$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft File: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json) Hash identifier: 6ZvUfsbqzZ0D9BuGFY7vnJN6Y4iLyrr1Ji1tf79Kdvw= Subject key identifier: 26:99:B1:08:B2:34:7D:28:E1:53:F4:AA:53:67:A0:62:AC:F5:E2:FC Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 Certificate issuer: /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Certificate serial: 59CCA5EC6CAE72B987D109B89552B93FBA759DA2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft Manifest number: 01E0 Signing time: Wed 28 Oct 2026 07:20:05 +0000 Manifest this update: Wed 28 Oct 2026 07:15:05 +0000 Manifest next update: Tue 03 Nov 2026 02:39:05 +0000 Files and hashes: 1: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: JBoE5orKs3qGBCf/s1WxVe9gz13xaIRgU8FM+gw8jVI=) 2: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: 2yEIjUF2fEPUL86o8w4pwk+eVelS5xc2STIvqPSnONM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 15:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:cc:a5:ec:6c:ae:72:b9:87:d1:09:b8:95:52:b9:3f:ba:75:9d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Validity Not Before: Oct 28 07:15:05 2026 GMT Not After : Nov 3 02:39:05 2026 GMT Subject: CN=2699B108B2347D28E153F4AA5367A062ACF5E2FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:90:99:e1:62:c0:fa:b1:7b:48:73:e5:5b: fa:55:24:92:17:5a:44:b3:a6:42:ff:c8:86:24:05: 26:f1:5b:b4:66:5b:14:70:15:cc:be:7b:e4:42:10: 50:5d:d0:c2:6a:9a:e2:6c:32:b8:ee:83:23:35:88: d7:5f:2f:2c:1d:11:7a:ee:21:f9:dc:b2:65:d4:0a: 97:56:10:03:24:28:64:86:09:5d:e3:75:49:5d:4b: 2c:3a:9e:ab:44:1a:a8:f3:78:42:51:59:7e:12:13: 56:e8:47:d3:5d:4e:25:60:67:11:7d:90:05:48:1f: b9:86:1e:7e:05:ee:ff:f1:2e:56:00:9a:f6:c7:d5: 96:c5:ba:9b:19:3b:2c:8d:17:de:01:9b:49:ce:99: 43:79:3d:3f:1f:bf:e7:92:48:d3:ce:50:9d:d3:40: 2e:b5:b6:ca:8b:b1:a0:98:e2:4b:1f:35:68:ef:1a: 21:ec:c4:ef:cb:d2:36:4b:5c:37:c1:72:6f:be:31: 43:1e:2f:7b:86:84:21:eb:09:19:7e:3f:0b:df:ca: 29:bf:1c:b3:51:cd:0f:af:bd:3a:10:0e:19:e6:c0: 6a:df:12:aa:18:46:53:59:69:e9:81:b2:1e:3f:47: 8b:0f:37:5a:11:7b:b1:53:7e:f6:f4:eb:5f:b5:25: a3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:99:B1:08:B2:34:7D:28:E1:53:F4:AA:53:67:A0:62:AC:F5:E2:FC X509v3 Authority Key Identifier: keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:6b:41:58:7c:ae:8f:b5:6b:17:a4:cf:dc:87:3f:d8:b1:95: 30:86:a0:25:f1:cb:80:74:c5:d5:db:df:1f:58:fe:ee:17:7e: 4b:a2:85:3c:ee:47:b5:8b:a2:a0:f0:1a:00:79:f2:89:2b:11: 