
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
File: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft (raw, json)
Hash identifier: 6lT+O4LsutB3G2GmW3CGEXdfnmeMYlHkMPCjmQgeBbI=
Subject key identifier: 04:70:4F:F3:2D:67:47:77:AD:3A:78:69:A2:4E:7D:6C:29:28:62:94
Authority key identifier: CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F
Certificate issuer: /CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
Certificate serial: 558AB2AE2C55A80A23908AFFC9D25D73C70AA639
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
Manifest number: 017F
Signing time: Wed 25 Mar 2026 22:30:37 +0000
Manifest this update: Wed 25 Mar 2026 22:25:37 +0000
Manifest next update: Tue 31 Mar 2026 00:17:37 +0000
Files and hashes: 1: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl (hash: e39rDvU/bKJHLNMHIZU2OXpDsyGENpczXdIKIRLwzss=)
2: 3137302e302e31322e302f32322d3234203d3e20323633313537.roa (hash: f9SrUyZYA550SEyHV5RyaH3qPYLG41cfmER7A4eSG78=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl
rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:8a:b2:ae:2c:55:a8:0a:23:90:8a:ff:c9:d2:5d:73:c7:0a:a6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
Validity
Not Before: Mar 25 22:25:37 2026 GMT
Not After : Mar 31 00:17:37 2026 GMT
Subject: CN=04704FF32D674777AD3A7869A24E7D6C29286294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:05:14:6f:e7:f4:47:e3:50:b6:f9:c7:06:
f3:6a:fb:5a:83:01:23:7d:16:d4:d0:0e:bb:e6:25:
8c:24:5f:8f:be:fc:ec:36:96:aa:d1:90:38:fc:85:
6a:62:f1:91:af:0b:6a:95:4a:37:1b:3f:ac:e1:cc:
a6:73:e4:bc:ae:50:54:6e:08:df:53:a9:ea:dd:a3:
41:f4:8d:77:9b:fb:b7:65:49:75:7f:30:c3:ac:b6:
a0:c8:9f:29:d9:20:23:6c:52:51:24:e4:1d:ee:cd:
9d:a9:0f:56:7e:eb:98:20:9d:be:84:1d:df:65:96:
0e:f5:74:34:8a:ef:27:b7:d4:63:df:ca:7d:f3:85:
b7:c5:fe:07:aa:7a:71:8c:c3:f0:4f:70:ae:61:4c:
11:79:d6:60:0d:22:68:15:33:7a:dd:c7:97:ce:01:
41:0a:5d:2b:73:08:bb:4f:31:15:3a:aa:57:ff:a1:
16:af:63:91:31:12:1e:4c:f0:c9:34:a0:b7:4d:62:
aa:53:0f:21:1f:a9:da:d6:29:4d:02:71:1a:6c:a9:
bb:47:61:4c:3c:0f:da:0d:29:73:11:00:9e:51:a2:
02:e7:44:fe:fc:53:99:ca:28:87:af:72:47:3e:69:
a9:67:0d:9a:bc:bf:17:f8:2b:88:d1:22:59:5b:7f:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:70:4F:F3:2D:67:47:77:AD:3A:78:69:A2:4E:7D:6C:29:28:62:94
X509v3 Authority Key Identifier:
keyid:CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:61:0a:6f:0e:2a:b4:f2:35:86:a6:a7:0b:03:e5:fc:97:93:
9f:ac:09:e8:40:e1:07:46:1c:09:78:d7:be:d0:94:4e:6d:f3:
