
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
File: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json)
Hash identifier: 2LhRRIZNLtvTXbnyC3EjKVy8Nisz3r9ou9bwnfuiYmQ=
Subject key identifier: 01:68:E7:73:58:20:D5:68:C1:5C:02:DB:D7:83:DB:18:3D:8A:B1:4C
Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
Certificate issuer: /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Certificate serial: 23A179DFE338F22C746B42DA55A127924CF8AADF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
Manifest number: 01AF
Signing time: Wed 22 Jul 2026 20:43:34 +0000
Manifest this update: Wed 22 Jul 2026 20:38:34 +0000
Manifest next update: Tue 28 Jul 2026 19:58:34 +0000
Files and hashes: 1: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: aX5vzj3zPbVoV701D48OiH2EdIvEmY7Uz+Try/uaHJc=)
2: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: 2yEIjUF2fEPUL86o8w4pwk+eVelS5xc2STIvqPSnONM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a1:79:df:e3:38:f2:2c:74:6b:42:da:55:a1:27:92:4c:f8:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Validity
Not Before: Jul 22 20:38:34 2026 GMT
Not After : Jul 28 19:58:34 2026 GMT
Subject: CN=0168E7735820D568C15C02DBD783DB183D8AB14C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:98:04:2e:95:b8:3e:9a:2d:a2:96:db:30:
98:87:35:9f:72:30:06:f9:c9:02:66:67:6e:d1:50:
46:7d:27:93:75:0e:1b:a4:d0:53:03:f9:4f:be:da:
cf:39:7c:97:65:73:2b:ef:86:d5:75:77:37:86:9e:
62:01:72:4b:1f:76:8e:b1:c1:6d:3b:62:97:3a:0f:
b9:9f:ac:61:19:0a:75:f8:b7:90:20:53:e3:05:64:
ac:25:f1:75:29:5e:0e:94:e6:08:68:fa:ff:05:26:
0d:72:74:08:f8:83:82:a8:82:55:05:d3:46:f5:68:
03:ab:52:70:3f:0d:f0:e9:23:bc:45:85:46:fe:c4:
97:4b:7b:0d:a6:b5:56:2b:7d:99:20:31:c6:36:d8:
af:03:5c:ba:76:ef:2e:18:25:26:79:3e:80:06:4f:
80:45:d3:c0:cd:ad:d7:02:fe:22:e9:e3:49:66:f0:
10:94:2f:13:81:b9:1e:a3:2f:28:be:b2:2c:4d:43:
eb:60:ad:ac:14:9f:b4:32:09:a1:32:30:c1:26:e0:
34:c2:e3:7c:e4:b6:3c:1e:f6:1e:ab:17:6b:de:44:
b4:e5:01:24:e5:fa:28:2a:30:d9:c7:42:27:2b:0b:
95:9b:b5:03:24:95:57:96:b4:1e:37:af:22:8b:aa:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:68:E7:73:58:20:D5:68:C1:5C:02:DB:D7:83:DB:18:3D:8A:B1:4C
X509v3 Authority Key Identifier:
keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ce:1b:ad:db:2c:d4:77:49:b5:03:62:f4:df:17:15:6b:54:
7f:49:b8:b6:30:b8:5d:5b:8a:fc:6a:a5:2b:b9:14:09:9e:d8:
1c:4d:a7:2e:d8:dc:ca:3d:3c:a4:0b:78:eb:ce:ae:74:a9:2c:
ce:0c:f8:03:ee:80:74:7c:9b:f5:52:5b:1d:c0:ef:ab:4a:85:
f5:a5:6b:c1:66:48:78:84:0d:c7:e6:27:bb:72:27:a3:1a:99:
5b:08:51:85:70:ba:77:c2:db:7c:5a:e5:3f:d3:b9:cd:7a:f0:
32:e7:74:cb:13:f5:f8:46:80:b5:49:e8:4d:a7:e8:8f:2d:97:
71:ab:da:11:13:90:8a:c8:d1:f5:cb:4a:44:ba:fa:b5:c3:3d:
ef:72:7e:c0:b7:e1:65:4f:e3:66:91:73:d0:29:f2:ac:2d:c0:
b8:28:c0:bb:e9:11:96:af:61:20:b0:24:8c:9b:01:ad:9b:b1:
a9:a2:23:bd:2c:87:4c:4c:da:74:00:af:f4:a6:35:b5:32:5f:
c3:50:bd:eb:b7:39:42:ce:b6:23:51:15:64:22:e2:02:cf:f5:
de:e8:b3:3a:7d:41:68:6b:89:1c:2e:d9:fe:ba:9a:ff:cb:56:
98:9e:6d:89:7a:2e:ad:c1:72:74:24:54:03:34:b5:9c:49:12:
d1:77:8a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:14:06 2026 by rpki-client