682E5CB65F84 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft Manifest number: E4 Signing time: Sun 22 Jun 2025 13:55:21 +0000 Manifest this update: Sun 22 Jun 2025 13:50:21 +0000 Manifest next update: Fri 27 Jun 2025 21:19:21 +0000 Files and hashes: 1: BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl (hash: FLX+0qoFGaNMf1k1ma5GdmjfXA1cmr2Np/E5vic9fiA=) 2: 34352e3232392e3139312e302f32342d3234203d3e20323636373036.roa (hash: sz3S0CVsq3kkBNYyjWtCUza1fFwzCmkYBidmyMc7Aak=) 3: 34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa (hash: qDZpwSvgwr35B4Q5Ep3KsiY0eTX8KljaiVEi2IaGUfw=) 4: 34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa (hash: +gp+nVFgHvlbQDwBw8l90JcbDYFqIVwQN8Q6fIVq9g4=) 5: 34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa (hash: nPvm3kzjbUmYOtzUojc17lqgCTEOSCYg7LLW7Gc1DQs=) 6: 323830333a626432303a3a2f33322d3332203d3e20323636373036.roa (hash: TDo9I8HOIXVWiAwuFd8E4AxQPm1JNcpGri/yELkIs+A=) 7: 34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa (hash: 7y3IFM3NwuLfRDKqbCtjdZ5YY02akKWgfUvsoylFEKE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Jun 2025 21:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8d:fb:91:93:46:77:3d:66:22:b8:2d:be:58:68:2e:5c:b6:5f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Validity Not Before: Jun 22 13:50:21 2025 GMT Not After : Jun 27 21:19:21 2025 GMT Subject: CN=959A6ABA248CE4CBE22DFFFF99A73217C7750EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:12:6c:f7:2f:82:ec:91:57:69:ac:c9:11: af:1d:4a:7a:3f:4c:51:24:6a:9b:67:a4:0d:de:20: c6:1c:58:d8:50:ec:1b:75:09:3e:f9:31:1b:fc:31: 83:9a:2b:e8:db:e3:dd:c2:a3:fb:be:1a:71:b0:17: eb:8f:a6:9c:c7:77:76:83:40:3f:c5:32:4c:97:9c: 3b:ee:4a:fe:7a:9f:91:00:70:a9:9e:82:80:ca:1d: 45:38:bb:f6:cb:1c:5c:64:98:8a:69:70:32:e8:a6: 9f:78:48:64:dd:aa:65:d3:bf:87:6f:af:49:fc:cc: a2:06:37:26:2f:d2:ad:36:0d:71:c9:15:aa:6b:e7: c2:4b:5c:5c:6b:85:52:db:c9:9f:09:03:5a:7a:dd: 8f:1f:a7:1c:e8:94:4e:07:19:65:08:bc:bd:f3:19: 90:42:db:c9:ac:16:91:ce:25:7b:7b:3b:b5:88:34: ad:76:17:f3:71:bf:4d:06:11:ee:8f:41:e0:0f:cc: 6a:e5:91:b0:09:5e:94:81:41:94:f9:a9:ab:66:76: b6:00:a2:dd:af:ba:b8:4e:24:1d:70:75:fb:62:2f: 06:c5:22:51:37:a0:57:c1:e3:65:c3:35:f0:69:eb: ea:25:ba:b8:de:93:c7:68:1b:fd:ac:a0:be:fb:68: 7e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9A:6A:BA:24:8C:E4:CB:E2:2D:FF:FF:99:A7:32:17:C7:75:0E:FD X509v3 Authority Key Identifier: keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:63:a7:2e:55:d6:0a:88:a4:07:1f:31:6d:77:4f:9f:bb:78: 