$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft File: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json) Hash identifier: RMrZspPL+OZ1Iyio+pmSVlsB/TJN7/bFREDoW9MHcEI= Subject key identifier: 49:9A:AF:8B:F7:A2:98:DD:A3:48:45:8F:EA:A0:6D:FB:C5:23:A1:D0 Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 Certificate issuer: /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Certificate serial: 4408CAFD47154457C6AE12E589967F2D02319866 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft Manifest number: E1 Signing time: Tue 03 Jun 2025 10:44:36 +0000 Manifest this update: Tue 03 Jun 2025 10:39:36 +0000 Manifest next update: Sun 08 Jun 2025 13:19:36 +0000 Files and hashes: 1: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: 05jQSLFF0qP2dJSLL4LloF02HijwdaGzZ1k1qII4wpk=) 2: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: oO7wKo0+SVqOjkWZN+0gQ07+aVmVbN4/1cQXmOBOt+E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:08:ca:fd:47:15:44:57:c6:ae:12:e5:89:96:7f:2d:02:31:98:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Validity Not Before: Jun 3 10:39:36 2025 GMT Not After : Jun 8 13:19:36 2025 GMT Subject: CN=499AAF8BF7A298DDA348458FEAA06DFBC523A1D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:70:c9:65:81:d9:47:3c:ea:f8:69:2e:37:54: 03:1f:80:ba:3e:0a:31:05:8f:b3:1e:a6:72:b8:0a: 27:fb:5d:eb:c7:c3:bd:0e:4a:45:81:f8:0a:d6:3d: 25:c1:c0:f3:69:c9:43:0a:3b:0d:2c:23:a5:72:64: d8:09:32:98:33:5e:5e:73:f5:9c:50:3c:de:8c:49: 3e:d7:32:19:76:fc:d2:91:96:f0:02:2b:c5:ab:49: a3:f7:b1:80:84:69:71:63:7f:b0:ce:9e:bb:07:0d: 5c:e4:9a:b3:ed:26:21:57:4d:98:70:5d:4d:f7:dd: 63:7b:01:39:a3:53:c4:60:88:07:d3:54:88:d4:a0: 61:9b:32:af:ab:66:f5:43:16:fe:f8:a8:f7:0b:cc: 7f:d1:3e:24:df:78:f8:39:45:16:b4:d3:43:7f:0d: 56:34:42:22:9f:6f:39:2b:91:ab:c5:5c:e3:5e:c3: 02:46:0d:90:e9:f9:05:51:b2:9b:7a:b3:4e:35:2c: 02:43:7c:f3:58:37:b1:9e:d7:ff:cb:aa:da:a8:b0: f8:92:06:26:5b:b5:ef:6e:26:af:50:8d:52:3b:20: d1:a3:44:36:b8:60:24:a5:bb:ed:2b:2c:96:ea:57: 0d:3c:46:a1:6e:a6:f1:0b:b2:8a:1c:9e:98:2c:7b: 10:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9A:AF:8B:F7:A2:98:DD:A3:48:45:8F:EA:A0:6D:FB:C5:23:A1:D0 X509v3 Authority Key Identifier: keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:5a:24:f4:46:1d:b9:b0:63:22:d7:9f:b9:87:41:94:21:11: a4:84:f1:8e:c2:d5:dd:1b:f2:a4:24:11:ac:f2:9c:24:03:fd: 52:bd:29:7a:99:13:a7:c9:72:c1:7e:2d:e6:b3:61:11:12:a5: 