$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft File: 89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft (raw, json) Hash identifier: J4qBCWNVFLjKi7G4IFbSvV8wm2B7vl7tzCxBjSHWp6E= Subject key identifier: 71:D1:D5:39:EC:B3:A0:14:A7:53:AE:E3:51:B0:5A:85:FB:D5:BA:C7 Authority key identifier: 89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5 Certificate issuer: /CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5 Certificate serial: 1C05CC05BFF36DB0C9B53D35E86470109EE5DABF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft Manifest number: 012D Signing time: Mon 03 Nov 2025 15:48:02 +0000 Manifest this update: Mon 03 Nov 2025 15:43:02 +0000 Manifest next update: Sat 08 Nov 2025 14:22:02 +0000 Files and hashes: 1: 3137392e36302e3230382e302f32322d3234203d3e203532343931.roa (hash: a5MVWgzS9CicCzinp6R7LIQqjYcufxM/b0UY/mQXwKc=) 2: 89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl (hash: XlrDMk/btOtEWIoOWea9LhZ1DH/sCzxE6sf8fJTFMeY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 14:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:05:cc:05:bf:f3:6d:b0:c9:b5:3d:35:e8:64:70:10:9e:e5:da:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5 Validity Not Before: Nov 3 15:43:02 2025 GMT Not After : Nov 8 14:22:02 2025 GMT Subject: CN=71D1D539ECB3A014A753AEE351B05A85FBD5BAC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:60:ec:39:8e:9d:1e:a9:f8:7d:51:3c:2b: bc:d5:ec:b4:74:c1:aa:05:9c:f0:a1:a3:68:47:bf: a1:cd:93:b9:e8:0e:ef:b2:7f:4e:f9:33:90:53:ca: da:03:17:49:b1:3b:85:41:68:98:ff:1c:77:10:a6: d6:6c:cc:86:a9:09:da:b4:b9:0f:3a:88:d4:58:87: cd:8e:3b:1f:af:20:bd:30:34:e2:67:7f:1f:39:89: 7f:a6:b4:78:a8:54:68:68:e2:07:5b:7d:02:cd:66: 67:57:9d:8f:23:7c:ed:f0:e9:7d:7b:e3:e4:18:0c: 40:8b:d3:ad:03:d8:ae:38:1c:08:35:0b:6e:5b:56: 08:b1:83:3f:24:f0:45:d1:48:37:fd:97:4b:94:2c: d6:ad:55:ed:23:84:88:cd:9e:92:20:8e:3f:89:9c: 1c:44:1a:8d:5f:f7:16:30:7b:61:ea:08:69:bf:67: a3:9d:dd:41:74:c2:f5:62:7f:fe:07:74:e9:ce:f2: d2:df:da:30:41:41:f5:39:61:57:03:84:7a:2f:a0: 38:1f:77:04:c9:87:49:32:22:55:7e:7f:79:f6:e7: 55:c0:7f:ba:16:be:48:b9:a2:48:f7:1d:68:c2:c4: 06:83:9c:36:2b:19:b6:73:c0:d4:a3:b7:49:c3:f7: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:D5:39:EC:B3:A0:14:A7:53:AE:E3:51:B0:5A:85:FB:D5:BA:C7 X509v3 Authority Key Identifier: keyid:89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:18:f0:b9:7f:68:b7:64:a7:61:dc:52:37:9c:40:36:08:4c: b3:d5:f5:d2:91:ac:59:08:c1:b9:9b:ae:7a:a8:62:4f:14:94: 