$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.mft File: 5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.mft (raw, json) Hash identifier: vW9WZCmqTWJuPwkHgW4NKoVVUaHGBVZUJMSN9itU6wk= Subject key identifier: 53:CC:20:51:80:00:4B:F8:D5:37:B2:23:C0:B8:E6:0B:F0:AA:8A:19 Authority key identifier: 58:89:CE:AB:5F:6F:13:99:C6:38:E6:A5:1D:68:E2:60:D3:5B:4C:B2 Certificate issuer: /CN=5889CEAB5F6F1399C638E6A51D68E260D35B4CB2 Certificate serial: 3FA901B3E035A991D8D39BBF6F98AEF9E4BE4E9C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.mft Manifest number: 0125 Signing time: Mon 20 Oct 2025 04:39:40 +0000 Manifest this update: Mon 20 Oct 2025 04:34:40 +0000 Manifest next update: Sat 25 Oct 2025 16:53:40 +0000 Files and hashes: 1: 323830333a653731303a3a2f33322d3332203d3e20323732313032.roa (hash: KgOYED0c6jfxyYC5iL4P+qSc76oKKO52q/Iw4n/bRz0=) 2: 5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.crl (hash: 9N7Fjnmh2KoT5NzUe/uEX3YFbblo0OLpaEMO+UXD564=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.crl rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a9:01:b3:e0:35:a9:91:d8:d3:9b:bf:6f:98:ae:f9:e4:be:4e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5889CEAB5F6F1399C638E6A51D68E260D35B4CB2 Validity Not Before: Oct 20 04:34:40 2025 GMT Not After : Oct 25 16:53:40 2025 GMT Subject: CN=53CC205180004BF8D537B223C0B8E60BF0AA8A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:14:45:87:f5:64:4f:bd:d9:ba:c8:cb:40:48: ce:a5:bb:9f:c5:9a:4c:bf:7f:f8:dd:ac:fc:33:67: 08:6b:dc:67:55:d5:01:b3:2f:b3:8f:0d:fc:7d:02: e0:67:83:f1:e0:79:81:16:7a:75:36:d0:cf:1e:e3: 83:0f:cb:bf:5e:b4:5e:1b:b6:22:76:f7:38:d6:ea: 24:03:f1:88:d0:c8:d9:eb:b0:07:68:c5:01:a8:87: ef:30:66:ff:23:fb:46:71:ae:5a:cb:17:7e:be:a5: c6:01:58:86:76:12:a6:2a:ae:1d:1e:bb:c6:83:19: d5:62:46:2d:fa:43:17:9a:bd:5f:6c:03:33:c1:b8: 58:a3:e9:f2:53:94:3d:50:50:65:1a:22:3b:50:20: b6:59:fd:4b:6b:69:b8:37:4b:3a:38:31:2f:6a:17: 59:6b:a5:52:23:de:10:8d:dd:e5:9d:d1:1d:e2:6b: 54:16:19:3e:f5:ce:12:45:4b:bc:22:0c:bb:29:a3: 0b:68:7c:c6:5f:d4:a7:31:92:fe:32:41:be:8f:6d: 42:72:36:61:95:14:81:0c:fa:2f:47:93:7a:83:d1: 2c:eb:23:51:ba:6b:2d:6e:00:b8:bf:6b:26:64:89: b1:f9:34:47:ba:c8:be:04:f8:6c:a3:b9:7d:1d:86: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CC:20:51:80:00:4B:F8:D5:37:B2:23:C0:B8:E6:0B:F0:AA:8A:19 X509v3 Authority Key Identifier: keyid:58:89:CE:AB:5F:6F:13:99:C6:38:E6:A5:1D:68:E2:60:D3:5B:4C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:50:3f:30:7b:fa:62:51:bf:86:1b:bc:9a:3f:6f:42:a0:00: 