$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft File: 89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft (raw, json) Hash identifier: LRwci7+RFnUT/DxxpagypLNBo5Pd1PpUILcKqIcTLnc= Subject key identifier: C4:B6:CA:A0:86:AE:37:D9:9C:1A:E7:10:8A:71:3E:7A:25:94:8C:99 Authority key identifier: 89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5 Certificate issuer: /CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5 Certificate serial: 6750EE557DEF2C1CC79809280FABF67649CE8041 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft Manifest number: F1 Signing time: Wed 02 Jul 2025 13:08:08 +0000 Manifest this update: Wed 02 Jul 2025 13:03:08 +0000 Manifest next update: Tue 08 Jul 2025 12:49:08 +0000 Files and hashes: 1: 89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl (hash: XUfvf7m7YXe3+zvg89xoaEctaH13s8BAJvFzEOl6gaM=) 2: 3137392e36302e3230382e302f32322d3234203d3e203532343931.roa (hash: a5MVWgzS9CicCzinp6R7LIQqjYcufxM/b0UY/mQXwKc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 14:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:50:ee:55:7d:ef:2c:1c:c7:98:09:28:0f:ab:f6:76:49:ce:80:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5 Validity Not Before: Jul 2 13:03:08 2025 GMT Not After : Jul 8 12:49:08 2025 GMT Subject: CN=C4B6CAA086AE37D99C1AE7108A713E7A25948C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ff:59:c6:79:81:de:0b:3e:1a:c8:aa:cc:bd: 4f:26:b1:4f:49:6b:a4:be:fb:64:15:e5:08:7a:df: b9:f7:c7:2b:7c:d4:31:dc:49:af:54:01:00:68:b8: 4c:97:f5:65:b8:d6:58:ba:6b:62:84:5b:c5:9f:eb: 11:2e:dd:a6:86:91:26:dd:f9:2c:39:4e:66:53:ca: b7:37:5a:74:35:2e:67:2d:ef:4a:0a:85:e2:25:ed: 61:44:60:31:16:94:be:ba:54:02:99:f4:1c:c7:c6: b5:51:1e:ef:f2:e5:42:7c:c4:41:cc:80:ed:ef:b3: c8:c7:3d:a2:e9:68:a7:54:ab:d6:2b:b7:ba:84:3e: 7f:e0:83:d7:21:80:cc:d4:90:d2:7c:a0:08:e8:36: 36:18:d3:02:4c:9a:63:e6:26:93:ff:05:73:06:77: 5d:08:58:3a:ff:49:0e:9c:35:88:36:c6:ae:1c:76: 0d:3f:6c:20:e0:73:72:6e:3f:b2:b8:c0:6a:e6:a0: a0:d5:33:11:9b:00:cf:e0:53:b0:e8:cc:7f:24:99: 06:95:a6:ac:71:52:64:09:b3:eb:ec:9c:66:e3:0a: 74:6f:1a:5c:b3:48:b4:5e:28:32:12:cd:b7:62:22: 09:d2:e3:af:ac:3d:f2:83:cc:9f:03:31:c9:ed:fb: cc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B6:CA:A0:86:AE:37:D9:9C:1A:E7:10:8A:71:3E:7A:25:94:8C:99 X509v3 Authority Key Identifier: keyid:89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:67:1f:8b:d0:a9:88:09:65:72:31:05:7d:3c:b8:36:48:4b: 4f:bc:d3:d6:ad:71:df:10:0d:0a:ac:5b:4c:76:da:e2:17:91: 