$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft File: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json) Hash identifier: ejK8lcomdnR1eVzJe/qwUVHtwynBCAfeznZCLjtX42s= Subject key identifier: F6:30:7A:65:85:F6:C8:CF:AA:90:0E:42:4D:1F:06:CE:4B:EF:F9:C3 Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 Certificate issuer: /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Certificate serial: 7F89DC6E99BECDA5795D4AF6685E1E46A0F67284 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft Manifest number: EE Signing time: Thu 03 Jul 2025 15:49:16 +0000 Manifest this update: Thu 03 Jul 2025 15:44:16 +0000 Manifest next update: Wed 09 Jul 2025 07:19:16 +0000 Files and hashes: 1: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: 3kXFLOy9lJof9Zrlotc16MM8B+LB3545sja35+ou2Uc=) 2: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: oO7wKo0+SVqOjkWZN+0gQ07+aVmVbN4/1cQXmOBOt+E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 14:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:89:dc:6e:99:be:cd:a5:79:5d:4a:f6:68:5e:1e:46:a0:f6:72:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Validity Not Before: Jul 3 15:44:16 2025 GMT Not After : Jul 9 07:19:16 2025 GMT Subject: CN=F6307A6585F6C8CFAA900E424D1F06CE4BEFF9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5b:78:3e:6b:57:8f:a1:62:d3:af:49:8d:a4: a9:bf:18:e2:ce:7b:b8:44:97:c0:92:db:0d:7d:57: 27:a0:e9:e7:47:a7:64:55:6e:6d:7d:0b:b9:59:9a: 97:69:38:40:a1:7d:c6:b5:46:be:7a:85:6c:c1:e0: 96:0e:47:30:67:f8:de:33:00:4a:14:9d:6d:7e:4b: 81:47:63:1c:c3:40:72:79:70:b5:e1:57:ca:e0:ea: 03:1d:c5:3b:14:f1:24:e8:47:59:d3:b9:44:07:1a: bd:de:b9:36:84:48:d0:e5:95:78:fc:ae:b1:fb:27: 61:21:c9:49:cb:50:e0:6d:c1:fd:53:fa:25:53:50: 43:84:9b:6e:34:e7:a8:55:32:5d:01:30:64:1f:60: 19:63:9d:f8:38:35:66:da:30:65:fe:a1:f6:80:e7: 58:0c:68:f7:e3:2b:dc:35:ca:f3:85:67:46:d1:8c: e6:6d:33:9f:4e:ae:a7:67:cd:9b:49:45:89:2a:a4: 73:f3:29:75:c8:e9:49:df:bc:d5:1d:85:fc:b9:1c: a7:7c:93:5f:95:d8:d3:e9:03:2d:c1:4f:d5:12:fd: cc:c0:5d:a6:d2:6c:3e:53:92:1b:5d:a8:1f:28:25: c2:79:f6:f0:69:61:de:ed:8d:a6:17:8f:55:e1:bc: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:30:7A:65:85:F6:C8:CF:AA:90:0E:42:4D:1F:06:CE:4B:EF:F9:C3 X509v3 Authority Key Identifier: keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:af:85:b2:38:c4:00:86:e4:90:2d:20:2d:f4:03:12:01:86: cd:f5:dd:2c:4b:48:40:44:5d:09:db:09:95:a1:17:ed:fe:94: 36:97:84:d0:4b:f9:d7:a1:c8:35:86:0c:97:10:9f:de:10:5a: 