91:f0:d6:7c:42:95:f2:98:35:a8:60:97:11:f5:69:c6:3f:0c: 23:5c:2c:47:36:93:5f:9a:da:5a:5b:33:9f:5b:5c:61:66:32: f9:80:e4:fe:dd:a2:23:0b:51:3e:79:32:b7:ae:9e:44:55:21: b8:53:60:93:2c:e3:a4:66:82:63:47:8a:04:ba:5c:1a:5e:0e: 33:dc:6f:da:96:b6:0f:38:b9:1d:55:72:2d:c7:00:68:92:e8: 6b:8c:64:67:fa:84:d8:d6:eb:67:01:49:42:78:53:41:f7:4b: ed:cd:df:0e:c4:a4:83:c8:d8:7e:0c:65:a0:d7:7c:6d:78:f4: 15:15:d9:1e:b3:6d:fc:21:e2:d6:75:a0:4e:9f:d0:a1:40:67: dd:f7:09:fb:30:be:75:4a:84:a5:db:da:b7:bd:e0:8c:cf:f1: 2e:bf:96:1c:98:b2:11:32:5e:ba:a4:b5:45:21:bb:fd:a6:a8: 3d:dd:3c:6c:12:42:91:6a:8d:ba:1f:22:7d:e5:b8:80:ce:df: ba:70:e8:e1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURAjK/UcVRFfGrhLliZZ/LQIxmGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5NkI5NTlDNzI0NUI5Q0JFOEFFMEY3QkQ2QTc1MjEy Q0NBMTU4OTAeFw0yNTA2MDMxMDM5MzZaFw0yNTA2MDgxMzE5MzZaMDMxMTAvBgNV BAMTKDQ5OUFBRjhCRjdBMjk4RERBMzQ4NDU4RkVBQTA2REZCQzUyM0ExRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCecMllgdlHPOr4aS43VAMfgLo+ CjEFj7MepnK4Cif7XevHw70OSkWB+ArWPSXBwPNpyUMKOw0sI6VyZNgJMpgzXl5z 9ZxQPN6MST7XMhl2/NKRlvACK8WrSaP3sYCEaXFjf7DOnrsHDVzkmrPtJiFXTZhw XU333WN7ATmjU8RgiAfTVIjUoGGbMq+rZvVDFv74qPcLzH/RPiTfePg5RRa000N/ DVY0QiKfbzkrkavFXONewwJGDZDp+QVRspt6s041LAJDfPNYN7Ge1//LqtqosPiS BiZbte9uJq9QjVI7INGjRDa4YCSlu+0rLJbqVw08RqFupvELsoocnpgsexDXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSZqvi/eimN2jSEWP6qBt+8UjodAwHwYDVR0j BBgwFoAUK5a5WcckW5y+iuD3vWp1ISzKFYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEMzRUE3OTZERTJBOERDODRCOTg5Q0RGQTQ2RkVBMEVF MTBDRkI4QUE3MTRGMjBGNDNEMUNCMDEwRDRBMkFELzAvMkI5NkI5NTlDNzI0NUI5 Q0JFOEFFMEY3QkQ2QTc1MjEyQ0NBMTU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjk2Qjk1OUM3MjQ1QjlDQkU4 QUUwRjdCRDZBNzUyMTJDQ0ExNTg5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhDM0VBNzk2REUyQThEQzg0Qjk4OUNERkE0NkZFQTBFRTEwQ0ZCOEFB NzE0RjIwRjQzRDFDQjAxMEQ0QTJBRC8wLzJCOTZCOTU5QzcyNDVCOUNCRThBRTBG N0JENkE3NTIxMkNDQTE1ODkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC9WiT0Rh25sGMi15+5h0GUIRGk hPGOwtXdG/KkJBGs8pwkA/1SvSl6mROnyXLBfi3ms2EREqWR8NZ8QpXymDWoYJcR 9WnGPwwjXCxHNpNfmtpaWzOfW1xhZjL5gOT+3aIjC1E+eTK3rp5EVSG4U2CTLOOk ZoJjR4oEulwaXg4z3G/alrYPOLkdVXItxwBokuhrjGRn+oTY1utnAUlCeFNB90vt zd8OxKSDyNh+DGWg13xtePQVFdkes238IeLWdaBOn9ChQGfd9wn7ML51SoSl29q3 veCMz/Euv5YcmLIRMl66pLVFIbv9pqg93TxsEkKRao26HyJ95biAzt+6cOjh -----END CERTIFICATE-----Generated at Wed Jun 4 12:28:42 2025 by rpki-client