9c:5b:ef:5d:4c:ce:bb:09:80:e6:6b:66:b2:38:a0:a1:09:70: 51:90:a9:bc:09:ad:ef:b3:70:3c:18:21:2a:3b:c4:34:7e:5e: b6:4c:f5:40:62:6b:e9:a1:1f:ac:70:78:cd:89:72:5c:00:f6: bc:6e:28:ce:67:6d:fa:4c:bd:1d:9b:aa:b6:3c:5f:9b:1a:22: 8a:9a:b1:42:8e:05:2d:da:a5:04:ba:07:77:2e:52:de:3b:a5: fb:08:d0:a7:a1:49:43:b8:d6:f2:1d:14:ec:98:16:70:b4:fc: ba:25:51:af:74:6e:dd:60:49:22:82:bd:74:f8:a2:54:32:f6: 6e:7d:33:fc:bf:99:ee:f4:8b:e4:b6:13:18:d1:97:c8:b5:dd: 57:bb:83:11:9e:7e:a0:fb:9d:45:5f:b6:c2:05:8e:9e:a4:48: 93:86:06:49:86:08:2a:75:87:6c:b6:cd:a9:d5:e6:b4:9e:ba: 93:0d:2a:19:14:06:08:aa:4d:5d:87:d5:f7:30:23:6c:f1:4b: 1d:8d:d2:18:99:4a:3e:84:8f:29:4d:53:35:fc:a7:c7:63:42: d6:db:f2:36 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHAXMBb/zbbDJtT016GRwEJ7l2r8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlEQjVDMERDN0M5ODUzMDE1QzJCNkQ4QjA1QTFGREQw QUEyRUJBNTAeFw0yNTExMDMxNTQzMDJaFw0yNTExMDgxNDIyMDJaMDMxMTAvBgNV BAMTKDcxRDFENTM5RUNCM0EwMTRBNzUzQUVFMzUxQjA1QTg1RkJENUJBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xmDsOY6dHqn4fVE8K7zV7LR0 waoFnPCho2hHv6HNk7noDu+yf075M5BTytoDF0mxO4VBaJj/HHcQptZszIapCdq0 uQ86iNRYh82OOx+vIL0wNOJnfx85iX+mtHioVGho4gdbfQLNZmdXnY8jfO3w6X17 4+QYDECL060D2K44HAg1C25bVgixgz8k8EXRSDf9l0uULNatVe0jhIjNnpIgjj+J nBxEGo1f9xYwe2HqCGm/Z6Od3UF0wvVif/4HdOnO8tLf2jBBQfU5YVcDhHovoDgf dwTJh0kyIlV+f3n251XAf7oWvki5okj3HWjCxAaDnDYrGbZzwNSjt0nD95CHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcdHVOeyzoBSnU67jUbBahfvVuscwHwYDVR0j BBgwFoAUidtcDcfJhTAVwrbYsFof3Qqi66UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRDM5QkFFQ0ZCMDgwNzk1QjczODJFNTlFREY0NkNGMkJG NEE0M0Y3NzAwNUE0NjcwNEEyMzI5NTIzRjE2QTk5LzAvODlEQjVDMERDN0M5ODUz MDE1QzJCNkQ4QjA1QTFGREQwQUEyRUJBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OURCNUMwREM3Qzk4NTMwMTVD MkI2RDhCMDVBMUZERDBBQTJFQkE1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkQzOUJBRUNGQjA4MDc5NUI3MzgyRTU5RURGNDZDRjJCRjRBNDNGNzcw MDVBNDY3MDRBMjMyOTUyM0YxNkE5OS8wLzg5REI1QzBEQzdDOTg1MzAxNUMyQjZE OEIwNUExRkREMEFBMkVCQTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDOGPC5f2i3ZKdh3FI3nEA2CEyz 1fXSkaxZCMG5m656qGJPFJScW+9dTM67CYDma2ayOKChCXBRkKm8Ca3vs3A8GCEq O8Q0fl62TPVAYmvpoR+scHjNiXJcAPa8bijOZ236TL0dm6q2PF+bGiKKmrFCjgUt 2qUEugd3LlLeO6X7CNCnoUlDuNbyHRTsmBZwtPy6JVGvdG7dYEkigr10+KJUMvZu fTP8v5nu9IvkthMY0ZfItd1Xu4MRnn6g+51FX7bCBY6epEiThgZJhggqdYdsts2p 1ea0nrqTDSoZFAYIqk1dh9X3MCNs8UsdjdIYmUo+hI8pTVM1/KfHY0LW2/I2 -----END CERTIFICATE-----Generated at Wed Nov 5 04:47:04 2025 by rpki-client