
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
File: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json)
Hash identifier: F8P0iKV/WJmSzs8nFp8VX4c/Arr+EoA5aNddp4rr85U=
Subject key identifier: A0:A0:53:1A:D3:BB:86:86:B5:27:4A:79:7B:63:6C:23:02:F8:C3:1C
Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
Certificate issuer: /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Certificate serial: 130D91685F6349B3A588E3DA0907DDE3C97B39E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
Manifest number: 012A
Signing time: Tue 04 Nov 2025 13:20:12 +0000
Manifest this update: Tue 04 Nov 2025 13:15:12 +0000
Manifest next update: Mon 10 Nov 2025 13:04:12 +0000
Files and hashes: 1: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: S7emIWJ8qgmTQ1nsoR+t7hzOnxxbPdEqeiKUTBPxLLQ=)
2: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: oO7wKo0+SVqOjkWZN+0gQ07+aVmVbN4/1cQXmOBOt+E=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:0d:91:68:5f:63:49:b3:a5:88:e3:da:09:07:dd:e3:c9:7b:39:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Validity
Not Before: Nov 4 13:15:12 2025 GMT
Not After : Nov 10 13:04:12 2025 GMT
Subject: CN=A0A0531AD3BB8686B5274A797B636C2302F8C31C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:23:ae:a1:b3:7a:b8:33:35:bf:98:c7:25:
c5:43:8c:77:6e:28:d5:02:1d:3e:39:37:00:9b:ae:
eb:14:3a:32:cc:ff:12:fc:7e:a6:01:19:9b:04:ef:
19:db:57:03:4f:e5:32:3c:02:dc:3a:0c:f8:b3:5c:
22:f3:cb:aa:eb:73:d4:7c:7f:ac:cd:87:95:ff:cb:
8e:82:8b:3f:d8:fa:0d:d1:8e:d2:35:15:32:2b:59:
71:c6:c0:fb:1f:02:14:a2:c5:9e:a8:87:d4:c1:45:
7e:3a:2c:ce:9a:b5:b2:95:c5:02:8d:4e:f3:1a:dc:
b4:b3:8a:0a:8a:4b:ba:70:eb:44:f4:25:c4:58:b8:
ae:14:dd:7e:69:71:4f:fd:df:d3:fd:c0:c6:56:af:
33:3c:78:bb:c0:4a:9d:33:d4:7f:94:4c:38:c0:2b:
ce:80:fb:61:da:75:99:07:47:35:a8:fd:ab:87:9e:
43:61:c8:5a:de:18:65:4a:6c:ea:94:45:53:3a:5b:
d4:d2:3c:c0:a4:21:9d:53:32:5b:44:20:36:32:1d:
31:f5:7d:ae:ac:e3:86:cc:41:dc:70:c5:c8:91:a6:
51:89:d8:ec:4f:fb:41:de:eb:97:7e:85:87:11:ff:
a5:f5:9f:cc:41:54:6f:36:31:ef:7a:c3:5f:99:39:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A0:53:1A:D3:BB:86:86:B5:27:4A:79:7B:63:6C:23:02:F8:C3:1C
X509v3 Authority Key Identifier:
keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4f:ce:63:f9:9b:b3:2f:26:82:4d:e6:a0:db:fd:7c:f6:df:
a7:15:f7:d9:de:63:2c:0b:41:9b:0b:00:2a:29:94:ff:2d:c6:
1d:80:14:ef:03:fb:92:d6:d1:cb:0c:58:2a:3b:62:02:31:5c:
6d:e4:34:46:a7:1b:7e:11:2b:14:41:f5:44:1e:77:6b:9c:bf:
a6:bc:25:e7:e1:05:ac:b3:c1:a9:6d:57:df:70:bc:a6:4e:af:
cf:8f:85:df:02:27:66:b0:c4:23:1b:e8:4e:d0:04:53:94:0d:
a6:fa:8f:dd:59:db:68:fb:ae:62:5f:95:c6:9e:c8:56:75:dc:
c7:51:32:e4:25:f2:50:46:37:5c:04:50:2e:fa:6a:54:49:be:
cc:b4:1b:0a:c0:dc:97:ce:60:cd:76:20:99:8b:d0:7a:03:29:
16:c4:61:8a:d3:8d:e1:c8:75:5d:12:92:ab:4a:d3:46:a1:e7:
ac:99:f0:fa:eb:ac:88:25:07:24:8f:97:b7:f3:07:01:a9:23:
9d:ab:b8:32:f4:e8:25:04:83:b3:14:fa:5c:97:a5:c8:d0:2b:
26:0f:ba:a1:ae:fa:54:92:d2:da:0c:c7:86:f5:68:db:7e:0d:
5f:93:c8:26:c0:43:ff:bc:b0:19:ac:f2:d9:8f:f2:96:58:f4:
9f:b2:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:09:28 2025 by rpki-client