$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft File: 89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft (raw, json) Hash identifier: W6MrPXMtoihQckonBmweSa2pbz7t+gh3xICgUkduLt0= Subject key identifier: 43:76:15:95:56:98:CB:A0:DF:94:A1:AC:D5:2A:C7:BC:4A:FB:61:02 Authority key identifier: 89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5 Certificate issuer: /CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5 Certificate serial: 875996B6A2E858F0CA544CC2F73D3ED60C9055 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft Manifest number: EC Signing time: Sun 22 Jun 2025 09:10:11 +0000 Manifest this update: Sun 22 Jun 2025 09:05:11 +0000 Manifest next update: Fri 27 Jun 2025 14:54:11 +0000 Files and hashes: 1: 89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl (hash: VxDBlaMQbYyPhsKFSdZ7RT9U3OjfdQVlIPah+9pnlmI=) 2: 3137392e36302e3230382e302f32322d3234203d3e203532343931.roa (hash: a5MVWgzS9CicCzinp6R7LIQqjYcufxM/b0UY/mQXwKc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 23:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87:59:96:b6:a2:e8:58:f0:ca:54:4c:c2:f7:3d:3e:d6:0c:90:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5 Validity Not Before: Jun 22 09:05:11 2025 GMT Not After : Jun 27 14:54:11 2025 GMT Subject: CN=437615955698CBA0DF94A1ACD52AC7BC4AFB6102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:ca:c1:17:b5:81:2a:5e:48:20:e6:48:37: 8f:24:3b:7e:28:de:46:ca:6f:3f:5b:bc:45:27:59: f7:e6:1d:5b:92:6c:3c:54:a6:7f:53:78:12:2f:b1: 58:1f:cc:65:05:47:db:fb:ea:85:d9:97:e4:2b:2f: 54:ea:9a:89:b4:ee:4f:6f:3d:4f:c2:2c:59:a3:55: 5a:a0:a8:93:d2:f8:9b:d0:46:de:de:e2:7f:93:32: d7:af:f5:a3:1b:aa:7b:8f:9f:70:b5:38:4b:33:b2: 17:49:be:d5:d9:3c:8d:9f:03:81:c1:b4:3a:9c:70: 1a:37:18:e9:f0:c1:6d:2c:4d:51:97:66:87:1e:ab: dd:6d:23:9e:42:27:c3:13:39:d7:36:85:e1:c0:a6: ca:19:ca:d2:6e:8e:90:26:61:17:02:2b:5b:20:b4: fa:b1:ab:b7:b0:de:45:1c:80:8a:64:54:b2:33:9c: 10:c5:a6:46:15:24:d0:68:6f:f3:41:6a:14:c6:f2: 57:4c:34:e6:81:74:8b:ea:bd:3a:9b:7c:f0:85:45: 9a:9b:f0:a8:4b:c5:bc:e3:dd:ce:5e:00:77:75:64: f6:a1:2c:16:f6:b3:ee:6b:92:41:20:42:65:08:ed: 97:3c:ee:5e:29:69:b8:96:2b:c4:2a:bd:6d:e0:34: 26:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:76:15:95:56:98:CB:A0:DF:94:A1:AC:D5:2A:C7:BC:4A:FB:61:02 X509v3 Authority Key Identifier: keyid:89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b8:db:92:0b:0e:72:c4:b2:fe:5c:12:d5:40:74:fb:51:28: 42:87:e3:a1:c1:36:c2:e8:97:b6:1c:17:1c:83:94:ef:fc:70: 