$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft File: 89BE1B948EADFCFCFDF457A0A903F357865A2553.mft (raw, json) Hash identifier: xRGLdFAsL/ljzSwUgYS7osoPcibNgVYRbiPmCrcpkdc= Subject key identifier: E2:DB:67:06:CE:2A:AA:56:D9:26:36:3A:6F:08:A7:85:B8:AF:70:9C Authority key identifier: 89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53 Certificate issuer: /CN=89BE1B948EADFCFCFDF457A0A903F357865A2553 Certificate serial: 3708287C318FA1D676A55AFDC775DFCB79751135 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft Manifest number: E1 Signing time: Tue 03 Jun 2025 02:45:04 +0000 Manifest this update: Tue 03 Jun 2025 02:40:04 +0000 Manifest next update: Sun 08 Jun 2025 06:37:04 +0000 Files and hashes: 1: 3139302e3135312e3132382e302f32322d3232203d3e20323632323037.roa (hash: J5mJNJDd/Innmd2wvjmRh69YPDMzXrHUP3i/omT8tmo=) 2: 89BE1B948EADFCFCFDF457A0A903F357865A2553.crl (hash: YBeYO/Ave6yrLCYlB84k/9Yv4HhjjC35DQL9CWIdcdU=) 3: 323830333a343863303a3a2f33322d3438203d3e20323632323037.roa (hash: Yzy5yBk5UnBADEcqfV2VnPVrbcI8oghPw4JwF8rFiuY=) 4: 3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa (hash: sQ3vcvkuajb8A0gi65c2qc/KNP6DvKwXx0foWlW5RB4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:08:28:7c:31:8f:a1:d6:76:a5:5a:fd:c7:75:df:cb:79:75:11:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BE1B948EADFCFCFDF457A0A903F357865A2553 Validity Not Before: Jun 3 02:40:04 2025 GMT Not After : Jun 8 06:37:04 2025 GMT Subject: CN=E2DB6706CE2AAA56D926363A6F08A785B8AF709C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:49:34:c0:9f:57:0a:08:2e:80:d1:6f:6b:e9: d1:7e:24:b3:26:71:21:e8:22:a1:e3:13:9f:a5:57: 7b:44:b5:de:c0:b3:9e:38:1b:da:b1:d1:5d:f3:93: 41:da:d2:2f:c4:4a:6e:97:bc:27:08:ce:72:5c:78: 4d:8b:3b:89:1d:7c:60:ab:55:3e:e3:03:9b:74:aa: ef:c3:f6:36:71:5b:cf:74:6c:23:65:a1:48:b5:d7: d2:12:13:dd:1a:1b:6b:52:69:61:36:67:75:d9:d5: 16:5e:ea:81:4f:c3:d7:db:71:63:35:e3:3c:78:5f: cf:c7:a7:52:d3:08:11:ba:7c:9f:29:05:18:2b:aa: 67:5d:14:38:c7:43:d8:93:58:c1:96:37:e6:fc:54: f2:aa:ae:15:ff:28:bf:0f:79:19:40:c0:d8:95:5e: d3:41:07:7d:61:58:35:a5:83:81:18:3f:0d:24:5d: b6:d9:de:ae:cf:96:fc:10:9b:86:68:9c:63:96:40: 83:88:37:78:91:6d:f3:30:49:41:3c:ba:47:74:30: 32:ce:eb:6e:0b:5c:0a:d3:1d:c0:9a:31:a7:6a:13: 33:d8:93:c5:aa:37:3b:ec:d9:d1:d4:40:f7:27:6f: ec:f1:2c:0a:e5:8e:ea:78:88:0b:7e:49:c3:8b:e1: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DB:67:06:CE:2A:AA:56:D9:26:36:3A:6F:08:A7:85:B8:AF:70:9C X509v3 Authority Key Identifier: keyid:89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:cf:46:a7:9f:6b:02:4b:8a:bd:86:c6:d8:e9:a6:81:e6:be: c9:f4:63:e9:55:d3:f6:9a:cf:ab:2b:09:50:93:4a:72:eb:9b: 88:3e:70:ce:b3:2b:50:79:e2:4e:af:d9:c6:ed:7d:b7:24:6d: 53:46:1f:8e:22:c9:90:9a:56:c9:01:b6:f9:d9:c8:cc:5d:ce: b0:1c:96:8b:0e:90:f5:fc:73:e1:9b:3e:f9:25:22:93:9a:b8: 47:8c:a3:4d:91:94:9e:8f:44:88:42:41:20:a4:b2:97:35:b5: b1:cc:2f:a3:1d:e6:7c:d7:12:8b:4a:5e:8c:0c:90:a9:e5:5b: 9a:93:9d:40:18:d7:7a:5f:7a:13:1a:94:91:2b:d3:4c:5f:32: b2:89:02:0d:09:25:af:06:b1:81:37:9f:a0:0b:de:18:ae:d6: 9d:3c:5d:1b:d6:af:03:b5:df:50:4d:14:90:f4:fe:29:95:92: b2:9a:c6:40:87:22:42:f9:f1:d8:84:21:ea:f5:90:11:9e:16: 50:cc:59:14:77:47:69:aa:02:27:91:af:96:26:63:dc:f2:a7: 8a:38:16:e7:31:d8:07:1a:28:be:ac:7c:62:08:9d:19:f3:c1: aa:84:21:e3:7d:b8:0e:0d:74:70:07:98:8d:34:c9:2d:01:df: da:a2:48:80 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNwgofDGPodZ2pVr9x3Xfy3l1ETUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCRTFCOTQ4RUFERkNGQ0ZERjQ1N0EwQTkwM0YzNTc4 NjVBMjU1MzAeFw0yNTA2MDMwMjQwMDRaFw0yNTA2MDgwNjM3MDRaMDMxMTAvBgNV BAMTKEUyREI2NzA2Q0UyQUFBNTZEOTI2MzYzQTZGMDhBNzg1QjhBRjcwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmSTTAn1cKCC6A0W9r6dF+JLMm cSHoIqHjE5+lV3tEtd7As544G9qx0V3zk0Ha0i/ESm6XvCcIznJceE2LO4kdfGCr VT7jA5t0qu/D9jZxW890bCNloUi119ISE90aG2tSaWE2Z3XZ1RZe6oFPw9fbcWM1 4zx4X8/Hp1LTCBG6fJ8pBRgrqmddFDjHQ9iTWMGWN+b8VPKqrhX/KL8PeRlAwNiV XtNBB31hWDWlg4EYPw0kXbbZ3q7PlvwQm4ZonGOWQIOIN3iRbfMwSUE8ukd0MDLO 624LXArTHcCaMadqEzPYk8WqNzvs2dHUQPcnb+zxLArljup4iAt+ScOL4bxtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU4ttnBs4qqlbZJjY6bwinhbivcJwwHwYDVR0j BBgwFoAUib4blI6t/Pz99FegqQPzV4ZaJVMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMTY1NzU4RDE0RTBDOTcyRjhCQTU2MDMzMDI1MDdGRThB Njc3RTcyMjNENzJBODIxMUFFNjJEQkQ1NTY1RTdELzAvODlCRTFCOTQ4RUFERkNG Q0ZERjQ1N0EwQTkwM0YzNTc4NjVBMjU1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUJFMUI5NDhFQURGQ0ZDRkRG NDU3QTBBOTAzRjM1Nzg2NUEyNTUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDE2NTc1OEQxNEUwQzk3MkY4QkE1NjAzMzAyNTA3RkU4QTY3N0U3MjIz RDcyQTgyMTFBRTYyREJENTU2NUU3RC8wLzg5QkUxQjk0OEVBREZDRkNGREY0NTdB MEE5MDNGMzU3ODY1QTI1NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSz0ann2sCS4q9hsbY6aaB5r7J 9GPpVdP2ms+rKwlQk0py65uIPnDOsytQeeJOr9nG7X23JG1TRh+OIsmQmlbJAbb5 2cjMXc6wHJaLDpD1/HPhmz75JSKTmrhHjKNNkZSej0SIQkEgpLKXNbWxzC+jHeZ8 1xKLSl6MDJCp5Vuak51AGNd6X3oTGpSRK9NMXzKyiQINCSWvBrGBN5+gC94Yrtad PF0b1q8Dtd9QTRSQ9P4plZKymsZAhyJC+fHYhCHq9ZARnhZQzFkUd0dpqgInka+W JmPc8qeKOBbnMdgHGii+rHxiCJ0Z88GqhCHjfbgODXRwB5iNNMktAd/aokiA -----END CERTIFICATE-----Generated at Wed Jun 4 12:38:40 2025 by rpki-client