$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft File: 89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft (raw, json) Hash identifier: 5cs5VTl494rkRpWEXl/kwIETamWw6FTjpgT/2966cjc= Subject key identifier: 48:55:E1:5E:9E:59:6A:5E:CE:1B:6E:E4:E0:A3:F7:B5:68:EC:5A:3C Authority key identifier: 89:C8:23:AD:60:CB:A4:B0:7B:90:92:FB:3D:0B:F1:A0:B8:C1:5A:BE Certificate issuer: /CN=89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE Certificate serial: 693CA32072247AAC8BBCD0524F2846EEA3F38DB8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft Manifest number: 0131 Signing time: Sun 19 Oct 2025 14:20:26 +0000 Manifest this update: Sun 19 Oct 2025 14:15:26 +0000 Manifest next update: Fri 24 Oct 2025 12:00:26 +0000 Files and hashes: 1: 89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.crl (hash: c8zgf/YprVvXGrLjk69X/g5zoE94cPu+e8nSLzBYJfM=) 2: 323830333a383338303a3a2f33322d3332203d3e203631343536.roa (hash: ugJJMQ/VR+xvtZfo5m9dI5gzHfynGLb9FffpYbGUZ/k=) 3: 3133312e3130382e38302e302f32322d3234203d3e203631343536.roa (hash: ZV/IPoy9xu9/dvLCMjWu8qealxbYGNNXenYZKjseSfc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.crl rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:3c:a3:20:72:24:7a:ac:8b:bc:d0:52:4f:28:46:ee:a3:f3:8d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE Validity Not Before: Oct 19 14:15:26 2025 GMT Not After : Oct 24 12:00:26 2025 GMT Subject: CN=4855E15E9E596A5ECE1B6EE4E0A3F7B568EC5A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:22:62:b0:8e:42:63:f1:3f:2f:b9:68:db: 90:d0:a0:ff:79:00:bd:53:7e:f5:75:6b:92:7e:5e: a4:84:d4:e5:45:34:6c:ab:7d:af:cb:46:25:d4:1d: 67:2d:6c:63:5f:96:ce:e0:38:a7:ad:b5:bc:3a:e2: 1b:94:74:b7:85:ad:1b:17:e5:9f:00:8b:e9:28:a7: 48:98:f8:cb:0d:01:fa:c7:4f:d1:43:74:39:70:0a: b6:b5:0c:c1:ad:a5:14:d3:ae:7b:9d:3d:f4:85:c5: 8f:fc:aa:ad:89:57:dc:82:e1:cc:62:d4:56:89:cf: 6a:eb:48:74:8a:2f:6e:c1:95:49:15:ad:69:97:21: f3:7d:5e:57:bc:54:16:e3:91:e5:52:8c:86:a1:05: 72:e4:94:24:1f:d9:2b:ef:30:36:74:71:92:61:50: 5c:c6:9d:cb:66:72:83:fa:94:6f:e1:35:b2:5b:4d: 40:0b:f9:79:fc:ae:f7:16:21:e0:c2:ac:20:12:ed: ab:1e:75:37:d1:ba:f2:12:ef:cd:67:5b:d8:23:6d: 49:bf:3a:b7:34:c5:a7:8e:89:a7:4d:95:9e:ef:0a: b1:35:ce:bc:19:f7:00:0d:6e:d6:18:1b:c0:6e:e9: 24:63:fa:ae:c5:6b:0c:29:e3:d1:e2:08:84:f2:3c: b4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:55:E1:5E:9E:59:6A:5E:CE:1B:6E:E4:E0:A3:F7:B5:68:EC:5A:3C X509v3 Authority Key Identifier: keyid:89:C8:23:AD:60:CB:A4:B0:7B:90:92:FB:3D:0B:F1:A0:B8:C1:5A:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:55:38:9b:8a:94:9a:d9:d1:c2:4a:fe:3e:df:94:14:8a:90: 