01:b9:6a:02:bd:60:75:93:7e:0f:95:d3:67:ed:8e:38:ba:03: 97:96:ab:e9:f0:6e:57:87:e5:03:f9:a2:20:6b:1e:f4:35:3e: 3c:60:60:4b:14:e9:cd:a1:b6:90:3a:e3:fd:3f:bd:43:ae:95: 33:39:cc:10:91:f9:0c:73:22:d4:9a:08:e4:dc:04:98:06:45: 8f:40:62:51:ca:59:cb:4a:cb:88:bb:75:34:26:7a:2d:be:87: 2c:04:35:c2:96:d8:43:b9:96:dc:83:ca:d4:39:55:69:d5:09: 3f:7e:7f:83:77:60:fa:e3:43:a4:69:eb:aa:d1:de:bd:05:11: 64:a7:c8:24:8b:32:b9:a6:2a:ea:08:28:38:49:f9:3e:47:50: ab:54:5e:4f:d5:88:e8:9e:6e:c5:60:b1:38:19:9f:ac:0e:22: 49:29:35:15:09:ca:02:07:0a:b6:02:74:42:c0:e8:6a:4b:1c: 57:23:47:91:dc:18:1d:77:47:87:54:de:38:31:88:c9:12:8c: a7:40:b3:9a:5b:22:f4:77:7d:3a:b1:dc:93:8b:e7:b0:f0:ea: 9e:47:48:63 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZ1DuVX3vLBzHmAkoD6v2dknOgEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlEQjVDMERDN0M5ODUzMDE1QzJCNkQ4QjA1QTFGREQw QUEyRUJBNTAeFw0yNTA3MDIxMzAzMDhaFw0yNTA3MDgxMjQ5MDhaMDMxMTAvBgNV BAMTKEM0QjZDQUEwODZBRTM3RDk5QzFBRTcxMDhBNzEzRTdBMjU5NDhDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx/1nGeYHeCz4ayKrMvU8msU9J a6S++2QV5Qh637n3xyt81DHcSa9UAQBouEyX9WW41li6a2KEW8Wf6xEu3aaGkSbd +Sw5TmZTyrc3WnQ1Lmct70oKheIl7WFEYDEWlL66VAKZ9BzHxrVRHu/y5UJ8xEHM gO3vs8jHPaLpaKdUq9Yrt7qEPn/gg9chgMzUkNJ8oAjoNjYY0wJMmmPmJpP/BXMG d10IWDr/SQ6cNYg2xq4cdg0/bCDgc3JuP7K4wGrmoKDVMxGbAM/gU7DozH8kmQaV pqxxUmQJs+vsnGbjCnRvGlyzSLReKDISzbdiIgnS46+sPfKDzJ8DMcnt+8ztAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUxLbKoIauN9mcGucQinE+eiWUjJkwHwYDVR0j BBgwFoAUidtcDcfJhTAVwrbYsFof3Qqi66UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRDM5QkFFQ0ZCMDgwNzk1QjczODJFNTlFREY0NkNGMkJG NEE0M0Y3NzAwNUE0NjcwNEEyMzI5NTIzRjE2QTk5LzAvODlEQjVDMERDN0M5ODUz MDE1QzJCNkQ4QjA1QTFGREQwQUEyRUJBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OURCNUMwREM3Qzk4NTMwMTVD MkI2RDhCMDVBMUZERDBBQTJFQkE1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkQzOUJBRUNGQjA4MDc5NUI3MzgyRTU5RURGNDZDRjJCRjRBNDNGNzcw MDVBNDY3MDRBMjMyOTUyM0YxNkE5OS8wLzg5REI1QzBEQzdDOTg1MzAxNUMyQjZE OEIwNUExRkREMEFBMkVCQTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMZx+L0KmICWVyMQV9PLg2SEtP vNPWrXHfEA0KrFtMdtriF5EBuWoCvWB1k34PldNn7Y44ugOXlqvp8G5Xh+UD+aIg ax70NT48YGBLFOnNobaQOuP9P71DrpUzOcwQkfkMcyLUmgjk3ASYBkWPQGJRylnL SsuIu3U0JnotvocsBDXClthDuZbcg8rUOVVp1Qk/fn+Dd2D640Okaeuq0d69BRFk p8gkizK5pirqCCg4Sfk+R1CrVF5P1Yjonm7FYLE4GZ+sDiJJKTUVCcoCBwq2AnRC wOhqSxxXI0eR3Bgdd0eHVN44MYjJEoynQLOaWyL0d306sdyTi+ew8OqeR0hj -----END CERTIFICATE-----Generated at Thu Jul 3 13:00:27 2025 by rpki-client