$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft File: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft (raw, json) Hash identifier: c8OcPHrV48ovNmFuDoZxsU7pr4mkDeNYCBhgaLZNRy8= Subject key identifier: 47:82:14:DA:72:BE:56:2A:93:16:6B:00:AB:40:BC:AC:DB:F0:79:B3 Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB Certificate issuer: /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Certificate serial: 7F3BAD80F2C53139C59FD311828E715BF9091EB3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft Manifest number: 017C Signing time: Thu 26 Mar 2026 09:31:59 +0000 Manifest this update: Thu 26 Mar 2026 09:26:59 +0000 Manifest next update: Wed 01 Apr 2026 00:27:59 +0000 Files and hashes: 1: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl (hash: swzyaI7RpWtEfAt93IwMn0RSEWKGmieL0k7Sd3YnWk0=) 2: 323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa (hash: Vc/Evbtc4Ei/5ZokRHixlnyDU63F54JdlowpFPJdT9k=) 3: 323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (hash: TZcaKNFut/dhLqBs3dmqk2hLPmqrOndrVgvyix/pd4s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3b:ad:80:f2:c5:31:39:c5:9f:d3:11:82:8e:71:5b:f9:09:1e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Validity Not Before: Mar 26 09:26:59 2026 GMT Not After : Apr 1 00:27:59 2026 GMT Subject: CN=478214DA72BE562A93166B00AB40BCACDBF079B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:68:c1:cc:d5:97:bd:5b:1b:12:77:d6:cd: 32:62:4b:5b:0b:5f:3b:41:67:26:c5:56:be:49:69: 8e:d4:54:2d:22:d4:3d:72:45:12:52:c1:de:bd:43: 52:15:7f:c9:04:16:52:11:ca:e6:fb:9d:7b:e4:f5: a9:e3:61:29:43:31:f3:d6:66:21:b4:61:50:c6:1a: d4:db:b0:33:eb:16:88:93:c1:c5:a5:dd:5d:98:43: 6f:c6:b8:df:50:bb:a4:7d:59:4a:3d:34:9f:71:08: 71:a9:ef:0f:b1:b6:6f:5c:4b:23:88:e0:35:85:a1: 25:94:43:f2:f1:b9:bc:27:93:e7:bc:cd:04:e6:7e: 77:a3:56:a3:b0:52:2e:be:d3:73:01:61:63:fa:43: 44:84:e9:9c:3f:c3:96:e7:c2:00:8a:56:ee:6d:b9: 57:a4:1f:c7:31:2e:ca:8c:e1:0e:92:5b:a4:22:7d: 71:6d:50:e2:93:cf:aa:65:22:cc:11:34:59:eb:60: c5:b7:65:09:9a:11:18:38:99:9c:d1:70:63:c0:f9: 46:c3:66:32:8a:7f:00:15:58:fc:4a:0e:72:cb:27: 3e:b3:75:60:bf:cf:ec:ff:4e:40:f5:59:5b:e8:00: 39:f5:8c:47:7b:70:da:3f:4b:ea:d5:f2:fa:12:15: c9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:82:14:DA:72:BE:56:2A:93:16:6B:00:AB:40:BC:AC:DB:F0:79:B3 X509v3 Authority Key Identifier: keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:79:ea:2e:a9:4d:ba:46:34:80:50:e0:f1:a8:62:0f:06:58: 8f:85:88:4a:a9:33:53:d1:cf:b8:72:c3:4b:86:81:b2:50:24: 