65:88:4a:0a:82:4d:02:79:8e:52:db:51:08:74:ce:96:42:15: 61:ba:7a:ce:dd:2c:2e:e4:67:1b:9f:9e:d2:57:47:40:1d:71: 4e:6d:d6:ac:64:bf:38:cd:ba:c0:c3:a8:f4:0e:6e:38:e1:9e: 95:35:28:21:98:1e:ac:5a:4f:56:2a:79:64:ec:f1:85:d4:63: 8e:96:21:fd:78:b3:24:12:d7:c6:c4:55:12:9a:33:93:5d:2d: 09:94:10:bb:90:3b:3b:96:f4:1f:cd:f6:59:85:49:b7:60:3b: f9:df:91:b0:9e:ae:6c:52:eb:44:d6:f4:66:0d:ba:c9:8e:e1: cf:67:8d:ff:44:75:1b:30:ff:a3:5e:73:b7:04:6d:f2:9c:c9: ec:56:e3:b2:4f:3e:9b:46:ac:2f:d6:2b:2e:4b:62:6e:b8:9b: a1:3d:2f:be:d1:4c:3d:58:1d:5d:6b:93:9b:08:c4:28:7f:23: a8:cf:32:59:3a:e2:b1:3e:41:62:37:fd:87:64:3d:01:9a:c8: 86:4f:d0:94 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUf4ncbpm+zaV5XUr2aF4eRqD2coQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5NkI5NTlDNzI0NUI5Q0JFOEFFMEY3QkQ2QTc1MjEy Q0NBMTU4OTAeFw0yNTA3MDMxNTQ0MTZaFw0yNTA3MDkwNzE5MTZaMDMxMTAvBgNV BAMTKEY2MzA3QTY1ODVGNkM4Q0ZBQTkwMEU0MjREMUYwNkNFNEJFRkY5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOW3g+a1ePoWLTr0mNpKm/GOLO e7hEl8CS2w19Vyeg6edHp2RVbm19C7lZmpdpOEChfca1Rr56hWzB4JYORzBn+N4z AEoUnW1+S4FHYxzDQHJ5cLXhV8rg6gMdxTsU8SToR1nTuUQHGr3euTaESNDllXj8 rrH7J2EhyUnLUOBtwf1T+iVTUEOEm24056hVMl0BMGQfYBljnfg4NWbaMGX+ofaA 51gMaPfjK9w1yvOFZ0bRjOZtM59OrqdnzZtJRYkqpHPzKXXI6UnfvNUdhfy5HKd8 k1+V2NPpAy3BT9US/czAXabSbD5TkhtdqB8oJcJ59vBpYd7tjaYXj1XhvLK9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU9jB6ZYX2yM+qkA5CTR8Gzkvv+cMwHwYDVR0j BBgwFoAUK5a5WcckW5y+iuD3vWp1ISzKFYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEMzRUE3OTZERTJBOERDODRCOTg5Q0RGQTQ2RkVBMEVF MTBDRkI4QUE3MTRGMjBGNDNEMUNCMDEwRDRBMkFELzAvMkI5NkI5NTlDNzI0NUI5 Q0JFOEFFMEY3QkQ2QTc1MjEyQ0NBMTU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjk2Qjk1OUM3MjQ1QjlDQkU4 QUUwRjdCRDZBNzUyMTJDQ0ExNTg5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhDM0VBNzk2REUyQThEQzg0Qjk4OUNERkE0NkZFQTBFRTEwQ0ZCOEFB NzE0RjIwRjQzRDFDQjAxMEQ0QTJBRC8wLzJCOTZCOTU5QzcyNDVCOUNCRThBRTBG N0JENkE3NTIxMkNDQTE1ODkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALr4WyOMQAhuSQLSAt9AMSAYbN 9d0sS0hARF0J2wmVoRft/pQ2l4TQS/nXocg1hgyXEJ/eEFpliEoKgk0CeY5S21EI dM6WQhVhunrO3Swu5Gcbn57SV0dAHXFObdasZL84zbrAw6j0Dm444Z6VNSghmB6s Wk9WKnlk7PGF1GOOliH9eLMkEtfGxFUSmjOTXS0JlBC7kDs7lvQfzfZZhUm3YDv5 35Gwnq5sUutE1vRmDbrJjuHPZ43/RHUbMP+jXnO3BG3ynMnsVuOyTz6bRqwv1isu S2JuuJuhPS++0Uw9WB1da5ObCMQofyOozzJZOuKxPkFiN/2HZD0BmsiGT9CU -----END CERTIFICATE-----Generated at Fri Jul 4 00:50:53 2025 by rpki-client