$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft File: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft (raw, json) Hash identifier: xXXb+oBprIiK5ksKNwAmSo54gSWieQXTHmqlgdTw+0o= Subject key identifier: 29:7E:3F:20:3F:09:E6:9E:D1:7C:C6:03:0C:7B:5F:48:7A:23:90:C2 Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC Certificate issuer: /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Certificate serial: 1D4D191940547B37E429374EDBD09929DD7B0E96 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft Manifest number: 016B Signing time: Mon 02 Mar 2026 09:55:40 +0000 Manifest this update: Mon 02 Mar 2026 09:50:40 +0000 Manifest next update: Fri 06 Mar 2026 11:27:40 +0000 Files and hashes: 1: 323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (hash: OIjhAvWP0w1Z9Bnw8BzvStQhYN82FtnyTJr6KHLWNyg=) 2: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl (hash: IIXWGJi8YtKuzEytJvIdTGXRNhi5gjc6au2bmC0ATM8=) 3: 3137392e35312e3230382e302f32322d3234203d3e20323731373831.roa (hash: hc6r1hl0iwcrvIcfBOIBrU3a+mmBYeDPpzIhXn6f78g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 06 Mar 2026 11:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4d:19:19:40:54:7b:37:e4:29:37:4e:db:d0:99:29:dd:7b:0e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Validity Not Before: Mar 2 09:50:40 2026 GMT Not After : Mar 6 11:27:40 2026 GMT Subject: CN=297E3F203F09E69ED17CC6030C7B5F487A2390C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:5c:98:57:c4:08:a2:1b:f0:7c:1e:65:fe: af:19:e3:5c:32:3f:d0:48:b0:f2:86:39:b4:f3:04: 48:42:15:80:2d:91:d8:fe:4a:63:6e:8c:ab:b2:1a: e4:16:5f:20:38:c9:05:a3:03:db:69:31:16:8d:2c: 13:3c:a4:38:b1:5e:f8:e3:f5:f9:b1:b0:a5:31:30: ab:57:8a:c1:62:c3:9b:b3:ed:1d:77:67:db:b6:5f: 22:60:91:17:8e:ab:01:b8:ca:ff:93:ed:a0:78:91: da:be:ca:49:f8:52:f3:d6:ff:6c:7c:55:c0:7f:9a: 60:89:11:d3:87:b3:d2:fa:f7:35:74:b6:69:aa:99: b7:2b:76:3f:61:92:f4:72:c3:a9:93:c5:62:6e:a1: 8c:07:48:ba:f4:74:2d:f8:b7:e4:07:c6:fb:5c:2d: e2:2a:34:59:08:5d:d6:80:ca:1e:4f:6c:8a:b9:f4: 44:5d:64:85:7a:78:02:b0:bc:4c:d4:7d:4c:83:dd: 16:f3:fa:a6:5d:fd:16:57:bd:1a:76:10:50:ee:4d: b4:52:b4:0e:01:ea:a9:a4:0e:b6:2c:48:0e:12:f7: 2a:4d:65:bf:ae:f6:05:12:31:cd:46:5a:a3:76:2a: 13:19:61:f6:30:09:88:10:fb:77:d3:c3:69:39:54: 62:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7E:3F:20:3F:09:E6:9E:D1:7C:C6:03:0C:7B:5F:48:7A:23:90:C2 X509v3 Authority Key Identifier: keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e4:6b:6e:65:44:a2:1e:ab:3f:15:8b:8c:9c:2d:a8:3f:02: 