$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft File: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json) Hash identifier: qE+5Fx/hOl8UfhBvXUBQAq0nMhXWbVaezk3yWL5if9g= Subject key identifier: 71:FA:D4:66:FA:B2:5F:AE:63:EA:20:07:3E:FD:5A:35:07:55:E7:E8 Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 Certificate issuer: /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Certificate serial: 223470ADFEAB8593BFA8C5C6A1F2D0C152B8823E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft Manifest number: 0113 Signing time: Wed 17 Sep 2025 17:01:23 +0000 Manifest this update: Wed 17 Sep 2025 16:56:23 +0000 Manifest next update: Tue 23 Sep 2025 16:14:23 +0000 Files and hashes: 1: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: oO7wKo0+SVqOjkWZN+0gQ07+aVmVbN4/1cQXmOBOt+E=) 2: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: cjDMOsdDm1A1OVgR0UqR6acEy6Enje1ltyICeWVEVg4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:34:70:ad:fe:ab:85:93:bf:a8:c5:c6:a1:f2:d0:c1:52:b8:82:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Validity Not Before: Sep 17 16:56:23 2025 GMT Not After : Sep 23 16:14:23 2025 GMT Subject: CN=71FAD466FAB25FAE63EA20073EFD5A350755E7E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:cd:24:a2:f5:c7:54:39:28:74:d9:7c:f6: d4:59:dd:07:1a:f4:c6:3e:6b:1a:c5:f7:92:97:1e: 06:59:c0:fe:f9:db:95:4a:ba:3c:2f:b4:0a:a2:d3: 50:fb:95:9c:43:fe:c7:9e:e2:9b:b2:0e:5d:74:c9: 71:6b:77:ed:fc:1e:08:1a:7e:ef:b4:d1:09:30:16: 91:10:f3:56:f6:ea:12:65:b3:10:ca:53:29:7a:89: 10:9f:80:81:a4:4c:fb:0c:44:e2:33:ba:aa:97:5d: e5:f7:2e:79:4d:72:97:3f:86:9a:f0:95:00:f4:bc: 96:d2:f3:d8:3b:ea:80:a4:bd:84:c6:bd:b9:6c:2f: cb:31:bb:22:30:e9:15:2e:b8:34:9e:e0:f9:37:be: cb:36:20:82:a8:00:d0:cf:aa:08:d0:ea:77:4d:74: 13:66:75:41:23:10:d8:08:92:53:b9:28:28:79:46: 09:2b:23:c6:66:0a:11:4e:69:0f:dd:31:ff:cb:ce: b7:7d:a5:a3:d6:14:ce:b6:cf:f5:a7:a8:4e:b1:60: 42:cf:c3:c7:29:eb:8e:6c:8c:a1:17:d7:a7:94:18: 33:f9:57:ad:10:0e:bf:1c:98:39:42:0e:a6:0b:c7: 61:e7:41:90:40:dc:d6:cc:18:f7:18:22:3c:26:31: d1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FA:D4:66:FA:B2:5F:AE:63:EA:20:07:3E:FD:5A:35:07:55:E7:E8 X509v3 Authority Key Identifier: keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:33:b4:c1:f1:e8:95:e5:35:6d:0a:56:af:f4:df:9a:89:50: 20:2d:ff:c6:ff:5f:63:81:9a:78:01:cc:e8:23:56:ca:ce:7b: 58:ba:e7:f3:7d:0a:78:84:10:24:36:3a:fc:b1:8a:08:01:67: e8:cb:f6:df:6e:e0:5c:08:3b:cd:68:25:a6:b9:a3:30:c9:be: c9:c7:ac:3e:99:28:f3:62:03:f0:e3:c1:ca:7c:7e:2f:3a:b4: 12:cc:36:c7:83:82:98:37:75:94:39:10:de:2e:79:e0:e6:f3: f3:67:41:cc:97:75:f3:88:92:2c:94:f7:97:0f:92:dc:26:a3: 7c:e6:aa:20:58:b0:99:81:2c:75:42:82:29:2f:60:2d:44:a8: 61:02:31:4f:b7:13:59:3c:df:31:76:43:c6:99:98:64:3a:38: bc:6f:04:3a:80:07:de:ac:6d:cd:2c:19:78:57:db:31:ae:cc: 26:bf:e7:d1:1e:54:65:f0:88:95:00:fc:df:05:6d:e6:d7:a5: 7a:58:54:fc:ad:cf:3e:a6:66:8c:14:4c:ea:16:f2:f9:fb:72: 54:37:0f:a2:c9:e1:ff:01:52:6e:f4:8e:0c:e8:87:3c:07:8b: ce:f6:5d:7e:82:90:1b:25:18:fe:58:98:9e:87:0f:75:53:8f: 61:bc:75:e0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIjRwrf6rhZO/qMXGofLQwVK4gj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5NkI5NTlDNzI0NUI5Q0JFOEFFMEY3QkQ2QTc1MjEy Q0NBMTU4OTAeFw0yNTA5MTcxNjU2MjNaFw0yNTA5MjMxNjE0MjNaMDMxMTAvBgNV BAMTKDcxRkFENDY2RkFCMjVGQUU2M0VBMjAwNzNFRkQ1QTM1MDc1NUU3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzs0kovXHVDkodNl89tRZ3Qca 9MY+axrF95KXHgZZwP7525VKujwvtAqi01D7lZxD/see4puyDl10yXFrd+38Hgga fu+00QkwFpEQ81b26hJlsxDKUyl6iRCfgIGkTPsMROIzuqqXXeX3LnlNcpc/hprw lQD0vJbS89g76oCkvYTGvblsL8sxuyIw6RUuuDSe4Pk3vss2IIKoANDPqgjQ6ndN dBNmdUEjENgIklO5KCh5RgkrI8ZmChFOaQ/dMf/Lzrd9paPWFM62z/WnqE6xYELP w8cp645sjKEX16eUGDP5V60QDr8cmDlCDqYLx2HnQZBA3NbMGPcYIjwmMdErAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcfrUZvqyX65j6iAHPv1aNQdV5+gwHwYDVR0j BBgwFoAUK5a5WcckW5y+iuD3vWp1ISzKFYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEMzRUE3OTZERTJBOERDODRCOTg5Q0RGQTQ2RkVBMEVF MTBDRkI4QUE3MTRGMjBGNDNEMUNCMDEwRDRBMkFELzAvMkI5NkI5NTlDNzI0NUI5 Q0JFOEFFMEY3QkQ2QTc1MjEyQ0NBMTU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjk2Qjk1OUM3MjQ1QjlDQkU4 QUUwRjdCRDZBNzUyMTJDQ0ExNTg5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhDM0VBNzk2REUyQThEQzg0Qjk4OUNERkE0NkZFQTBFRTEwQ0ZCOEFB NzE0RjIwRjQzRDFDQjAxMEQ0QTJBRC8wLzJCOTZCOTU5QzcyNDVCOUNCRThBRTBG N0JENkE3NTIxMkNDQTE1ODkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmM7TB8eiV5TVtClav9N+aiVAg Lf/G/19jgZp4AczoI1bKzntYuufzfQp4hBAkNjr8sYoIAWfoy/bfbuBcCDvNaCWm uaMwyb7Jx6w+mSjzYgPw48HKfH4vOrQSzDbHg4KYN3WUORDeLnng5vPzZ0HMl3Xz iJIslPeXD5LcJqN85qogWLCZgSx1QoIpL2AtRKhhAjFPtxNZPN8xdkPGmZhkOji8 bwQ6gAferG3NLBl4V9sxrswmv+fRHlRl8IiVAPzfBW3m16V6WFT8rc8+pmaMFEzq FvL5+3JUNw+iyeH/AVJu9I4M6Ic8B4vO9l1+gpAbJRj+WJiehw91U49hvHXg -----END CERTIFICATE-----Generated at Thu Sep 18 18:45:00 2025 by rpki-client