98:63:c0:11:21:d2:97:0d:4b:32:12:5c:40:ce:9e:19:b7:62: bb:e4:49:1f:c1:0f:ab:c2:bb:09:02:22:4f:95:f1:13:d2:36: 28:5c:2f:e7:18:bf:e3:b6:55:5b:9f:e4:81:c6:31:05:78:b5: b2:b3:6d:fd:fd:18:61:6c:86:2f:39:0d:b4:51:1b:c7:1c:ce: 30:ed:ea:bf:ff:8a:13:9a:ca:c3:fb:5e:c2:a8:38:c3:3e:7c: 6d:5e:28:4c:5a:2c:c2:e8:98:ad:4a:b2:4e:0b:c6:9e:54:4e: 41:27:ab:a5:89:84:d1:31:1b:bf:cc:49:51:0c:e7:b3:db:df: 07:26:ad:a3:10:22:10:b7:d3:0f:95:d7:39:9d:a4:c2:ed:7c: ca:fa:7d:32:43:d4:5e:2b:81:67:0b:2c:a8:4f:e8:3f:d4:f2: 15:50:c6:c4:74:65:c7:8f:d1:6d:9b:a9:11:e7:05:59:15:fc: 50:7e:ef:a6:c0:6c:c7:66:f4:d5:df:63:e5:fb:47:4d:08:b6: ae:d9:19:8a:ed:7d:23:0d:1e:54:a4:51:e6:c0:79:ce:d0:a6: 16:84:23:a3:7c:34:08:fd:20:d2:b8:b3:43:f5:de:67:14:9d: a7:b4:28:fd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaTyjIHIkeqyLvNBSTyhG7qPzjbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlDODIzQUQ2MENCQTRCMDdCOTA5MkZCM0QwQkYxQTBC OEMxNUFCRTAeFw0yNTEwMTkxNDE1MjZaFw0yNTEwMjQxMjAwMjZaMDMxMTAvBgNV BAMTKDQ4NTVFMTVFOUU1OTZBNUVDRTFCNkVFNEUwQTNGN0I1NjhFQzVBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVoCJisI5CY/E/L7lo25DQoP95 AL1TfvV1a5J+XqSE1OVFNGyrfa/LRiXUHWctbGNfls7gOKettbw64huUdLeFrRsX 5Z8Ai+kop0iY+MsNAfrHT9FDdDlwCra1DMGtpRTTrnudPfSFxY/8qq2JV9yC4cxi 1FaJz2rrSHSKL27BlUkVrWmXIfN9Xle8VBbjkeVSjIahBXLklCQf2SvvMDZ0cZJh UFzGnctmcoP6lG/hNbJbTUAL+Xn8rvcWIeDCrCAS7asedTfRuvIS781nW9gjbUm/ Orc0xaeOiadNlZ7vCrE1zrwZ9wANbtYYG8Bu6SRj+q7Fawwp49HiCITyPLTJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSFXhXp5Zal7OG27k4KP3tWjsWjwwHwYDVR0j BBgwFoAUicgjrWDLpLB7kJL7PQvxoLjBWr4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMjE3MkEyM0JFNzdBODYwQTIyNDlGNTU0MTNBMTY0NTBB NTk2NzFFRjlBMkY4MTJBOTQyRUMwN0Q5RDA1QzBGLzAvODlDODIzQUQ2MENCQTRC MDdCOTA5MkZCM0QwQkYxQTBCOEMxNUFCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUM4MjNBRDYwQ0JBNEIwN0I5 MDkyRkIzRDBCRjFBMEI4QzE1QUJFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzIxNzJBMjNCRTc3QTg2MEEyMjQ5RjU1NDEzQTE2NDUwQTU5NjcxRUY5 QTJGODEyQTk0MkVDMDdEOUQwNUMwRi8wLzg5QzgyM0FENjBDQkE0QjA3QjkwOTJG QjNEMEJGMUEwQjhDMTVBQkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApVTibipSa2dHCSv4+35QUipCY Y8ARIdKXDUsyElxAzp4Zt2K75EkfwQ+rwrsJAiJPlfET0jYoXC/nGL/jtlVbn+SB xjEFeLWys239/RhhbIYvOQ20URvHHM4w7eq//4oTmsrD+17CqDjDPnxtXihMWizC 6JitSrJOC8aeVE5BJ6uliYTRMRu/zElRDOez298HJq2jECIQt9MPldc5naTC7XzK +n0yQ9ReK4FnCyyoT+g/1PIVUMbEdGXHj9Ftm6kR5wVZFfxQfu+mwGzHZvTV32Pl +0dNCLau2RmK7X0jDR5UpFHmwHnO0KYWhCOjfDQI/SDSuLND9d5nFJ2ntCj9 -----END CERTIFICATE-----Generated at Mon Oct 20 00:33:34 2025 by rpki-client