$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.mft File: BED423F8BF886A1F701D384EDB158128EF927F3E.mft (raw, json) Hash identifier: g7l2EV8i3WeNfjJ4YdSTWNSvcoHo5MLEApr+A8DevOE= Subject key identifier: CB:B8:52:6C:98:96:15:2B:F2:96:6D:2B:3C:F3:92:9C:8F:F2:F5:AB Authority key identifier: BE:D4:23:F8:BF:88:6A:1F:70:1D:38:4E:DB:15:81:28:EF:92:7F:3E Certificate issuer: /CN=BED423F8BF886A1F701D384EDB158128EF927F3E Certificate serial: 51EDB255BE1EFFCE24F216A567C936C239D50363 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BED423F8BF886A1F701D384EDB158128EF927F3E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.mft Manifest number: 70 Signing time: Wed 05 Nov 2025 14:08:30 +0000 Manifest this update: Wed 05 Nov 2025 14:03:30 +0000 Manifest next update: Sun 09 Nov 2025 15:15:30 +0000 Files and hashes: 1: BED423F8BF886A1F701D384EDB158128EF927F3E.crl (hash: dqpHHK5YVzIfQHcMtBUV3Tz2QNM8Z7gLfVWNiiwSuEU=) 2: 323830333a343264303a3a2f33322d3438203d3e20323733323231.roa (hash: xEYh12ltsnJQgh79hu5q9RWJKGs0vsfmm3EzCu5mGWA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.crl rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BED423F8BF886A1F701D384EDB158128EF927F3E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ed:b2:55:be:1e:ff:ce:24:f2:16:a5:67:c9:36:c2:39:d5:03:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED423F8BF886A1F701D384EDB158128EF927F3E Validity Not Before: Nov 5 14:03:30 2025 GMT Not After : Nov 9 15:15:30 2025 GMT Subject: CN=CBB8526C9896152BF2966D2B3CF3929C8FF2F5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:0a:dc:85:37:f4:11:3d:dc:64:1f:ad:4c: 06:41:59:d9:61:e2:86:62:50:88:46:22:a8:6b:a8: a5:07:10:b4:3c:ba:c0:35:aa:16:92:5f:c7:5c:f4: e3:c5:9f:d4:f3:ec:04:74:6f:84:b9:6f:a9:66:0b: 45:32:49:b2:ca:cf:36:5a:a8:4e:e9:86:88:0f:9b: e9:2e:30:78:dc:8b:ed:ac:fc:36:97:86:c4:0e:9d: 1c:1e:04:37:38:72:4b:f7:13:6d:11:3c:ab:9e:08: f3:05:99:5d:8e:1d:2b:3a:55:1e:21:5d:e4:bb:0a: 63:11:0e:b1:1f:d3:cf:2f:df:38:1b:87:fc:5e:31: 16:73:3c:26:d8:17:22:13:d9:65:f6:1c:82:b0:e3: 91:27:9b:f7:f5:2e:96:e7:35:1b:be:e4:66:69:54: 4e:6d:56:c2:d5:b1:db:b9:ee:3e:23:e1:25:37:74: dc:31:20:e8:4a:8c:31:dd:b5:5d:35:25:73:87:a1: 26:77:4a:4b:dd:e6:e6:6c:2d:48:01:3c:92:40:11: f5:09:a3:bf:7c:c9:01:8d:ce:fd:86:2a:d8:30:33: 30:76:32:22:4f:a1:a7:f7:93:64:30:18:01:70:2d: 21:0f:d9:ce:7e:07:a1:da:d3:10:03:7b:7c:38:2f: 1f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B8:52:6C:98:96:15:2B:F2:96:6D:2B:3C:F3:92:9C:8F:F2:F5:AB X509v3 Authority Key Identifier: keyid:BE:D4:23:F8:BF:88:6A:1F:70:1D:38:4E:DB:15:81:28:EF:92:7F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BED423F8BF886A1F701D384EDB158128EF927F3E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:4e:88:5b:3e:b6:3d:80:e3:af:24:76:66:bb:2e:6a:ac:62: d3:be:2d:2a:6b:1a:8e:2c:d1:19:99:7a:fa:4b:5c:d7:8d:25: 3f:08:a7:1d:c3:26:ce:60:61:d7:eb:25:fa:c4:c1:e0:48:e7: a0:08:ca:a4:f0:9b:45:33:6e:34:88:2f:d0:b3:88:e6:d7:03: 07:bd:41:80:b1:a9:ee:e7:28:05:8e:ee:3d:60:6b:0b:6c:3a: a4:30:e1:e1:48:a3:f6:fd:dd:a6:c4:fb:81:3d:52:5c:26:2b: 27:22:e7:06:a2:1f:95:f8:57:7f:78:4a:93:46:65:05:a6:f7: 7c:83:18:e8:e6:0a:6c:ec:87:5e:c1:02:6f:96:43:b4:bd:fe: eb:29:de:e7:68:dd:52:78:5e:18:c1:2c:f3:96:f6:d5:e4:ec: a6:22:b5:38:80:11:36:47:d0:7a:43:8c:80:00:80:b8:a2:1b: f8:06:20:bf:62:ff:0e:5b:1c:36:8f:f6:dc:23:62:57:9d:cb: dd:bf:c6:7b:4b:5e:3a:28:89:0b:a7:d7:fc:3e:0d:80:f1:41: 5a:0e:f7:97:d4:0e:e9:49:33:88:81:70:23:cf:c8:47:96:02: b2:6d:ad:24:c7:af:70:21:1e:ea:23:24:c1:11:07:9d:90:44: 47:78:6d:8d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUe2yVb4e/84k8halZ8k2wjnVA2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVENDIzRjhCRjg4NkExRjcwMUQzODRFREIxNTgxMjhF RjkyN0YzRTAeFw0yNTExMDUxNDAzMzBaFw0yNTExMDkxNTE1MzBaMDMxMTAvBgNV BAMTKENCQjg1MjZDOTg5NjE1MkJGMjk2NkQyQjNDRjM5MjlDOEZGMkY1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHwrchTf0ET3cZB+tTAZBWdlh 4oZiUIhGIqhrqKUHELQ8usA1qhaSX8dc9OPFn9Tz7AR0b4S5b6lmC0UySbLKzzZa qE7phogPm+kuMHjci+2s/DaXhsQOnRweBDc4ckv3E20RPKueCPMFmV2OHSs6VR4h XeS7CmMRDrEf088v3zgbh/xeMRZzPCbYFyIT2WX2HIKw45Enm/f1LpbnNRu+5GZp VE5tVsLVsdu57j4j4SU3dNwxIOhKjDHdtV01JXOHoSZ3Skvd5uZsLUgBPJJAEfUJ o798yQGNzv2GKtgwMzB2MiJPoaf3k2QwGAFwLSEP2c5+B6Ha0xADe3w4Lx/ZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUy7hSbJiWFSvylm0rPPOSnI/y9aswHwYDVR0j BBgwFoAUvtQj+L+Iah9wHThO2xWBKO+Sfz4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84OUYzMzc2MzgxNUI0M0E4OEVFMUI4NDYxREMyQkE3NkY3 QkQ5NjY1NDU4RUVCNzY5MkM2NTQwM0ExRDUyOUNDLzAvQkVENDIzRjhCRjg4NkEx RjcwMUQzODRFREIxNTgxMjhFRjkyN0YzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRUQ0MjNGOEJGODg2QTFGNzAx RDM4NEVEQjE1ODEyOEVGOTI3RjNFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODlGMzM3NjM4MTVCNDNBODhFRTFCODQ2MURDMkJBNzZGN0JEOTY2NTQ1 OEVFQjc2OTJDNjU0MDNBMUQ1MjlDQy8wL0JFRDQyM0Y4QkY4ODZBMUY3MDFEMzg0 RURCMTU4MTI4RUY5MjdGM0UubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAETohbPrY9gOOvJHZmuy5qrGLT vi0qaxqOLNEZmXr6S1zXjSU/CKcdwybOYGHX6yX6xMHgSOegCMqk8JtFM240iC/Q s4jm1wMHvUGAsanu5ygFju49YGsLbDqkMOHhSKP2/d2mxPuBPVJcJisnIucGoh+V +Fd/eEqTRmUFpvd8gxjo5gps7IdewQJvlkO0vf7rKd7naN1SeF4YwSzzlvbV5Oym IrU4gBE2R9B6Q4yAAIC4ohv4BiC/Yv8OWxw2j/bcI2JXncvdv8Z7S146KIkLp9f8 Pg2A8UFaDveX1A7pSTOIgXAjz8hHlgKyba0kx69wIR7qIyTBEQedkERHeG2N -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:29 2025 by rpki-client