6a:96:2f:64:c5:40:db:ab:0d:36:13:3a:b7:79:55:43:4f:1b: b9:ec:00:ae:1f:93:dc:63:d1:df:d5:84:53:fb:2a:ac:3c:f3: 68:d6:bf:f2:62:34:1b:fb:d1:70:4a:10:de:7e:a0:85:2c:9f: a0:be:54:04:27:ca:2b:9e:ac:93:d5:4a:aa:f4:34:75:ce:9e: 20:ea:a2:e1:9f:7b:e0:37:31:dd:0b:35:3a:55:32:c1:ab:3d: a6:6b:96:c8:f7:41:7b:08:29:a4:4d:f0:25:09:0b:b7:0a:53: 6d:a5:1a:8c:01:21:c1:11:a7:9e:28:8b:4e:59:eb:59:2f:c1: eb:2c:dc:92:92:99:35:9d:92:14:53:7b:95:17:5c:18:63:da: 49:e7:36:d3:eb:0e:d4:4b:cb:4c:58:1d:ea:e0:92:94:f2:95: 6c:cc:e5:6d:6f:e9:39:59:16:a3:c8:52:5b:96:46:1b:3b:e2: 70:e8:52:8d:64:be:ac:52:c4:e3:df:20:02:70:76:46:33:43: a0:aa:0d:0a:8e:79:6e:1d:2c:2f:d3:ff:83:1c:f1:20:da:32: 37:68:9d:29:f5:6c:bd:66:49:c1:94:d7:52:6e:44:3c:a2:57: 2a:fb:23:2e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHU0ZGUBUezfkKTdO29CZKd17DpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5MUZFMEI3MTIwRkVDMUIwMkUyMEY0RUI4OEE0RERG QTFCN0ZGQzAeFw0yNjAzMDIwOTUwNDBaFw0yNjAzMDYxMTI3NDBaMDMxMTAvBgNV BAMTKDI5N0UzRjIwM0YwOUU2OUVEMTdDQzYwMzBDN0I1RjQ4N0EyMzkwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzF1yYV8QIohvwfB5l/q8Z41wy P9BIsPKGObTzBEhCFYAtkdj+SmNujKuyGuQWXyA4yQWjA9tpMRaNLBM8pDixXvjj 9fmxsKUxMKtXisFiw5uz7R13Z9u2XyJgkReOqwG4yv+T7aB4kdq+ykn4UvPW/2x8 VcB/mmCJEdOHs9L69zV0tmmqmbcrdj9hkvRyw6mTxWJuoYwHSLr0dC34t+QHxvtc LeIqNFkIXdaAyh5PbIq59ERdZIV6eAKwvEzUfUyD3Rbz+qZd/RZXvRp2EFDuTbRS tA4B6qmkDrYsSA4S9ypNZb+u9gUSMc1GWqN2KhMZYfYwCYgQ+3fTw2k5VGIBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKX4/ID8J5p7RfMYDDHtfSHojkMIwHwYDVR0j BBgwFoAUv5H+C3Eg/sGwLiD064ik3fobf/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMjhBQzU0OTMwM0I3NEExQzQ5Q0EwNzZCOTc0RjA2MzZC MDNCNzlGOUUwMzM1QjZGREJCRkQ2MEVBOTE4MzQ4LzAvQkY5MUZFMEI3MTIwRkVD MUIwMkUyMEY0RUI4OEE0RERGQTFCN0ZGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjkxRkUwQjcxMjBGRUMxQjAy RTIwRjRFQjg4QTREREZBMUI3RkZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjI4QUM1NDkzMDNCNzRBMUM0OUNBMDc2Qjk3NEYwNjM2QjAzQjc5RjlF MDMzNUI2RkRCQkZENjBFQTkxODM0OC8wL0JGOTFGRTBCNzEyMEZFQzFCMDJFMjBG NEVCODhBNERERkExQjdGRkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBK5GtuZUSiHqs/FYuMnC2oPwJq li9kxUDbqw02Ezq3eVVDTxu57ACuH5PcY9Hf1YRT+yqsPPNo1r/yYjQb+9FwShDe fqCFLJ+gvlQEJ8ornqyT1Uqq9DR1zp4g6qLhn3vgNzHdCzU6VTLBqz2ma5bI90F7 CCmkTfAlCQu3ClNtpRqMASHBEaeeKItOWetZL8HrLNySkpk1nZIUU3uVF1wYY9pJ 5zbT6w7US8tMWB3q4JKU8pVszOVtb+k5WRajyFJblkYbO+Jw6FKNZL6sUsTj3yAC cHZGM0Ogqg0KjnluHSwv0/+DHPEg2jI3aJ0p9Wy9ZknBlNdSbkQ8olcq+yMu -----END CERTIFICATE-----Generated at Mon Mar 2 16:50:24 2026 by rpki-client