$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft File: 89BE1B948EADFCFCFDF457A0A903F357865A2553.mft (raw, json) Hash identifier: zWxlVpazDdWfV7UGi6ZL09O+DagJ3/efUnXuMwT6jwA= Subject key identifier: FD:AF:CD:E2:BE:F2:7D:A2:2A:52:72:A5:B7:07:78:34:04:73:CB:87 Authority key identifier: 89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53 Certificate issuer: /CN=89BE1B948EADFCFCFDF457A0A903F357865A2553 Certificate serial: 222FDCC9CB4FEBA51B96B0E6F766D26ACBCB9558 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft Manifest number: 012B Signing time: Wed 05 Nov 2025 11:16:58 +0000 Manifest this update: Wed 05 Nov 2025 11:11:58 +0000 Manifest next update: Mon 10 Nov 2025 08:22:58 +0000 Files and hashes: 1: 323830333a343863303a3a2f33322d3438203d3e20323632323037.roa (hash: Yzy5yBk5UnBADEcqfV2VnPVrbcI8oghPw4JwF8rFiuY=) 2: 3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa (hash: sQ3vcvkuajb8A0gi65c2qc/KNP6DvKwXx0foWlW5RB4=) 3: 3139302e3135312e3132382e302f32322d3232203d3e20323632323037.roa (hash: J5mJNJDd/Innmd2wvjmRh69YPDMzXrHUP3i/omT8tmo=) 4: 89BE1B948EADFCFCFDF457A0A903F357865A2553.crl (hash: kQLYvkbDZMp8HPiMkaxAvmlmGXIr2tSKxc3x/GEjvt8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2f:dc:c9:cb:4f:eb:a5:1b:96:b0:e6:f7:66:d2:6a:cb:cb:95:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BE1B948EADFCFCFDF457A0A903F357865A2553 Validity Not Before: Nov 5 11:11:58 2025 GMT Not After : Nov 10 08:22:58 2025 GMT Subject: CN=FDAFCDE2BEF27DA22A5272A5B70778340473CB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:ce:bb:d8:6e:ef:11:0e:4b:e5:99:7d:44: 9f:d9:8d:12:c4:32:93:bf:af:ce:7c:29:c5:40:93: 5c:d6:77:0d:83:97:46:0e:d9:ee:cc:87:41:19:e6: fe:7a:ed:1e:b5:e7:60:d0:bf:74:60:16:23:ba:bf: aa:26:3c:cd:52:28:76:8b:c2:2d:1f:e4:68:92:17: 54:4a:46:a8:af:83:c0:3a:1e:46:dc:28:32:e3:4d: 0b:f7:94:d8:e3:91:43:19:1e:5e:7d:13:16:6b:86: 9c:06:5b:1f:88:f1:b8:2f:87:51:6d:10:c0:05:1e: a9:be:14:2c:f9:1d:04:b7:45:07:4e:90:7b:d5:64: f0:33:da:de:47:87:c4:b2:c7:a6:24:d5:e1:6d:87: 3d:53:80:75:ce:41:50:5d:ae:ee:fd:23:ab:50:2a: ae:49:84:d4:60:c7:6c:38:db:e9:4c:2a:22:68:91: b4:69:11:74:1c:cb:b1:3b:1e:db:5a:6d:d8:61:47: 3d:1f:2a:74:44:2d:4b:f1:a3:79:7b:de:3d:5e:fb: 30:03:be:49:37:e3:51:d3:2c:45:e1:2f:4d:19:92: 3d:1f:8d:64:ff:2a:e2:39:c1:e9:2d:93:69:41:f2: 8d:80:bc:c8:e2:bb:65:40:98:b3:f2:74:16:7a:f5: 6c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AF:CD:E2:BE:F2:7D:A2:2A:52:72:A5:B7:07:78:34:04:73:CB:87 X509v3 Authority Key Identifier: keyid:89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:03:c4:34:e9:d9:19:59:4e:bc:c7:67:21:eb:08:f7:0a:d8: ba:04:02:b3:b5:e2:50:e0:ec:27:4b:98:ec:80:7f:ec:02:e1: 5b:54:8d:36:ba:a0:41:14:f0:ba:73:e8:cb:a7:cf:4f:d4:d4: 4c:b5:d1:eb:90:54:a2:b5:3b:7a:b3:32:59:96:8a:5a:13:57: fb:1e:26:c1:0a:01:6c:89:68:46:e5:5b:7b:1f:17:a2:ed:e9: 64:50:f4:57:78:12:ad:1a:d9:c7:bf:10:8b:27:63:84:d0:30: 8e:a0:ae:84:37:d5:d5:7a:18:8e:19:2c:58:4c:0b:90:28:9e: 79:45:fb:a4:61:79:73:76:56:ad:ca:af:39:bb:72:d6:b5:0d: aa:7e:1a:3e:d8:99:ed:75:b1:4b:75:7f:7e:d6:96:91:08:c4: 71:a5:6c:87:6f:bf:0a:07:4a:67:b3:be:0f:c6:62:3c:a5:99: 0c:05:ed:bd:23:40:a1:2b:07:c6:f0:12:da:30:3d:ff:5c:1c: 15:4d:fd:45:07:3c:02:a3:19:3a:0a:88:97:27:1b:08:6e:ca: 07:80:cb:94:ba:9c:86:04:af:2a:99:ca:7e:5c:e2:00:80:a9: 69:fc:3b:97:fe:a0:68:89:a6:30:24:bd:29:3e:72:84:2b:e0: e8:97:92:63 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIi/cyctP66UblrDm92bSasvLlVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCRTFCOTQ4RUFERkNGQ0ZERjQ1N0EwQTkwM0YzNTc4 NjVBMjU1MzAeFw0yNTExMDUxMTExNThaFw0yNTExMTAwODIyNThaMDMxMTAvBgNV BAMTKEZEQUZDREUyQkVGMjdEQTIyQTUyNzJBNUI3MDc3ODM0MDQ3M0NCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EM672G7vEQ5L5Zl9RJ/ZjRLE MpO/r858KcVAk1zWdw2Dl0YO2e7Mh0EZ5v567R6152DQv3RgFiO6v6omPM1SKHaL wi0f5GiSF1RKRqivg8A6HkbcKDLjTQv3lNjjkUMZHl59ExZrhpwGWx+I8bgvh1Ft EMAFHqm+FCz5HQS3RQdOkHvVZPAz2t5Hh8Syx6Yk1eFthz1TgHXOQVBdru79I6tQ Kq5JhNRgx2w42+lMKiJokbRpEXQcy7E7HttabdhhRz0fKnRELUvxo3l73j1e+zAD vkk341HTLEXhL00Zkj0fjWT/KuI5wektk2lB8o2AvMjiu2VAmLPydBZ69WxHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/a/N4r7yfaIqUnKltwd4NARzy4cwHwYDVR0j BBgwFoAUib4blI6t/Pz99FegqQPzV4ZaJVMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMTY1NzU4RDE0RTBDOTcyRjhCQTU2MDMzMDI1MDdGRThB Njc3RTcyMjNENzJBODIxMUFFNjJEQkQ1NTY1RTdELzAvODlCRTFCOTQ4RUFERkNG Q0ZERjQ1N0EwQTkwM0YzNTc4NjVBMjU1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUJFMUI5NDhFQURGQ0ZDRkRG NDU3QTBBOTAzRjM1Nzg2NUEyNTUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDE2NTc1OEQxNEUwQzk3MkY4QkE1NjAzMzAyNTA3RkU4QTY3N0U3MjIz RDcyQTgyMTFBRTYyREJENTU2NUU3RC8wLzg5QkUxQjk0OEVBREZDRkNGREY0NTdB MEE5MDNGMzU3ODY1QTI1NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgA8Q06dkZWU68x2ch6wj3Cti6 BAKzteJQ4OwnS5jsgH/sAuFbVI02uqBBFPC6c+jLp89P1NRMtdHrkFSitTt6szJZ lopaE1f7HibBCgFsiWhG5Vt7Hxei7elkUPRXeBKtGtnHvxCLJ2OE0DCOoK6EN9XV ehiOGSxYTAuQKJ55RfukYXlzdlatyq85u3LWtQ2qfho+2JntdbFLdX9+1paRCMRx pWyHb78KB0pns74PxmI8pZkMBe29I0ChKwfG8BLaMD3/XBwVTf1FBzwCoxk6CoiX JxsIbsoHgMuUupyGBK8qmcp+XOIAgKlp/DuX/qBoiaYwJL0pPnKEK+Dol5Jj -----END CERTIFICATE-----Generated at Wed Nov 5 20:11:16 2025 by rpki-client