9b:4e:8a:26:1f:a5:b9:8f:0b:13:9d:aa:34:c9:2c:88:d9:b9: e4:5a:28:d2:7b:f0:de:d8:62:fd:18:69:32:c0:9d:ee:9d:17: 29:67:83:a9:e9:86:93:40:32:33:15:24:6b:e4:ba:a6:ac:ec: fb:73:52:42:49:53:9f:50:28:28:f1:02:5a:e1:88:1b:a6:3a: fa:bb:96:e4:59:cb:c1:e1:a3:65:7d:06:9f:d0:42:65:e7:68: 76:19:5f:8e:ac:bf:bd:b2:8d:c9:df:7b:d6:98:76:a9:a0:4d: e6:56:c6:87:12:2f:a0:b2:84:60:9b:ce:fc:be:c6:ca:75:98: 14:7c:e7:99:f4:80:e4:02:ad:ee:09:e1:93:8b:90:88:f5:f7: cb:4b:c5:0a:ed:bb:26:6d:01:3e:d2:26:35:ce:e2:ed:62:74: a5:2c:78:66:27:9c:0a:a7:0e:28:52:8f:47:45:2b:c6:ff:c1: 25:bd:9f:5a:2c:e6:e6:17:a1:f9:c6:a5:16:d3:58:41:9b:ad: 75:f7:cf:ad:ab:0e:5e:55:ad:15:6f:8e:52:99:db:3e:0f:d6: e7:43:f4:a4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfzutgPLFMTnFn9MRgo5xW/kJHrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NjhGQzBFRkU5NUZFRjFENjM5NkJBMjUwMjM2N0I2 QjkzRTFFQjAeFw0yNjAzMjYwOTI2NTlaFw0yNjA0MDEwMDI3NTlaMDMxMTAvBgNV BAMTKDQ3ODIxNERBNzJCRTU2MkE5MzE2NkIwMEFCNDBCQ0FDREJGMDc5QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFGjBzNWXvVsbEnfWzTJiS1sL XztBZybFVr5JaY7UVC0i1D1yRRJSwd69Q1IVf8kEFlIRyub7nXvk9anjYSlDMfPW ZiG0YVDGGtTbsDPrFoiTwcWl3V2YQ2/GuN9Qu6R9WUo9NJ9xCHGp7w+xtm9cSyOI 4DWFoSWUQ/Lxubwnk+e8zQTmfnejVqOwUi6+03MBYWP6Q0SE6Zw/w5bnwgCKVu5t uVekH8cxLsqM4Q6SW6QifXFtUOKTz6plIswRNFnrYMW3ZQmaERg4mZzRcGPA+UbD ZjKKfwAVWPxKDnLLJz6zdWC/z+z/TkD1WVvoADn1jEd7cNo/S+rV8voSFcmfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUR4IU2nK+ViqTFmsAq0C8rNvwebMwHwYDVR0j BBgwFoAUy1aPwO/pX+8dY5a6JQI2e2uT4eswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzQ4OEFFMTU2OEY0MDNDMTc2MjQ5NzI4MDI0OEVCOEE2 ODU5NkM5M0E5NkU3N0E0QzcwNTNFNEY3QUMyREIzLzAvQ0I1NjhGQzBFRkU5NUZF RjFENjM5NkJBMjUwMjM2N0I2QjkzRTFFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU2OEZDMEVGRTk1RkVGMUQ2 Mzk2QkEyNTAyMzY3QjZCOTNFMUVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDM0ODhBRTE1NjhGNDAzQzE3NjI0OTcyODAyNDhFQjhBNjg1OTZDOTNB OTZFNzdBNEM3MDUzRTRGN0FDMkRCMy8wL0NCNTY4RkMwRUZFOTVGRUYxRDYzOTZC QTI1MDIzNjdCNkI5M0UxRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDeeouqU26RjSAUODxqGIPBliP hYhKqTNT0c+4csNLhoGyUCSbToomH6W5jwsTnao0ySyI2bnkWijSe/De2GL9GGky wJ3unRcpZ4Op6YaTQDIzFSRr5LqmrOz7c1JCSVOfUCgo8QJa4Ygbpjr6u5bkWcvB 4aNlfQaf0EJl52h2GV+OrL+9so3J33vWmHapoE3mVsaHEi+gsoRgm878vsbKdZgU fOeZ9IDkAq3uCeGTi5CI9ffLS8UK7bsmbQE+0iY1zuLtYnSlLHhmJ5wKpw4oUo9H RSvG/8ElvZ9aLObmF6H5xqUW01hBm61198+tqw5eVa0Vb45Smds+D9bnQ/Sk -----END CERTIFICATE-----Generated at Thu Mar 26 21:37:08 2026 by rpki-client