
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft
File:                     89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft (raw, json)
Hash identifier:          k1iDgTHl8hGFjYCdgngbCHs5m/Olgt9bDNE93Q47Stc=
Subject key identifier:   FB:5B:4B:AC:41:B1:E2:0F:09:56:4B:29:21:8E:0A:CA:1B:C1:56:14
Authority key identifier: 89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5
Certificate issuer:       /CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5
Certificate serial:       14EBAE69D4A5D1AB010B16732A0EECFAE62E75CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft
Manifest number:          012B
Signing time:             Thu 30 Oct 2025 15:33:39 +0000
Manifest this update:     Thu 30 Oct 2025 15:28:39 +0000
Manifest next update:     Tue 04 Nov 2025 14:46:39 +0000
Files and hashes:         1: 3137392e36302e3230382e302f32322d3234203d3e203532343931.roa (hash: a5MVWgzS9CicCzinp6R7LIQqjYcufxM/b0UY/mQXwKc=)
                          2: 89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl (hash: 5rCbHZbpKyQE145oVrBciKVmObt1jw3q+FumQqeou1Q=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:46:39 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:eb:ae:69:d4:a5:d1:ab:01:0b:16:73:2a:0e:ec:fa:e6:2e:75:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5
        Validity
            Not Before: Oct 30 15:28:39 2025 GMT
            Not After : Nov  4 14:46:39 2025 GMT
        Subject: CN=FB5B4BAC41B1E20F09564B29218E0ACA1BC15614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:ff:d9:9c:ca:57:85:90:74:42:10:40:75:
                    94:67:bb:70:60:99:ec:93:23:ba:fc:1d:3b:25:64:
                    8a:16:5a:ed:0c:f4:8b:a9:e6:5b:80:02:d3:e4:31:
                    8a:77:28:77:5c:25:04:20:60:91:04:31:dd:df:0e:
                    15:ff:47:db:ce:17:ab:4d:24:f6:22:67:62:82:90:
                    03:40:6a:0d:63:9a:7b:31:7d:54:ad:37:32:41:2b:
                    7d:b6:fa:73:85:06:79:20:33:e1:40:c0:99:d2:61:
                    bc:31:8d:51:d2:da:ec:8e:9a:bc:ec:62:2a:46:f8:
                    e9:b3:0a:e2:2d:54:e8:5b:f2:d7:f7:8f:c4:b1:59:
                    f7:17:89:91:cf:09:70:25:64:10:d9:f2:94:65:2d:
                    ac:02:b1:d5:ff:ac:c8:2f:cf:30:a4:6b:45:c2:93:
                    72:7c:d3:43:c3:5c:54:3d:6f:40:f2:1c:3d:0a:c5:
                    15:cd:ce:dd:0f:97:00:f2:5c:be:7a:b8:3e:32:61:
                    61:a3:e0:a7:ea:b2:aa:5b:b8:65:9f:c3:1b:a4:36:
                    db:fd:b3:9a:dd:fc:9e:00:24:93:49:ab:28:e5:e8:
                    be:c7:d0:cc:71:6c:a9:95:8c:30:d4:14:d5:af:b3:
                    7f:90:91:7b:32:5b:b3:4a:31:85:67:b0:57:93:16:
                    a3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5B:4B:AC:41:B1:E2:0F:09:56:4B:29:21:8E:0A:CA:1B:C1:56:14
            X509v3 Authority Key Identifier:
