$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft File: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft (raw, json) Hash identifier: GHBLdjE8CUmJUoyswPZ9Dki8I8XPO+5B2hAsfvR+JE8= Subject key identifier: 7A:9D:9C:CB:FE:04:2E:9D:1F:22:A6:58:47:00:A6:5B:09:5A:00:5A Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC Certificate issuer: /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Certificate serial: 6EAF8E5BE282606EDAC866A46269E5D776576AF1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft Manifest number: 0130 Signing time: Wed 05 Nov 2025 06:04:16 +0000 Manifest this update: Wed 05 Nov 2025 05:59:16 +0000 Manifest next update: Sun 09 Nov 2025 22:42:16 +0000 Files and hashes: 1: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl (hash: FhDKE8e17L5QGYolY/ZOLeByWZxnGVW6V6zhq1Kt0lY=) 2: 3137392e35312e3230382e302f32322d3234203d3e20323731373831.roa (hash: qefcdKBbQ8rTrMpgo/t4zhuWfrSW4R/8kvtNUQX7kms=) 3: 323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (hash: qXLUa1DFAZMrZIlzarnZaCXNOtAwLQ/Wi2JutVkZxnE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:af:8e:5b:e2:82:60:6e:da:c8:66:a4:62:69:e5:d7:76:57:6a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Validity Not Before: Nov 5 05:59:16 2025 GMT Not After : Nov 9 22:42:16 2025 GMT Subject: CN=7A9D9CCBFE042E9D1F22A6584700A65B095A005A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c4:55:c0:24:1c:e5:cb:c3:d9:67:68:e4:3a: 44:f7:42:df:cd:41:19:fb:f5:0c:f4:6e:be:40:ea: 6c:fb:43:ba:9f:03:a5:08:19:4c:b9:31:e5:42:7b: c3:32:cf:a0:e2:43:10:38:94:d6:15:3b:e3:20:db: b3:f7:be:47:8b:4e:d4:7d:49:c0:65:18:fa:5f:44: 77:f0:ef:f0:3c:57:95:b0:d5:a8:a0:b5:42:c4:86: ce:bf:5f:64:95:0e:50:5b:c9:94:db:41:61:40:b1: 8d:05:4f:1f:8e:d8:82:f7:32:8a:08:1e:25:8d:c3: 87:ea:bb:b4:02:98:23:5b:eb:4b:d7:11:1a:62:ce: eb:03:4c:b0:d3:9c:a7:6d:1c:ff:ca:08:c4:59:53: 11:3f:57:95:70:a8:1d:52:1c:11:e4:0e:87:a7:4f: 39:bf:9d:03:bf:03:af:77:0c:b1:f4:f8:db:ca:ad: 6b:45:f2:50:55:a3:e5:45:4b:ae:30:e5:65:e2:d6: c8:be:de:86:cf:4e:97:67:0c:d5:80:65:2e:50:6e: 1a:4d:5f:85:5e:7e:32:32:0b:46:bb:74:b8:dc:5d: 85:6e:44:62:be:71:e3:9e:d7:4c:bb:3b:15:3a:30: 09:83:e3:44:d2:9c:14:c6:79:bd:0e:8e:5e:3a:25: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9D:9C:CB:FE:04:2E:9D:1F:22:A6:58:47:00:A6:5B:09:5A:00:5A X509v3 Authority Key Identifier: keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7f:93:2e:c7:7c:63:7d:d9:fa:5c:8a:1e:90:ca:18:0a:1c: 68:0c:68:63:f2:83:75:01:25:97:50:73:5f:ec:47:d3:13:f9: cf:2e:ee:e0:ef:2c:b3:14:c5:ff:7f:06:41:1b:72:64:a0:9a: 73:b8:ce:96:9a:cf:76:44:86:7d:19:33:6c:7f:4c:ec:8e:96: d0:52:42:bb:23:cb:dd:63:08:6a:b4:30:59:db:24:f9:c9:82: 46:ff:f5:ad:0c:dc:d4:c5:9f:23:dd:4a:42:88:61:93:30:4d: 76:08:38:df:7b:c2:3b:13:7a:69:39:67:fc:14:74:ca:02:98: 30:28:1e:0f:fa:b1:59:b0:97:9d:d0:f7:58:73:c9:4d:b5:35: 21:ac:4f:fc:5f:3f:0d:c8:c4:73:52:ad:25:35:4b:a2:c2:6d: 18:5f:f8:20:64:b2:7a:92:22:8d:64:b8:b6:d9:d0:18:9d:c1: f2:05:7a:e3:5a:9d:4c:1b:87:49:43:0a:39:df:85:8c:35:17: ea:1a:77:ac:b4:40:af:b4:74:7d:e9:10:47:29:fa:b1:0c:f6: fb:3a:33:75:db:15:3f:58:de:37:5c:4f:9b:78:ed:74:8c:e7: 60:e1:d2:b3:e0:00:c8:3a:42:cb:53:9f:b5:b6:2c:6f:e4:c8: 4b:24:36:33 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbq+OW+KCYG7ayGakYmnl13ZXavEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5MUZFMEI3MTIwRkVDMUIwMkUyMEY0RUI4OEE0RERG QTFCN0ZGQzAeFw0yNTExMDUwNTU5MTZaFw0yNTExMDkyMjQyMTZaMDMxMTAvBgNV BAMTKDdBOUQ5Q0NCRkUwNDJFOUQxRjIyQTY1ODQ3MDBBNjVCMDk1QTAwNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpxFXAJBzly8PZZ2jkOkT3Qt/N QRn79Qz0br5A6mz7Q7qfA6UIGUy5MeVCe8Myz6DiQxA4lNYVO+Mg27P3vkeLTtR9 ScBlGPpfRHfw7/A8V5Ww1aigtULEhs6/X2SVDlBbyZTbQWFAsY0FTx+O2IL3MooI HiWNw4fqu7QCmCNb60vXERpizusDTLDTnKdtHP/KCMRZUxE/V5VwqB1SHBHkDoen Tzm/nQO/A693DLH0+NvKrWtF8lBVo+VFS64w5WXi1si+3obPTpdnDNWAZS5QbhpN X4VefjIyC0a7dLjcXYVuRGK+ceOe10y7OxU6MAmD40TSnBTGeb0Ojl46JfoXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUep2cy/4ELp0fIqZYRwCmWwlaAFowHwYDVR0j BBgwFoAUv5H+C3Eg/sGwLiD064ik3fobf/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMjhBQzU0OTMwM0I3NEExQzQ5Q0EwNzZCOTc0RjA2MzZC MDNCNzlGOUUwMzM1QjZGREJCRkQ2MEVBOTE4MzQ4LzAvQkY5MUZFMEI3MTIwRkVD MUIwMkUyMEY0RUI4OEE0RERGQTFCN0ZGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjkxRkUwQjcxMjBGRUMxQjAy RTIwRjRFQjg4QTREREZBMUI3RkZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjI4QUM1NDkzMDNCNzRBMUM0OUNBMDc2Qjk3NEYwNjM2QjAzQjc5RjlF MDMzNUI2RkRCQkZENjBFQTkxODM0OC8wL0JGOTFGRTBCNzEyMEZFQzFCMDJFMjBG NEVCODhBNERERkExQjdGRkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMf5Mux3xjfdn6XIoekMoYChxo DGhj8oN1ASWXUHNf7EfTE/nPLu7g7yyzFMX/fwZBG3JkoJpzuM6Wms92RIZ9GTNs f0zsjpbQUkK7I8vdYwhqtDBZ2yT5yYJG//WtDNzUxZ8j3UpCiGGTME12CDjfe8I7 E3ppOWf8FHTKApgwKB4P+rFZsJed0PdYc8lNtTUhrE/8Xz8NyMRzUq0lNUuiwm0Y X/ggZLJ6kiKNZLi22dAYncHyBXrjWp1MG4dJQwo534WMNRfqGnestECvtHR96RBH KfqxDPb7OjN12xU/WN43XE+beO10jOdg4dKz4ADIOkLLU5+1tixv5MhLJDYz -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:49 2025 by rpki-client