$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft File: 89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft (raw, json) Hash identifier: P0Sp8GkTfarx+yjDpN2gjpzVE71EhdO5iSVL+S+5RT4= Subject key identifier: 20:EE:6A:E7:E3:2C:C3:72:FF:B6:63:80:82:F0:8D:31:4D:77:D3:56 Authority key identifier: 89:C8:23:AD:60:CB:A4:B0:7B:90:92:FB:3D:0B:F1:A0:B8:C1:5A:BE Certificate issuer: /CN=89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE Certificate serial: 1AF325085B9F7DB22812BFC94FADAF9C5584283A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft Manifest number: F9 Signing time: Wed 02 Jul 2025 12:27:48 +0000 Manifest this update: Wed 02 Jul 2025 12:22:48 +0000 Manifest next update: Mon 07 Jul 2025 17:42:48 +0000 Files and hashes: 1: 323830333a383338303a3a2f33322d3332203d3e203631343536.roa (hash: ugJJMQ/VR+xvtZfo5m9dI5gzHfynGLb9FffpYbGUZ/k=) 2: 3133312e3130382e38302e302f32322d3234203d3e203631343536.roa (hash: ZV/IPoy9xu9/dvLCMjWu8qealxbYGNNXenYZKjseSfc=) 3: 89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.crl (hash: iAWMjpKivieuy/evCiNC42/e/AyyUkhkRXRgCFqXSzs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.crl rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 17:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f3:25:08:5b:9f:7d:b2:28:12:bf:c9:4f:ad:af:9c:55:84:28:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE Validity Not Before: Jul 2 12:22:48 2025 GMT Not After : Jul 7 17:42:48 2025 GMT Subject: CN=20EE6AE7E32CC372FFB6638082F08D314D77D356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:83:a1:76:14:b8:e6:80:69:e5:80:26:c9: 4b:65:11:09:f4:7f:7a:4e:4c:09:45:ad:62:a4:33: 6e:a8:dc:cd:7c:79:ce:ab:ce:5c:b0:75:15:cb:a0: 4a:26:ed:73:72:7c:ef:e8:99:f3:04:19:fd:0f:2d: 7b:0d:f9:40:f9:1e:6f:4e:ca:b2:30:f9:5f:20:bf: d6:97:a5:b8:55:c3:e2:dc:cc:18:48:4e:79:98:53: f8:12:8c:ae:33:db:d6:b2:d4:2e:68:1a:f2:b5:ee: 01:07:8e:7f:18:3b:c4:b5:5e:68:ba:96:76:ad:e6: 54:84:df:00:50:ce:b3:13:f4:66:43:26:cf:eb:9c: 70:8b:40:fc:7a:3d:15:83:af:31:d1:e8:21:44:af: 6e:08:c0:11:22:88:65:5a:d2:7f:19:ea:28:a8:f5: 33:27:81:ca:d6:6d:8b:04:7f:43:3f:0b:b2:1d:c7: ab:00:dc:86:9b:2c:15:5a:a6:1f:a7:c3:20:db:9a: 9a:a6:c8:bf:87:de:e3:55:d2:e5:4f:8e:2f:48:41: 25:67:c9:ac:a5:32:1a:cf:d9:b4:72:6a:08:40:85: e3:a1:7b:69:f6:63:9f:ce:4a:05:3d:f0:45:54:10: a6:48:6d:7a:7e:00:67:fb:79:f0:05:7a:2f:7f:75: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EE:6A:E7:E3:2C:C3:72:FF:B6:63:80:82:F0:8D:31:4D:77:D3:56 X509v3 Authority Key Identifier: keyid:89:C8:23:AD:60:CB:A4:B0:7B:90:92:FB:3D:0B:F1:A0:B8:C1:5A:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1e:b7:28:ad:91:40:5b:e1:d5:0e:ee:f9:8e:21:76:69:3e: 