$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft File: BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft (raw, json) Hash identifier: FXamk63k0SIei/9sYu6YboRCK0RIMKzpGbMFbx+5DNY= Subject key identifier: BD:7F:49:79:EE:59:57:14:3D:60:BE:68:F2:6C:39:B5:79:80:C7:6A Authority key identifier: BF:BF:EA:F4:9C:CC:A7:EA:7E:94:46:49:17:85:35:78:7F:34:F0:D7 Certificate issuer: /CN=BFBFEAF49CCCA7EA7E944649178535787F34F0D7 Certificate serial: 0A758C5E918D836E76FD858A42834D251A7F8222 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft Manifest number: 0131 Signing time: Tue 04 Nov 2025 09:53:16 +0000 Manifest this update: Tue 04 Nov 2025 09:48:16 +0000 Manifest next update: Sun 09 Nov 2025 04:42:16 +0000 Files and hashes: 1: BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl (hash: XAvTZ5mMm+Rta8QCqtWYYE1i8PW3W8IO2B6PpCRgZGw=) 2: 3138312e3232342e3139392e302f32342d3234203d3e20323732303638.roa (hash: y8RjqaR1+jlD/CLpe7yUilcrJe6OadhXzrRNJKQDmFs=) 3: 323830333a643331303a3a2f33322d3438203d3e20323732303638.roa (hash: FSoCslfLPaxH187OItbFpX2Ja19w27sZFd6D46Nj6IE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:75:8c:5e:91:8d:83:6e:76:fd:85:8a:42:83:4d:25:1a:7f:82:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFBFEAF49CCCA7EA7E944649178535787F34F0D7 Validity Not Before: Nov 4 09:48:16 2025 GMT Not After : Nov 9 04:42:16 2025 GMT Subject: CN=BD7F4979EE5957143D60BE68F26C39B57980C76A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0c:8e:6e:2f:a9:80:29:05:15:1d:ae:86:62: cb:94:22:42:23:89:33:05:a3:a5:ec:ce:9c:3b:70: 07:e1:f2:49:10:f7:e9:b2:14:61:fc:67:1c:7f:cf: cf:20:a1:ce:be:13:5a:0a:ea:0e:d4:7d:f7:d5:bb: 1e:67:b4:e8:95:08:25:f0:6f:37:02:90:51:72:45: da:27:62:47:4c:3f:46:bd:e9:1f:d7:a6:4d:fb:e8: 8c:7e:63:d2:a2:12:3e:04:c8:53:7e:26:be:75:bb: e6:50:28:76:f5:19:1a:2e:fe:73:9f:e7:9f:3e:28: a6:1d:2d:07:5f:09:48:95:75:c9:6f:27:f9:a8:db: 44:b0:e4:9a:25:54:de:8e:a0:5e:c2:25:47:96:8c: 16:2e:29:ef:7a:18:3c:cc:d3:e4:5e:71:9d:3b:8c: 04:fa:0c:82:c8:d5:f3:6f:4f:ec:7a:d2:c1:b4:38: 37:e3:38:49:0c:61:72:9c:69:8b:a7:5f:8e:fb:92: 93:92:82:16:7d:88:9f:81:81:ba:2e:56:33:e1:82: d3:82:5a:d7:a1:16:b3:b2:62:fc:45:86:fe:01:eb: 67:10:22:a8:48:b8:9e:f5:f1:6d:93:d3:49:77:89: 14:da:30:94:68:e7:de:cf:e5:75:ec:ce:ae:10:3c: 36:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7F:49:79:EE:59:57:14:3D:60:BE:68:F2:6C:39:B5:79:80:C7:6A X509v3 Authority Key Identifier: keyid:BF:BF:EA:F4:9C:CC:A7:EA:7E:94:46:49:17:85:35:78:7F:34:F0:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a0:ba:4e:12:2b:1a:31:1d:5f:b6:05:e7:73:c9:67:5e:b2: d5:df:90:69:e6:26:a9:f3:14:6a:94:33:9d:9f:8a:b6:2b:c1: 75:3b:45:2d:00:b5:95:83:58:8c:ea:f7:32:99:db:54:35:a3: c1:99:cc:5c:1f:45:d0:e1:e2:1f:af:7b:66:1d:83:1e:de:23: 09:70:21:9b:02:63:07:96:b4:c6:ed:4f:e4:28:3d:f1:7c:39: ce:26:08:7f:74:5b:8b:b4:cd:78:4a:dc:d4:6b:8d:cd:4f:6c: 16:77:aa:77:f5:e7:f9:49:20:46:31:a0:f8:58:1c:d6:32:00: 79:52:36:89:fd:05:da:cd:d6:c3:f0:74:72:46:f8:07:ee:56: a2:36:ec:aa:d0:49:88:70:28:48:e2:c2:76:ff:f9:1d:80:c9: a2:0e:2d:9d:63:0b:fe:ed:8f:34:ed:7f:a2:6c:cb:0f:9b:d8: 8b:c2:a6:a0:24:cd:a8:95:7d:04:80:49:35:ef:5a:ef:2d:43: 41:35:ed:87:57:ca:2e:31:2a:6f:8e:e2:c9:b7:e6:8c:36:bd: d2:d6:87:0d:20:eb:a2:a3:c1:00:f7:95:86:04:31:7b:e9:da: e9:de:e0:27:f0:61:d6:b1:5c:7c:39:6e:b9:b8:8e:d6:ef:6b: 41:2b:fa:96 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCnWMXpGNg252/YWKQoNNJRp/giIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZCRkVBRjQ5Q0NDQTdFQTdFOTQ0NjQ5MTc4NTM1Nzg3 RjM0RjBENzAeFw0yNTExMDQwOTQ4MTZaFw0yNTExMDkwNDQyMTZaMDMxMTAvBgNV BAMTKEJEN0Y0OTc5RUU1OTU3MTQzRDYwQkU2OEYyNkMzOUI1Nzk4MEM3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODI5uL6mAKQUVHa6GYsuUIkIj iTMFo6Xszpw7cAfh8kkQ9+myFGH8Zxx/z88goc6+E1oK6g7UfffVux5ntOiVCCXw bzcCkFFyRdonYkdMP0a96R/Xpk376Ix+Y9KiEj4EyFN+Jr51u+ZQKHb1GRou/nOf 558+KKYdLQdfCUiVdclvJ/mo20Sw5JolVN6OoF7CJUeWjBYuKe96GDzM0+RecZ07 jAT6DILI1fNvT+x60sG0ODfjOEkMYXKcaYunX477kpOSghZ9iJ+BgbouVjPhgtOC WtehFrOyYvxFhv4B62cQIqhIuJ718W2T00l3iRTaMJRo597P5XXszq4QPDZXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvX9Jee5ZVxQ9YL5o8mw5tXmAx2owHwYDVR0j BBgwFoAUv7/q9JzMp+p+lEZJF4U1eH808NcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MTUxQ0RCRDdGNTc4MkY1Q0RFNjc3QkExQTNERUI0RkYx MDk5QjZCQzg4RTFDRDNBNDBEOUU4Mjk3RjFCRkExLzAvQkZCRkVBRjQ5Q0NDQTdF QTdFOTQ0NjQ5MTc4NTM1Nzg3RjM0RjBENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkJGRUFGNDlDQ0NBN0VBN0U5 NDQ2NDkxNzg1MzU3ODdGMzRGMEQ3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzE1MUNEQkQ3RjU3ODJGNUNERTY3N0JBMUEzREVCNEZGMTA5OUI2QkM4 OEUxQ0QzQTQwRDlFODI5N0YxQkZBMS8wL0JGQkZFQUY0OUNDQ0E3RUE3RTk0NDY0 OTE3ODUzNTc4N0YzNEYwRDcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKoLpOEisaMR1ftgXnc8lnXrLV 35Bp5iap8xRqlDOdn4q2K8F1O0UtALWVg1iM6vcymdtUNaPBmcxcH0XQ4eIfr3tm HYMe3iMJcCGbAmMHlrTG7U/kKD3xfDnOJgh/dFuLtM14StzUa43NT2wWd6p39ef5 SSBGMaD4WBzWMgB5UjaJ/QXazdbD8HRyRvgH7laiNuyq0EmIcChI4sJ2//kdgMmi Di2dYwv+7Y807X+ibMsPm9iLwqagJM2olX0EgEk171rvLUNBNe2HV8ouMSpvjuLJ t+aMNr3S1ocNIOuio8EA95WGBDF76drp3uAn8GHWsVx8OW65uI7W72tBK/qW -----END CERTIFICATE-----Generated at Wed Nov 5 20:11:42 2025 by rpki-client