$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft File: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json) Hash identifier: 9fiEWrVj7U18i7rvBlSxXtDfyJVCUSGryuG3OX9vRVo= Subject key identifier: 97:B4:83:53:21:DA:03:35:DD:DC:E8:E5:AA:63:1E:F6:85:4C:E8:0A Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 Certificate issuer: /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Certificate serial: 3F878CD6F1899A18DD60D7E2257862F195B89E53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft Manifest number: 0173 Signing time: Wed 25 Mar 2026 16:37:14 +0000 Manifest this update: Wed 25 Mar 2026 16:32:14 +0000 Manifest next update: Mon 30 Mar 2026 06:31:14 +0000 Files and hashes: 1: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: P0wU//3yX57QALXvoLiiulZIKT71PuRRGFW6c8Rv1QM=) 2: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: 2yEIjUF2fEPUL86o8w4pwk+eVelS5xc2STIvqPSnONM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:87:8c:d6:f1:89:9a:18:dd:60:d7:e2:25:78:62:f1:95:b8:9e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Validity Not Before: Mar 25 16:32:14 2026 GMT Not After : Mar 30 06:31:14 2026 GMT Subject: CN=97B4835321DA0335DDDCE8E5AA631EF6854CE80A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:26:4b:59:8d:67:c1:2f:a7:35:73:d2:7a: ac:0f:37:84:3c:62:e4:ed:c4:9b:b2:47:9e:51:4a: cc:f8:47:33:d2:e1:aa:f4:e7:87:34:15:61:ea:14: e7:d9:af:9a:21:05:9c:71:6b:6f:3d:09:40:16:8f: 1f:7e:a8:7a:36:35:0d:91:ff:6a:53:2d:12:e2:63: da:29:c9:93:5a:21:89:1e:66:72:4b:6e:79:55:76: e8:e6:04:69:da:87:81:8d:83:a5:2b:6a:cf:be:98: 93:14:ca:e9:8e:83:64:d4:47:87:f4:68:06:67:95: f7:ce:1c:9c:25:92:99:de:bd:3c:39:c8:af:47:78: 7c:11:1f:a0:4e:6e:a4:cf:ea:d4:f1:07:6e:4e:20: 0d:ab:e8:32:8a:3b:a1:8f:84:4d:56:17:bc:ca:e7: f8:6b:d9:26:13:63:cc:fc:39:7e:be:f7:0e:5c:36: 2a:4e:d4:3b:f2:2b:94:47:fa:9e:8d:bd:eb:4a:7e: db:40:20:26:ab:21:77:6a:5d:c2:f4:01:ac:a8:cd: 64:80:6c:ee:99:3c:1d:d1:ea:d4:49:43:a7:c7:bb: a8:29:d4:ad:55:1b:40:96:a2:79:17:eb:e6:64:fa: d8:95:26:c9:43:ec:f2:54:28:43:7f:a6:3d:0d:8e: cb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B4:83:53:21:DA:03:35:DD:DC:E8:E5:AA:63:1E:F6:85:4C:E8:0A X509v3 Authority Key Identifier: keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ef:f8:58:cf:a7:cf:7b:8e:a5:85:15:8d:24:73:18:f4:9d: 68:3d:07:0e:d8:be:21:8d:c8:ed:1a:ed:be:de:53:15:62:a0: 59:c5:df:fb:39:1c:bd:c5:c1:19:87:96:e4:92:0d:3f:0b:ef: 