                keyid:89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer
            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         0c:44:6f:5e:99:98:4f:4b:e0:05:2a:9d:80:84:b6:d0:eb:01:
         18:e2:c0:57:82:2e:28:fd:2d:9c:43:08:40:7f:4b:a1:b0:4b:
         19:50:2a:69:1a:6a:f2:00:c4:05:59:43:1a:27:6f:3c:48:5a:
         04:3b:6e:8c:e0:94:d6:b3:4d:06:85:cc:9a:fe:db:34:fc:48:
         d5:92:ef:92:c4:b1:41:df:64:23:e9:4c:42:ec:34:30:60:4a:
         17:cd:87:38:29:32:72:27:f8:5a:84:c9:1f:2a:ee:00:5d:17:
         7e:2e:93:97:e3:a9:52:3d:3f:9e:b9:e6:80:c2:38:4e:76:ed:
         11:c3:0a:e2:89:8a:ed:b9:be:0b:dc:c6:80:4d:ed:6a:aa:ef:
         7b:e9:84:30:9f:ed:08:a1:98:f8:39:40:27:df:2f:d1:2c:6f:
         d9:97:b2:c8:97:30:e8:e3:24:5d:72:69:41:cb:50:8e:95:cf:
         e9:06:03:9f:03:0e:a1:f2:bf:12:bd:fc:1a:c8:6b:1a:f2:06:
         94:92:02:95:7f:1e:19:c3:e0:82:56:8f:89:0b:22:32:d8:3d:
         59:b9:29:9c:fc:ae:d7:11:a7:bf:b2:12:83:8a:96:04:d4:cb:
         e6:4e:35:e1:2d:6d:d0:69:d1:39:9c:b3:d7:ab:51:cd:ce:1b:
         7e:b5:a6:d9
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUFOuuadSl0asBCxZzKg7s+uYudc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlEQjVDMERDN0M5ODUzMDE1QzJCNkQ4QjA1QTFGREQw
QUEyRUJBNTAeFw0yNTEwMzAxNTI4MzlaFw0yNTExMDQxNDQ2MzlaMDMxMTAvBgNV
BAMTKEZCNUI0QkFDNDFCMUUyMEYwOTU2NEIyOTIxOEUwQUNBMUJDMTU2MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWf/ZnMpXhZB0QhBAdZRnu3Bg
meyTI7r8HTslZIoWWu0M9Iup5luAAtPkMYp3KHdcJQQgYJEEMd3fDhX/R9vOF6tN
JPYiZ2KCkANAag1jmnsxfVStNzJBK322+nOFBnkgM+FAwJnSYbwxjVHS2uyOmrzs
YipG+OmzCuItVOhb8tf3j8SxWfcXiZHPCXAlZBDZ8pRlLawCsdX/rMgvzzCka0XC
k3J800PDXFQ9b0DyHD0KxRXNzt0PlwDyXL56uD4yYWGj4KfqsqpbuGWfwxukNtv9
s5rd/J4AJJNJqyjl6L7H0MxxbKmVjDDUFNWvs3+QkXsyW7NKMYVnsFeTFqPvAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU+1tLrEGx4g8JVkspIY4KyhvBVhQwHwYDVR0j
BBgwFoAUidtcDcfJhTAVwrbYsFof3Qqi66UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRDM5QkFFQ0ZCMDgwNzk1QjczODJFNTlFREY0NkNGMkJG
NEE0M0Y3NzAwNUE0NjcwNEEyMzI5NTIzRjE2QTk5LzAvODlEQjVDMERDN0M5ODUz
MDE1QzJCNkQ4QjA1QTFGREQwQUEyRUJBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OURCNUMwREM3Qzk4NTMwMTVD
MkI2RDhCMDVBMUZERDBBQTJFQkE1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkQzOUJBRUNGQjA4MDc5NUI3MzgyRTU5RURGNDZDRjJCRjRBNDNGNzcw
MDVBNDY3MDRBMjMyOTUyM0YxNkE5OS8wLzg5REI1QzBEQzdDOTg1MzAxNUMyQjZE
OEIwNUExRkREMEFBMkVCQTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMRG9emZhPS+AFKp2AhLbQ6wEY
4sBXgi4o/S2cQwhAf0uhsEsZUCppGmryAMQFWUMaJ288SFoEO26M4JTWs00Ghcya
/ts0/EjVku+SxLFB32Qj6UxC7DQwYEoXzYc4KTJyJ/hahMkfKu4AXRd+LpOX46lS
PT+eueaAwjhOdu0RwwriiYrtub4L3MaATe1qqu976YQwn+0IoZj4OUAn3y/RLG/Z
l7LIlzDo4yRdcmlBy1COlc/pBgOfAw6h8r8SvfwayGsa8gaUkgKVfx4Zw+CCVo+J
CyIy2D1ZuSmc/K7XEae/shKDipYE1MvmTjXhLW3QadE5nLPXq1HNzht+tabZ
-----END CERTIFICATE-----
Generated at Fri Oct 31 12:10:13 2025 by rpki-client