$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft File: 89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft (raw, json) Hash identifier: qx39da7MthzaGNyl9wVQY/NOlHYZ264LrdcEW/ivtDU= Subject key identifier: AA:23:D5:54:8F:65:37:34:BE:B0:C1:9A:7C:B8:23:AB:9F:CD:B9:5C Authority key identifier: 89:D9:CC:04:70:C7:AC:B3:61:4E:88:23:D1:7A:12:7C:C1:79:6D:04 Certificate issuer: /CN=89D9CC0470C7ACB3614E8823D17A127CC1796D04 Certificate serial: 320D1AFEF998BC46345FF30C3B5D92809A06E705 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft Manifest number: 0130 Signing time: Fri 31 Oct 2025 16:17:12 +0000 Manifest this update: Fri 31 Oct 2025 16:12:12 +0000 Manifest next update: Wed 05 Nov 2025 11:04:12 +0000 Files and hashes: 1: 3230312e3135382e302e302f32312d3234203d3e203238353134.roa (hash: Ea8o3oZdw6ZJj9JYOtchjRQ9TOMSE5LkhaJDTyIxyKA=) 2: 89D9CC0470C7ACB3614E8823D17A127CC1796D04.crl (hash: RvAbYndrEAdEA9WmXy/08BJkXQEKM0ArxsdFmLcHsLg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.crl rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 11:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0d:1a:fe:f9:98:bc:46:34:5f:f3:0c:3b:5d:92:80:9a:06:e7:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89D9CC0470C7ACB3614E8823D17A127CC1796D04 Validity Not Before: Oct 31 16:12:12 2025 GMT Not After : Nov 5 11:04:12 2025 GMT Subject: CN=AA23D5548F653734BEB0C19A7CB823AB9FCDB95C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2a:ae:26:06:71:16:2b:20:66:2d:e4:5f:d1: f4:45:df:77:3d:b0:79:58:43:64:f3:c9:93:52:b9: 52:7f:bc:6e:67:d8:8d:86:85:de:a0:d3:ed:04:e0: d3:92:27:56:7c:50:0a:8b:3f:72:0f:4b:4a:1e:01: 7a:9e:85:11:7d:84:32:18:ab:2f:89:73:e9:47:e2: 1d:64:71:d7:a1:15:c4:f1:53:6b:c0:62:30:05:5a: e4:69:ef:4d:1e:74:ff:b7:4a:75:78:82:10:69:71: d1:a8:1b:6b:1a:28:44:0e:ae:af:78:b9:d2:82:9d: e7:13:19:1b:b2:ec:e9:ae:c4:20:c9:3f:ce:e4:80: a0:10:2b:dc:ec:21:5b:4a:2c:bb:81:c6:3c:0a:9d: 75:2c:29:af:fa:e5:38:40:dc:15:88:f1:1b:cb:25: 95:39:ab:2a:b0:09:a8:49:94:03:28:8f:71:b0:a1: ee:d9:df:70:03:44:15:1f:fd:fe:22:ee:01:1d:c3: 19:cf:91:01:a1:67:e3:b5:e9:dd:d5:0d:ee:92:22: 12:3e:14:59:dc:6a:4a:e2:a9:3c:56:b2:c2:71:c0: 6b:a2:8c:62:47:3e:76:92:24:1f:c4:b3:02:ed:79: a5:15:bf:7f:64:27:a2:9c:0f:f2:c5:35:c4:9a:48: 2d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:23:D5:54:8F:65:37:34:BE:B0:C1:9A:7C:B8:23:AB:9F:CD:B9:5C X509v3 Authority Key Identifier: keyid:89:D9:CC:04:70:C7:AC:B3:61:4E:88:23:D1:7A:12:7C:C1:79:6D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:6f:a1:e5:22:1c:ed:94:ce:be:7e:4f:1b:f4:b3:99:50:f0: 