$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft File: 89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft (raw, json) Hash identifier: Wne8G8K33N06dui52j1FBfQB7slvgZaws/ECg0EjtEo= Subject key identifier: 4E:D9:B4:75:33:DD:B4:41:0B:E2:B8:A1:F9:D5:1B:F0:CD:E7:55:C4 Authority key identifier: 89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5 Certificate issuer: /CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5 Certificate serial: 2B1D563504C86F67B1D3F86D82D89CA1247BFD69 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft Manifest number: 017E Signing time: Tue 07 Apr 2026 16:59:26 +0000 Manifest this update: Tue 07 Apr 2026 16:54:26 +0000 Manifest next update: Mon 13 Apr 2026 09:11:26 +0000 Files and hashes: 1: 3137392e36302e3230382e302f32322d3234203d3e203532343931.roa (hash: HTg89WH5inTSH0w3xQ7f4hRwNyNXyMHg5JYTB8OMgR8=) 2: 89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl (hash: BgzWXYA+AQ7hZTogwRVJJoTLHz4UamTucrHTcV0Ytv0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 12 Apr 2026 05:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1d:56:35:04:c8:6f:67:b1:d3:f8:6d:82:d8:9c:a1:24:7b:fd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5 Validity Not Before: Apr 7 16:54:26 2026 GMT Not After : Apr 13 09:11:26 2026 GMT Subject: CN=4ED9B47533DDB4410BE2B8A1F9D51BF0CDE755C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:5c:c7:f6:13:3d:3f:ad:bb:f6:f1:0c:4e: a6:cf:b6:c5:ee:ef:65:06:83:67:74:52:a7:c6:23: 99:bc:56:aa:5b:2b:fa:da:01:4e:a9:43:e6:6b:12: 93:0b:3a:f0:f7:fe:7d:0f:57:c7:07:4d:cd:c7:b5: 42:3e:2c:e8:e8:5a:72:68:7c:5c:30:35:d5:a3:e3: 54:36:6b:a9:33:20:2a:d2:8a:7b:25:94:6b:f0:0c: 35:bd:ba:e8:c6:94:2d:4c:30:c1:96:a8:37:4d:17: 99:06:b0:cf:8d:b0:09:b6:d0:2d:36:c9:c4:30:28: 87:b8:fb:5a:1c:ee:b0:36:13:0c:48:04:e7:4f:56: 71:ff:c6:87:82:68:1c:79:f9:49:74:dd:0c:00:0e: d2:b0:93:ba:6e:f8:b9:88:65:10:a8:aa:3b:92:72: 83:f6:4b:0e:5b:b6:56:50:1f:af:fd:5f:1e:93:39: 81:72:f7:ca:f4:f1:9e:5f:cf:2c:7d:0c:70:53:b3: ee:c5:32:07:b5:30:7d:46:ba:47:6c:c2:45:b2:17: 59:87:ab:ea:20:b5:b5:2b:4d:22:c9:07:60:bf:5b: 96:b9:bd:6a:30:06:32:79:e6:9a:0c:2e:3e:ab:4a: cb:db:82:15:d4:15:4c:ee:ab:b1:4b:50:6f:6a:68: 90:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D9:B4:75:33:DD:B4:41:0B:E2:B8:A1:F9:D5:1B:F0:CD:E7:55:C4 X509v3 Authority Key Identifier: keyid:89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b1:0a:42:22:b3:f1:40:b7:bf:b7:dc:5a:b1:c7:45:19:0c: e7:d7:9c:f2:9e:fb:35:66:c8:98:1c:0d:f6:04:cc:b4:07:4f: a9:25:5c:44:bc:2f:2c:13:b0:c7:a6:04:71:34:01:4a:6f:b9: 9a:1f:e9:39:e0:eb:63:1b:2b:2b:bf:3d:5d:ff:37:b8:84:33: 16:20:19:6d:a0:87:f7:18:d6:27:3a:e6:2e:6b:11:84:52:97: 13:d9:c5:58:d6:36:8d:0f:9c:3a:6c:fd:ab:b5:16:b8:ba:12: 7e:ad:9b:17:70:08:a2:42:50:21:2b:3a:08:c6:8a:07:8d:30: cb:2c:df:1b:67:30:d2:4e:b2:b5:f5:7f:07:d6:7c:5e:cf:77: 4e:7c:62:27:0a:6b:31:96:2b:76:a9:f7:98:f8:36:3e:f4:05: 75:3e:30:aa:fe:0d:cc:ea:31:8b:c6:1d:1b:92:e2:35:bc:b3: 9e:f1:99:a0:e7:de:34:f5:bc:b5:13:aa:17:d6:ad:c3:dc:de: 80:89:9e:68:08:08:50:90:80:ac:02:0e:5c:03:42:fb:37:c0: 92:21:c2:92:71:1b:59:04:b2:ab:8b:f4:ee:b2:56:48:7c:3f: cc:59:1f:34:42:b1:87:b5:e1:1f:d5:c4:db:f0:38:e1:80:7b: 58:7c:51:07 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKx1WNQTIb2ex0/htgticoSR7/WkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlEQjVDMERDN0M5ODUzMDE1QzJCNkQ4QjA1QTFGREQw QUEyRUJBNTAeFw0yNjA0MDcxNjU0MjZaFw0yNjA0MTMwOTExMjZaMDMxMTAvBgNV BAMTKDRFRDlCNDc1MzNEREI0NDEwQkUyQjhBMUY5RDUxQkYwQ0RFNzU1QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAFzH9hM9P6279vEMTqbPtsXu 72UGg2d0UqfGI5m8VqpbK/raAU6pQ+ZrEpMLOvD3/n0PV8cHTc3HtUI+LOjoWnJo fFwwNdWj41Q2a6kzICrSinsllGvwDDW9uujGlC1MMMGWqDdNF5kGsM+NsAm20C02 ycQwKIe4+1oc7rA2EwxIBOdPVnH/xoeCaBx5+Ul03QwADtKwk7pu+LmIZRCoqjuS coP2Sw5btlZQH6/9Xx6TOYFy98r08Z5fzyx9DHBTs+7FMge1MH1GukdswkWyF1mH q+ogtbUrTSLJB2C/W5a5vWowBjJ55poMLj6rSsvbghXUFUzuq7FLUG9qaJDFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTtm0dTPdtEEL4rih+dUb8M3nVcQwHwYDVR0j BBgwFoAUidtcDcfJhTAVwrbYsFof3Qqi66UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRDM5QkFFQ0ZCMDgwNzk1QjczODJFNTlFREY0NkNGMkJG NEE0M0Y3NzAwNUE0NjcwNEEyMzI5NTIzRjE2QTk5LzAvODlEQjVDMERDN0M5ODUz MDE1QzJCNkQ4QjA1QTFGREQwQUEyRUJBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OURCNUMwREM3Qzk4NTMwMTVD MkI2RDhCMDVBMUZERDBBQTJFQkE1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkQzOUJBRUNGQjA4MDc5NUI3MzgyRTU5RURGNDZDRjJCRjRBNDNGNzcw MDVBNDY3MDRBMjMyOTUyM0YxNkE5OS8wLzg5REI1QzBEQzdDOTg1MzAxNUMyQjZE OEIwNUExRkREMEFBMkVCQTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzsQpCIrPxQLe/t9xascdFGQzn 15zynvs1ZsiYHA32BMy0B0+pJVxEvC8sE7DHpgRxNAFKb7maH+k54OtjGysrvz1d /ze4hDMWIBltoIf3GNYnOuYuaxGEUpcT2cVY1jaND5w6bP2rtRa4uhJ+rZsXcAii QlAhKzoIxooHjTDLLN8bZzDSTrK19X8H1nxez3dOfGInCmsxlit2qfeY+DY+9AV1 PjCq/g3M6jGLxh0bkuI1vLOe8Zmg59409by1E6oX1q3D3N6AiZ5oCAhQkICsAg5c A0L7N8CSIcKScRtZBLKri/TuslZIfD/MWR80QrGHteEf1cTb8DjhgHtYfFEH -----END CERTIFICATE-----Generated at Wed Apr 8 13:39:44 2026 by rpki-client