57:b7:07:78:43:95:d7:49:c2:08:e6:92:dd:c9:fa:1a:3e:1c: 03:8a:39:56:6e:50:52:af:b4:a0:9e:e0:19:59:ca:88:6a:30: 85:e3:a0:43:16:10:92:0e:5d:2f:f3:3e:93:f4:1b:d1:f7:0e: 7f:46:0b:23:fb:ae:95:a5:8d:93:bf:36:06:18:b5:79:45:56: dd:5f:67:e1:47:ed:59:a6:81:40:74:ac:96:9b:ab:75:6e:2b: 2d:de:4d:e2:e1:c9:f5:c0:5f:0e:15:fc:83:b1:5b:d9:cb:6f: 8a:cd:28:86:9a:70:8a:d3:e2:e4:19:2f:ad:6f:0f:87:8d:6d: 2e:3a:be:06:2d:6d:4c:7a:ac:e4:78:b1:52:0d:4c:87:35:ab: d4:8e:9a:77:90:00:8e:1a:6c:8d:ad:fd:ed:d5:ce:eb:92:60: 81:48:2e:86:50:36:c7:08:bc:07:c2:57:ec:ed:bc:78:a1:f7: fb:35:34:56:d9:96:2f:16:e1:0d:27:d6:78:5d:42:f0:3b:ba: c6:10:72:6e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUP4eM1vGJmhjdYNfiJXhi8ZW4nlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5NkI5NTlDNzI0NUI5Q0JFOEFFMEY3QkQ2QTc1MjEy Q0NBMTU4OTAeFw0yNjAzMjUxNjMyMTRaFw0yNjAzMzAwNjMxMTRaMDMxMTAvBgNV BAMTKDk3QjQ4MzUzMjFEQTAzMzVERERDRThFNUFBNjMxRUY2ODU0Q0U4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oyZLWY1nwS+nNXPSeqwPN4Q8 YuTtxJuyR55RSsz4RzPS4ar054c0FWHqFOfZr5ohBZxxa289CUAWjx9+qHo2NQ2R /2pTLRLiY9opyZNaIYkeZnJLbnlVdujmBGnah4GNg6Uras++mJMUyumOg2TUR4f0 aAZnlffOHJwlkpnevTw5yK9HeHwRH6BObqTP6tTxB25OIA2r6DKKO6GPhE1WF7zK 5/hr2SYTY8z8OX6+9w5cNipO1DvyK5RH+p6NvetKfttAICarIXdqXcL0AayozWSA bO6ZPB3R6tRJQ6fHu6gp1K1VG0CWonkX6+Zk+tiVJslD7PJUKEN/pj0NjssfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUl7SDUyHaAzXd3OjlqmMe9oVM6AowHwYDVR0j BBgwFoAUK5a5WcckW5y+iuD3vWp1ISzKFYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEMzRUE3OTZERTJBOERDODRCOTg5Q0RGQTQ2RkVBMEVF MTBDRkI4QUE3MTRGMjBGNDNEMUNCMDEwRDRBMkFELzAvMkI5NkI5NTlDNzI0NUI5 Q0JFOEFFMEY3QkQ2QTc1MjEyQ0NBMTU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjk2Qjk1OUM3MjQ1QjlDQkU4 QUUwRjdCRDZBNzUyMTJDQ0ExNTg5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhDM0VBNzk2REUyQThEQzg0Qjk4OUNERkE0NkZFQTBFRTEwQ0ZCOEFB NzE0RjIwRjQzRDFDQjAxMEQ0QTJBRC8wLzJCOTZCOTU5QzcyNDVCOUNCRThBRTBG N0JENkE3NTIxMkNDQTE1ODkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB97/hYz6fPe46lhRWNJHMY9J1o PQcO2L4hjcjtGu2+3lMVYqBZxd/7ORy9xcEZh5bkkg0/C+9Xtwd4Q5XXScII5pLd yfoaPhwDijlWblBSr7SgnuAZWcqIajCF46BDFhCSDl0v8z6T9BvR9w5/Rgsj+66V pY2TvzYGGLV5RVbdX2fhR+1ZpoFAdKyWm6t1bist3k3i4cn1wF8OFfyDsVvZy2+K zSiGmnCK0+LkGS+tbw+HjW0uOr4GLW1MeqzkeLFSDUyHNavUjpp3kACOGmyNrf3t 1c7rkmCBSC6GUDbHCLwHwlfs7bx4off7NTRW2ZYvFuENJ9Z4XULwO7rGEHJu -----END CERTIFICATE-----Generated at Thu Mar 26 22:58:15 2026 by rpki-client