$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft File: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft (raw, json) Hash identifier: yfB42709cLyVcI6tYhdqFrk437rLkGw0hXyuVPcQk3M= Subject key identifier: 9E:6D:39:C5:8F:29:EE:A9:D8:9C:9D:5D:8D:BD:03:FC:20:48:FD:62 Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 Certificate issuer: /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Certificate serial: 0832A6DFD518E47EF7AEDC4A983A2376566EA49A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft Manifest number: 0132 Signing time: Fri 31 Oct 2025 06:26:50 +0000 Manifest this update: Fri 31 Oct 2025 06:21:50 +0000 Manifest next update: Thu 06 Nov 2025 02:00:50 +0000 Files and hashes: 1: 3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa (hash: ki3ZXbLXCKJHkqFilvfhr6bdVrQBibKeIAqRvGGaKaU=) 2: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl (hash: zGl+0O7jEULndqO55Tut5t63NrZJQi2e5Cxt+m00g4g=) 3: 3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa (hash: yu6Oe96ukjaDp8hbPn99XX1vIiICPSDbRovWaVfLzMY=) 4: 3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa (hash: H7aEYtu6WVcmBJ/LYyjuVlTRTtiGzazA09PbwXTdxgA=) 5: 3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa (hash: AsEHVSdxN/om5UYh7LmOx7ME5F/4rOyHrR6Vp7TmmYs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:32:a6:df:d5:18:e4:7e:f7:ae:dc:4a:98:3a:23:76:56:6e:a4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Validity Not Before: Oct 31 06:21:50 2025 GMT Not After : Nov 6 02:00:50 2025 GMT Subject: CN=9E6D39C58F29EEA9D89C9D5D8DBD03FC2048FD62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e8:75:18:c5:60:e9:9d:a9:37:89:bc:89:df: 41:b9:62:47:c5:92:c1:22:79:ec:bf:66:63:95:31: a1:11:87:1a:4d:d7:27:10:4a:b3:62:52:2d:41:7c: 90:bc:38:c5:6d:e8:0e:47:33:89:18:b0:5e:b1:32: df:07:60:73:33:ac:bb:12:7e:7e:62:f6:e1:af:29: f6:f8:9c:e4:3a:d3:32:e1:af:31:64:82:f9:09:4f: 10:81:9d:55:19:87:ad:4c:83:fc:91:ef:45:1f:f0: 1e:d6:57:e0:9d:67:95:06:94:e9:bd:94:14:ff:82: b1:ec:32:df:5e:53:83:b3:14:5f:a5:36:76:24:77: c3:b6:bb:e5:92:4a:08:18:9e:24:f5:69:26:50:83: 62:ed:14:b4:e9:64:9a:f1:d9:64:36:1b:fe:3f:f9: 97:c2:a8:1e:e8:e4:da:1b:10:7b:3b:ab:2f:29:b7: e4:e0:45:3f:d4:93:48:60:a5:95:e3:fd:0f:97:66: ae:fd:9f:f5:4b:4b:a8:e7:b5:93:63:b9:10:a4:7c: 58:cb:c0:13:f6:c7:4b:79:50:f2:90:4e:b3:9c:02: f8:0c:fd:69:dc:ea:16:b3:2d:b8:27:86:8c:7b:96: 5e:94:4f:08:ac:3b:57:b4:27:9a:5b:e8:01:05:9e: 09:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6D:39:C5:8F:29:EE:A9:D8:9C:9D:5D:8D:BD:03:FC:20:48:FD:62 X509v3 Authority Key Identifier: keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:96:d2:a0:15:58:10:b1:4e:1b:9c:96:9e:aa:b6:60:40:ff: 8d:ea:21:c1:fc:b9:1b:02:ca:be:c1:91:ac:db:00:79:89:4f: 13:ff:f8:cf:f5:85:bb:49:57:65:2f:06:33:04:e7:fc:98:6f: dc:0a:2d:bc:bc:dc:e5:40:77:b6:13:76:c8:c2:37:a3:0d:e4: 8d:84:b3:b7:32:b6:cf:92:27:1b:21:fc:04:af:a3:a3:15:31: 0e:f4:7a:a2:8d:7e:ac:c4:08:d9:c3:0a:76:f0:89:3b:aa:5b: 17:15:fa:c2:1b:81:18:9f:5c:75:b9:dd:f4:72:b9:04:da:de: d3:29:de:4e:61:a4:3f:dc:3f:03:43:d2:4a:1f:f8:31:19:03: 11:6d:e4:a8:00:43:86:7b:e7:f7:34:45:ff:6d:b6:61:01:0a: f0:5e:06:cf:f3:c6:d1:23:aa:16:25:2c:ca:0e:33:04:19:8c: 19:ec:99:ba:ce:f1:e3:83:d8:10:9a:59:60:d4:13:af:46:75: 79:17:fc:83:37:b4:bd:d4:f5:56:56:fb:65:ce:7c:59:62:69: d6:49:08:20:b3:b2:75:6b:0f:a2:50:d5:b6:9e:fa:8d:c4:ff: d0:66:03:10:21:af:96:ec:63:35:a7:e6:14:76:9d:90:a3:ec: 59:f1:5b:df -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCDKm39UY5H73rtxKmDojdlZupJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5QUZEM0E5MTI1RERDODhBRENFMkI2REZCQzYzN0Uz OEE3MTFGNTAeFw0yNTEwMzEwNjIxNTBaFw0yNTExMDYwMjAwNTBaMDMxMTAvBgNV BAMTKDlFNkQzOUM1OEYyOUVFQTlEODlDOUQ1RDhEQkQwM0ZDMjA0OEZENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT6HUYxWDpnak3ibyJ30G5YkfF ksEieey/ZmOVMaERhxpN1ycQSrNiUi1BfJC8OMVt6A5HM4kYsF6xMt8HYHMzrLsS fn5i9uGvKfb4nOQ60zLhrzFkgvkJTxCBnVUZh61Mg/yR70Uf8B7WV+CdZ5UGlOm9 lBT/grHsMt9eU4OzFF+lNnYkd8O2u+WSSggYniT1aSZQg2LtFLTpZJrx2WQ2G/4/ +ZfCqB7o5NobEHs7qy8pt+TgRT/Uk0hgpZXj/Q+XZq79n/VLS6jntZNjuRCkfFjL wBP2x0t5UPKQTrOcAvgM/Wnc6hazLbgnhox7ll6UTwisO1e0J5pb6AEFnglzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUnm05xY8p7qnYnJ1djb0D/CBI/WIwHwYDVR0j BBgwFoAUmJr9OpEl3ciK3OK237xjfjinEfUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjA1NjMwMEY3MDM0NEZFRjA2RkNFOTQwNjQ1MDI4Mjkz NzAwMUVBMUM3M0JGQzQzQjBBMDQ2NTc5MEE1REU0LzAvOTg5QUZEM0E5MTI1RERD ODhBRENFMkI2REZCQzYzN0UzOEE3MTFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODlBRkQzQTkxMjVEREM4OEFE Q0UyQjZERkJDNjM3RTM4QTcxMUY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkIwNTYzMDBGNzAzNDRGRUYwNkZDRTk0MDY0NTAyODI5MzcwMDFFQTFD NzNCRkM0M0IwQTA0NjU3OTBBNURFNC8wLzk4OUFGRDNBOTEyNUREQzg4QURDRTJC NkRGQkM2MzdFMzhBNzExRjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHltKgFVgQsU4bnJaeqrZgQP+N 6iHB/LkbAsq+wZGs2wB5iU8T//jP9YW7SVdlLwYzBOf8mG/cCi28vNzlQHe2E3bI wjejDeSNhLO3MrbPkicbIfwEr6OjFTEO9HqijX6sxAjZwwp28Ik7qlsXFfrCG4EY n1x1ud30crkE2t7TKd5OYaQ/3D8DQ9JKH/gxGQMRbeSoAEOGe+f3NEX/bbZhAQrw XgbP88bRI6oWJSzKDjMEGYwZ7Jm6zvHjg9gQmllg1BOvRnV5F/yDN7S91PVWVvtl znxZYmnWSQggs7J1aw+iUNW2nvqNxP/QZgMQIa+W7GM1p+YUdp2Qo+xZ8Vvf -----END CERTIFICATE-----Generated at Sat Nov 1 22:40:43 2025 by rpki-client