$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft File: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft (raw, json) Hash identifier: 4SXcv7GNOOElTx91BF8pufIG1WgfoMzNtT84GShxvRA= Subject key identifier: 5F:71:01:21:CE:7F:45:94:92:E6:29:BF:19:5B:E4:0D:9E:61:21:D8 Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 Certificate issuer: /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Certificate serial: 3AAF741FDFA835A6F971B675DFD5494CF9A55F8E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft Manifest number: 0134 Signing time: Wed 05 Nov 2025 16:14:40 +0000 Manifest this update: Wed 05 Nov 2025 16:09:40 +0000 Manifest next update: Tue 11 Nov 2025 07:05:40 +0000 Files and hashes: 1: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl (hash: 3J2oB2QiDjHEpNOnT87PuiBTo7d1uv782oyALY0lgus=) 2: 3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa (hash: AsEHVSdxN/om5UYh7LmOx7ME5F/4rOyHrR6Vp7TmmYs=) 3: 3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa (hash: ki3ZXbLXCKJHkqFilvfhr6bdVrQBibKeIAqRvGGaKaU=) 4: 3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa (hash: yu6Oe96ukjaDp8hbPn99XX1vIiICPSDbRovWaVfLzMY=) 5: 3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa (hash: H7aEYtu6WVcmBJ/LYyjuVlTRTtiGzazA09PbwXTdxgA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:af:74:1f:df:a8:35:a6:f9:71:b6:75:df:d5:49:4c:f9:a5:5f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Validity Not Before: Nov 5 16:09:40 2025 GMT Not After : Nov 11 07:05:40 2025 GMT Subject: CN=5F710121CE7F459492E629BF195BE40D9E6121D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:96:3b:b2:89:c1:65:6b:4e:9a:a4:e7:b6: fe:63:d1:ad:c7:c8:bb:f1:fa:3a:2e:ac:79:29:e6: 13:f6:fa:6f:2f:e4:3e:32:72:f9:65:0f:51:8f:71: 51:bd:97:b0:c1:99:52:f4:de:f3:fa:19:8a:14:a2: 25:a4:21:e6:50:2e:c5:63:7a:94:50:7e:99:79:7d: 52:8b:c3:04:6f:b9:40:53:f2:95:11:4d:53:74:ce: 06:6c:36:e4:a4:39:8f:0e:bf:c6:69:54:32:02:c5: e0:15:65:2d:b9:ad:4a:ee:65:59:db:d2:15:80:48: e8:9a:a9:6c:c6:c6:50:44:97:85:01:a9:11:51:77: ef:69:0a:ae:12:0a:c4:20:fc:c3:8b:d7:9b:8f:b6: 67:3e:59:f7:13:ce:e3:ef:3c:bf:8a:98:59:d6:97: 6f:d7:03:4c:36:73:74:a6:5c:ac:75:77:2f:4f:51: d2:7c:b5:76:f2:d8:21:56:63:a0:57:db:d5:02:db: e4:0a:93:10:8b:d5:45:b6:a6:80:b8:da:cf:76:5f: 97:85:37:52:69:7f:79:60:02:6c:e3:e7:2f:a1:d6: b2:e8:d9:b4:a9:57:f8:cd:fe:f0:5d:3a:04:a6:7e: 99:86:be:48:39:36:f2:72:d0:57:b4:f0:b1:59:45: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:71:01:21:CE:7F:45:94:92:E6:29:BF:19:5B:E4:0D:9E:61:21:D8 X509v3 Authority Key Identifier: keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:97:28:b9:f4:63:53:8b:bc:fb:4e:96:69:1f:b3:3f:a8:42: 3e:e1:4a:83:fa:e0:5c:f0:c2:ef:fd:c8:ab:a6:71:74:0d:c7: 77:91:3e:b6:35:49:49:25:53:23:1e:d8:ce:3c:bf:c5:69:d3: b8:d3:e6:cf:99:91:eb:2c:e1:e2:13:19:95:0d:c0:93:ad:96: e4:37:6b:c3:cb:0c:3a:1b:43:09:0e:59:91:86:fd:24:ef:98: 39:38:d7:d4:f8:28:88:28:08:13:21:56:2d:d4:6d:fa:81:a9: c9:fd:a6:3e:e2:2c:e0:66:2a:af:0a:7e:c1:ca:59:5f:ca:56: fd:e4:6b:e2:6d:9d:4c:69:28:71:7e:97:22:a7:5f:8f:a1:17: 91:8f:5e:fc:ee:22:04:35:20:4b:33:db:37:c9:a1:99:4c:e4: f1:2d:b3:39:96:a0:8a:24:5e:3f:eb:a9:b7:7b:36:db:4b:24: 07:4c:8f:28:0c:70:13:f3:87:99:97:e2:a0:c4:5e:a1:6c:8f: 36:76:2c:29:76:83:aa:da:9f:4e:e9:29:5d:4a:20:bd:db:19: 51:39:da:48:8b:3f:26:9e:31:27:5d:4c:f7:68:e6:52:d3:5b: 3c:5d:ac:07:1a:7d:68:52:f4:15:7d:7e:1e:cd:52:a6:3c:6c: e7:a7:a0:ed -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOq90H9+oNab5cbZ139VJTPmlX44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5QUZEM0E5MTI1RERDODhBRENFMkI2REZCQzYzN0Uz OEE3MTFGNTAeFw0yNTExMDUxNjA5NDBaFw0yNTExMTEwNzA1NDBaMDMxMTAvBgNV BAMTKDVGNzEwMTIxQ0U3RjQ1OTQ5MkU2MjlCRjE5NUJFNDBEOUU2MTIxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRuJY7sonBZWtOmqTntv5j0a3H yLvx+jourHkp5hP2+m8v5D4ycvllD1GPcVG9l7DBmVL03vP6GYoUoiWkIeZQLsVj epRQfpl5fVKLwwRvuUBT8pURTVN0zgZsNuSkOY8Ov8ZpVDICxeAVZS25rUruZVnb 0hWASOiaqWzGxlBEl4UBqRFRd+9pCq4SCsQg/MOL15uPtmc+WfcTzuPvPL+KmFnW l2/XA0w2c3SmXKx1dy9PUdJ8tXby2CFWY6BX29UC2+QKkxCL1UW2poC42s92X5eF N1Jpf3lgAmzj5y+h1rLo2bSpV/jN/vBdOgSmfpmGvkg5NvJy0Fe08LFZRaBvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUX3EBIc5/RZSS5im/GVvkDZ5hIdgwHwYDVR0j BBgwFoAUmJr9OpEl3ciK3OK237xjfjinEfUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjA1NjMwMEY3MDM0NEZFRjA2RkNFOTQwNjQ1MDI4Mjkz NzAwMUVBMUM3M0JGQzQzQjBBMDQ2NTc5MEE1REU0LzAvOTg5QUZEM0E5MTI1RERD ODhBRENFMkI2REZCQzYzN0UzOEE3MTFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODlBRkQzQTkxMjVEREM4OEFE Q0UyQjZERkJDNjM3RTM4QTcxMUY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkIwNTYzMDBGNzAzNDRGRUYwNkZDRTk0MDY0NTAyODI5MzcwMDFFQTFD NzNCRkM0M0IwQTA0NjU3OTBBNURFNC8wLzk4OUFGRDNBOTEyNUREQzg4QURDRTJC NkRGQkM2MzdFMzhBNzExRjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHlyi59GNTi7z7TpZpH7M/qEI+ 4UqD+uBc8MLv/cirpnF0Dcd3kT62NUlJJVMjHtjOPL/FadO40+bPmZHrLOHiExmV DcCTrZbkN2vDyww6G0MJDlmRhv0k75g5ONfU+CiIKAgTIVYt1G36ganJ/aY+4izg ZiqvCn7Byllfylb95GvibZ1MaShxfpcip1+PoReRj1787iIENSBLM9s3yaGZTOTx LbM5lqCKJF4/66m3ezbbSyQHTI8oDHAT84eZl+KgxF6hbI82diwpdoOq2p9O6Sld SiC92xlROdpIiz8mnjEnXUz3aOZS01s8XawHGn1oUvQVfX4ezVKmPGznp6Dt -----END CERTIFICATE-----Generated at Wed Nov 5 18:49:48 2025 by rpki-client