41:35:65:9e:51:4d:fd:8c:8f:08:48:33:2c:08:a8:cb:b1:39: 08:cd:92:c9:92:ef:0e:a7:07:05:a6:b6:ea:d0:2a:a7:c6:76: 1a:45:f6:e4:6b:b0:17:26:68:16:fc:00:d6:91:88:25:eb:2f: f9:5e:d5:f2:f3:19:fc:dd:8b:a4:8f:22:c4:4e:43:4e:1f:1c: 65:8c:ec:b0:43:66:ac:46:6b:19:72:6a:dd:9c:b1:09:ea:39: 59:05:7b:83:57:ff:08:46:fc:7d:9d:cb:de:ab:9a:bb:c0:e5: 2b:58:ee:9a:a9:0e:de:16:b9:2a:19:3d:01:0a:73:d0:a1:dc: 69:c0:71:d2:a2:00:a2:64:6a:d1:95:16:65:40:ce:14:23:c2: d7:65:2d:4e:a8:17:d8:a7:93:dc:d6:fe:b5:11:05:14:0f:63: 4e:ad:f9:c6:73:b6:cb:43:6e:b7:cc:22:a5:12:70:0e:c8:86: e3:84:ca:d0:bc:9b:71:7c:40:5e:45:6e:53:00:21:91:30:4f: 9d:17:3c:4c:ec:ba:0b:93:19:42:c2:5c:d5:71:2b:27:a9:43: d1:1e:ec:f2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAIdZlrai6FjwylRMwvc9PtYMkFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlEQjVDMERDN0M5ODUzMDE1QzJCNkQ4QjA1QTFGREQw QUEyRUJBNTAeFw0yNTA2MjIwOTA1MTFaFw0yNTA2MjcxNDU0MTFaMDMxMTAvBgNV BAMTKDQzNzYxNTk1NTY5OENCQTBERjk0QTFBQ0Q1MkFDN0JDNEFGQjYxMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ysrBF7WBKl5IIOZIN48kO34o 3kbKbz9bvEUnWffmHVuSbDxUpn9TeBIvsVgfzGUFR9v76oXZl+QrL1Tqmom07k9v PU/CLFmjVVqgqJPS+JvQRt7e4n+TMtev9aMbqnuPn3C1OEszshdJvtXZPI2fA4HB tDqccBo3GOnwwW0sTVGXZoceq91tI55CJ8MTOdc2heHApsoZytJujpAmYRcCK1sg tPqxq7ew3kUcgIpkVLIznBDFpkYVJNBob/NBahTG8ldMNOaBdIvqvTqbfPCFRZqb 8KhLxbzj3c5eAHd1ZPahLBb2s+5rkkEgQmUI7Zc87l4pabiWK8QqvW3gNCbzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQ3YVlVaYy6DflKGs1SrHvEr7YQIwHwYDVR0j BBgwFoAUidtcDcfJhTAVwrbYsFof3Qqi66UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRDM5QkFFQ0ZCMDgwNzk1QjczODJFNTlFREY0NkNGMkJG NEE0M0Y3NzAwNUE0NjcwNEEyMzI5NTIzRjE2QTk5LzAvODlEQjVDMERDN0M5ODUz MDE1QzJCNkQ4QjA1QTFGREQwQUEyRUJBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OURCNUMwREM3Qzk4NTMwMTVD MkI2RDhCMDVBMUZERDBBQTJFQkE1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkQzOUJBRUNGQjA4MDc5NUI3MzgyRTU5RURGNDZDRjJCRjRBNDNGNzcw MDVBNDY3MDRBMjMyOTUyM0YxNkE5OS8wLzg5REI1QzBEQzdDOTg1MzAxNUMyQjZE OEIwNUExRkREMEFBMkVCQTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEuNuSCw5yxLL+XBLVQHT7UShC h+OhwTbC6Je2HBccg5Tv/HBBNWWeUU39jI8ISDMsCKjLsTkIzZLJku8OpwcFprbq 0CqnxnYaRfbka7AXJmgW/ADWkYgl6y/5XtXy8xn83YukjyLETkNOHxxljOywQ2as RmsZcmrdnLEJ6jlZBXuDV/8IRvx9ncveq5q7wOUrWO6aqQ7eFrkqGT0BCnPQodxp wHHSogCiZGrRlRZlQM4UI8LXZS1OqBfYp5Pc1v61EQUUD2NOrfnGc7bLQ263zCKl EnAOyIbjhMrQvJtxfEBeRW5TACGRME+dFzxM7LoLkxlCwlzVcSsnqUPRHuzy -----END CERTIFICATE-----Generated at Sun Jun 22 23:20:50 2025 by rpki-client