5a:cb:0f:2a:b3:c9:c2:22:e4:92:02:18:29:55:69:61:f5:ab:
71:aa:52:86:0a:8e:b4:a7:71:ec:5b:0b:c1:2d:d0:44:39:29:
18:75:d4:55:01:b7:e8:59:95:25:25:33:09:c1:6e:8d:ae:56:
56:d0:2a:3c:28:62:26:3e:1a:30:ac:03:3a:2e:0d:a0:08:e0:
7d:93:d4:d9:31:13:6d:73:fa:75:d5:57:d9:3b:f1:3b:a0:86:
13:87:30:bd:78:e2:f2:36:54:7a:a2:45:06:e0:4a:2b:22:4b:
90:df:77:f7:af:17:bb:40:6c:ad:04:27:c9:5a:a0:3c:c5:85:
fd:0c:7f:42:01:20:0e:ab:55:87:17:ed:e1:57:54:7a:6a:32:
97:aa:41:f0:18:ae:37:ad:f5:ff:2c:2d:ac:b4:93:84:60:8e:
60:14:63:b8:7e:9c:34:01:eb:82:26:79:5c:10:b0:ac:e2:1d:
0f:82:b2:07:72:68:7c:2e:1a:da:d8:5d:c7:96:68:38:31:57:
da:11:f5:76:ff:60:12:0b:5f:f0:15:c4:ac:a2:12:bf:1e:6c:
c0:4c:02:54
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUVYqyrixVqAojkIr/ydJdc8cKpjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I1NDFEQjczRDk5NUFFNTVDODA4QTBFNzdDQkZGODcz
Q0NBRTQ0RjAeFw0yNjAzMjUyMjI1MzdaFw0yNjAzMzEwMDE3MzdaMDMxMTAvBgNV
BAMTKDA0NzA0RkYzMkQ2NzQ3NzdBRDNBNzg2OUEyNEU3RDZDMjkyODYyOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkQUUb+f0R+NQtvnHBvNq+1qD
ASN9FtTQDrvmJYwkX4++/Ow2lqrRkDj8hWpi8ZGvC2qVSjcbP6zhzKZz5LyuUFRu
CN9Tqerdo0H0jXeb+7dlSXV/MMOstqDInynZICNsUlEk5B3uzZ2pD1Z+65ggnb6E
Hd9llg71dDSK7ye31GPfyn3zhbfF/geqenGMw/BPcK5hTBF51mANImgVM3rdx5fO
AUEKXStzCLtPMRU6qlf/oRavY5ExEh5M8Mk0oLdNYqpTDyEfqdrWKU0CcRpsqbtH
YUw8D9oNKXMRAJ5RogLnRP78U5nKKIevckc+aalnDZq8vxf4K4jRIllbfwb1AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUBHBP8y1nR3etOnhpok59bCkoYpQwHwYDVR0j
BBgwFoAUy1Qdtz2ZWuVcgIoOd8v/hzzK5E8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80M0IwQkI3NkQ4NURBMTY5MjUxNThENUU3NjE4MDkyOUJG
REQwM0RDQjFCNDZBRkQzQjE1NjFFQjMxRDgyOTc2LzAvQ0I1NDFEQjczRDk5NUFF
NTVDODA4QTBFNzdDQkZGODczQ0NBRTQ0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU0MURCNzNEOTk1QUU1NUM4
MDhBMEU3N0NCRkY4NzNDQ0FFNDRGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDNCMEJCNzZEODVEQTE2OTI1MTU4RDVFNzYxODA5MjlCRkREMDNEQ0Ix
QjQ2QUZEM0IxNTYxRUIzMUQ4Mjk3Ni8wL0NCNTQxREI3M0Q5OTVBRTU1QzgwOEEw
RTc3Q0JGRjg3M0NDQUU0NEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMYQpvDiq08jWGpqcLA+X8l5Of
rAnoQOEHRhwJeNe+0JRObfNayw8qs8nCIuSSAhgpVWlh9atxqlKGCo60p3HsWwvB
LdBEOSkYddRVAbfoWZUlJTMJwW6NrlZW0Co8KGImPhowrAM6Lg2gCOB9k9TZMRNt
c/p11VfZO/E7oIYThzC9eOLyNlR6okUG4EorIkuQ33f3rxe7QGytBCfJWqA8xYX9
DH9CASAOq1WHF+3hV1R6ajKXqkHwGK43rfX/LC2stJOEYI5gFGO4fpw0AeuCJnlc
ELCs4h0PgrIHcmh8Lhra2F3Hlmg4MVfaEfV2/2ASC1/wFcSsohK/HmzATAJU
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:06:17 2026 by rpki-client