$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.mft File: 5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.mft (raw, json) Hash identifier: cU55DuKjOrlFQA45VG0fxkmUFCm3h31StFlGmyqINSM= Subject key identifier: FE:3B:66:43:46:DC:F3:7C:F7:A0:FB:32:25:99:80:FB:A1:DC:1C:CF Authority key identifier: 58:89:CE:AB:5F:6F:13:99:C6:38:E6:A5:1D:68:E2:60:D3:5B:4C:B2 Certificate issuer: /CN=5889CEAB5F6F1399C638E6A51D68E260D35B4CB2 Certificate serial: 20BA25C73FE9377254DFE821E9378A3008A0B92F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.mft Manifest number: 012D Signing time: Tue 04 Nov 2025 23:00:20 +0000 Manifest this update: Tue 04 Nov 2025 22:55:20 +0000 Manifest next update: Mon 10 Nov 2025 19:34:20 +0000 Files and hashes: 1: 323830333a653731303a3a2f33322d3332203d3e20323732313032.roa (hash: KgOYED0c6jfxyYC5iL4P+qSc76oKKO52q/Iw4n/bRz0=) 2: 5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.crl (hash: 13idbC+eSPCvOBXymAi84WMem8ioUZna1mGT07dNLBs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.crl rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ba:25:c7:3f:e9:37:72:54:df:e8:21:e9:37:8a:30:08:a0:b9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5889CEAB5F6F1399C638E6A51D68E260D35B4CB2 Validity Not Before: Nov 4 22:55:20 2025 GMT Not After : Nov 10 19:34:20 2025 GMT Subject: CN=FE3B664346DCF37CF7A0FB32259980FBA1DC1CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:86:82:c8:89:1c:3c:99:0b:82:d6:47:45: b2:ef:e7:c3:24:c8:e4:13:bd:1f:af:01:bf:ce:a9: a5:de:54:1a:81:b6:31:a6:98:84:0b:fa:2b:ca:23: e5:da:d1:a9:a2:3b:40:34:7b:5d:b4:f5:ea:37:b1: 1e:c6:80:b8:ff:3e:a1:c2:a3:65:c4:b5:a7:38:5c: 6a:7d:8c:d9:ce:82:bd:43:06:61:85:9c:cc:8e:e8: 5f:31:76:3b:0a:4c:c8:1e:ad:90:ae:63:38:92:6e: 1d:5d:72:4b:bd:47:52:ad:f8:82:ae:55:72:7b:63: 0b:77:91:1c:d0:e6:57:f5:bb:77:d3:4e:8f:35:1f: 64:35:47:27:f9:4e:e5:78:b9:31:5c:c2:80:03:b5: 8d:a9:4d:4c:d6:97:e2:24:66:19:28:4d:f6:d9:0a: 4c:50:88:62:07:a7:5a:7d:93:1f:d7:a2:3f:1e:16: a6:dc:bf:96:8f:a1:f5:5f:b4:33:23:4a:7d:16:a8: 1b:3c:79:9f:27:a3:bc:19:b0:d1:15:aa:fa:43:ad: f7:64:05:87:72:9c:57:51:34:59:b0:6d:54:2b:33: 03:ba:ea:68:f3:18:15:08:95:ea:81:fc:e8:01:6f: 75:92:50:70:9a:54:94:0e:8a:7b:46:a8:0e:2b:f4: 1e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3B:66:43:46:DC:F3:7C:F7:A0:FB:32:25:99:80:FB:A1:DC:1C:CF X509v3 Authority Key Identifier: keyid:58:89:CE:AB:5F:6F:13:99:C6:38:E6:A5:1D:68:E2:60:D3:5B:4C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:05:3b:62:c5:97:2d:94:8a:47:67:b9:22:85:fc:bf:2f:6c: e3:e0:12:be:25:6d:d5:28:4c:64:e0:c6:cf:c0:b8:7c:15:17: c8:57:73:37:81:10:06:b9:65:05:45:8b:ec:92:c1:08:f3:ef: d4:17:3d:b1:78:ea:37:b6:b1:d1:53:ae:32:38:2a:b2:6f:5c: ad:15:25:13:7b:02:7b:c9:72:17:d8:56:5d:04:f2:bf:1d:30: fa:d0:49:53:7a:cf:89:c3:4e:44:08:38:a1:66:a3:0a:dd:26: 53:3d:8d:ff:b7:fd:ea:c9:8a:60:05:ef:8f:95:8a:8b:d6:b8: cd:0f:58:b7:86:a6:5c:0f:52:f6:95:58:25:e6:53:df:db:df: 11:ef:11:87:04:ba:9d:ce:21:87:ce:4e:08:e8:7b:bd:7c:b9: 20:1a:ad:4f:53:1c:13:70:ca:e0:2e:fe:e9:d2:22:af:80:e6: 4e:2e:db:75:dd:be:07:fa:29:bf:16:0f:f4:4f:41:a0:67:1e: f4:b1:7e:55:e3:64:a4:99:f1:5d:d4:35:18:79:e4:a1:5e:5a: 28:0b:35:a0:5b:04:a9:24:a8:bb:ce:9c:64:97:54:4f:6f:ad: a9:d1:bf:4e:e6:8f:b9:4c:57:71:82:ae:4b:f3:f8:3e:69:34: 9d:0d:1f:3c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUILolxz/pN3JU3+gh6TeKMAiguS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg4OUNFQUI1RjZGMTM5OUM2MzhFNkE1MUQ2OEUyNjBE MzVCNENCMjAeFw0yNTExMDQyMjU1MjBaFw0yNTExMTAxOTM0MjBaMDMxMTAvBgNV BAMTKEZFM0I2NjQzNDZEQ0YzN0NGN0EwRkIzMjI1OTk4MEZCQTFEQzFDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxoaCyIkcPJkLgtZHRbLv58Mk yOQTvR+vAb/OqaXeVBqBtjGmmIQL+ivKI+Xa0amiO0A0e1209eo3sR7GgLj/PqHC o2XEtac4XGp9jNnOgr1DBmGFnMyO6F8xdjsKTMgerZCuYziSbh1dcku9R1Kt+IKu VXJ7Ywt3kRzQ5lf1u3fTTo81H2Q1Ryf5TuV4uTFcwoADtY2pTUzWl+IkZhkoTfbZ CkxQiGIHp1p9kx/Xoj8eFqbcv5aPofVftDMjSn0WqBs8eZ8no7wZsNEVqvpDrfdk BYdynFdRNFmwbVQrMwO66mjzGBUIleqB/OgBb3WSUHCaVJQOintGqA4r9B7BAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/jtmQ0bc83z3oPsyJZmA+6HcHM8wHwYDVR0j BBgwFoAUWInOq19vE5nGOOalHWjiYNNbTLIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BODA1MzlFRTExRUE4QUUzNDkzQjM2Q0YyNDU1M0U5NDFC MEI1RkNCRDk3RDlEMDZEQTJEOEEwMjM5QzRBRDRCLzAvNTg4OUNFQUI1RjZGMTM5 OUM2MzhFNkE1MUQ2OEUyNjBEMzVCNENCMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81ODg5Q0VBQjVGNkYxMzk5QzYz OEU2QTUxRDY4RTI2MEQzNUI0Q0IyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTgwNTM5RUUxMUVBOEFFMzQ5M0IzNkNGMjQ1NTNFOTQxQjBCNUZDQkQ5 N0Q5RDA2REEyRDhBMDIzOUM0QUQ0Qi8wLzU4ODlDRUFCNUY2RjEzOTlDNjM4RTZB NTFENjhFMjYwRDM1QjRDQjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/BTtixZctlIpHZ7kihfy/L2zj 4BK+JW3VKExk4MbPwLh8FRfIV3M3gRAGuWUFRYvsksEI8+/UFz2xeOo3trHRU64y OCqyb1ytFSUTewJ7yXIX2FZdBPK/HTD60ElTes+Jw05ECDihZqMK3SZTPY3/t/3q yYpgBe+PlYqL1rjND1i3hqZcD1L2lVgl5lPf298R7xGHBLqdziGHzk4I6Hu9fLkg Gq1PUxwTcMrgLv7p0iKvgOZOLtt13b4H+im/Fg/0T0GgZx70sX5V42SkmfFd1DUY eeShXlooCzWgWwSpJKi7zpxkl1RPb62p0b9O5o+5TFdxgq5L8/g+aTSdDR88 -----END CERTIFICATE-----Generated at Wed Nov 5 20:25:49 2025 by rpki-client