9c:37:fb:42:fb:c8:e8:57:b2:d4:7e:19:4b:bc:09:77:6c:ae: 6e:51:fa:af:7e:e4:bd:21:68:b4:ef:82:cd:67:35:bd:b0:78: 77:87:83:20:50:f7:ea:82:8e:19:97:97:3e:08:25:bb:18:00: df:2e:39:2c:da:db:20:fe:88:e9:79:50:e5:23:ff:13:e4:53: 1b:6a:90:94:3e:c5:84:c1:21:94:25:e5:d1:88:2a:8a:6b:a8: 78:20:0a:4e:51:38:8e:c8:52:f2:d5:e6:18:bb:78:58:5e:ae: 5a:9b:7f:64:92:c4:24:7e:af:ae:7c:6f:6f:04:99:b7:fe:4a: 0d:df:23:54:fe:70:83:b2:23:1c:1c:de:fa:1a:2e:af:64:b2: fb:72:ff:42:4d:0b:7a:24:bb:d8:13:5d:23:e6:c7:db:65:7f: 7b:25:0e:69:a2:de:a0:29:d4:96:8a:a6:bc:aa:0d:19:97:e6: da:ac:0f:66:9e:de:69:10:88:d8:f7:ff:96:fc:33:c6:70:97: 79:b7:74:0e:2a:d4:90:88:9d:31:90:ef:ef:d6:bf:cd:f3:fb: 29:ad:35:0a:88:4b:69:c7:e5:20:fc:c5:a9:11:b2:ad:6e:b8: 7f:fb:ce:8f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUP6kBs+A1qZHY05u/b5iu+eS+TpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg4OUNFQUI1RjZGMTM5OUM2MzhFNkE1MUQ2OEUyNjBE MzVCNENCMjAeFw0yNTEwMjAwNDM0NDBaFw0yNTEwMjUxNjUzNDBaMDMxMTAvBgNV BAMTKDUzQ0MyMDUxODAwMDRCRjhENTM3QjIyM0MwQjhFNjBCRjBBQThBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWFEWH9WRPvdm6yMtASM6lu5/F mky/f/jdrPwzZwhr3GdV1QGzL7OPDfx9AuBng/HgeYEWenU20M8e44MPy79etF4b tiJ29zjW6iQD8YjQyNnrsAdoxQGoh+8wZv8j+0ZxrlrLF36+pcYBWIZ2EqYqrh0e u8aDGdViRi36QxeavV9sAzPBuFij6fJTlD1QUGUaIjtQILZZ/Utrabg3Szo4MS9q F1lrpVIj3hCN3eWd0R3ia1QWGT71zhJFS7wiDLspowtofMZf1Kcxkv4yQb6PbUJy NmGVFIEM+i9Hk3qD0SzrI1G6ay1uALi/ayZkibH5NEe6yL4E+GyjuX0dhs2JAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUU8wgUYAAS/jVN7IjwLjmC/CqihkwHwYDVR0j BBgwFoAUWInOq19vE5nGOOalHWjiYNNbTLIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BODA1MzlFRTExRUE4QUUzNDkzQjM2Q0YyNDU1M0U5NDFC MEI1RkNCRDk3RDlEMDZEQTJEOEEwMjM5QzRBRDRCLzAvNTg4OUNFQUI1RjZGMTM5 OUM2MzhFNkE1MUQ2OEUyNjBEMzVCNENCMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81ODg5Q0VBQjVGNkYxMzk5QzYz OEU2QTUxRDY4RTI2MEQzNUI0Q0IyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTgwNTM5RUUxMUVBOEFFMzQ5M0IzNkNGMjQ1NTNFOTQxQjBCNUZDQkQ5 N0Q5RDA2REEyRDhBMDIzOUM0QUQ0Qi8wLzU4ODlDRUFCNUY2RjEzOTlDNjM4RTZB NTFENjhFMjYwRDM1QjRDQjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPUD8we/piUb+GG7yaP29CoACc N/tC+8joV7LUfhlLvAl3bK5uUfqvfuS9IWi074LNZzW9sHh3h4MgUPfqgo4Zl5c+ CCW7GADfLjks2tsg/ojpeVDlI/8T5FMbapCUPsWEwSGUJeXRiCqKa6h4IApOUTiO yFLy1eYYu3hYXq5am39kksQkfq+ufG9vBJm3/koN3yNU/nCDsiMcHN76Gi6vZLL7 cv9CTQt6JLvYE10j5sfbZX97JQ5pot6gKdSWiqa8qg0Zl+barA9mnt5pEIjY9/+W /DPGcJd5t3QOKtSQiJ0xkO/v1r/N8/sprTUKiEtpx+Ug/MWpEbKtbrh/+86P -----END CERTIFICATE-----Generated at Mon Oct 20 17:37:49 2025 by rpki-client