54:66:3e:0d:d5:83:43:e5:5f:13:d1:06:36:ee:db:35:c4:a6: 5f:fd:2e:0d:24:52:f5:f5:0f:ba:f3:96:5a:11:0f:07:e9:4b: cf:42:4d:cd:21:b9:8e:7a:15:f4:43:ce:2c:90:9b:09:d9:37: 40:fd:88:ed:ea:90:f6:47:26:5d:9b:70:87:4a:73:8f:bb:6a: 78:8c:2c:18:a5:60:ae:bf:e4:3c:9e:d8:e2:31:f2:0a:b7:77: b8:be:45:87:77:17:8f:9c:b5:f3:cc:f6:c1:c2:27:c2:fb:53: 9b:75:f1:0d:e7:80:d6:5d:d9:35:4f:55:85:1a:2a:b2:62:6a: 4d:c5:c6:a7:2d:ab:34:2a:f9:76:cc:42:ca:76:b5:8f:c6:cb: 10:67:29:4d:68:97:1f:d3:d3:ec:e0:0c:e6:45:54:18:7f:fc: 5a:ea:f7:e8:81:d3:27:c0:71:bc:6c:14:f5:61:03:c4:50:9f: 40:a3:6d:65:0b:5e:f9:bd:33:62:1a:46:46:84:49:bd:37:2a: fa:fb:9e:e0:4b:96:81:24:f3:34:59:15:7b:3b:a3:d6:04:01: 08:c2:54:33:04:ab:a4:5d:ce:2a:d2:db:e7:d7:07:f7:da:bf: 69:a7:1e:20 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGvMlCFuffbIoEr/JT62vnFWEKDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlDODIzQUQ2MENCQTRCMDdCOTA5MkZCM0QwQkYxQTBC OEMxNUFCRTAeFw0yNTA3MDIxMjIyNDhaFw0yNTA3MDcxNzQyNDhaMDMxMTAvBgNV BAMTKDIwRUU2QUU3RTMyQ0MzNzJGRkI2NjM4MDgyRjA4RDMxNEQ3N0QzNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXYOhdhS45oBp5YAmyUtlEQn0 f3pOTAlFrWKkM26o3M18ec6rzlywdRXLoEom7XNyfO/omfMEGf0PLXsN+UD5Hm9O yrIw+V8gv9aXpbhVw+LczBhITnmYU/gSjK4z29ay1C5oGvK17gEHjn8YO8S1Xmi6 lnat5lSE3wBQzrMT9GZDJs/rnHCLQPx6PRWDrzHR6CFEr24IwBEiiGVa0n8Z6iio 9TMngcrWbYsEf0M/C7Idx6sA3IabLBVaph+nwyDbmpqmyL+H3uNV0uVPji9IQSVn yaylMhrP2bRyaghAheOhe2n2Y5/OSgU98EVUEKZIbXp+AGf7efAFei9/dQU3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIO5q5+Msw3L/tmOAgvCNMU1301YwHwYDVR0j BBgwFoAUicgjrWDLpLB7kJL7PQvxoLjBWr4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMjE3MkEyM0JFNzdBODYwQTIyNDlGNTU0MTNBMTY0NTBB NTk2NzFFRjlBMkY4MTJBOTQyRUMwN0Q5RDA1QzBGLzAvODlDODIzQUQ2MENCQTRC MDdCOTA5MkZCM0QwQkYxQTBCOEMxNUFCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUM4MjNBRDYwQ0JBNEIwN0I5 MDkyRkIzRDBCRjFBMEI4QzE1QUJFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzIxNzJBMjNCRTc3QTg2MEEyMjQ5RjU1NDEzQTE2NDUwQTU5NjcxRUY5 QTJGODEyQTk0MkVDMDdEOUQwNUMwRi8wLzg5QzgyM0FENjBDQkE0QjA3QjkwOTJG QjNEMEJGMUEwQjhDMTVBQkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsHrcorZFAW+HVDu75jiF2aT5U Zj4N1YND5V8T0QY27ts1xKZf/S4NJFL19Q+685ZaEQ8H6UvPQk3NIbmOehX0Q84s kJsJ2TdA/Yjt6pD2RyZdm3CHSnOPu2p4jCwYpWCuv+Q8ntjiMfIKt3e4vkWHdxeP nLXzzPbBwifC+1ObdfEN54DWXdk1T1WFGiqyYmpNxcanLas0Kvl2zELKdrWPxssQ ZylNaJcf09Ps4AzmRVQYf/xa6vfogdMnwHG8bBT1YQPEUJ9Ao21lC175vTNiGkZG hEm9Nyr6+57gS5aBJPM0WRV7O6PWBAEIwlQzBKukXc4q0tvn1wf32r9ppx4g -----END CERTIFICATE-----Generated at Fri Jul 4 08:54:42 2025 by rpki-client