
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
File: CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft (raw, json)
Hash identifier: NUW6WL5yCEabeZ4cPn9yGFfCQA8xGzK9CcdEMYgmVnc=
Subject key identifier: 66:A5:90:A7:B7:CE:35:58:31:6F:DB:DD:05:AA:31:CE:21:0D:8D:AB
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 428C10CDFE7FBBE503BE69326BFC10D05E209A77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
Manifest number: 0233
Signing time: Sat 10 Oct 2026 09:32:08 +0000
Manifest this update: Sat 10 Oct 2026 09:27:08 +0000
Manifest next update: Thu 15 Oct 2026 21:00:08 +0000
Files and hashes: 1: AS274009.roa (hash: jUyzC/fCvfvgZGG7RQsUDD0xtNzWkAWbInnZ6Y5thRI=)
2: AS264646.roa (hash: hMLJp84p6+KeYKRRAu4prN0b3KqFLjiZNJUeFbMzdB8=)
3: AS27837.roa (hash: PaY5cikjmpxpUT+2LPLjVWC2vELBxjSrEFW5T8Ub6mA=)
4: AS267788.roa (hash: v4oc8ROeJVtRxeyD2Jw+I1dwJslxLdjhJv9TKxd4WtQ=)
5: AS269895.roa (hash: 25EIO36XM/xuSyQ+Db6ATNuqIrFCeA2Y4V56BqBtNNo=)
6: AS26619.roa (hash: vRtavgW/bD+L5NAS89kuHKkQBavQeL8P4UOVesZFBxk=)
7: AS262589.roa (hash: RuXKAHu+tushvauLYxuDDVpyudnorfSBLx/qShVj+lw=)
8: AS265855.roa (hash: hSkqbhA2YQ1n09fx1N5dtrqwUk78Upwin6+RDouncQM=)
9: CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl (hash: CT7zB5X1QU2Q6zZVFhQub2dN4vUB+Q44WhmYi/Y54NA=)
10: AS269986.roa (hash: r6aF8NsZbAh1BYNph1IroD9B3Pt73CQoBBg5+kZonek=)
11: AS274241.roa (hash: ZDtT2gOuGa69VDK8sxxS5R65qs50RTIGOwx8kiiDz+I=)
12: AS266832.roa (hash: aasx5OMjFdAk9j6RcYr5YlnxTL0aSfwIe1b+8VnY+bM=)
13: AS18678.roa (hash: XrsmMZQU6rWlVIkINHPDrOiY0uwRoqDgBQ2mdCt8aiY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 06:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:8c:10:cd:fe:7f:bb:e5:03:be:69:32:6b:fc:10:d0:5e:20:9a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Oct 10 09:27:08 2026 GMT
Not After : Oct 15 21:00:08 2026 GMT
Subject: CN=66A590A7B7CE3558316FDBDD05AA31CE210D8DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:8e:26:cb:c3:bf:c3:c3:69:d9:0a:fa:e7:
83:0b:03:74:f4:bc:cf:04:ca:16:80:24:ab:08:23:
b4:98:0f:6a:ed:62:35:29:5a:c7:db:2a:c5:5b:f4:
c1:85:e7:af:dc:30:4b:9d:a1:b3:06:05:a3:3b:05:
78:dc:62:df:f3:eb:8b:2b:37:36:d5:3d:b1:e6:5b:
02:e7:0b:57:36:65:1e:6e:44:37:e7:2d:c7:a1:da:
8d:44:9f:6d:27:c2:ef:6d:47:4d:3b:31:62:c0:3d:
e7:25:95:38:28:88:0d:2b:85:45:a5:4c:8c:27:94:
c9:e7:ab:28:0e:52:cf:7b:84:ce:25:97:1a:8b:71:
31:fc:a6:23:67:61:90:b9:f7:1f:27:6b:7c:25:e3:
da:61:38:96:07:76:7a:42:9c:3c:e7:70:51:06:8d:
6c:70:87:38:79:2f:c5:b4:51:1d:c7:86:95:05:35:
87:b9:47:2e:cd:61:0a:4d:b6:18:d9:64:a0:5f:14:
70:96:b1:fe:48:b3:aa:41:d4:0a:9c:6d:19:c6:4c:
76:d5:0e:69:1a:bc:3e:2c:01:2b:25:04:6b:f8:ce:
e7:60:fc:70:e2:5b:24:c7:50:03:74:df:6d:fa:57:
a0:c9:a6:50:36:dc:da:b2:3b:ca:d4:36:9b:70:9c:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A5:90:A7:B7:CE:35:58:31:6F:DB:DD:05:AA:31:CE:21:0D:8D:AB
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b9:74:4f:9c:80:cf:25:33:f2:3b:a5:cd:50:f4:40:6a:65:
4b:c0:1d:6e:d2:cb:2b:cb:38:d6:5f:8e:fc:36:69:2a:ce:78:
8e:a6:f7:e3:80:6b:3e:ac:6d:6e:7f:58:fe:61:a0:fe:52:6a:
89:94:fb:de:c1:81:c4:92:78:f0:03:d8:82:65:26:46:65:2a:
3d:08:ca:ab:ce:68:09:5f:ca:12:c0:13:93:9c:1e:14:82:8f:
9b:7a:9e:41:7a:18:50:26:86:de:e2:0f:46:09:2b:75:14:1c:
e7:87:0c:f9:fc:22:57:6f:47:e8:ae:b1:11:b3:11:5c:e8:6c:
f8:af:66:7d:d4:76:41:6f:76:a2:a6:eb:cb:b2:96:6d:23:60:
16:8c:ee:cc:47:c6:e9:f7:2f:c3:ce:a6:e4:58:12:73:0c:a6:
c1:51:f5:43:42:9b:94:0b:94:d5:d4:22:3d:69:21:4d:19:c1:
7d:4c:c0:65:a1:52:b8:78:18:a4:73:69:62:09:95:b4:ba:0b:
ee:90:da:80:41:37:a9:3a:6d:98:48:d9:94:25:b6:5b:b8:15:
c2:88:99:93:b6:3d:6b:39:d7:a8:e3:03:8a:93:c7:10:a6:ab:
af:8d:44:c1:9f:10:4f:3a:19:b0:d6:fc:da:ec:4e:7f:45:7d:
1a:ae:f6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:14:24 2026 by rpki-client