7c:00:f5:30:dc:4a:b6:2a:1f:4a:0a:c6:0d:be:f6:23:16:a0: 00:13:b7:18:00:bb:ee:52:0f:cf:7f:4d:a8:66:fe:d3:b9:fc: 22:c6:3f:43:56:5e:5f:85:f0:e5:1c:6b:3f:33:cf:75:7a:74: 7d:aa:64:25:ca:e4:cd:c9:c6:78:47:7b:3a:01:16:3b:f1:aa: 96:a6:dd:e2:b0:91:4a:25:de:d2:27:a1:66:54:8d:c3:7f:ab: c8:58:10:ee:67:18:55:e5:e5:fa:6c:73:1d:3e:db:69:d0:b3: 17:81:e6:aa:4e:df:db:4d:02:d8:b9:de:1c:c1:59:c9:68:7e: 3b:b7:cf:32:db:92:88:4e:0e:1d:ed:6f:ce:af:1a:ff:95:1a: 5b:ce:29:5a:11:29:d1:00:d2:f7:c7:9a:13:b9:6c:66:1a:55: 66:71:ad:6c:5f:ca:e0:46:c9:b5:33:1b:7e:5e:95:70:15:1c: e8:2a:a3:4f:5a:c1:1d:d6:d3:45:1c:2c:be:46:28:7f:83:7a: 53:77:a6:c1:d6:52:c4:95:f0:d8:e9:3d:54:e6:6c:d4:e7:c2: 40:8a:9f:6c:79:f3:d9:ab:fb:d2:02:ff:42:11:01:e7:a7:c0: dd:74:e1:97 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTY37kZNGdz1mIrgtvlhoLly2X4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZGMTI4MDRBRDdBNkI2N0RCMzNDQTUwNEJDQzJCQUMz NEE4NTBEODAeFw0yNTA2MjIxMzUwMjFaFw0yNTA2MjcyMTE5MjFaMDMxMTAvBgNV BAMTKDk1OUE2QUJBMjQ4Q0U0Q0JFMjJERkZGRjk5QTczMjE3Qzc3NTBFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8NhJs9y+C7JFXaazJEa8dSno/ TFEkaptnpA3eIMYcWNhQ7Bt1CT75MRv8MYOaK+jb493Co/u+GnGwF+uPppzHd3aD QD/FMkyXnDvuSv56n5EAcKmegoDKHUU4u/bLHFxkmIppcDLopp94SGTdqmXTv4dv r0n8zKIGNyYv0q02DXHJFapr58JLXFxrhVLbyZ8JA1p63Y8fpxzolE4HGWUIvL3z GZBC28msFpHOJXt7O7WINK12F/Nxv00GEe6PQeAPzGrlkbAJXpSBQZT5qatmdrYA ot2vurhOJB1wdftiLwbFIlE3oFfB42XDNfBp6+olurjek8doG/2soL77aH51AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUlZpquiSM5MviLf//macyF8d1Dv0wHwYDVR0j BBgwFoAUv/EoBK16a2fbM8pQS8wrrDSoUNgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NzMzNUY4RkRGMTcxNDAyMEY5RTFBRTY5RDc2NzA1NUMz OEZBNzg3N0ExRDJENjUyN0VDODRBRUI0RDM1NEEyLzAvQkZGMTI4MDRBRDdBNkI2 N0RCMzNDQTUwNEJDQzJCQUMzNEE4NTBEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkYxMjgwNEFEN0E2QjY3REIz M0NBNTA0QkNDMkJBQzM0QTg1MEQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTczMzVGOEZERjE3MTQwMjBGOUUxQUU2OUQ3NjcwNTVDMzhGQTc4NzdB MUQyRDY1MjdFQzg0QUVCNEQzNTRBMi8wL0JGRjEyODA0QUQ3QTZCNjdEQjMzQ0E1 MDRCQ0MyQkFDMzRBODUwRDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvY6cuVdYKiKQHHzFtd0+fu3h8 APUw3Eq2Kh9KCsYNvvYjFqAAE7cYALvuUg/Pf02oZv7Tufwixj9DVl5fhfDlHGs/ M891enR9qmQlyuTNycZ4R3s6ARY78aqWpt3isJFKJd7SJ6FmVI3Df6vIWBDuZxhV 5eX6bHMdPttp0LMXgeaqTt/bTQLYud4cwVnJaH47t88y25KITg4d7W/Orxr/lRpb zilaESnRANL3x5oTuWxmGlVmca1sX8rgRsm1Mxt+XpVwFRzoKqNPWsEd1tNFHCy+ Rih/g3pTd6bB1lLElfDY6T1U5mzU58JAip9sefPZq/vSAv9CEQHnp8DddOGX -----END CERTIFICATE-----Generated at Mon Jun 23 06:25:22 2025 by rpki-client