80:9c:f9:bb:3b:4b:fa:fb:82:20:fa:8d:b2:c8:50:29:07:0c: 2a:c1:5c:ec:1a:63:ca:2c:bc:39:dd:63:6e:0c:75:2e:16:dc: 93:4c:c6:4d:7b:69:0f:5f:88:0c:91:7d:72:af:74:54:37:b3: f4:84:64:e9:d0:cb:8d:8f:99:af:4e:de:d0:e8:b1:0c:7e:6e: 2e:2b:b1:72:68:7f:6c:aa:23:54:37:18:ff:69:20:28:01:f2: 93:1b:e4:ef:0c:f1:ce:9f:89:66:6b:96:d5:4f:d9:25:62:d0: f4:81:96:95:e0:46:6a:1f:b6:3e:71:0d:c9:17:2d:c2:30:a8: 7d:d0:5b:1b:14:ef:39:03:dd:44:33:00:4c:8b:51:90:3d:f5: 44:ac:15:f5:52:46:9e:3c:e3:a6:32:8f:a1:10:f8:19:ed:1b: 3c:8d:28:88:80:30:8c:47:be:a4:9b:8f:91:fe:a1:1d:f0:83: a9:31:4a:d2:bf:63:2d:00:ff:1d:4c:ec:40:af:4f:41:fe:6e: 59:80:73:b7:b5:b4:27:0d:d9:d1:23:aa:2c:bc:5a:ee:e4:b6: b3:20:4d:66:75:7a:24:26:65:ba:51:ae:75:64:6d:89:16:2f: b3:f8:cb:4a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMg0a/vmYvEY0X/MMO12SgJoG5wUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlEOUNDMDQ3MEM3QUNCMzYxNEU4ODIzRDE3QTEyN0ND MTc5NkQwNDAeFw0yNTEwMzExNjEyMTJaFw0yNTExMDUxMTA0MTJaMDMxMTAvBgNV BAMTKEFBMjNENTU0OEY2NTM3MzRCRUIwQzE5QTdDQjgyM0FCOUZDREI5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKq4mBnEWKyBmLeRf0fRF33c9 sHlYQ2TzyZNSuVJ/vG5n2I2Ghd6g0+0E4NOSJ1Z8UAqLP3IPS0oeAXqehRF9hDIY qy+Jc+lH4h1kcdehFcTxU2vAYjAFWuRp700edP+3SnV4ghBpcdGoG2saKEQOrq94 udKCnecTGRuy7OmuxCDJP87kgKAQK9zsIVtKLLuBxjwKnXUsKa/65ThA3BWI8RvL JZU5qyqwCahJlAMoj3Gwoe7Z33ADRBUf/f4i7gEdwxnPkQGhZ+O16d3VDe6SIhI+ FFncakriqTxWssJxwGuijGJHPnaSJB/EswLteaUVv39kJ6KcD/LFNcSaSC1bAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqiPVVI9lNzS+sMGafLgjq5/NuVwwHwYDVR0j BBgwFoAUidnMBHDHrLNhTogj0XoSfMF5bQQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRTNBQzY4ODM1RUJFMTYyNUQ2NzA1QUVBREM0NzFERjA5 QkIzMTBEMzQ2QzZBMThDODkyMENDRjEzQTNENzVCLzAvODlEOUNDMDQ3MEM3QUNC MzYxNEU4ODIzRDE3QTEyN0NDMTc5NkQwNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUQ5Q0MwNDcwQzdBQ0IzNjE0 RTg4MjNEMTdBMTI3Q0MxNzk2RDA0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUUzQUM2ODgzNUVCRTE2MjVENjcwNUFFQURDNDcxREYwOUJCMzEwRDM0 NkM2QTE4Qzg5MjBDQ0YxM0EzRDc1Qi8wLzg5RDlDQzA0NzBDN0FDQjM2MTRFODgy M0QxN0ExMjdDQzE3OTZEMDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTb6HlIhztlM6+fk8b9LOZUPCA nPm7O0v6+4Ig+o2yyFApBwwqwVzsGmPKLLw53WNuDHUuFtyTTMZNe2kPX4gMkX1y r3RUN7P0hGTp0MuNj5mvTt7Q6LEMfm4uK7FyaH9sqiNUNxj/aSAoAfKTG+TvDPHO n4lma5bVT9klYtD0gZaV4EZqH7Y+cQ3JFy3CMKh90FsbFO85A91EMwBMi1GQPfVE rBX1UkaePOOmMo+hEPgZ7Rs8jSiIgDCMR76km4+R/qEd8IOpMUrSv2MtAP8dTOxA r09B/m5ZgHO3tbQnDdnRI6osvFru5LazIE1mdXokJmW6Ua51ZG2JFi+z+MtK -----END CERTIFICATE-----Generated at Sun Nov 2 11:43:02 2025 by rpki-client