65:3e:2d:0c:d0:c2:73:e6:a5:51:42:c3:ce:bc:c4:0e:7d:9e: 06:22:9a:17:50:b0:2c:0c:b9:e5:4b:41:aa:16:20:61:a4:7f: 6a:9b:f1:b9:09:56:12:73:27:ff:7f:b7:04:f3:ba:44:ef:21: c0:f8:5f:4a:bb:0b:59:2a:07:6e:87:3a:6e:11:09:2a:ce:de: 54:4e:39:0b:56:7f:cb:3b:28:c2:01:6a:2a:a4:a3:9c:3f:d2: 98:6c:bb:5f:04:56:73:8f:7d:a6:5e:3c:d6:ee:ae:d2:41:17: 60:72:91:3d:2a:4e:94:cc:bb:53:ea:f6:23:3a:fc:04:25:9e: 30:cc:1e:05:75:8c:4f:6d:cf:8e:15:c6:ca:d0:1f:97:fd:f2: b1:1d:6b:05:8f:a7:19:23:58:1f:f7:35:b5:d0:9a:3e:1c:2f: 7e:f5:b0:ac:c7:7f:12:04:97:89:f2:16:c7:7c:c9:83:16:92: a7:26:7a:ca:29:84:55:07:af:63:39:d5:5a:e5:58:de:4a:0f: da:a2:5a:6a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWcyl7GyucrmH0Qm4lVK5P7p1naIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5NkI5NTlDNzI0NUI5Q0JFOEFFMEY3QkQ2QTc1MjEy Q0NBMTU4OTAeFw0yNjEwMjgwNzE1MDVaFw0yNjExMDMwMjM5MDVaMDMxMTAvBgNV BAMTKDI2OTlCMTA4QjIzNDdEMjhFMTUzRjRBQTUzNjdBMDYyQUNGNUUyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34pCZ4WLA+rF7SHPlW/pVJJIX WkSzpkL/yIYkBSbxW7RmWxRwFcy+e+RCEFBd0MJqmuJsMrjugyM1iNdfLywdEXru IfncsmXUCpdWEAMkKGSGCV3jdUldSyw6nqtEGqjzeEJRWX4SE1boR9NdTiVgZxF9 kAVIH7mGHn4F7v/xLlYAmvbH1ZbFupsZOyyNF94Bm0nOmUN5PT8fv+eSSNPOUJ3T QC61tsqLsaCY4ksfNWjvGiHsxO/L0jZLXDfBcm++MUMeL3uGhCHrCRl+Pwvfyim/ HLNRzQ+vvToQDhnmwGrfEqoYRlNZaemBsh4/R4sPN1oRe7FTfvb061+1JaNxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJpmxCLI0fSjhU/SqU2egYqz14vwwHwYDVR0j BBgwFoAUK5a5WcckW5y+iuD3vWp1ISzKFYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEMzRUE3OTZERTJBOERDODRCOTg5Q0RGQTQ2RkVBMEVF MTBDRkI4QUE3MTRGMjBGNDNEMUNCMDEwRDRBMkFELzAvMkI5NkI5NTlDNzI0NUI5 Q0JFOEFFMEY3QkQ2QTc1MjEyQ0NBMTU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjk2Qjk1OUM3MjQ1QjlDQkU4 QUUwRjdCRDZBNzUyMTJDQ0ExNTg5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhDM0VBNzk2REUyQThEQzg0Qjk4OUNERkE0NkZFQTBFRTEwQ0ZCOEFB NzE0RjIwRjQzRDFDQjAxMEQ0QTJBRC8wLzJCOTZCOTU5QzcyNDVCOUNCRThBRTBG N0JENkE3NTIxMkNDQTE1ODkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0a0FYfK6PtWsXpM/chz/YsZUw hqAl8cuAdMXV298fWP7uF35LooU87ke1i6Kg8BoAefKJKxFlPi0M0MJz5qVRQsPO vMQOfZ4GIpoXULAsDLnlS0GqFiBhpH9qm/G5CVYScyf/f7cE87pE7yHA+F9KuwtZ KgduhzpuEQkqzt5UTjkLVn/LOyjCAWoqpKOcP9KYbLtfBFZzj32mXjzW7q7SQRdg cpE9Kk6UzLtT6vYjOvwEJZ4wzB4FdYxPbc+OFcbK0B+X/fKxHWsFj6cZI1gf9zW1 0Jo+HC9+9bCsx38SBJeJ8hbHfMmDFpKnJnrKKYRVB69jOdVa5VjeSg/aolpq -----END CERTIFICATE-----Generated at Wed Oct 28 11:48:21 2026 by rpki-client